Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8EDF/EA67A98C7C5711EDBF213767C4F9AE02/A6524550C4E411EEAFF83C50C4F9AE02.roa
File:                     A6524550C4E411EEAFF83C50C4F9AE02.roa (raw, json)
Hash identifier:          zeOZPrdq1QYgQ7FqLmTlQVfbrQDcr8FRd1myKoEPr/Y=
Subject key identifier:   E4:C9:3B:B0:40:3E:EB:6C:04:6F:50:43:C1:F8:86:8F:5D:B1:6C:B2
Certificate issuer:       /CN=A91C8EDF/serialNumber=05D365500DA4B2C00189F3C6CA5950E0074C7C4A
Certificate serial:       E8
Authority key identifier: 05:D3:65:50:0D:A4:B2:C0:01:89:F3:C6:CA:59:50:E0:07:4C:7C:4A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BdNlUA2kssABifPGyllQ4AdMfEo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C8EDF/EA67A98C7C5711EDBF213767C4F9AE02/A6524550C4E411EEAFF83C50C4F9AE02.roa
Signing time:             Tue 06 Feb 2024 11:41:22 +0000
ROA not before:           Tue 06 Feb 2024 11:41:22 +0000
ROA not after:            Sun 02 Mar 2025 00:00:00 +0000
asID:                     396982
IP address blocks:        152.65.192.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C8EDF/EA67A98C7C5711EDBF213767C4F9AE02/BdNlUA2kssABifPGyllQ4AdMfEo.crl
                          rsync://rpki.apnic.net/member_repository/A91C8EDF/EA67A98C7C5711EDBF213767C4F9AE02/BdNlUA2kssABifPGyllQ4AdMfEo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BdNlUA2kssABifPGyllQ4AdMfEo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 May 2024 02:50:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 232 (0xe8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C8EDF/serialNumber=05D365500DA4B2C00189F3C6CA5950E0074C7C4A
        Validity
            Not Before: Feb  6 11:41:22 2024 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=65c21ae1-e00c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:69:d4:90:b3:f5:aa:94:0f:0e:d7:ee:30:06:
                    38:0f:e6:f1:24:92:f4:6f:5a:40:cc:b8:53:71:19:
                    36:fa:bf:8b:f0:b9:3e:04:61:aa:28:97:67:10:f7:
                    31:27:0b:17:eb:df:70:dc:56:56:f6:85:ed:ce:08:
                    21:6d:a2:de:98:e6:30:44:4c:83:0f:77:44:35:a8:
                    b1:9f:79:5e:8f:ad:e2:49:6c:d4:41:2e:a4:29:99:
                    ec:4d:2c:f5:2d:79:08:8a:3f:fe:b0:6e:c4:26:63:
                    7f:89:6b:19:68:c8:06:39:74:05:2e:f6:a5:46:9c:
                    94:b7:01:9a:94:56:5b:1a:ad:63:c1:1e:de:10:77:
                    e3:b0:19:e9:c3:ce:38:32:9e:61:7b:4c:01:6a:7a:
                    05:a6:c9:cb:bf:18:a4:de:c8:c0:67:09:64:c0:6b:
                    b0:60:2c:a7:0f:f4:7d:aa:c3:2d:24:6c:64:f4:3e:
                    9b:60:2b:13:72:74:a6:f7:a5:8a:cf:b5:98:88:af:
                    38:ee:f6:7c:86:93:f1:80:01:0d:79:9e:27:f7:ed:
                    34:ea:34:f4:e5:62:41:bd:b2:79:79:4d:0f:6d:d0:
                    21:3b:4c:6f:fd:fa:60:55:6b:12:e9:49:cf:34:f9:
                    7b:1d:ab:c4:50:50:94:7e:67:e9:ee:41:cb:4a:f9:
                    5a:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:C9:3B:B0:40:3E:EB:6C:04:6F:50:43:C1:F8:86:8F:5D:B1:6C:B2
            X509v3 Authority Key Identifier:
                keyid:05:D3:65:50:0D:A4:B2:C0:01:89:F3:C6:CA:59:50:E0:07:4C:7C:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C8EDF/EA67A98C7C5711EDBF213767C4F9AE02/BdNlUA2kssABifPGyllQ4AdMfEo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BdNlUA2kssABifPGyllQ4AdMfEo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8EDF/EA67A98C7C5711EDBF213767C4F9AE02/A6524550C4E411EEAFF83C50C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.65.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         3f:14:aa:ca:99:1c:3d:07:1f:d9:02:ef:2b:7e:92:fd:25:5f:
         47:b0:1f:72:ec:d2:64:aa:35:ab:92:7f:2e:fa:82:09:b6:59:
         f9:25:df:f6:af:64:b1:01:50:75:a9:ff:aa:02:e3:97:a5:35:
         b3:92:95:25:b0:e3:0b:47:f7:b6:24:34:14:93:68:eb:4e:68:
         4e:6a:46:03:b3:72:b1:c5:00:ba:65:16:ca:bd:db:37:cf:5e:
         92:00:22:a1:29:f9:8f:8e:03:73:f4:cc:de:ef:1b:d7:97:60:
         8a:64:a9:be:7a:df:46:d4:3e:5e:85:f8:bf:d2:ae:4f:14:08:
         e4:68:19:c3:50:63:8f:48:1b:22:d2:2c:b6:49:35:60:81:d4:
         28:58:bc:29:e7:63:19:e0:82:db:dd:c0:f6:1f:53:36:37:fa:
         1a:6e:90:62:cc:82:f1:7e:01:01:4b:9b:1d:4b:2d:f7:bd:6d:
         09:6f:21:ab:06:4b:77:74:95:9f:37:95:22:56:0b:04:af:f5:
         d3:1f:51:30:f1:0c:dc:7c:8c:af:d3:a0:bc:1c:62:98:6a:6b:
         0d:8e:05:d3:f8:e4:a8:eb:81:08:49:ae:4c:c9:28:80:4b:e3:
         fe:b2:58:c9:94:3d:c2:ba:1b:3b:62:25:9d:50:42:f0:5f:bd:
         13:b6:6a:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 08:39:12 2024 by rpki-client on console-fra.rpki-client.org