Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA815/8DCD1EA81D9B11E291D2848908B02CD2/E9E555FA506211EAA2BC3E2EC4F9AE02.roa
File:                     E9E555FA506211EAA2BC3E2EC4F9AE02.roa (raw, json)
Hash identifier:          zJHVvC3pRK1yUOEuPWeLlF93Wf3H36BKsW2Vj7FyRUs=
Subject key identifier:   45:A3:0E:6A:C7:BC:96:E5:CD:83:D4:EF:34:24:BF:9B:63:81:EF:AF
Certificate issuer:       /CN=A91CA815/serialNumber=2BDD3151116DE9DBC55CFC3D2CDACA58E74B19E6
Certificate serial:       3390
Authority key identifier: 2B:DD:31:51:11:6D:E9:DB:C5:5C:FC:3D:2C:DA:CA:58:E7:4B:19:E6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K90xURFt6dvFXPw9LNrKWOdLGeY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CA815/8DCD1EA81D9B11E291D2848908B02CD2/E9E555FA506211EAA2BC3E2EC4F9AE02.roa
Signing time:             Thu 28 Dec 2023 15:20:49 +0000
ROA not before:           Thu 28 Dec 2023 15:20:49 +0000
ROA not after:            Sun 02 Mar 2025 00:00:00 +0000
asID:                     23883
IP address blocks:        203.170.50.0/23 maxlen: 23
                          2001:df0:248::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CA815/8DCD1EA81D9B11E291D2848908B02CD2/K90xURFt6dvFXPw9LNrKWOdLGeY.crl
                          rsync://rpki.apnic.net/member_repository/A91CA815/8DCD1EA81D9B11E291D2848908B02CD2/K90xURFt6dvFXPw9LNrKWOdLGeY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K90xURFt6dvFXPw9LNrKWOdLGeY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:58:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13200 (0x3390)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CA815/serialNumber=2BDD3151116DE9DBC55CFC3D2CDACA58E74B19E6
        Validity
            Not Before: Dec 28 15:20:49 2023 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=658d9251-3de5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:f6:5d:b8:19:27:6d:30:a7:fb:05:c0:39:9c:
                    a3:04:50:3d:29:61:17:a8:7e:e4:c2:0f:00:2c:e2:
                    49:d0:9a:c2:fd:d3:1c:33:3a:ae:a4:00:e9:ec:1a:
                    3a:e3:53:37:ab:6a:67:3e:92:bb:4b:36:a9:88:ae:
                    f3:50:22:8a:d6:ad:27:48:88:1a:3c:d7:27:ae:a7:
                    e4:b3:2d:4b:66:14:a8:b4:d7:c6:bb:12:ce:5f:df:
                    32:c3:78:12:69:a3:77:b7:77:af:95:6d:56:bf:f5:
                    fd:80:ad:73:5f:af:cc:4a:8e:f3:d2:35:60:36:e2:
                    66:58:85:c1:24:4c:9b:51:aa:fa:df:7b:fe:00:41:
                    2b:6a:54:57:47:a4:e7:99:3a:cb:08:a1:11:34:01:
                    ae:ba:d5:f3:48:0f:46:2d:fa:ca:a4:f4:ef:25:b9:
                    1d:48:f2:b3:5c:9e:32:c2:dd:9e:64:93:2c:1d:28:
                    64:f9:79:95:0b:e4:46:05:79:08:f8:40:6c:0b:1b:
                    31:d3:2e:27:eb:de:4c:2e:0b:fd:a4:48:89:91:63:
                    10:e0:c4:13:3f:64:75:a3:8c:e5:9d:a4:7c:2d:f2:
                    be:f2:3b:7d:d7:70:0e:ad:81:06:af:bc:93:d4:0c:
                    c5:24:3c:af:88:53:30:4b:43:5c:db:21:0b:94:68:
                    b0:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:A3:0E:6A:C7:BC:96:E5:CD:83:D4:EF:34:24:BF:9B:63:81:EF:AF
            X509v3 Authority Key Identifier:
                keyid:2B:DD:31:51:11:6D:E9:DB:C5:5C:FC:3D:2C:DA:CA:58:E7:4B:19:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CA815/8DCD1EA81D9B11E291D2848908B02CD2/K90xURFt6dvFXPw9LNrKWOdLGeY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K90xURFt6dvFXPw9LNrKWOdLGeY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA815/8DCD1EA81D9B11E291D2848908B02CD2/E9E555FA506211EAA2BC3E2EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.170.50.0/23
                IPv6:
                  2001:df0:248::/48

    Signature Algorithm: sha256WithRSAEncryption
         48:bd:55:fc:e3:bb:bd:fa:99:3b:6f:8b:a9:2a:3c:23:2e:18:
         9b:9c:b1:2e:7f:13:ec:9f:5f:b7:aa:33:87:51:ab:f5:e9:bc:
         df:36:e9:fb:c8:ca:a9:46:92:f7:b6:3a:30:cf:7f:28:47:0e:
         9d:b8:5c:66:01:ac:cd:25:59:57:40:40:e7:82:a0:fc:88:b5:
         f8:f7:56:7e:d0:c6:04:5d:5f:0e:83:32:4e:ed:0e:1b:e9:a8:
         34:7c:ea:cf:0a:9a:b0:fc:36:40:2f:e5:0c:15:18:0b:eb:21:
         65:76:77:da:65:2b:38:53:bb:40:c4:eb:49:87:cf:b3:2b:d5:
         e2:72:a5:98:c2:f4:9a:9d:7e:d2:e7:b4:cc:fc:f5:f2:f3:65:
         98:18:d3:5b:f4:77:82:c4:30:8f:a8:2f:a3:a4:43:fe:b1:7e:
         75:2a:db:5b:03:23:7a:6c:92:26:cc:82:ba:9d:6d:aa:7d:9a:
         50:a4:c6:a1:d4:0c:76:7c:e0:bc:76:2b:a4:11:08:82:e0:79:
         c1:b5:ef:cd:cb:1c:35:2e:21:59:99:11:29:58:18:e1:88:e5:
         25:f5:87:af:23:b1:fd:00:64:a4:46:63:4b:99:c8:2d:72:db:
         32:d5:5a:77:47:b2:27:1e:49:86:c3:c8:df:53:c4:73:5b:16:
         35:2a:94:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:50:04 2024 by rpki-client on console-ams.rpki-client.org