Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/D83192B0152B11EE85ED4B1DC4F9AE02.roa
File:                     D83192B0152B11EE85ED4B1DC4F9AE02.roa (raw, json)
Hash identifier:          b/gp19EaEtfqCK263TvkCdJtfuwUtevQan/MP233wis=
Subject key identifier:   D6:D9:D4:80:0D:AE:E6:5C:71:14:8E:27:C1:3E:05:FA:12:09:B0:A3
Certificate issuer:       /CN=A91D51A0/serialNumber=C6EABEB93E1D06E2C32E1C4CBE147CFB39992539
Certificate serial:       032F
Authority key identifier: C6:EA:BE:B9:3E:1D:06:E2:C3:2E:1C:4C:BE:14:7C:FB:39:99:25:39
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xuq-uT4dBuLDLhxMvhR8-zmZJTk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/D83192B0152B11EE85ED4B1DC4F9AE02.roa
Signing time:             Fri 01 Mar 2024 03:05:05 +0000
ROA not before:           Fri 01 Mar 2024 03:05:05 +0000
ROA not after:            Thu 01 May 2025 00:00:00 +0000
asID:                     133429
IP address blocks:        2400:54a0:2110::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.crl
                          rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xuq-uT4dBuLDLhxMvhR8-zmZJTk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 16:07:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 815 (0x32f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D51A0/serialNumber=C6EABEB93E1D06E2C32E1C4CBE147CFB39992539
        Validity
            Not Before: Mar  1 03:05:05 2024 GMT
            Not After : May  1 00:00:00 2025 GMT
        Subject: CN=65e145e1-117b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:9b:6d:e7:df:a3:ef:2d:fb:35:e7:42:8d:3e:
                    7d:50:ef:29:a3:0f:ad:cc:4a:92:38:f8:fa:50:90:
                    0f:c7:f3:bd:d4:8b:74:e7:20:8b:a1:1c:d0:57:10:
                    51:7d:c1:e1:4b:8a:af:4b:85:46:28:67:b7:16:56:
                    98:58:c7:67:f1:66:a9:85:aa:7e:e6:ae:8a:d4:fc:
                    66:85:e9:53:b7:b5:cc:25:df:f9:65:63:3c:70:25:
                    81:97:b3:88:4c:53:79:1f:c5:52:bc:81:10:f2:11:
                    c4:47:68:e2:f0:db:6b:f9:1d:3b:1c:f6:58:08:2a:
                    50:fb:92:88:3e:54:bb:6c:ac:6f:81:ce:9c:52:4a:
                    79:fb:77:5c:29:a7:8d:12:44:6b:ea:3b:2a:dc:36:
                    68:c9:37:f9:08:8b:f4:a9:75:b8:6c:89:fd:fc:9d:
                    8d:5b:ee:54:f5:cf:c9:5f:f1:99:5a:ac:18:89:52:
                    71:9e:2e:68:6f:e0:d3:3f:e9:e3:62:c2:64:ee:0f:
                    4a:e7:de:26:f2:d2:6c:2b:a3:94:1f:85:59:53:53:
                    3a:09:f7:27:98:4b:1a:1d:e6:50:97:6b:57:d8:66:
                    51:d8:78:57:f5:d0:14:64:19:b8:36:10:75:d0:e6:
                    5b:0c:c1:90:a3:62:a1:78:bb:56:c1:56:21:2c:c4:
                    e0:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:D9:D4:80:0D:AE:E6:5C:71:14:8E:27:C1:3E:05:FA:12:09:B0:A3
            X509v3 Authority Key Identifier:
                keyid:C6:EA:BE:B9:3E:1D:06:E2:C3:2E:1C:4C:BE:14:7C:FB:39:99:25:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xuq-uT4dBuLDLhxMvhR8-zmZJTk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/D83192B0152B11EE85ED4B1DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:54a0:2110::/48

    Signature Algorithm: sha256WithRSAEncryption
         92:07:a8:51:4c:d3:a5:63:b6:55:d8:81:ac:6e:40:aa:be:44:
         8d:8b:9b:45:b7:4d:c5:5c:8b:47:d4:c5:72:dd:97:59:40:ed:
         e0:e4:bc:e3:4c:ac:4b:e2:4c:ce:8a:70:f2:51:04:44:c3:ee:
         bd:1c:2c:2a:6d:e6:27:cc:fc:ea:48:3b:b0:d6:74:ff:bb:cf:
         ca:7d:c4:31:19:bf:f3:43:e6:16:64:fa:21:52:24:48:42:9e:
         b9:8a:b5:a3:70:da:fa:86:ee:32:ae:bd:78:34:8f:aa:da:08:
         f4:7f:e1:63:5b:c5:58:67:df:6d:da:24:d7:e0:58:88:b6:08:
         0f:95:7e:39:e3:57:39:37:53:75:cd:49:0a:1b:27:66:01:46:
         a6:5b:1a:e0:db:ba:af:e5:b6:9b:49:3b:0f:48:4c:f6:0d:34:
         8d:c4:d1:07:a5:a4:c3:1c:57:1e:b7:83:45:ec:9b:dc:60:f3:
         37:b3:2e:47:82:47:22:57:fa:4c:83:8d:aa:c3:f4:44:83:3d:
         28:34:b5:89:51:37:73:c5:d2:d6:8b:58:ca:a5:87:a1:75:0f:
         55:9f:4d:4f:fd:f1:65:04:02:af:3d:d5:50:63:35:b7:9b:2f:
         41:14:dd:cf:0c:97:b3:cb:24:4d:a1:d4:ef:82:ee:27:79:7e:
         c9:c5:c5:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 17:05:20 2024 by rpki-client on console-fra.rpki-client.org