Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/336C470E074A11EF89A6A085C4F9AE02.roa
File:                     336C470E074A11EF89A6A085C4F9AE02.roa (raw, json)
Hash identifier:          Imi9byHeBm1Hog3WDr0W33sW+jWDjdEMUDdnxw5YKXU=
Subject key identifier:   BF:29:A7:DF:A9:43:FB:4A:CE:37:0F:F8:7A:16:C1:81:85:9B:F5:3E
Certificate issuer:       /CN=A91D63EA/serialNumber=5E7DD05A9C1BE04444ACE03FE4A92026804D4B2A
Certificate serial:       53
Authority key identifier: 5E:7D:D0:5A:9C:1B:E0:44:44:AC:E0:3F:E4:A9:20:26:80:4D:4B:2A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xn3QWpwb4ERErOA_5KkgJoBNSyo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/336C470E074A11EF89A6A085C4F9AE02.roa
Signing time:             Tue 30 Apr 2024 23:34:34 +0000
ROA not before:           Tue 30 Apr 2024 23:34:34 +0000
ROA not after:            Sun 02 Mar 2025 00:00:00 +0000
asID:                     149283
IP address blocks:        113.192.46.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.crl
                          rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xn3QWpwb4ERErOA_5KkgJoBNSyo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 08:57:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 83 (0x53)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D63EA/serialNumber=5E7DD05A9C1BE04444ACE03FE4A92026804D4B2A
        Validity
            Not Before: Apr 30 23:34:34 2024 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=6631800a-c01d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:de:dc:8f:1c:10:a3:43:ac:e2:e9:66:6c:cd:
                    30:ff:59:c4:c9:ca:12:1c:90:d7:bd:aa:02:21:4e:
                    55:d3:e0:68:0f:42:ab:90:ea:71:54:ba:30:a8:fc:
                    47:8e:53:d0:be:c8:26:1a:01:01:0d:53:c1:d4:c3:
                    28:69:50:aa:42:df:7f:a7:c0:c0:c0:0b:11:13:23:
                    c8:45:da:d6:ab:f5:05:a9:65:5f:f5:37:69:a2:66:
                    f1:b0:47:ef:6b:74:f9:5e:f6:89:75:b5:d1:d0:2f:
                    a6:69:38:b3:b4:85:c2:92:39:1b:3a:a2:d4:1b:89:
                    04:05:53:64:22:5a:49:24:ae:49:1a:8b:37:cb:de:
                    a5:0d:53:57:02:19:14:e2:e3:49:af:6c:da:66:13:
                    03:45:24:df:f1:5e:98:de:f1:c6:01:19:02:68:ef:
                    28:9f:2c:f2:67:23:29:79:e0:ce:e8:7a:97:fd:2f:
                    d8:a6:97:21:32:1f:36:bb:d3:b6:83:25:69:89:69:
                    35:71:ec:06:be:91:4a:67:73:59:bd:b1:b2:6c:11:
                    b5:05:bf:3c:ac:4e:4f:8e:c0:56:c9:56:78:ea:b8:
                    36:d1:fc:2c:2f:90:ed:b8:2a:35:6e:04:04:a6:78:
                    36:6d:32:e3:bc:14:57:ad:de:a2:ae:7e:77:a8:a7:
                    40:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:29:A7:DF:A9:43:FB:4A:CE:37:0F:F8:7A:16:C1:81:85:9B:F5:3E
            X509v3 Authority Key Identifier:
                keyid:5E:7D:D0:5A:9C:1B:E0:44:44:AC:E0:3F:E4:A9:20:26:80:4D:4B:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xn3QWpwb4ERErOA_5KkgJoBNSyo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/336C470E074A11EF89A6A085C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.192.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:c1:f0:27:1a:bd:90:ea:3a:33:f8:82:8f:f9:a2:36:27:ea:
         b4:76:b6:fc:c9:ef:5c:f9:d7:95:8d:98:94:df:a5:02:5d:ae:
         47:f4:69:f0:ab:6c:d4:d5:3c:25:ea:7d:64:e7:3c:c0:fb:e6:
         c0:8e:41:2d:d4:87:e5:91:29:d6:5a:40:e6:f9:73:e7:3a:69:
         52:8c:b3:33:86:f7:74:27:6d:c2:b6:e9:e3:42:69:8b:8f:a0:
         54:6f:02:58:0d:dd:93:00:7a:f4:77:99:b6:23:dc:c2:b3:ec:
         9c:88:66:ef:a0:5e:83:08:73:3a:f9:0f:a3:e9:43:21:be:c6:
         27:a1:18:cc:e8:c9:4f:03:a3:a0:74:b0:d4:4d:ae:ae:f5:11:
         1f:f1:c9:65:1c:0c:6e:2d:32:40:77:8e:b7:cc:04:bd:0f:9f:
         38:c9:59:22:da:05:e3:7c:49:7b:1c:86:60:52:a3:43:41:4e:
         91:b9:28:85:ad:9c:e0:8c:ed:4d:c2:65:ad:af:84:c3:d0:73:
         64:64:7f:40:f3:11:8c:70:3e:80:c8:65:42:50:ef:fe:8d:09:
         7f:84:aa:45:62:42:2d:ba:bd:b3:82:50:6f:cb:73:8e:2b:47:
         f3:f3:e9:7b:3b:a1:2e:45:58:38:7a:ba:51:e9:be:a2:45:84:
         7c:e0:13:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 11:47:33 2024 by rpki-client on console-ams.rpki-client.org