Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/00756F7E63F011EC987F5B19C4F9AE02.roa
File:                     00756F7E63F011EC987F5B19C4F9AE02.roa (raw, json)
Hash identifier:          G0pNS2leTFFrSijocSln6pPdL61D3MzyUqD2tiAmWUE=
Subject key identifier:   8B:34:41:2E:E9:60:84:A0:48:D4:60:4D:D5:06:99:BC:46:85:41:33
Certificate issuer:       /CN=A91DDCB6/serialNumber=18DC531D44F05962E97F23845736141D3E02681B
Certificate serial:       056E
Authority key identifier: 18:DC:53:1D:44:F0:59:62:E9:7F:23:84:57:36:14:1D:3E:02:68:1B
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GNxTHUTwWWLpfyOEVzYUHT4CaBs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/00756F7E63F011EC987F5B19C4F9AE02.roa
Signing time:             Tue 10 Oct 2023 21:49:08 +0000
ROA not before:           Tue 10 Oct 2023 21:49:08 +0000
ROA not after:            Mon 30 Dec 2024 00:00:00 +0000
asID:                     132420
IP address blocks:        91.203.132.0/22 maxlen: 24
                          217.18.52.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.crl
                          rsync://rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GNxTHUTwWWLpfyOEVzYUHT4CaBs.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 14:50:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1390 (0x56e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DDCB6/serialNumber=18DC531D44F05962E97F23845736141D3E02681B
        Validity
            Not Before: Oct 10 21:49:08 2023 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=6525c6d4-49ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:33:74:e4:8d:4f:e6:fb:c1:73:b0:df:76:1e:
                    e3:6d:c1:ed:4a:b8:1f:41:48:ff:63:b5:23:e6:55:
                    d8:fd:89:1a:00:a6:e4:c4:9c:b0:07:54:ee:90:79:
                    70:52:16:a5:93:8d:08:70:21:3c:c6:d1:bb:b0:e0:
                    56:1e:09:41:b2:26:7f:0c:99:ac:43:d4:23:2e:6d:
                    df:f3:f2:74:ac:47:c4:16:7b:16:58:8c:da:8e:c6:
                    10:7c:f7:1f:46:87:86:17:95:f1:17:c7:c8:44:2d:
                    95:8d:1c:20:46:be:be:e4:3e:2d:ef:b9:14:1b:2a:
                    64:6b:de:33:ec:e6:be:23:c9:21:db:8d:72:f3:98:
                    dd:ff:d2:62:5f:28:84:6e:49:36:04:92:12:2c:c2:
                    fc:a0:55:85:99:b7:c9:67:e7:5e:f8:db:a4:1b:6e:
                    d3:42:51:20:8b:4f:6b:7b:b2:0e:95:17:c4:d5:b7:
                    d5:67:11:7b:e7:9d:41:19:32:b5:ba:f5:12:46:ee:
                    53:cf:32:80:ff:91:5d:84:cc:ff:be:97:e0:9b:5e:
                    d4:6c:9f:31:00:87:1f:5a:ed:98:8f:8e:7f:ee:81:
                    c0:32:7f:e8:18:30:8f:6c:b6:15:99:d0:b6:46:7a:
                    f7:cb:d9:9a:fc:6e:83:d3:d0:09:50:05:e2:b8:2b:
                    71:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:34:41:2E:E9:60:84:A0:48:D4:60:4D:D5:06:99:BC:46:85:41:33
            X509v3 Authority Key Identifier:
                keyid:18:DC:53:1D:44:F0:59:62:E9:7F:23:84:57:36:14:1D:3E:02:68:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GNxTHUTwWWLpfyOEVzYUHT4CaBs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/00756F7E63F011EC987F5B19C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.203.132.0/22
                  217.18.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         90:60:4c:17:57:c9:5e:1b:ea:11:be:ef:26:bb:49:e5:49:dc:
         25:5c:12:7a:fb:37:ac:dd:da:cf:2d:41:ed:19:b1:59:03:de:
         41:b5:14:c4:47:3a:6c:dc:8a:40:81:9a:75:f3:5e:1f:7f:11:
         49:e4:cc:8b:e6:4e:87:2d:8d:c1:19:40:36:22:0e:81:ca:ca:
         25:3f:d0:15:2c:17:e4:c1:b5:d7:78:46:c1:fe:12:99:c6:b1:
         31:87:dc:f2:0e:bc:eb:2e:f4:a5:ca:f2:62:f1:b3:fb:30:61:
         36:cb:df:ec:dc:d7:51:c2:f3:e0:0c:c3:d7:b2:2f:ec:b2:a5:
         3d:ca:34:f9:a3:e3:46:2d:f1:a2:e2:ab:2b:75:7f:b1:31:bf:
         5e:87:d2:29:b4:13:f5:fa:88:3c:65:4a:f2:10:ae:e2:fa:b7:
         46:49:21:6d:a8:5e:d0:b2:4e:06:1b:46:2d:ea:8d:1f:cc:fc:
         0b:fa:50:d8:24:87:c6:54:25:ec:e3:64:a4:33:9b:2f:b2:77:
         4a:ae:ce:25:07:86:4a:73:b8:6e:22:b1:c2:78:cd:af:60:e9:
         c1:1e:be:eb:76:e8:3a:ac:f9:c1:e1:e4:c9:ab:f0:99:59:a3:
         53:47:eb:a1:53:1f:66:01:bc:f4:a9:1e:6e:c8:d8:36:a3:ca:
         70:b9:0f:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 00:13:30 2024 by rpki-client on console-ams.rpki-client.org