Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/48D65BC2D28F11EB9F83683DC4F9AE02.roa
File:                     48D65BC2D28F11EB9F83683DC4F9AE02.roa (raw, json)
Hash identifier:          iwdB1nxGqs+gQ8A1MeI/NRaSpbPdDyxT09qg19TlxT4=
Subject key identifier:   08:02:C4:74:98:BE:C9:38:F0:19:47:8F:4C:0B:85:43:D7:D1:31:26
Certificate issuer:       /CN=A91DDCB6/serialNumber=18DC531D44F05962E97F23845736141D3E02681B
Certificate serial:       056F
Authority key identifier: 18:DC:53:1D:44:F0:59:62:E9:7F:23:84:57:36:14:1D:3E:02:68:1B
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GNxTHUTwWWLpfyOEVzYUHT4CaBs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/48D65BC2D28F11EB9F83683DC4F9AE02.roa
Signing time:             Tue 10 Oct 2023 21:49:09 +0000
ROA not before:           Tue 10 Oct 2023 21:49:09 +0000
ROA not after:            Mon 30 Dec 2024 00:00:00 +0000
asID:                     17439
IP address blocks:        217.18.52.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.crl
                          rsync://rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GNxTHUTwWWLpfyOEVzYUHT4CaBs.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Jun 2024 14:50:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1391 (0x56f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DDCB6/serialNumber=18DC531D44F05962E97F23845736141D3E02681B
        Validity
            Not Before: Oct 10 21:49:09 2023 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=6525c6d5-0abd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a8:e6:6f:ac:70:29:63:ba:a8:28:ae:ed:41:
                    55:12:68:1f:ae:af:7a:9a:45:27:85:68:56:df:a9:
                    99:9b:f6:18:58:3b:26:39:de:bb:a6:8e:7d:d1:43:
                    47:aa:c0:b2:d8:d9:11:b1:e5:88:71:dc:45:dc:f2:
                    f7:ed:d6:e3:f6:cd:a8:cb:05:a7:63:35:13:d8:69:
                    6f:67:30:fd:4d:38:ea:09:ea:54:93:19:a5:4d:f3:
                    14:ae:20:3a:c0:68:a2:01:a3:d5:06:2c:1d:c7:e3:
                    5a:5a:f6:75:60:c4:6f:fa:38:62:18:11:e6:1d:37:
                    f5:58:56:95:3f:96:23:8e:68:a7:62:0d:ae:92:e4:
                    e4:f6:fc:85:31:97:99:22:2c:14:23:70:77:61:e2:
                    ad:8a:b8:d7:a4:cf:49:5b:fb:75:f0:aa:ac:d5:aa:
                    a2:73:3f:53:6b:fe:4a:f2:0d:9e:95:e0:5b:35:42:
                    a1:a5:58:59:51:52:c8:61:2b:39:7a:d6:09:76:c3:
                    32:0e:71:57:04:8d:25:4b:c4:e3:a9:bd:88:84:50:
                    e3:f9:0e:9a:cb:d6:74:50:02:1b:57:ea:3c:6f:50:
                    ab:df:bb:fc:8e:79:b5:a2:90:16:68:e0:74:93:dd:
                    ec:ee:62:fe:81:7c:e6:69:09:1a:4b:07:c8:40:ae:
                    0f:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:02:C4:74:98:BE:C9:38:F0:19:47:8F:4C:0B:85:43:D7:D1:31:26
            X509v3 Authority Key Identifier:
                keyid:18:DC:53:1D:44:F0:59:62:E9:7F:23:84:57:36:14:1D:3E:02:68:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GNxTHUTwWWLpfyOEVzYUHT4CaBs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/48D65BC2D28F11EB9F83683DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  217.18.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         62:14:00:a2:4a:b5:03:ea:ec:51:b2:c3:cb:da:11:65:18:8d:
         dc:78:4e:13:d0:6c:8b:a1:ad:d3:51:71:f5:6a:2c:d3:20:d0:
         dd:8a:b6:bc:b8:9b:a5:fb:af:a2:d5:8f:e7:94:5c:25:73:c1:
         24:0e:80:53:ae:da:88:38:00:99:7b:44:a8:45:e6:db:3c:ff:
         fc:28:51:fe:9a:b2:41:f6:ab:f1:0f:f5:93:31:3c:6d:c5:70:
         8b:03:ae:20:63:dc:8a:b8:40:9c:ac:23:83:cc:a9:00:cc:cd:
         c8:9e:6f:82:e7:7a:84:b6:c7:34:4a:5f:62:29:eb:16:ba:b7:
         7a:54:97:3c:5f:f1:d1:e2:b8:f4:47:ef:06:e4:db:a2:76:0d:
         47:a1:2c:84:68:48:cc:5a:20:16:58:d8:d5:4f:af:09:59:46:
         7d:7f:28:b4:30:a5:0d:6d:fd:11:b2:71:30:b7:a4:e3:a5:9f:
         4b:e3:91:82:6d:43:94:69:75:d5:a9:1d:67:0b:60:59:e7:79:
         d5:9f:8f:44:61:dd:f5:d7:dd:43:e7:b2:87:36:a9:73:d8:a2:
         ac:c2:81:11:5d:7a:35:35:60:05:f2:a5:82:83:14:29:fe:77:
         4e:a3:60:1e:bd:73:52:e1:04:48:71:ec:9f:58:05:17:fc:11:
         94:e8:8f:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 14 23:20:10 2024 by rpki-client on console-fra.rpki-client.org