Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/54C069B0523211EBAD962F7AC4F9AE02.roa
File:                     54C069B0523211EBAD962F7AC4F9AE02.roa (raw, json)
Hash identifier:          eppiGU0Ikrp76OEav4S55XpXg/bdFzMm0ZF3JrhrakI=
Subject key identifier:   BB:B0:8E:40:51:0E:4A:7C:AC:BE:C7:B1:42:6F:46:F8:E7:45:7A:9A
Certificate issuer:       /CN=A91EAE3D/serialNumber=C7269B124C420C55E29FB51D3C1B0D9D476CBD00
Certificate serial:       178D
Authority key identifier: C7:26:9B:12:4C:42:0C:55:E2:9F:B5:1D:3C:1B:0D:9D:47:6C:BD:00
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/54C069B0523211EBAD962F7AC4F9AE02.roa
Signing time:             Tue 20 Feb 2024 17:55:21 +0000
ROA not before:           Tue 20 Feb 2024 17:55:21 +0000
ROA not after:            Thu 01 May 2025 00:00:00 +0000
asID:                     131109
IP address blocks:        121.54.129.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.crl
                          rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 17:47:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6029 (0x178d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EAE3D/serialNumber=C7269B124C420C55E29FB51D3C1B0D9D476CBD00
        Validity
            Not Before: Feb 20 17:55:21 2024 GMT
            Not After : May  1 00:00:00 2025 GMT
        Subject: CN=65d4e788-8263
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:bf:aa:d2:ea:35:e5:dd:18:85:e9:22:7b:ed:
                    03:2c:71:4d:df:d7:bd:bc:3c:eb:d0:6e:a6:1e:28:
                    a2:ec:ec:56:ba:a9:c5:75:a7:aa:5c:56:ff:ab:c4:
                    e0:2e:74:49:a7:95:0a:2d:32:1f:c5:69:13:62:f8:
                    1b:64:42:50:c9:7b:e9:08:67:4d:43:20:98:e0:59:
                    22:55:50:9f:20:32:d9:92:a7:62:d9:ee:f5:6b:4c:
                    d5:76:f4:d2:c2:c5:2d:18:bf:98:71:d3:2d:5e:35:
                    80:6f:65:2d:5f:92:f5:83:41:2f:13:b6:54:f9:e4:
                    5d:23:2f:b9:08:9d:c0:6f:c1:91:aa:60:42:9b:f8:
                    d4:35:bd:fb:30:a3:36:f3:bf:8c:9d:03:b5:0e:81:
                    b3:c6:a6:bb:94:fc:d8:29:59:cc:fa:13:3e:17:95:
                    f8:44:d0:cd:6b:f3:5c:ff:51:3f:a0:71:92:d9:32:
                    d3:1e:c9:3c:7a:a6:46:7d:be:dc:2a:39:d3:19:c1:
                    cf:4f:03:5c:e9:a9:89:e6:d4:3f:fb:e8:7a:2a:a3:
                    e5:94:3e:ad:b3:96:b4:9b:8f:7b:08:df:05:45:b8:
                    ab:94:54:17:b2:0e:24:70:1b:fa:b5:f5:c4:de:0b:
                    3a:96:74:c7:15:e2:8d:f0:cc:20:92:81:c3:8f:74:
                    04:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:B0:8E:40:51:0E:4A:7C:AC:BE:C7:B1:42:6F:46:F8:E7:45:7A:9A
            X509v3 Authority Key Identifier:
                keyid:C7:26:9B:12:4C:42:0C:55:E2:9F:B5:1D:3C:1B:0D:9D:47:6C:BD:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/54C069B0523211EBAD962F7AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.54.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:08:22:f9:35:32:ca:2c:0f:10:2d:12:67:ad:06:f8:3c:2e:
         52:b6:fc:76:46:06:02:87:04:f3:96:36:e2:e7:1f:3d:e9:73:
         c0:bf:1d:37:1d:95:94:8a:c7:2b:a7:1a:9e:0a:c0:2a:d8:d6:
         be:73:25:40:fc:b5:45:44:b9:0d:68:c1:a7:4e:af:82:48:78:
         7b:7b:c5:68:e3:be:a1:80:29:01:59:ca:ae:56:15:2f:ea:82:
         cd:86:47:5c:86:c7:08:2d:86:c4:d4:e3:57:3d:18:5c:97:f6:
         38:af:ee:54:fb:28:b9:ac:21:07:89:f5:cc:1f:8b:20:66:71:
         f6:c5:d9:df:01:ed:91:59:a0:d3:27:16:8f:96:b2:56:78:e5:
         f0:b5:7c:f8:4d:83:c7:01:1b:82:d1:1c:10:6a:a9:87:b4:79:
         56:de:14:91:d7:1b:08:6c:5e:b7:ef:dd:04:c1:ba:7e:ae:8e:
         32:10:41:8c:0c:94:0c:fc:73:9a:48:9c:21:ac:57:9f:e9:4c:
         ed:b7:dc:03:6c:a7:08:6d:77:ba:2c:18:5e:4e:ed:0c:f7:40:
         71:78:2a:ae:67:26:65:26:e9:ee:c5:e9:df:b7:38:61:f2:27:
         59:52:b9:e4:5c:9f:91:de:69:65:e2:35:d4:5b:a4:99:2d:b3:
         7c:45:6c:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 20:34:19 2024 by rpki-client on console-ams.rpki-client.org