Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9CD7/ABEB876083D511EE988DB744C4F9AE02/E84C2B9083D711EE871C4048C4F9AE02.roa
File:                     E84C2B9083D711EE871C4048C4F9AE02.roa (raw, json)
Hash identifier:          XRh2riJPw+1XwHN15/Za8D1ZSZuCETGUmBeDr36RTOk=
Subject key identifier:   BD:1B:4F:19:D1:45:5E:F6:1D:62:0E:CC:3A:20:E6:C6:F8:DD:5F:24
Certificate issuer:       /CN=A91F9CD7/serialNumber=F1F163D854FE733BE2540F37A344FF6A5A5AC9F6
Certificate serial:       04
Authority key identifier: F1:F1:63:D8:54:FE:73:3B:E2:54:0F:37:A3:44:FF:6A:5A:5A:C9:F6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8fFj2FT-czviVA83o0T_alpayfY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F9CD7/ABEB876083D511EE988DB744C4F9AE02/E84C2B9083D711EE871C4048C4F9AE02.roa
Signing time:             Wed 15 Nov 2023 16:56:44 +0000
ROA not before:           Wed 15 Nov 2023 16:56:44 +0000
ROA not after:            Fri 31 Jan 2025 00:00:00 +0000
asID:                     136774
IP address blocks:        45.65.56.0/23 maxlen: 23
                          2001:df3:5c0::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F9CD7/ABEB876083D511EE988DB744C4F9AE02/8fFj2FT-czviVA83o0T_alpayfY.crl
                          rsync://rpki.apnic.net/member_repository/A91F9CD7/ABEB876083D511EE988DB744C4F9AE02/8fFj2FT-czviVA83o0T_alpayfY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8fFj2FT-czviVA83o0T_alpayfY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F9CD7/serialNumber=F1F163D854FE733BE2540F37A344FF6A5A5AC9F6
        Validity
            Not Before: Nov 15 16:56:44 2023 GMT
            Not After : Jan 31 00:00:00 2025 GMT
        Subject: CN=6554f84c-efcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:d1:f8:6c:93:be:2c:1a:dc:5b:2a:29:27:e2:
                    60:f2:ea:e4:5f:ad:f5:5c:8d:6a:c6:6a:17:4a:e8:
                    58:be:b7:5b:68:f0:b0:b1:a1:a2:0f:29:ae:9c:40:
                    e3:fa:96:30:f5:ea:7d:b7:42:cf:bc:5d:2c:2e:03:
                    f9:29:00:12:4c:ad:20:8e:5b:f2:49:12:49:73:b6:
                    d4:2c:f6:26:b0:17:50:20:8f:af:12:9a:cd:da:6f:
                    4e:ff:17:35:a9:6b:e5:b1:8a:8b:af:8c:c8:99:ee:
                    9f:2f:0a:7a:6d:da:f5:49:85:fd:19:b8:11:79:f4:
                    ec:24:2b:eb:6c:33:79:90:5e:40:a6:71:a6:e9:94:
                    e3:71:59:f3:bc:dd:a8:6f:f1:43:4b:71:fc:57:eb:
                    7e:90:fb:02:18:b4:4a:54:e7:61:32:71:77:d0:d0:
                    8e:96:8a:1b:6b:46:d0:7e:35:63:6c:8f:da:f7:c2:
                    e4:ad:7b:0b:7f:51:af:4f:a8:75:28:bb:38:fc:a1:
                    17:df:e3:f1:25:a3:d7:dc:3a:f0:8c:c3:f7:e5:4c:
                    81:86:ee:b9:8d:1a:87:4f:87:30:a9:89:85:35:04:
                    65:fc:5f:2e:67:e5:75:fc:7c:ca:fa:34:12:4b:13:
                    d8:e9:5f:8f:91:95:18:4e:98:d2:0a:63:45:8e:82:
                    9e:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:1B:4F:19:D1:45:5E:F6:1D:62:0E:CC:3A:20:E6:C6:F8:DD:5F:24
            X509v3 Authority Key Identifier:
                keyid:F1:F1:63:D8:54:FE:73:3B:E2:54:0F:37:A3:44:FF:6A:5A:5A:C9:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F9CD7/ABEB876083D511EE988DB744C4F9AE02/8fFj2FT-czviVA83o0T_alpayfY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8fFj2FT-czviVA83o0T_alpayfY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9CD7/ABEB876083D511EE988DB744C4F9AE02/E84C2B9083D711EE871C4048C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.56.0/23
                IPv6:
                  2001:df3:5c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         27:42:91:c7:85:24:21:ad:24:ab:2c:64:8b:7f:01:b5:3f:72:
         92:b0:f2:5d:3a:76:d0:7f:e9:25:03:23:df:be:25:61:45:2b:
         c9:e8:e7:6f:0f:ae:c8:13:1a:ec:de:e2:d1:40:ac:f1:20:cd:
         9c:eb:8a:55:09:ca:5e:a7:5d:9a:e5:f0:44:d1:f2:fe:d8:5d:
         8b:27:92:bc:f0:76:ce:62:fc:a0:37:ca:27:a2:bc:72:22:ad:
         c7:c7:fd:1f:c7:d5:8d:fd:57:2d:04:ba:db:61:20:bd:b3:8c:
         d9:d9:cb:3e:2d:c0:07:4e:cd:39:cc:be:f3:3d:7a:50:23:5b:
         a9:70:77:dd:0d:ea:6b:1d:89:23:f5:10:77:07:99:1e:30:52:
         bb:90:d8:12:c6:0b:fb:8f:11:d2:1e:01:d6:85:67:24:8d:a6:
         c1:2d:2b:2a:09:30:12:53:3e:9c:f9:fa:f6:04:97:47:d5:15:
         76:c7:6e:7e:9b:86:11:12:0f:1d:80:c0:a2:6a:ab:2a:33:3c:
         76:69:8f:46:49:f3:66:b2:a3:ee:10:ff:03:42:47:fe:6a:cb:
         bd:7a:e4:f6:4a:c1:58:1c:b5:aa:f7:06:05:8e:4b:f9:00:ab:
         53:55:f7:ac:17:be:b2:6c:b4:49:65:22:a4:11:87:ee:36:5f:
         0f:a6:3e:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:03:01 2024 by rpki-client on console-fra.rpki-client.org