Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9138C14/3E4C46305BC411EC96279354C4F9AE02/53E4239C99F811ECA0663D19C4F9AE02.roa
File:                     53E4239C99F811ECA0663D19C4F9AE02.roa (raw, json)
Hash identifier:          HxbFWU6h6tzPFph+IhkzhxS3RFNguGFZCeyF1qS05kI=
Subject key identifier:   80:41:CF:75:D2:EF:89:32:77:67:8B:73:1F:2B:54:F9:F2:1E:C1:2F
Certificate issuer:       /CN=A9138C14/serialNumber=BB0E550379FEA281A881A67479B77C8602D01314
Certificate serial:       0318
Authority key identifier: BB:0E:55:03:79:FE:A2:81:A8:81:A6:74:79:B7:7C:86:02:D0:13:14
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uw5VA3n-ooGogaZ0ebd8hgLQExQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9138C14/3E4C46305BC411EC96279354C4F9AE02/53E4239C99F811ECA0663D19C4F9AE02.roa
Signing time:             Thu 05 Oct 2023 01:43:21 +0000
ROA not before:           Thu 05 Oct 2023 01:43:21 +0000
ROA not after:            Sun 01 Dec 2024 00:00:00 +0000
asID:                     58411
IP address blocks:        2407:d040::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9138C14/3E4C46305BC411EC96279354C4F9AE02/uw5VA3n-ooGogaZ0ebd8hgLQExQ.crl
                          rsync://rpki.apnic.net/member_repository/A9138C14/3E4C46305BC411EC96279354C4F9AE02/uw5VA3n-ooGogaZ0ebd8hgLQExQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uw5VA3n-ooGogaZ0ebd8hgLQExQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 May 2024 02:51:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 792 (0x318)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9138C14/serialNumber=BB0E550379FEA281A881A67479B77C8602D01314
        Validity
            Not Before: Oct  5 01:43:21 2023 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=651e14b9-b9cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:5b:23:d3:04:68:94:e1:e3:af:0c:99:86:4e:
                    1b:08:d8:95:25:5c:ad:7e:a3:32:50:20:71:cc:45:
                    ba:77:3e:26:05:a7:a8:77:3e:90:15:16:b5:36:58:
                    d7:b5:9b:28:54:5f:b1:6c:31:1f:f9:65:7f:75:26:
                    f7:7e:7b:25:4d:6e:a4:b1:67:40:3f:d2:88:73:53:
                    a0:81:fa:89:02:1a:3a:00:1e:70:6b:56:3a:97:0f:
                    b9:4e:29:85:a5:87:33:48:fc:be:38:24:d5:8d:f1:
                    90:35:64:93:73:fb:14:68:cb:71:9d:c1:33:4f:57:
                    1f:da:ce:aa:5c:07:67:d1:22:ac:de:46:42:03:50:
                    46:cb:f1:28:f2:95:42:c5:7c:9c:79:57:c2:10:af:
                    f3:9d:39:62:92:4f:1c:bb:75:43:cc:db:e5:0d:4f:
                    d4:22:8d:a8:dc:ff:ac:f3:d3:d8:ab:17:4c:3e:89:
                    7b:62:d6:05:a0:9e:10:06:9d:23:28:db:16:bc:ba:
                    7b:b9:ab:95:43:25:b8:2e:05:67:2f:f2:0a:cd:de:
                    7b:8b:2c:eb:64:00:b3:a6:6a:0a:e7:45:4b:3c:4a:
                    83:e1:93:23:87:b4:ee:8a:ae:96:3d:6e:9e:a0:72:
                    ae:79:83:81:74:4d:65:a7:84:40:85:2e:2e:90:02:
                    52:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:41:CF:75:D2:EF:89:32:77:67:8B:73:1F:2B:54:F9:F2:1E:C1:2F
            X509v3 Authority Key Identifier:
                keyid:BB:0E:55:03:79:FE:A2:81:A8:81:A6:74:79:B7:7C:86:02:D0:13:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9138C14/3E4C46305BC411EC96279354C4F9AE02/uw5VA3n-ooGogaZ0ebd8hgLQExQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uw5VA3n-ooGogaZ0ebd8hgLQExQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138C14/3E4C46305BC411EC96279354C4F9AE02/53E4239C99F811ECA0663D19C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:d040::/32

    Signature Algorithm: sha256WithRSAEncryption
         7a:e3:54:34:e7:6b:54:48:df:94:fd:5d:70:9a:4b:b4:cf:2c:
         1f:9c:ee:ef:3e:91:c6:2c:ef:52:14:7c:c8:9b:e2:9b:fb:95:
         42:be:cf:1f:38:f0:66:0a:a6:b4:63:ac:a9:15:17:ab:d4:40:
         9d:8a:a7:91:27:9c:ce:83:d0:c8:6b:5a:48:b0:e5:f9:d0:6f:
         87:f2:da:20:45:2e:6e:68:eb:2c:10:07:98:8d:80:f6:db:77:
         f1:92:8f:28:39:4c:63:2f:6b:bf:6b:11:3d:a7:3a:c2:8c:2b:
         42:26:1b:55:d2:81:81:f0:da:2f:fd:d9:2a:da:c9:aa:a5:3f:
         5e:38:0f:4a:44:c6:b4:f9:f2:61:30:f0:0e:8a:aa:62:fb:7a:
         87:a3:af:28:b7:c2:b4:83:d3:a4:e4:70:3d:a4:f2:14:db:d7:
         0f:32:f5:45:91:9a:4e:da:78:c5:0f:bc:d4:91:6f:43:66:c0:
         c6:fa:bc:2f:77:50:6f:e6:8a:57:6e:12:9c:bb:01:42:0a:13:
         79:ae:55:9c:75:1a:33:ec:fa:25:db:38:43:e3:0e:a0:f6:68:
         cb:36:fb:d6:68:82:13:41:85:42:93:c3:af:aa:99:a7:98:b6:
         0d:8c:77:d8:83:83:2d:d8:96:b9:13:7a:34:19:6c:33:cb:90:
         9f:a7:26:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 03:16:58 2024 by rpki-client on console-fra.rpki-client.org