Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/E5DB5238DFBD11EC8E203126C4F9AE02.roa
File:                     E5DB5238DFBD11EC8E203126C4F9AE02.roa (raw, json)
Hash identifier:          UjU6es7AUpfjPsmTTHoLX6C2qhqoK5d5YNp38bRPGp4=
Subject key identifier:   2E:57:20:25:94:67:3D:7B:4F:DD:96:DA:5A:58:39:B4:16:55:0F:06
Certificate issuer:       /CN=A913B1DA/serialNumber=50E6683A6AF4644B68A11C22DA7F3A65B312C06F
Certificate serial:       2F09
Authority key identifier: 50:E6:68:3A:6A:F4:64:4B:68:A1:1C:22:DA:7F:3A:65:B3:12:C0:6F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UOZoOmr0ZEtooRwi2n86ZbMSwG8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/E5DB5238DFBD11EC8E203126C4F9AE02.roa
Signing time:             Sat 08 Jul 2023 15:51:32 +0000
ROA not before:           Sat 08 Jul 2023 15:51:32 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     45962
IP address blocks:        203.56.176.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/UOZoOmr0ZEtooRwi2n86ZbMSwG8.crl
                          rsync://rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/UOZoOmr0ZEtooRwi2n86ZbMSwG8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UOZoOmr0ZEtooRwi2n86ZbMSwG8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 May 2024 15:44:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12041 (0x2f09)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B1DA/serialNumber=50E6683A6AF4644B68A11C22DA7F3A65B312C06F
        Validity
            Not Before: Jul  8 15:51:32 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=64a98604-7b84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:75:7d:28:c1:6f:7b:cd:2c:2e:2e:6e:fe:23:
                    c6:cc:f3:74:24:76:f5:72:d0:90:d8:d9:29:87:9d:
                    30:31:da:7a:89:3b:f8:05:74:5a:85:a6:fc:0f:b1:
                    69:da:10:50:66:52:54:05:28:5f:70:68:0c:37:18:
                    8f:15:46:7c:e5:7d:aa:a0:da:b7:3f:34:aa:ef:80:
                    9f:d1:19:dd:2e:3a:4d:6d:55:64:47:8e:86:67:f0:
                    50:55:ec:60:98:55:af:50:e8:a3:ac:b5:4e:61:a9:
                    bd:ea:12:9d:2c:52:7d:aa:a8:85:b6:53:bd:ae:ca:
                    fb:f9:7b:80:a7:43:52:17:d6:e0:40:13:cd:c3:20:
                    e1:01:e8:14:c5:a4:22:15:09:e4:eb:02:51:16:27:
                    d4:2c:58:a5:b8:04:54:d9:62:37:d5:65:f5:fb:f6:
                    27:90:12:da:4a:8e:0a:e8:4d:59:c2:fd:46:62:ec:
                    dc:0b:17:9c:13:50:55:10:65:e8:5f:68:84:81:14:
                    40:dd:e0:77:78:64:14:87:13:10:b9:5d:21:56:ec:
                    9e:ca:54:b7:77:9e:20:c5:04:ff:96:2b:e3:22:eb:
                    e3:b8:c4:8e:81:d6:20:3e:85:a4:cf:a8:d3:e4:51:
                    71:4a:88:48:f1:c4:bc:cd:fe:d9:66:be:f7:26:1b:
                    47:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:57:20:25:94:67:3D:7B:4F:DD:96:DA:5A:58:39:B4:16:55:0F:06
            X509v3 Authority Key Identifier:
                keyid:50:E6:68:3A:6A:F4:64:4B:68:A1:1C:22:DA:7F:3A:65:B3:12:C0:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/UOZoOmr0ZEtooRwi2n86ZbMSwG8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UOZoOmr0ZEtooRwi2n86ZbMSwG8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/E5DB5238DFBD11EC8E203126C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.56.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:b4:e9:f6:1f:d6:47:1e:a4:2d:d4:ce:61:30:f0:be:ca:20:
         5c:09:75:a7:d0:c6:5b:16:60:b4:07:52:ef:d5:91:f2:b8:bc:
         07:b1:77:fa:55:91:07:e6:09:b9:93:13:5f:d8:07:9a:e8:a4:
         54:65:96:30:56:c4:31:19:90:31:32:3c:5f:19:0e:b4:97:88:
         65:8c:9f:16:81:65:16:44:a1:e0:4a:3d:3b:6a:30:7f:88:24:
         18:95:20:44:da:84:39:11:ef:48:15:84:9d:d1:41:06:9f:0b:
         aa:9f:15:66:97:77:61:5f:2b:b0:1a:e3:b7:04:26:64:ca:7f:
         30:87:d4:47:3e:ba:8c:74:61:48:a9:ca:64:54:ce:7d:00:28:
         ff:c8:36:7f:19:66:d2:de:51:7d:ba:14:16:0a:f6:78:74:85:
         b3:23:27:fb:a5:14:1d:09:ed:3a:7b:7d:15:0c:4e:23:9c:be:
         d2:0d:73:83:c6:8e:f3:69:e4:21:d2:71:fb:e6:d5:0b:d9:2b:
         77:52:9c:48:88:17:ec:81:be:d6:2a:63:76:02:69:67:0a:6d:
         28:a6:2c:47:46:dd:78:b1:47:0e:0b:30:d0:f9:db:d1:be:c9:
         f3:0b:8f:85:45:28:6e:08:ed:86:88:1b:44:0a:96:a3:eb:84:
         d2:65:8b:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 17:51:18 2024 by rpki-client on console-ams.rpki-client.org