Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/2784EDACA73711ED85D58D3CC4F9AE02.roa
File:                     2784EDACA73711ED85D58D3CC4F9AE02.roa (raw, json)
Hash identifier:          O5vC1vUqT3DKwr4mVLVnPqdYEKuQw9YbDElxI4VwiA0=
Subject key identifier:   BA:3A:AB:9A:E8:BF:36:90:BE:C5:BC:C3:3D:EE:5B:1C:51:7A:8C:1D
Certificate issuer:       /CN=A91406AA/serialNumber=315513E54AB0C99B8BCA84042E38358B60DB1B2C
Certificate serial:       05BB
Authority key identifier: 31:55:13:E5:4A:B0:C9:9B:8B:CA:84:04:2E:38:35:8B:60:DB:1B:2C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MVUT5UqwyZuLyoQELjg1i2DbGyw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/2784EDACA73711ED85D58D3CC4F9AE02.roa
Signing time:             Wed 04 Oct 2023 23:41:34 +0000
ROA not before:           Wed 04 Oct 2023 23:41:34 +0000
ROA not after:            Sun 01 Dec 2024 00:00:00 +0000
asID:                     56030
IP address blocks:        60.234.73.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/MVUT5UqwyZuLyoQELjg1i2DbGyw.crl
                          rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/MVUT5UqwyZuLyoQELjg1i2DbGyw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MVUT5UqwyZuLyoQELjg1i2DbGyw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 May 2024 00:07:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1467 (0x5bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91406AA/serialNumber=315513E54AB0C99B8BCA84042E38358B60DB1B2C
        Validity
            Not Before: Oct  4 23:41:34 2023 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=651df82e-ea16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:8d:16:3f:04:76:72:3f:2b:86:fb:c0:c4:d8:
                    f4:4c:24:ec:5b:80:2a:dd:ee:91:06:10:1c:5f:f2:
                    bc:3b:bf:0f:46:92:6d:aa:69:ac:6d:d6:61:b7:ae:
                    7e:70:38:05:1c:77:aa:92:2a:94:db:50:f6:7b:6a:
                    d5:bf:ff:8a:51:a0:6f:ac:94:8f:0b:d2:ad:ab:0b:
                    bc:c1:c7:08:6a:64:14:51:f0:0c:d2:4a:a2:b4:f8:
                    29:17:f5:d4:40:37:d8:2e:5a:96:a6:2e:f2:8e:d8:
                    90:7b:72:71:1c:c3:59:8f:a6:c2:96:57:3c:fb:d5:
                    49:11:84:07:54:42:bc:23:d9:d1:2f:62:11:18:3d:
                    b5:58:53:cc:cb:4f:2d:9a:b1:b2:03:30:d7:a4:16:
                    71:93:0c:bc:54:80:b1:55:19:3c:d5:c5:5c:eb:9e:
                    c1:fb:55:f9:e3:96:bb:5a:de:e1:20:b7:eb:48:c5:
                    04:29:be:ef:79:0b:dd:f8:a3:7f:27:67:4f:5a:8f:
                    71:63:cb:1c:57:c5:8a:66:b3:4e:ed:45:29:84:b3:
                    73:06:c8:cf:ad:2a:af:8e:83:7b:6f:f4:f6:ec:45:
                    1f:01:35:e8:39:40:77:6a:99:36:f8:70:54:ba:18:
                    1e:50:1c:4d:94:72:e6:7a:d8:d8:9c:96:e6:58:a6:
                    c4:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:3A:AB:9A:E8:BF:36:90:BE:C5:BC:C3:3D:EE:5B:1C:51:7A:8C:1D
            X509v3 Authority Key Identifier:
                keyid:31:55:13:E5:4A:B0:C9:9B:8B:CA:84:04:2E:38:35:8B:60:DB:1B:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/MVUT5UqwyZuLyoQELjg1i2DbGyw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MVUT5UqwyZuLyoQELjg1i2DbGyw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/2784EDACA73711ED85D58D3CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  60.234.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b7:12:89:8e:ba:62:71:ff:4e:0a:87:75:21:5a:dc:5a:e7:0c:
         c8:de:c0:95:4a:85:7d:16:a6:a5:b0:c3:9d:5b:aa:e5:5e:18:
         6d:50:b0:65:1b:e8:95:cb:40:c2:ff:ec:38:f6:1f:7c:f9:63:
         c9:f1:09:48:00:e3:09:0f:97:38:46:e7:1c:50:52:9b:99:57:
         ab:27:89:bc:30:76:ba:c2:9f:12:0a:3d:48:ee:de:8c:35:9d:
         a0:9c:b0:44:28:52:77:33:e8:27:fd:fe:10:c0:dd:06:0a:a9:
         a5:d1:a0:ac:9a:44:90:a7:21:e9:92:d2:a8:a0:60:59:74:59:
         29:ab:64:80:25:76:3a:96:97:e6:b3:df:a0:fc:d6:0a:7c:12:
         c0:eb:9c:f7:c9:fa:dd:5d:ce:77:05:1a:34:f5:e8:72:75:9f:
         4a:de:51:39:0b:45:11:3f:59:09:b3:07:77:fe:2d:3f:a5:51:
         cf:63:dd:2c:89:61:bf:01:23:e6:a9:83:b5:7b:27:32:9a:b1:
         6a:c3:35:dc:29:b9:fc:8d:89:73:0e:c1:f8:6b:98:66:73:29:
         97:dd:b8:58:af:75:cb:48:85:8c:d3:5f:bf:e5:be:f1:43:a3:
         4f:5e:40:21:1d:b6:80:f7:cb:be:da:9e:14:9a:9d:d6:26:5e:
         e5:cd:78:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 01:06:58 2024 by rpki-client on console-fra.rpki-client.org