Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914254C/5A564D4819E811E8B9650C7EC4F9AE02/774A232A718011EEA0E7EF5EC4F9AE02.roa
File:                     774A232A718011EEA0E7EF5EC4F9AE02.roa (raw, json)
Hash identifier:          KU+gOdmQbTNFsZPh0FCWz6euUuDV+dSXjHriuXi+Oew=
Subject key identifier:   3A:5F:A0:C0:D6:EE:AF:93:4A:CD:A0:82:9F:15:F2:1F:66:4F:C6:E0
Certificate issuer:       /CN=A914254C/serialNumber=7B3F60D9B1A28002A07875CAB58A21457073E17F
Certificate serial:       150E
Authority key identifier: 7B:3F:60:D9:B1:A2:80:02:A0:78:75:CA:B5:8A:21:45:70:73:E1:7F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ez9g2bGigAKgeHXKtYohRXBz4X8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914254C/5A564D4819E811E8B9650C7EC4F9AE02/774A232A718011EEA0E7EF5EC4F9AE02.roa
Signing time:             Mon 23 Oct 2023 08:45:06 +0000
ROA not before:           Mon 23 Oct 2023 08:45:06 +0000
ROA not after:            Tue 30 Jul 2024 00:00:00 +0000
asID:                     394749
IP address blocks:        2403:b100:2013::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914254C/5A564D4819E811E8B9650C7EC4F9AE02/ez9g2bGigAKgeHXKtYohRXBz4X8.crl
                          rsync://rpki.apnic.net/member_repository/A914254C/5A564D4819E811E8B9650C7EC4F9AE02/ez9g2bGigAKgeHXKtYohRXBz4X8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ez9g2bGigAKgeHXKtYohRXBz4X8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 May 2024 17:27:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5390 (0x150e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914254C/serialNumber=7B3F60D9B1A28002A07875CAB58A21457073E17F
        Validity
            Not Before: Oct 23 08:45:06 2023 GMT
            Not After : Jul 30 00:00:00 2024 GMT
        Subject: CN=65363292-b86d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:35:52:a7:6a:93:b5:45:8e:c9:a7:b9:50:a6:
                    e3:d3:46:6d:03:ed:59:73:46:ed:e5:24:4c:43:d3:
                    ba:4d:e7:af:b9:d6:44:98:ef:6f:b7:dc:ed:85:94:
                    ec:cf:80:c1:fd:19:5d:30:f5:43:3a:82:e3:85:3e:
                    10:38:1c:68:25:48:8a:b7:35:a8:d2:71:5e:40:7b:
                    8f:c5:c7:05:1d:52:c4:6f:85:45:28:e7:2c:b4:87:
                    08:7e:c1:70:a3:d1:84:2a:ea:76:3d:e3:d6:4c:c8:
                    43:1d:94:06:c9:8d:2f:03:b2:9f:25:07:7f:aa:bc:
                    23:eb:66:d4:35:47:d9:e4:4f:f2:2a:31:65:4e:56:
                    33:0f:59:40:aa:95:1e:08:8e:db:ec:f8:95:69:c0:
                    9f:49:8f:73:29:b2:94:21:96:f2:22:5c:4f:f6:fb:
                    80:e4:f2:fd:4c:87:94:ba:15:3d:66:09:12:91:69:
                    6d:8b:3c:f1:57:0b:f3:ed:ca:88:da:12:1b:d1:97:
                    b7:1f:bb:bf:30:03:c9:27:c0:5f:82:92:1f:f6:4f:
                    6a:c1:92:b6:1b:64:86:e5:a1:3e:47:bb:d0:5b:af:
                    9c:6a:42:e6:27:3c:7e:98:1a:b6:ad:d1:cc:59:74:
                    de:a8:0d:31:74:83:3d:f4:7b:81:61:94:50:cf:1f:
                    1a:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:5F:A0:C0:D6:EE:AF:93:4A:CD:A0:82:9F:15:F2:1F:66:4F:C6:E0
            X509v3 Authority Key Identifier:
                keyid:7B:3F:60:D9:B1:A2:80:02:A0:78:75:CA:B5:8A:21:45:70:73:E1:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914254C/5A564D4819E811E8B9650C7EC4F9AE02/ez9g2bGigAKgeHXKtYohRXBz4X8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ez9g2bGigAKgeHXKtYohRXBz4X8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914254C/5A564D4819E811E8B9650C7EC4F9AE02/774A232A718011EEA0E7EF5EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:b100:2013::/48

    Signature Algorithm: sha256WithRSAEncryption
         86:75:65:2e:eb:66:5a:1d:46:4e:21:66:30:57:f5:1c:d9:9f:
         0c:10:d0:ee:10:e3:5e:b2:68:d1:d9:5e:8a:37:db:b8:15:a3:
         d8:55:3b:18:8f:f8:ea:3d:1a:86:ad:9c:24:04:81:26:bd:37:
         b3:b1:73:47:58:d9:82:7b:b1:92:01:f8:2c:ae:19:e9:77:fd:
         d1:d1:4c:26:a2:08:72:0c:c6:c6:32:10:ea:2f:ab:e3:fe:b9:
         ea:17:9c:ff:95:b4:bc:7c:e0:2f:73:d1:67:0f:0f:3a:5c:b1:
         03:20:22:00:8c:81:12:22:9a:fe:5e:e6:c7:33:75:5e:b1:e3:
         b6:86:18:51:e3:3e:1c:dd:92:89:df:e1:d1:b6:89:e4:57:41:
         58:db:01:98:28:ac:eb:dc:00:e7:6d:e1:53:8a:29:0a:da:54:
         6e:6e:ee:18:2e:f9:45:89:09:94:57:f9:dc:c5:f9:38:9c:cc:
         7c:45:05:32:4f:cf:9f:ca:31:6f:29:d1:07:78:a8:bf:32:0b:
         32:7f:bc:83:40:ca:88:b2:c9:64:96:fa:3f:67:a8:f2:ef:67:
         cc:0e:4f:a4:76:8b:be:da:a8:09:04:0f:11:14:49:6d:47:48:
         17:0a:76:42:f7:3f:e2:d9:db:02:43:ce:7f:51:6e:c1:6f:40:
         ea:a1:56:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 20:25:41 2024 by rpki-client on console-ams.rpki-client.org