Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/46186F4EC6E711EDA2FCBA34C4F9AE02.roa
File:                     46186F4EC6E711EDA2FCBA34C4F9AE02.roa (raw, json)
Hash identifier:          FjtuCaE+m8d6Jz7C5JWJgYPZl4/UQZZvDNJFxwt0oyY=
Subject key identifier:   8F:68:8C:F9:22:7F:06:52:21:98:C4:1F:BF:B8:6F:42:C8:B5:E3:E7
Certificate issuer:       /CN=A9149F3E/serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
Certificate serial:       34D1
Authority key identifier: EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/46186F4EC6E711EDA2FCBA34C4F9AE02.roa
Signing time:             Tue 26 Sep 2023 14:30:13 +0000
ROA not before:           Tue 26 Sep 2023 14:30:13 +0000
ROA not after:            Sat 31 Aug 2024 00:00:00 +0000
asID:                     10049
IP address blocks:        124.66.178.0/24 maxlen: 24
                          211.45.60.0/24 maxlen: 24
                          211.45.61.0/24 maxlen: 24
                          211.45.62.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl
                          rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 14:23:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13521 (0x34d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9149F3E/serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
        Validity
            Not Before: Sep 26 14:30:13 2023 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=6512eaf5-a1d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:20:c1:c2:c7:cc:0d:f1:7c:20:f1:c1:93:55:
                    64:58:1c:be:01:ec:96:48:e0:6c:65:54:b6:bd:d7:
                    be:33:ad:2a:7d:21:b8:6e:c8:4e:b1:6a:c0:9c:b7:
                    46:b8:73:89:69:e5:88:43:dc:4a:da:47:12:d8:2c:
                    9e:2a:43:14:ac:cc:a1:b8:ad:a8:1c:3c:f8:05:73:
                    88:78:4b:91:d5:2e:33:78:0d:a3:60:7d:32:14:99:
                    fd:4a:ec:8d:69:89:f0:e3:33:46:7a:da:be:4b:b0:
                    f7:1c:92:cc:26:7b:23:60:57:ab:da:19:bf:7d:0c:
                    d0:f8:e9:eb:5e:36:fd:24:d7:54:93:12:d7:d6:5d:
                    ee:42:56:58:71:4e:cd:07:19:11:6d:29:70:2a:98:
                    98:32:a0:04:04:e0:58:be:09:95:c7:a4:8b:42:1d:
                    2a:3a:fa:db:38:c1:4f:fd:67:ba:60:7c:4a:c9:95:
                    64:4f:7a:14:e6:ef:3c:0f:1e:25:01:57:1b:23:b0:
                    8d:d7:15:4f:50:1e:6c:bc:f5:0d:be:df:72:cc:f9:
                    fe:f9:03:5a:da:6d:f8:d5:99:21:2e:e7:06:6f:64:
                    9a:76:c4:e0:61:2c:b4:6b:9c:21:7f:fc:27:c5:fe:
                    e8:90:ff:8d:ba:1c:b1:f6:30:93:1e:52:02:c6:18:
                    b5:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:68:8C:F9:22:7F:06:52:21:98:C4:1F:BF:B8:6F:42:C8:B5:E3:E7
            X509v3 Authority Key Identifier:
                keyid:EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/46186F4EC6E711EDA2FCBA34C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.66.178.0/24
                  211.45.60.0-211.45.62.255

    Signature Algorithm: sha256WithRSAEncryption
         21:67:59:89:a6:38:84:3f:f3:d5:f0:ee:5c:b8:f1:5f:77:cb:
         6a:a6:f1:2a:7a:87:c5:09:5f:0c:c9:1e:6b:3c:27:0e:07:72:
         8d:48:e2:07:b3:37:cf:63:fe:ab:5a:92:36:f0:9b:eb:e6:4d:
         8e:95:df:f6:5f:f3:85:7b:5c:47:45:6c:51:29:98:77:49:5c:
         00:5e:18:46:19:bf:31:79:c6:52:8d:07:f6:81:2f:a2:ce:8e:
         4b:95:45:c3:19:1c:25:5a:77:1d:50:0b:93:22:9a:c6:e1:56:
         30:ee:87:2e:d8:e5:f2:ed:21:3e:9b:fb:e0:e0:23:09:45:01:
         33:0a:0f:f7:b6:e3:5b:41:1a:86:08:19:48:28:65:6f:e7:20:
         5b:f5:ea:69:1d:98:40:c2:be:fc:60:c2:6d:e5:55:2c:df:66:
         29:31:13:6b:85:e7:d5:50:92:33:d3:81:75:fd:1d:a2:d4:90:
         76:c1:09:8e:1a:f6:ff:f5:ae:42:4e:04:97:9b:ec:e4:54:ef:
         6b:f4:15:cd:76:64:e0:a7:a2:ba:ab:3e:96:b6:35:77:1c:0d:
         56:83:41:9b:98:65:24:33:49:ce:e7:b9:41:a9:ec:ac:d7:38:
         78:0e:60:8c:01:c3:c8:0b:10:62:a1:23:ba:c6:b0:c6:2a:e5:
         d5:52:08:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 15:26:02 2024 by rpki-client on console-fra.rpki-client.org