Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/315775B015F811ECB52DA912C4F9AE02.roa
File:                     315775B015F811ECB52DA912C4F9AE02.roa (raw, json)
Hash identifier:          xrgbLdHRzwoGftBTTSTlHguSp9Ffp3+zedCUArj3Bow=
Subject key identifier:   BD:47:62:79:B4:35:04:91:45:0B:8E:8B:DE:31:A1:0A:2F:95:99:95
Certificate issuer:       /CN=A91510AD/serialNumber=E1E6908A16EC813DAA0BD64797AE9DBDEB092257
Certificate serial:       3451
Authority key identifier: E1:E6:90:8A:16:EC:81:3D:AA:0B:D6:47:97:AE:9D:BD:EB:09:22:57
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/315775B015F811ECB52DA912C4F9AE02.roa
Signing time:             Wed 04 Oct 2023 14:50:29 +0000
ROA not before:           Wed 04 Oct 2023 14:50:29 +0000
ROA not after:            Mon 30 Dec 2024 00:00:00 +0000
asID:                     146993
IP address blocks:        175.29.148.0/22 maxlen: 24
                          175.29.152.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.crl
                          rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 May 2024 02:42:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13393 (0x3451)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91510AD/serialNumber=E1E6908A16EC813DAA0BD64797AE9DBDEB092257
        Validity
            Not Before: Oct  4 14:50:29 2023 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=651d7bb5-586c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:26:da:5c:1f:cf:fe:8c:13:c8:c9:88:3e:93:
                    3e:ba:34:76:3a:28:57:e8:6f:83:3c:2f:e2:49:ee:
                    dd:58:64:8a:43:fb:2e:ad:06:c8:7e:03:ca:f4:ed:
                    ad:82:32:a0:19:45:b2:fd:7b:46:c6:61:e8:18:cd:
                    04:1e:a8:ca:9f:3d:3a:23:9a:85:6d:9f:57:9a:a7:
                    c4:9c:89:5f:42:94:03:70:29:05:4f:80:c2:f0:2b:
                    f7:97:e3:63:26:40:64:e4:97:f4:42:58:f5:7f:f4:
                    38:34:be:c8:19:e2:43:15:e9:9f:5b:08:58:e4:dc:
                    d7:53:2c:f1:61:cc:9d:85:d1:d5:fc:2f:72:69:82:
                    f9:33:66:28:b2:41:6f:f7:a5:16:ff:96:48:a1:b4:
                    b2:3f:bb:0b:19:fd:25:a5:a0:04:0e:c1:5c:57:c2:
                    9a:d7:88:d5:08:ef:6c:5c:f8:19:03:26:39:8e:d9:
                    51:0b:3f:dc:32:d8:34:14:8e:e1:5e:5f:c8:33:6b:
                    cc:a2:ab:37:f7:a8:30:20:90:0c:78:5d:f9:60:83:
                    50:4d:22:8c:21:61:80:53:b8:94:a9:99:4f:0a:a6:
                    9e:f4:26:0e:b9:75:f1:91:5e:d9:76:d5:67:54:19:
                    6b:aa:ec:32:51:e0:3d:60:c7:bd:ef:18:be:a9:61:
                    1a:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:47:62:79:B4:35:04:91:45:0B:8E:8B:DE:31:A1:0A:2F:95:99:95
            X509v3 Authority Key Identifier:
                keyid:E1:E6:90:8A:16:EC:81:3D:AA:0B:D6:47:97:AE:9D:BD:EB:09:22:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/315775B015F811ECB52DA912C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.29.148.0-175.29.159.255

    Signature Algorithm: sha256WithRSAEncryption
         a8:20:8a:d0:52:04:bb:92:be:50:c4:66:f9:14:8c:a8:b8:af:
         4e:71:35:44:a1:6e:8a:36:5b:76:33:96:5a:fc:dd:10:ca:6d:
         fa:12:29:36:8c:4b:df:a2:5b:4a:27:46:58:df:65:c8:18:de:
         20:36:7e:61:cb:8b:f2:83:6e:7c:e2:be:45:b4:9c:f0:d9:cc:
         cb:c5:55:38:68:1c:19:f4:84:42:2c:d6:22:c1:bf:75:7d:a0:
         e4:85:e4:8c:d7:45:e3:4e:b4:bd:79:c5:18:7e:f8:9e:50:5a:
         27:73:e2:a9:62:1e:bd:09:59:f9:da:c7:c2:8d:d3:f1:fd:96:
         c0:8e:34:6b:cb:30:ed:85:05:42:ca:d6:c7:ab:36:81:d5:5c:
         40:22:ee:4d:a3:0f:c4:d6:2f:d9:d6:c6:8b:d9:32:6b:ca:1a:
         a7:d5:c1:ff:0e:e7:73:61:45:b1:1a:96:f3:ea:48:5b:e9:0a:
         05:17:a1:7d:0a:b6:c8:88:71:a8:50:74:60:da:6a:85:de:35:
         ee:0d:57:97:fd:4f:e5:0f:88:d9:28:50:7b:08:98:d7:21:50:
         a8:ae:1b:9d:cc:97:f6:4f:94:ca:64:cb:a3:9b:b0:29:3f:bd:
         4c:e9:b0:fa:29:08:a2:25:3f:ed:0c:72:0a:46:33:71:b1:7d:
         94:16:0e:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 16:38:03 2024 by rpki-client on console-ams.rpki-client.org