Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/F7292614459D11EDB62F422FC4F9AE02.roa
File:                     F7292614459D11EDB62F422FC4F9AE02.roa (raw, json)
Hash identifier:          EvNO4h52Bu50CNoNbBs8jWuY6YETCwoLC3lQ0lNp0uc=
Subject key identifier:   46:E7:03:09:EC:56:64:E1:35:7F:CB:36:60:47:8C:B5:1A:C5:C8:25
Certificate issuer:       /CN=A91510AD/serialNumber=E1E6908A16EC813DAA0BD64797AE9DBDEB092257
Certificate serial:       3455
Authority key identifier: E1:E6:90:8A:16:EC:81:3D:AA:0B:D6:47:97:AE:9D:BD:EB:09:22:57
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/F7292614459D11EDB62F422FC4F9AE02.roa
Signing time:             Wed 04 Oct 2023 14:50:33 +0000
ROA not before:           Wed 04 Oct 2023 14:50:33 +0000
ROA not after:            Mon 30 Dec 2024 00:00:00 +0000
asID:                     210334
IP address blocks:        175.29.108.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.crl
                          rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 14:31:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13397 (0x3455)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91510AD/serialNumber=E1E6908A16EC813DAA0BD64797AE9DBDEB092257
        Validity
            Not Before: Oct  4 14:50:33 2023 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=651d7bb8-dc38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ce:2c:c9:61:fc:a5:30:cf:bf:53:54:02:28:
                    79:b3:9c:54:28:67:93:87:6f:2d:c8:5a:40:4f:ce:
                    2b:3b:b9:89:1f:0c:1e:7c:71:54:3f:0f:d5:0e:b2:
                    bf:79:a1:d6:40:9c:16:13:f7:ee:9c:cb:74:3a:d4:
                    1f:5d:ba:22:a2:ad:1d:8f:92:04:39:e5:bb:7d:17:
                    1c:fc:51:02:ad:15:a3:8b:bd:a0:38:0b:c4:bc:e3:
                    77:92:c7:41:3e:e5:8a:4e:b9:fe:39:c3:4c:e1:74:
                    56:c3:f8:47:6c:4a:86:50:41:23:29:94:e2:90:c9:
                    2f:f0:99:90:4f:58:45:73:38:00:62:81:0f:5b:44:
                    e4:5a:4c:e8:9c:40:1a:a0:08:68:73:ef:46:e9:b1:
                    11:cc:72:20:14:0d:68:e1:38:15:a1:b0:3d:e0:0f:
                    7f:35:b5:ca:44:2f:62:d8:b7:5d:74:73:25:90:07:
                    44:cd:77:e1:20:ab:6c:88:7f:7d:bc:b7:89:d3:55:
                    d7:40:a2:48:a6:64:96:64:e3:2e:99:bb:39:49:90:
                    ad:26:14:2d:87:f9:1e:7a:0c:2c:9d:c7:b7:5e:01:
                    a6:e1:52:80:4e:ea:62:e5:05:8b:c3:e5:9b:cb:5b:
                    fe:16:d7:44:01:e4:79:27:40:2b:f5:f4:36:a1:ca:
                    02:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:E7:03:09:EC:56:64:E1:35:7F:CB:36:60:47:8C:B5:1A:C5:C8:25
            X509v3 Authority Key Identifier:
                keyid:E1:E6:90:8A:16:EC:81:3D:AA:0B:D6:47:97:AE:9D:BD:EB:09:22:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/F7292614459D11EDB62F422FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.29.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         26:88:ef:5a:28:51:32:a1:c7:db:b8:b8:91:fb:0d:4d:ce:16:
         9b:f9:1c:cb:04:d0:f6:86:ff:7e:fd:1c:53:4e:fd:46:3a:68:
         94:71:8f:72:7a:9b:03:21:0c:6c:56:ad:8e:b0:94:91:c7:af:
         d2:23:96:04:c9:91:aa:d0:8e:b2:9f:5a:50:2b:3a:f9:df:06:
         6d:29:0b:36:23:02:6b:7c:a7:73:3c:f0:07:c5:9b:f0:9f:48:
         1a:4b:cc:ec:92:b2:35:55:10:e2:28:ad:33:75:78:63:fc:fe:
         00:2d:6a:60:d3:60:91:b5:10:c1:13:51:4e:5d:d7:87:ee:93:
         54:1e:4b:b8:67:f3:a0:d7:52:ce:62:ae:f1:6c:13:f3:57:83:
         40:cc:24:c2:12:fa:b1:ac:98:38:3b:05:f7:1d:37:61:84:56:
         ee:3b:1b:3b:19:8e:4b:9a:ca:14:95:e3:66:31:88:d8:32:62:
         1f:c2:16:75:e4:2b:9b:25:4e:d6:bf:5b:71:0f:21:43:b8:c4:
         3b:24:9a:79:5f:2c:d7:da:ca:16:75:41:2c:09:40:6e:a9:88:
         f7:89:8a:4c:d6:e3:3a:b0:d8:72:68:41:93:7d:e0:53:10:8b:
         d1:a9:8f:aa:7f:95:b9:1a:ca:1c:a2:20:96:b5:83:8c:4a:b3:
         51:ee:ac:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 15:26:03 2024 by rpki-client on console-fra.rpki-client.org