Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/7FCB16B6175111EC8D2A3722C4F9AE02.roa
File:                     7FCB16B6175111EC8D2A3722C4F9AE02.roa (raw, json)
Hash identifier:          u2nkoFQ9pAFUsvLkmu3z8Z2E73RKiw97OUrmKhXfM4s=
Subject key identifier:   12:28:0E:C6:13:CD:A7:DC:84:97:1E:30:07:BF:BE:84:8F:AB:D2:32
Certificate issuer:       /CN=A91514B1/serialNumber=6171432D5594CB3F608D3BE0F52600BBEC46E5FB
Certificate serial:       0449
Authority key identifier: 61:71:43:2D:55:94:CB:3F:60:8D:3B:E0:F5:26:00:BB:EC:46:E5:FB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YXFDLVWUyz9gjTvg9SYAu-xG5fs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/7FCB16B6175111EC8D2A3722C4F9AE02.roa
Signing time:             Thu 03 Aug 2023 01:02:14 +0000
ROA not before:           Thu 03 Aug 2023 01:02:14 +0000
ROA not after:            Thu 31 Oct 2024 00:00:00 +0000
asID:                     58780
IP address blocks:        220.101.56.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.crl
                          rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YXFDLVWUyz9gjTvg9SYAu-xG5fs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 02 Jul 2024 00:53:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1097 (0x449)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91514B1/serialNumber=6171432D5594CB3F608D3BE0F52600BBEC46E5FB
        Validity
            Not Before: Aug  3 01:02:14 2023 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=64cafc96-41be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:a8:57:e5:79:9a:61:0c:15:20:fe:ae:ae:4a:
                    0d:af:01:4b:ec:c5:8b:93:5b:e5:4d:76:8d:d6:7c:
                    4c:fb:ba:bb:af:7d:a7:bc:88:09:2e:83:51:e8:6e:
                    5e:6d:8e:4b:f0:16:ad:3e:98:1d:a4:91:5b:39:a4:
                    7b:33:70:a1:55:93:a5:57:82:e4:ed:25:19:77:45:
                    bb:da:98:17:89:c8:c2:2f:3c:75:c8:7f:cd:72:3f:
                    52:c3:05:29:c6:ba:12:11:ac:75:78:9f:c7:97:f0:
                    86:5e:09:21:c4:96:aa:ae:50:1d:27:93:d8:6b:b5:
                    69:34:f0:08:17:ca:f4:7a:6e:1d:f2:02:fa:eb:3a:
                    9a:31:e8:58:40:65:9a:c8:99:53:cf:e9:10:a5:28:
                    0a:39:22:26:c6:70:0a:94:4d:39:38:3b:53:27:9a:
                    29:78:17:c6:1a:48:06:e8:b2:9d:b3:23:f3:a5:9c:
                    92:5d:ac:00:0d:2a:d9:b4:73:fd:52:4b:06:ff:dd:
                    d0:db:e5:05:6d:ea:54:25:1a:5c:62:7a:5a:d2:55:
                    67:65:de:4d:90:78:cd:84:72:af:f7:3c:ba:d3:a6:
                    4a:61:f2:73:3f:36:b3:af:66:69:5b:c9:d1:67:68:
                    13:a7:53:af:12:6e:08:8a:e5:fb:0f:80:c5:97:2e:
                    9f:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:28:0E:C6:13:CD:A7:DC:84:97:1E:30:07:BF:BE:84:8F:AB:D2:32
            X509v3 Authority Key Identifier:
                keyid:61:71:43:2D:55:94:CB:3F:60:8D:3B:E0:F5:26:00:BB:EC:46:E5:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YXFDLVWUyz9gjTvg9SYAu-xG5fs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/7FCB16B6175111EC8D2A3722C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.101.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9a:64:dd:45:aa:37:47:91:c5:0b:73:44:f3:46:ca:aa:fa:66:
         60:d3:0d:40:fc:e0:6e:d8:0b:41:c4:9f:f7:bc:e1:af:c9:b0:
         7d:b3:83:e5:db:8b:6f:5b:48:f9:0a:70:be:22:e9:1f:88:9c:
         9e:39:a5:ae:00:db:fe:50:9b:06:d3:ee:34:bc:99:5e:99:15:
         4c:71:12:e2:82:7a:e7:eb:b2:f9:95:3d:1b:6f:b4:72:00:aa:
         07:a2:01:f9:25:60:8d:8d:9a:3c:83:0a:eb:aa:6a:9f:bc:1c:
         c0:32:f3:67:84:2a:02:28:c2:70:0a:0f:19:dc:e8:2f:d0:f5:
         95:a4:42:ab:2e:dc:11:13:5c:78:e0:20:82:2f:43:08:49:ef:
         ea:52:08:33:df:eb:b8:7c:ce:73:35:27:3e:94:e9:53:b4:2b:
         29:f1:40:a8:5b:18:b0:f0:e8:42:92:90:1e:4f:54:20:dc:2a:
         db:97:37:6d:be:9a:d8:06:e7:4b:cf:80:c7:b7:47:bd:6a:b7:
         95:75:bc:9e:02:10:61:4e:31:f8:f5:a5:44:2f:43:1c:cd:61:
         8a:d0:13:e2:9f:29:34:a4:c7:e6:5f:12:c7:d9:c8:b8:c5:e1:
         4c:52:e8:b8:32:bf:9e:1e:71:46:c3:f4:95:51:1d:d2:f0:95:
         91:da:dc:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 02:53:02 2024 by rpki-client on console-fra.rpki-client.org