Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91534B8/9F03BB60094411ED8DD10971C4F9AE02/56C4B5083DF511ED98215F18C4F9AE02.roa
File:                     56C4B5083DF511ED98215F18C4F9AE02.roa (raw, json)
Hash identifier:          zaeCulpfpA7jnDr9/Bh6hQc/vz1A5Q/iknk/GshIluo=
Subject key identifier:   5D:CE:DC:CA:57:1E:90:0C:12:0D:4C:E7:12:10:19:CF:2E:54:7A:44
Certificate issuer:       /CN=A91534B8/serialNumber=DFA860450A6FCEB1C6E7B8D4FF54B1541A1B69B3
Certificate serial:       0161
Authority key identifier: DF:A8:60:45:0A:6F:CE:B1:C6:E7:B8:D4:FF:54:B1:54:1A:1B:69:B3
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/36hgRQpvzrHG57jU_1SxVBobabM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91534B8/9F03BB60094411ED8DD10971C4F9AE02/56C4B5083DF511ED98215F18C4F9AE02.roa
Signing time:             Thu 05 Oct 2023 03:23:45 +0000
ROA not before:           Thu 05 Oct 2023 03:23:45 +0000
ROA not after:            Sun 01 Dec 2024 00:00:00 +0000
asID:                     9443
IP address blocks:        146.144.8.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91534B8/9F03BB60094411ED8DD10971C4F9AE02/36hgRQpvzrHG57jU_1SxVBobabM.crl
                          rsync://rpki.apnic.net/member_repository/A91534B8/9F03BB60094411ED8DD10971C4F9AE02/36hgRQpvzrHG57jU_1SxVBobabM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/36hgRQpvzrHG57jU_1SxVBobabM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 May 2024 02:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 353 (0x161)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91534B8/serialNumber=DFA860450A6FCEB1C6E7B8D4FF54B1541A1B69B3
        Validity
            Not Before: Oct  5 03:23:45 2023 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=651e2c41-a89f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:26:d3:47:83:a1:5c:da:2f:a8:60:d6:38:68:
                    0a:80:93:c0:2d:f9:fd:bf:72:5d:19:5c:68:a0:87:
                    42:06:60:8e:51:58:be:a4:16:8c:2f:7b:fc:5b:da:
                    2a:0c:e5:b7:c8:88:c0:6f:21:f0:8e:be:7d:6b:dc:
                    40:ab:1a:fa:a3:73:a6:2e:4a:9c:3b:53:8f:81:11:
                    05:73:13:b8:d5:e5:01:fc:cc:f7:8a:09:31:67:7e:
                    63:2a:a6:d1:0c:12:4c:3f:8e:47:90:7a:85:24:b8:
                    f6:d5:a3:d7:61:3b:b7:29:d9:11:c0:f8:05:c1:67:
                    2d:42:a3:54:0b:0d:6c:23:97:81:ab:51:2f:e1:17:
                    31:ea:64:02:b5:57:51:00:b9:7a:83:5c:84:f0:7f:
                    49:96:c2:27:44:f8:88:da:16:b7:fd:97:ca:26:06:
                    7b:b4:17:0a:cc:43:ad:9f:a5:55:cd:da:c6:d9:52:
                    51:4b:68:da:d7:03:be:bc:3f:d9:e5:d1:c7:e9:44:
                    59:05:05:ac:03:9d:87:c7:44:76:e6:9a:d5:e4:b0:
                    4b:db:31:7d:b6:62:fb:e3:ec:86:76:30:b6:fa:bf:
                    aa:05:1f:25:5b:ce:6a:93:dc:34:df:ec:a2:5a:b8:
                    1d:63:82:18:7c:f1:d2:bf:71:f4:a2:f3:fd:f8:13:
                    b4:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:CE:DC:CA:57:1E:90:0C:12:0D:4C:E7:12:10:19:CF:2E:54:7A:44
            X509v3 Authority Key Identifier:
                keyid:DF:A8:60:45:0A:6F:CE:B1:C6:E7:B8:D4:FF:54:B1:54:1A:1B:69:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91534B8/9F03BB60094411ED8DD10971C4F9AE02/36hgRQpvzrHG57jU_1SxVBobabM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/36hgRQpvzrHG57jU_1SxVBobabM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91534B8/9F03BB60094411ED8DD10971C4F9AE02/56C4B5083DF511ED98215F18C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.144.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:b2:0c:62:d4:97:83:76:92:5c:75:c3:38:89:8e:76:43:13:
         a2:57:12:80:b0:5c:dd:cf:4c:0e:3d:68:96:32:fc:a0:b9:7a:
         4d:39:de:f0:ea:cb:70:3b:ea:ba:aa:b0:02:2c:d1:f2:17:ce:
         cc:b5:03:c7:ac:bc:cc:2c:bb:3e:0e:40:81:37:c7:39:43:97:
         48:c5:5f:09:86:de:8c:f3:7b:49:5c:b3:eb:18:9f:7f:61:fc:
         42:13:71:ba:51:4c:88:39:c4:63:e1:40:5d:21:86:6a:01:a2:
         53:b5:63:76:af:89:04:55:0d:f9:b0:60:ff:f1:f9:93:3e:66:
         8e:62:08:d7:67:5a:8e:3e:5b:d0:1a:54:86:83:fb:e4:35:8a:
         59:61:a5:cb:c5:56:f0:ee:86:73:0f:a2:93:44:c8:e4:90:92:
         c0:b8:86:8b:7d:d4:0d:ed:f8:d3:67:66:2f:ad:a8:06:e9:a1:
         02:eb:0f:f1:d4:42:a8:42:e2:47:bf:17:0d:0d:cc:5f:63:f4:
         bb:ed:3e:cf:01:00:65:15:a6:c5:88:5c:3b:ee:63:4d:5b:3d:
         ec:f7:22:c1:6d:5b:53:a1:98:b1:82:fe:19:df:b2:41:b3:12:
         65:a5:ea:40:e1:60:59:30:6b:dd:9d:ec:a9:91:e0:5f:e0:25:
         13:20:2e:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 04:56:55 2024 by rpki-client on console-fra.rpki-client.org