Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91596C4/F3DDEEDE833011EC8FF39383C4F9AE02/0AE155E6833411ECBB74C786C4F9AE02.roa
File:                     0AE155E6833411ECBB74C786C4F9AE02.roa (raw, json)
Hash identifier:          Y56VUgsxsRUUl3ZUr20aDI+EEZVvxekc8Mqc9Z62i4k=
Subject key identifier:   72:8E:E1:F0:42:66:7D:98:2A:5D:45:B4:01:77:ED:FE:95:35:76:C4
Certificate issuer:       /CN=A91596C4/serialNumber=3EE26FBA4BE359DEAE500792EBFF78D00ACB760C
Certificate serial:       02CE
Authority key identifier: 3E:E2:6F:BA:4B:E3:59:DE:AE:50:07:92:EB:FF:78:D0:0A:CB:76:0C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PuJvukvjWd6uUAeS6_940ArLdgw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91596C4/F3DDEEDE833011EC8FF39383C4F9AE02/0AE155E6833411ECBB74C786C4F9AE02.roa
Signing time:             Mon 27 Nov 2023 02:34:29 +0000
ROA not before:           Mon 27 Nov 2023 02:34:29 +0000
ROA not after:            Sun 01 Dec 2024 00:00:00 +0000
asID:                     198949
IP address blocks:        149.234.189.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91596C4/F3DDEEDE833011EC8FF39383C4F9AE02/PuJvukvjWd6uUAeS6_940ArLdgw.crl
                          rsync://rpki.apnic.net/member_repository/A91596C4/F3DDEEDE833011EC8FF39383C4F9AE02/PuJvukvjWd6uUAeS6_940ArLdgw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PuJvukvjWd6uUAeS6_940ArLdgw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 03 Apr 2024 02:50:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 718 (0x2ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91596C4/serialNumber=3EE26FBA4BE359DEAE500792EBFF78D00ACB760C
        Validity
            Not Before: Nov 27 02:34:29 2023 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=65640035-7ac9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:24:ce:53:95:13:66:03:ed:fe:0a:36:35:3e:
                    22:3a:d1:95:a1:cd:94:9e:81:32:1f:0f:73:b5:78:
                    c4:fe:af:a7:eb:c1:92:ae:06:7a:a4:20:2e:00:30:
                    f5:38:84:ff:06:c8:9e:6c:33:99:f8:a2:3e:22:2f:
                    7f:4e:2d:9e:c0:15:4b:de:9e:4d:65:48:24:18:47:
                    ff:ae:06:38:19:b8:9e:f2:a6:c3:ed:a6:5d:0f:8f:
                    d9:cc:20:34:3f:ed:88:69:10:0f:03:b8:94:ea:4a:
                    54:db:12:5a:38:6d:bf:fc:6f:ed:93:9f:fc:03:07:
                    37:df:ce:f0:23:6a:8a:63:96:4c:30:47:7a:27:bd:
                    60:11:0b:ce:db:b4:ca:61:cf:77:51:68:ea:4b:f9:
                    c6:93:e2:0a:22:25:e9:28:f2:d1:63:a5:cd:66:e5:
                    69:e3:3f:9f:0a:90:8a:8f:76:50:44:65:d6:53:7b:
                    85:e1:d1:75:f0:d1:56:fd:5f:58:90:a6:ce:36:75:
                    c2:62:91:6a:a4:48:41:02:a5:70:73:5e:0b:04:ac:
                    c6:8d:ca:d2:7d:e1:d7:b2:40:61:cf:82:44:2f:2b:
                    13:8f:31:e5:bd:af:57:25:86:88:43:c6:9f:7d:71:
                    12:23:97:5e:50:48:a9:2d:6e:59:01:54:f8:6c:a7:
                    86:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:8E:E1:F0:42:66:7D:98:2A:5D:45:B4:01:77:ED:FE:95:35:76:C4
            X509v3 Authority Key Identifier:
                keyid:3E:E2:6F:BA:4B:E3:59:DE:AE:50:07:92:EB:FF:78:D0:0A:CB:76:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91596C4/F3DDEEDE833011EC8FF39383C4F9AE02/PuJvukvjWd6uUAeS6_940ArLdgw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PuJvukvjWd6uUAeS6_940ArLdgw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91596C4/F3DDEEDE833011EC8FF39383C4F9AE02/0AE155E6833411ECBB74C786C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.234.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:22:d7:12:b3:92:17:d8:4a:72:cb:80:c6:59:87:9c:c2:c9:
         7a:41:2b:84:f3:41:fa:97:b3:d9:08:2a:3d:38:55:6b:b9:ad:
         0f:8e:84:d3:3a:b0:31:8d:e2:ae:76:5d:aa:72:01:26:fd:56:
         3c:5c:4f:78:f9:63:63:5c:89:a0:52:f0:8d:54:ef:52:dc:ea:
         89:bb:8e:59:59:39:26:b4:c4:b7:91:d4:ca:5c:1d:4b:ff:10:
         76:6f:cf:8a:de:cc:a2:20:0f:52:75:e0:e2:59:43:49:c3:b1:
         bd:7e:cc:20:b9:17:c1:df:ec:48:91:d7:64:e9:c4:68:7f:56:
         4e:8e:8b:07:e2:7d:34:b5:99:c9:75:15:32:84:29:05:7c:00:
         9b:76:3a:7c:40:27:d1:18:12:64:a4:fc:02:00:47:8d:dc:bd:
         ca:2b:eb:42:d7:60:29:f6:ac:cc:ff:5b:1c:d5:13:86:64:2e:
         76:de:97:11:50:3d:13:8b:18:3a:07:a4:09:86:46:1f:45:c9:
         1e:19:aa:51:62:23:6d:5a:9a:2c:3f:61:4d:66:e1:fe:35:28:
         0c:27:24:69:2c:28:b0:39:3a:49:bb:01:05:60:67:9c:d9:94:
         7e:77:eb:8a:2e:34:72:b3:e1:4c:26:a5:84:fc:8b:f6:c3:4e:
         d6:55:90:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 27 04:41:28 2024 by rpki-client on console-ams.rpki-client.org