Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/E1B073B689F011EABAEDCE2FC4F9AE02.roa
File:                     E1B073B689F011EABAEDCE2FC4F9AE02.roa (raw, json)
Hash identifier:          Spe+ZLCWYOdA8CBDsQkTSRMy9zIya/08gNcBNSJsUdc=
Subject key identifier:   5E:5C:CE:C3:CD:DE:73:4A:06:68:BE:7B:E3:C0:F9:A9:90:03:BD:6F
Certificate issuer:       /CN=A9165568/serialNumber=67097E492F73D6DBD31FA016A2D5B5B86A9B3FD8
Certificate serial:       1B8B
Authority key identifier: 67:09:7E:49:2F:73:D6:DB:D3:1F:A0:16:A2:D5:B5:B8:6A:9B:3F:D8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/E1B073B689F011EABAEDCE2FC4F9AE02.roa
Signing time:             Fri 20 Oct 2023 14:40:38 +0000
ROA not before:           Fri 20 Oct 2023 14:40:38 +0000
ROA not after:            Fri 31 Jan 2025 00:00:00 +0000
asID:                     45779
IP address blocks:        202.61.45.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.crl
                          rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 13:40:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7051 (0x1b8b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9165568/serialNumber=67097E492F73D6DBD31FA016A2D5B5B86A9B3FD8
        Validity
            Not Before: Oct 20 14:40:38 2023 GMT
            Not After : Jan 31 00:00:00 2025 GMT
        Subject: CN=65329166-2a92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:9b:e1:0f:bb:1d:a2:0e:09:f4:c2:fb:59:d3:
                    d4:d1:ad:5f:3b:f7:37:e0:fc:c0:e4:ab:c8:04:84:
                    dc:2b:83:8b:8f:5f:2c:ac:a9:82:d7:3f:77:8f:d9:
                    8e:81:85:9c:ce:80:90:b3:21:21:56:2e:1b:d4:7e:
                    6f:f2:13:54:e2:1e:46:a8:be:c3:6e:aa:a5:bd:99:
                    9c:04:07:75:43:d1:bb:df:39:fd:39:8e:d4:6c:59:
                    02:c8:a8:53:81:49:db:3f:52:4b:fd:cc:71:26:87:
                    75:4d:f2:61:fa:92:d9:74:2d:6a:b2:de:f6:1b:1d:
                    4c:07:5a:e1:db:e1:1c:6e:a0:44:37:3b:62:08:9f:
                    58:23:5c:9f:a7:4e:5d:02:cc:6d:56:fc:7b:e9:69:
                    19:6b:3f:4f:10:37:c5:3f:31:4b:30:00:70:94:60:
                    b9:d9:e3:65:13:60:b3:22:0b:92:b7:2a:6d:02:53:
                    19:b4:33:fa:7a:b2:4e:19:50:32:38:48:3e:49:6b:
                    03:92:8f:bf:d6:ae:75:d6:58:1f:f4:a8:52:a3:b4:
                    01:12:7c:57:73:d1:38:ce:aa:3a:3a:d1:be:6e:0d:
                    44:49:dd:72:a8:75:a2:82:d1:fb:b4:9f:a5:44:5b:
                    31:b8:e4:f0:14:b3:c6:83:8e:2f:e0:be:8e:1d:8a:
                    01:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:5C:CE:C3:CD:DE:73:4A:06:68:BE:7B:E3:C0:F9:A9:90:03:BD:6F
            X509v3 Authority Key Identifier:
                keyid:67:09:7E:49:2F:73:D6:DB:D3:1F:A0:16:A2:D5:B5:B8:6A:9B:3F:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/E1B073B689F011EABAEDCE2FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.61.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:f7:56:66:ca:9a:a8:1a:4b:08:9d:65:5d:b3:fe:f2:65:f1:
         8c:9a:eb:3c:60:7a:d2:f4:2b:2b:e0:90:fb:59:0f:f3:6f:cf:
         bc:58:8e:44:ed:e0:76:f2:f3:78:c9:8a:21:6e:0b:db:38:5b:
         c0:05:54:99:e5:4f:40:82:22:72:f0:2d:65:0e:f2:9a:70:f0:
         77:7b:d5:2d:02:c9:c2:51:fc:8e:72:fa:2c:a2:3e:d7:92:e9:
         45:67:00:2e:e8:99:30:73:75:34:f1:82:f3:07:96:7e:d4:6a:
         16:5c:3d:61:90:42:cc:0a:75:cc:12:47:af:99:75:c6:04:64:
         04:64:4b:bd:1a:42:b4:7a:c7:3e:39:6a:48:14:34:29:a5:63:
         c4:a8:91:a6:da:21:d6:92:0b:fb:e4:2c:85:44:b4:8d:59:9d:
         53:4b:24:e6:8e:ec:a5:27:6f:16:be:35:89:90:1c:ba:8f:79:
         e0:81:02:fe:b8:eb:42:0a:25:00:4f:8b:92:bc:56:05:bc:81:
         20:b1:20:fd:41:08:27:7e:a7:7b:c7:fa:06:ff:0b:bf:3c:5a:
         e0:ff:61:34:c5:5b:e4:81:b9:85:6e:e7:5d:52:6b:54:2c:39:
         eb:af:cf:b0:f3:b3:ba:92:76:52:30:25:95:50:94:69:c8:a6:
         3c:f6:59:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 28 15:19:43 2024 by rpki-client on console-ams.rpki-client.org