Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/90D0D0C4932111EE9C797C3DC4F9AE02.roa
File:                     90D0D0C4932111EE9C797C3DC4F9AE02.roa (raw, json)
Hash identifier:          HGsw47Eyy33IkITnV4BpmwQ6KAd6fu39iALp83GshW0=
Subject key identifier:   7E:D0:BE:A3:F6:29:4C:95:D2:5C:F6:98:A5:D3:15:69:1A:58:BE:5F
Certificate issuer:       /CN=A9178AF2/serialNumber=1005CCD5E18230FBA9ADD3D27F85DA38F13E4172
Certificate serial:       0231
Authority key identifier: 10:05:CC:D5:E1:82:30:FB:A9:AD:D3:D2:7F:85:DA:38:F1:3E:41:72
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/90D0D0C4932111EE9C797C3DC4F9AE02.roa
Signing time:             Tue 05 Dec 2023 03:51:27 +0000
ROA not before:           Tue 05 Dec 2023 03:51:27 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     14618
IP address blocks:        45.113.83.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.crl
                          rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 08 May 2024 03:45:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 561 (0x231)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9178AF2/serialNumber=1005CCD5E18230FBA9ADD3D27F85DA38F13E4172
        Validity
            Not Before: Dec  5 03:51:27 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=656e9e3f-6407
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:bd:27:82:42:2f:63:5c:cc:ed:cf:7d:14:52:
                    01:39:aa:94:3d:8f:54:b1:37:c2:2c:13:44:3e:df:
                    b9:d3:2c:dc:6e:c1:4c:18:a4:7f:99:ca:05:0d:cb:
                    e7:2e:1b:21:e7:20:e9:9d:85:00:48:15:61:fd:e0:
                    fc:11:6c:c6:dd:11:e0:74:a5:9c:53:23:72:4c:fe:
                    64:64:05:6b:76:b0:5f:bb:a9:74:60:6d:41:22:5c:
                    17:ef:56:ee:86:9d:06:f5:ce:26:d8:de:c1:a8:fe:
                    5c:48:94:b5:fc:41:2d:45:ab:03:5b:ba:4f:b0:27:
                    22:12:cd:e2:5a:d2:78:d4:3e:d7:49:81:36:72:66:
                    0e:b3:05:bb:47:b7:f5:1b:ea:f3:65:65:fa:f7:38:
                    d9:de:3b:9a:f3:c6:dc:e4:c7:88:58:99:1c:54:3a:
                    2b:78:a3:77:21:fe:74:7c:a4:28:a2:ef:fd:6d:82:
                    81:6a:4f:6e:1f:b1:10:01:34:23:b8:29:a4:2b:20:
                    10:27:96:46:69:93:3b:91:84:f6:d2:61:16:1c:0f:
                    88:2c:e1:24:95:df:f2:1a:30:59:a0:30:2d:ef:56:
                    04:b7:72:46:3e:c6:b9:a9:5d:69:ad:e6:73:6d:60:
                    25:10:df:df:16:83:0f:df:76:7a:b1:7b:83:4f:bc:
                    28:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:D0:BE:A3:F6:29:4C:95:D2:5C:F6:98:A5:D3:15:69:1A:58:BE:5F
            X509v3 Authority Key Identifier:
                keyid:10:05:CC:D5:E1:82:30:FB:A9:AD:D3:D2:7F:85:DA:38:F1:3E:41:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/90D0D0C4932111EE9C797C3DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.113.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:be:9b:df:4e:ad:f7:d8:e8:2a:5b:c8:c7:1b:80:ef:92:52:
         2f:5e:6f:e9:fc:b7:5a:0a:20:18:ec:fb:da:cd:a2:af:f5:a9:
         2b:64:43:69:8f:e2:dc:6f:f2:22:d1:c5:de:a4:e1:98:a1:e1:
         e8:96:24:f4:c0:97:f7:8f:5c:22:62:2a:93:ec:a8:b5:9f:b7:
         1f:67:83:4e:a8:e9:6a:31:98:83:d5:87:f3:f1:a9:e0:3c:1d:
         ad:94:80:01:48:19:38:8f:2b:51:47:e8:96:f6:15:4b:ec:e0:
         66:46:e7:da:5a:de:f4:92:2e:bd:65:76:3f:3e:b1:0b:5f:4a:
         09:93:4a:01:99:b3:19:4c:32:80:6d:fd:2c:99:f9:60:b2:36:
         ff:e9:40:50:c7:3d:73:6c:b0:e0:2a:2b:33:81:ca:19:a5:34:
         26:ec:bf:78:14:35:3e:d3:22:ae:28:a1:96:5e:86:d8:e4:24:
         8f:d7:50:cd:4d:6e:2c:a2:df:cf:c5:d8:4d:80:88:16:a2:67:
         5a:ab:38:4a:46:52:ec:ac:27:67:0a:74:6d:b3:7d:66:84:1a:
         e6:7a:77:73:2c:7e:2a:7c:7b:53:f2:29:36:5e:4f:a8:ee:6c:
         bc:fd:2e:21:8c:a2:c9:ed:5a:3e:35:1d:d4:09:a1:61:0b:8d:
         b1:97:87:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 05:59:06 2024 by rpki-client on console-fra.rpki-client.org