Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5213/5543BCC405E511EFAB461C09C4F9AE02/E30E4FF605E511EF868E0F6DC4F9AE02.roa
File:                     E30E4FF605E511EF868E0F6DC4F9AE02.roa (raw, json)
Hash identifier:          182eUUJuaALloc84A+J3D6Vh35fJGaKCB5vaP7hNlQ8=
Subject key identifier:   C4:C6:C6:6E:18:35:AA:AE:4F:5E:EC:05:E1:16:3E:EF:72:39:84:89
Certificate issuer:       /CN=A91A5213/serialNumber=BA5FB8591BFC0C450A4E44D6FC3E3BC7BE865416
Certificate serial:       04
Authority key identifier: BA:5F:B8:59:1B:FC:0C:45:0A:4E:44:D6:FC:3E:3B:C7:BE:86:54:16
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ul-4WRv8DEUKTkTW_D47x76GVBY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A5213/5543BCC405E511EFAB461C09C4F9AE02/E30E4FF605E511EF868E0F6DC4F9AE02.roa
Signing time:             Mon 29 Apr 2024 05:07:07 +0000
ROA not before:           Mon 29 Apr 2024 05:07:07 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     152650
IP address blocks:        202.6.86.0/24 maxlen: 24
                          2001:df3:8ec0::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A5213/5543BCC405E511EFAB461C09C4F9AE02/ul-4WRv8DEUKTkTW_D47x76GVBY.crl
                          rsync://rpki.apnic.net/member_repository/A91A5213/5543BCC405E511EFAB461C09C4F9AE02/ul-4WRv8DEUKTkTW_D47x76GVBY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ul-4WRv8DEUKTkTW_D47x76GVBY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 24 Sep 2024 04:46:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A5213/serialNumber=BA5FB8591BFC0C450A4E44D6FC3E3BC7BE865416
        Validity
            Not Before: Apr 29 05:07:07 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=662f2afb-3e05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:97:fe:bd:90:69:27:39:a9:f8:25:40:33:06:
                    76:ea:89:c3:0a:3b:c5:73:56:56:d8:9c:fd:db:c2:
                    a4:18:0d:2d:84:38:6b:d5:2b:38:5f:eb:7e:cb:76:
                    4f:ec:06:af:51:33:25:18:43:6b:25:59:49:24:4a:
                    93:dc:ef:c2:eb:01:16:97:e5:24:c8:99:05:e3:21:
                    fe:8d:2c:db:9a:77:a9:59:13:9f:dd:ee:c2:b3:3a:
                    e3:86:c3:93:3a:1b:94:37:76:2c:91:03:2f:22:ee:
                    b8:02:31:6c:4c:0a:7b:b6:12:47:9c:d5:75:0a:d9:
                    3f:bb:60:a6:1f:a6:eb:7c:42:58:52:b7:a4:60:6e:
                    60:72:61:dd:95:1f:e1:d9:27:22:2e:78:a2:fe:5a:
                    ab:e2:ea:3d:ef:33:27:70:93:f0:5e:b9:60:14:3c:
                    1e:6d:17:27:34:57:e8:c5:90:55:07:fd:71:70:1c:
                    10:08:f6:50:8b:40:19:3e:bc:0e:9b:ce:c5:29:f9:
                    8f:78:9e:c2:72:80:f8:18:6d:fc:1d:50:0a:65:b2:
                    d6:52:96:ce:31:e8:3a:86:e7:50:05:28:5e:2c:87:
                    a0:cb:ca:d6:3b:6f:98:db:5d:d9:6a:26:53:00:6e:
                    44:75:57:01:cf:81:f5:5c:8d:84:3b:eb:5d:3a:32:
                    ec:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:C6:C6:6E:18:35:AA:AE:4F:5E:EC:05:E1:16:3E:EF:72:39:84:89
            X509v3 Authority Key Identifier:
                keyid:BA:5F:B8:59:1B:FC:0C:45:0A:4E:44:D6:FC:3E:3B:C7:BE:86:54:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A5213/5543BCC405E511EFAB461C09C4F9AE02/ul-4WRv8DEUKTkTW_D47x76GVBY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ul-4WRv8DEUKTkTW_D47x76GVBY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5213/5543BCC405E511EFAB461C09C4F9AE02/E30E4FF605E511EF868E0F6DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.6.86.0/24
                IPv6:
                  2001:df3:8ec0::/48

    Signature Algorithm: sha256WithRSAEncryption
         05:71:66:1e:cd:66:d0:1b:43:a2:fa:94:29:e4:73:91:e1:57:
         08:89:67:f6:82:4b:09:f1:cf:21:d6:67:ba:3c:ec:3b:93:57:
         ed:b8:64:ed:29:fe:c5:d0:31:83:a0:ec:81:2b:85:9d:06:f2:
         0f:f3:f2:59:eb:9e:a4:99:fa:35:d6:66:a8:6a:ec:44:37:3f:
         a5:d8:38:21:d0:a4:2f:8a:40:00:80:0b:56:01:3d:32:18:b4:
         dd:10:29:73:8d:78:71:f3:c0:ee:d2:63:93:ad:92:5e:5f:28:
         36:9b:8b:f0:49:da:ec:41:32:76:b0:05:91:36:75:10:01:92:
         0e:b1:0f:b5:8a:3a:a8:a7:05:cb:33:53:0d:cc:f3:1b:4c:e6:
         19:bc:83:e5:3d:19:9b:ea:c6:91:75:6c:28:00:ca:1a:1b:d6:
         d4:48:c7:90:b7:45:83:db:74:e7:c2:93:a4:d2:ea:d4:ef:ae:
         17:d3:40:7f:02:d3:fc:4c:01:b7:9a:58:45:10:c2:85:a8:ef:
         42:ed:c3:7d:45:68:42:0a:c4:f6:db:13:e7:58:ea:35:af:46:
         f6:0e:71:f6:6e:1c:15:e2:3c:ec:ab:3a:36:5b:6d:60:b9:5d:
         fd:5a:6c:11:bd:d7:2b:4d:c4:02:d1:3d:fb:75:08:59:d5:f1:
         f5:c6:1e:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 17 08:12:27 2024 by rpki-client on console-ams.rpki-client.org