Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/4EAF8364839211EE9CAD6C0DC4F9AE02.roa
File:                     4EAF8364839211EE9CAD6C0DC4F9AE02.roa (raw, json)
Hash identifier:          qOWdJQHap3XS13lbHWnu/c6uUpFEORG0E5aOW7orV7U=
Subject key identifier:   56:C7:7A:0A:DE:85:4D:37:19:B5:AC:7F:49:8A:27:74:4E:B2:27:6B
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       466C
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/4EAF8364839211EE9CAD6C0DC4F9AE02.roa
Signing time:             Thu 05 Sep 2024 03:36:19 +0000
ROA not before:           Thu 05 Sep 2024 03:36:19 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     55317
IP address blocks:        202.74.58.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 11:15:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18028 (0x466c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Sep  5 03:36:19 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=66d92733-ce99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:2c:1b:bd:02:60:b8:92:91:29:10:1c:52:4e:
                    5b:f5:e3:ca:82:13:5d:16:2c:9f:05:52:b3:3c:62:
                    ee:ea:d1:c7:4c:51:f8:1d:46:fc:ab:86:d1:42:0b:
                    ae:33:50:88:ea:33:4c:68:4d:33:be:4c:c6:0e:41:
                    19:92:dc:ce:03:db:0e:37:e0:dd:bf:f0:66:d0:d3:
                    07:4a:41:b1:76:e7:fc:fb:67:57:da:8a:61:4d:31:
                    fc:19:0a:55:04:83:d5:50:6f:cd:1b:19:6b:fb:b8:
                    39:e6:73:f1:cd:e2:57:2b:fc:be:1e:94:40:da:53:
                    c0:28:b9:0e:1d:c1:db:32:93:ff:b6:fa:a2:08:59:
                    f5:12:c2:dd:a9:f2:bf:16:85:6a:cd:99:08:f1:23:
                    16:09:60:4a:22:d5:f5:ab:b6:b0:41:dc:9f:c3:bf:
                    ed:17:70:3d:03:ba:55:77:87:31:76:cd:8a:91:ad:
                    b9:0d:f2:87:54:5f:dc:f7:e7:d6:f0:36:c6:f4:01:
                    7f:04:71:3e:c8:45:59:3c:3c:e4:68:73:29:41:78:
                    1c:bc:20:ac:6f:b5:af:69:f0:54:93:13:1c:e2:36:
                    1f:05:c5:c7:13:b5:ca:24:f5:6e:30:60:f6:2b:82:
                    fb:4f:cd:32:17:65:4e:86:64:7d:1c:8b:90:27:d1:
                    46:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:C7:7A:0A:DE:85:4D:37:19:B5:AC:7F:49:8A:27:74:4E:B2:27:6B
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/4EAF8364839211EE9CAD6C0DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.74.58.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4f:44:bc:8c:26:a2:10:a1:3d:03:e1:36:95:20:5e:ca:0a:82:
         ca:5c:74:ab:c4:80:09:dc:d7:ec:a8:bd:ac:11:71:4e:73:31:
         9d:31:6f:bb:44:2b:00:c5:35:67:af:49:82:35:a6:fb:d6:11:
         73:0c:19:56:0a:7a:b3:60:e7:85:e5:a3:63:0a:e9:4b:f0:a5:
         f1:90:5d:fe:29:f4:41:85:51:e7:38:1d:ae:7c:11:14:f0:ab:
         a0:57:c5:4d:76:fd:53:46:52:74:26:c5:9e:b1:42:83:3c:27:
         60:51:f8:3d:d7:55:65:1a:bc:68:58:4e:b7:e0:7e:d1:10:13:
         40:5b:7c:ae:b0:83:33:fe:4e:2a:ac:8a:46:f7:85:f1:d3:c1:
         57:ea:a6:8b:ec:af:5d:a5:33:04:d6:83:35:9f:05:80:2d:bb:
         23:83:5f:f4:2a:43:79:e0:28:31:cc:8d:7b:6f:a7:b7:07:3a:
         ab:40:4e:15:78:f7:1b:f9:1a:54:fb:d1:6c:84:11:19:ca:b2:
         61:7b:ed:51:89:6c:ed:68:f1:cf:fc:59:41:36:4c:7f:1c:c0:
         11:d2:cc:c5:bb:e1:f3:76:11:4d:0b:9d:0d:23:3a:46:91:91:
         ae:06:59:6f:9d:a5:3a:24:be:06:d2:b6:98:3b:3b:9a:39:ad:
         5e:0e:40:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 13:17:32 2024 by rpki-client on console-ams.rpki-client.org