Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/F4ABC602F57411E9B18D9325C4F9AE02.roa
File:                     F4ABC602F57411E9B18D9325C4F9AE02.roa (raw, json)
Hash identifier:          AfttFmJ1kA3jiZgPp2BzL4vpB5maknzliQYjo2LjGho=
Subject key identifier:   96:A5:B8:C7:2F:99:59:C7:11:30:E4:00:7F:23:E7:78:71:B6:9E:5A
Certificate issuer:       /CN=A91AABB1/serialNumber=EB7FE9892DF000255FCF3AC0B2B4D12AEA6FF806
Certificate serial:       3401
Authority key identifier: EB:7F:E9:89:2D:F0:00:25:5F:CF:3A:C0:B2:B4:D1:2A:EA:6F:F8:06
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/63_piS3wACVfzzrAsrTRKupv-AY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/F4ABC602F57411E9B18D9325C4F9AE02.roa
Signing time:             Thu 08 Jun 2023 15:20:54 +0000
ROA not before:           Thu 08 Jun 2023 15:20:54 +0000
ROA not after:            Tue 30 Jul 2024 00:00:00 +0000
asID:                     45532
IP address blocks:        114.130.42.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.crl
                          rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/63_piS3wACVfzzrAsrTRKupv-AY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 May 2024 15:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13313 (0x3401)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AABB1/serialNumber=EB7FE9892DF000255FCF3AC0B2B4D12AEA6FF806
        Validity
            Not Before: Jun  8 15:20:54 2023 GMT
            Not After : Jul 30 00:00:00 2024 GMT
        Subject: CN=6481f1d6-6940
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:7a:32:50:ed:26:55:50:f4:bc:aa:67:e2:6d:
                    f5:87:ba:0b:16:8c:47:c9:97:7b:b0:24:a6:68:da:
                    b3:b7:28:7d:a7:00:7a:66:fb:61:5e:da:80:b2:71:
                    67:75:49:f9:68:2b:88:08:00:b0:66:d0:c0:e8:3e:
                    5c:90:40:8b:93:03:fb:7f:f7:0e:70:99:b0:23:27:
                    08:ac:91:82:f2:b5:8b:c7:81:ad:a3:29:d4:87:00:
                    94:65:80:20:f9:e1:f3:64:a5:13:fe:bf:4c:dd:84:
                    2a:49:25:c7:c5:34:46:af:be:30:a1:9d:73:60:b7:
                    c9:cc:85:7f:a9:32:d4:b9:22:57:d5:ab:9a:10:7d:
                    77:0b:e0:9d:96:e5:0e:56:3c:4c:d0:7d:4f:c0:cc:
                    aa:21:b4:07:89:f6:65:36:ed:0b:9c:9d:87:3e:5b:
                    22:00:81:a0:2a:e8:51:65:2c:07:47:2d:ba:fa:37:
                    f1:e4:88:fa:0d:81:a3:50:3f:e5:0e:be:6c:d7:aa:
                    5a:cc:e6:09:7c:12:b7:a3:2f:d9:dc:67:0c:12:6d:
                    ac:a6:84:1f:6e:40:85:c9:f0:e1:e1:b1:aa:87:31:
                    f4:5d:00:57:a5:72:c1:b8:73:cf:f8:99:04:f4:25:
                    aa:5b:7f:78:41:0a:8f:6c:cd:7d:ee:a0:47:47:0a:
                    74:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:A5:B8:C7:2F:99:59:C7:11:30:E4:00:7F:23:E7:78:71:B6:9E:5A
            X509v3 Authority Key Identifier:
                keyid:EB:7F:E9:89:2D:F0:00:25:5F:CF:3A:C0:B2:B4:D1:2A:EA:6F:F8:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/63_piS3wACVfzzrAsrTRKupv-AY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/F4ABC602F57411E9B18D9325C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.130.42.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3c:89:bf:e0:d5:d1:4e:95:7c:65:e5:f0:2d:a1:8b:71:3b:84:
         de:4a:59:2e:85:93:96:f8:17:9e:bd:4c:8f:6e:03:ce:c3:b4:
         79:b4:a8:f7:12:3b:13:f7:88:65:8f:da:46:b0:4d:33:4f:cb:
         3f:b2:6a:76:7f:62:6d:43:17:13:84:0e:67:cc:61:f8:bc:bb:
         16:59:6f:0d:ce:d8:a4:6a:3c:ef:b0:1e:41:c0:6b:d8:4e:2a:
         61:9c:44:96:6f:87:12:fe:d4:0d:8f:da:5c:14:fb:f6:19:30:
         3a:9a:18:af:3b:77:61:e9:a8:f9:20:ed:8d:29:bb:bb:a4:a1:
         ab:d9:14:49:3e:56:a2:a7:e7:40:36:9c:b0:7e:5e:e8:82:e7:
         49:5e:7c:3d:64:af:36:a5:92:f7:5b:93:38:22:77:14:0c:37:
         e6:c1:97:db:07:21:f5:9b:36:16:0d:ca:2e:98:7a:96:5a:c4:
         95:36:ed:eb:67:a6:92:e3:98:51:1b:bb:86:c9:29:13:14:98:
         4b:cd:32:ad:98:01:99:0f:14:6d:98:c3:08:5d:8c:47:a9:99:
         47:c0:45:f7:02:6b:ab:9a:9e:1d:86:f2:52:e1:f7:69:b7:07:
         81:69:49:cb:ff:5e:5b:a6:bc:23:e7:ff:4c:1c:ec:c5:30:13:
         20:8e:a8:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 17:22:32 2024 by rpki-client on console-fra.rpki-client.org