Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB055/4ABBC01CF55511EEACF1234BC4F9AE02/83CA613CF55611EE8CE6274DC4F9AE02.roa
File:                     83CA613CF55611EE8CE6274DC4F9AE02.roa (raw, json)
Hash identifier:          ufXYT6M8+NAM8MxgjpkUV5nxmsL/JDOXu7NiWGw3BFA=
Subject key identifier:   25:A7:25:02:80:E4:3B:39:18:F5:21:0B:80:0A:C2:CB:E2:99:28:1E
Certificate issuer:       /CN=A91AB055/serialNumber=999B2F6539C23EAEB469E67539FB2DC933D98040
Certificate serial:       02
Authority key identifier: 99:9B:2F:65:39:C2:3E:AE:B4:69:E6:75:39:FB:2D:C9:33:D9:80:40
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mZsvZTnCPq60aeZ1OfstyTPZgEA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AB055/4ABBC01CF55511EEACF1234BC4F9AE02/83CA613CF55611EE8CE6274DC4F9AE02.roa
Signing time:             Mon 08 Apr 2024 03:17:22 +0000
ROA not before:           Mon 08 Apr 2024 03:17:22 +0000
ROA not after:            Fri 31 Jan 2025 00:00:00 +0000
asID:                     13896
IP address blocks:        45.252.184.0/23 maxlen: 23
                          45.252.186.0/23 maxlen: 23
                          103.197.96.0/23 maxlen: 23
                          103.197.98.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AB055/4ABBC01CF55511EEACF1234BC4F9AE02/mZsvZTnCPq60aeZ1OfstyTPZgEA.crl
                          rsync://rpki.apnic.net/member_repository/A91AB055/4ABBC01CF55511EEACF1234BC4F9AE02/mZsvZTnCPq60aeZ1OfstyTPZgEA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mZsvZTnCPq60aeZ1OfstyTPZgEA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 07:27:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AB055/serialNumber=999B2F6539C23EAEB469E67539FB2DC933D98040
        Validity
            Not Before: Apr  8 03:17:22 2024 GMT
            Not After : Jan 31 00:00:00 2025 GMT
        Subject: CN=661361c2-42d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:d2:ea:8e:9a:a7:64:ac:89:38:75:b3:70:07:
                    c6:54:32:f2:7b:a8:a3:68:45:37:68:71:ad:db:11:
                    9a:d3:5d:17:dc:d8:24:d0:98:a7:c6:be:0d:b8:99:
                    fb:b7:a7:8a:62:f5:bf:54:c8:a5:ff:34:09:c3:85:
                    43:37:9e:5a:3d:04:4b:8d:cf:1f:05:1c:b5:a9:48:
                    aa:40:fd:f4:78:c2:4a:9f:eb:44:94:12:ec:9c:5c:
                    32:58:19:d6:51:30:48:d6:87:98:70:c9:96:c2:67:
                    f4:58:b2:a8:82:b6:2e:86:7a:23:5c:3f:37:3d:0b:
                    17:1a:fe:9d:d4:25:7d:ee:56:db:a4:cb:b8:6f:62:
                    d1:e0:f4:ad:f1:44:a7:1c:cc:7c:ec:f1:bc:4e:e8:
                    39:37:6b:91:46:c5:56:c7:02:07:61:b0:a3:d7:d2:
                    1e:61:10:dc:bf:89:82:b0:e0:b0:15:1c:a6:4c:4c:
                    79:67:37:a6:f5:f5:c5:94:90:c9:92:af:31:5c:25:
                    3e:03:5e:0b:33:9e:f6:0a:38:69:77:1b:30:df:50:
                    c8:97:e0:16:e7:6f:dd:ae:f8:a4:36:16:ec:56:69:
                    f7:62:4a:42:02:1d:05:ce:0c:77:2a:13:9d:04:51:
                    42:b2:06:14:70:d3:ec:22:a2:07:c0:cf:d1:3c:88:
                    52:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:A7:25:02:80:E4:3B:39:18:F5:21:0B:80:0A:C2:CB:E2:99:28:1E
            X509v3 Authority Key Identifier:
                keyid:99:9B:2F:65:39:C2:3E:AE:B4:69:E6:75:39:FB:2D:C9:33:D9:80:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AB055/4ABBC01CF55511EEACF1234BC4F9AE02/mZsvZTnCPq60aeZ1OfstyTPZgEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mZsvZTnCPq60aeZ1OfstyTPZgEA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB055/4ABBC01CF55511EEACF1234BC4F9AE02/83CA613CF55611EE8CE6274DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.252.184.0/22
                  103.197.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         53:79:c9:59:78:ea:2b:0f:ff:85:78:c0:8f:79:b6:83:b8:81:
         b1:1a:73:32:92:2c:a5:35:32:e2:55:ef:0d:a7:47:d1:d3:de:
         45:45:9b:82:b2:81:04:54:e6:41:95:84:42:07:2f:49:47:55:
         ae:dc:74:81:88:5c:23:21:11:68:1f:91:2d:97:56:43:ed:2c:
         5b:d1:95:ae:95:c3:e8:49:64:65:d6:30:35:dc:5b:52:20:6b:
         b5:9c:08:e2:21:55:18:7b:6d:e1:18:82:9c:ed:27:7b:42:43:
         cc:ad:d2:5a:26:f0:fa:06:fa:6c:d6:7d:e3:21:b3:c6:27:82:
         b5:44:73:31:1f:fd:d7:21:cd:33:fe:44:89:63:6c:b1:4f:a4:
         10:62:62:42:07:0d:4e:70:26:bd:90:88:08:3b:c0:c4:94:c5:
         a4:63:d9:9c:ff:4e:88:ae:81:e4:cc:98:73:c4:9e:0b:66:5d:
         02:f4:b1:2e:01:2b:2e:f0:1e:82:27:45:5d:c7:b7:f9:c8:b7:
         d4:79:6d:bd:9c:03:f6:eb:84:54:ff:68:21:6f:4d:a7:c4:b3:
         65:3c:45:bf:01:e4:77:86:48:ae:37:26:5a:f6:65:d8:e7:d4:
         61:dd:3b:5b:d9:14:50:0a:73:cc:03:9a:97:1f:34:86:04:59:
         b1:dc:0b:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 10:42:50 2024 by rpki-client on console-fra.rpki-client.org