Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B58FF/1204AB3C3C3D11EBB9381F71C4F9AE02/A50523F43F5211EBB1B1701FC4F9AE02.roa
File:                     A50523F43F5211EBB1B1701FC4F9AE02.roa (raw, json)
Hash identifier:          NMyF+OtgcdxCSHBe6946r2tRgTZHM6xQVf7GsLi8zGo=
Subject key identifier:   CA:59:A4:87:E9:4A:81:C2:E1:FE:AF:DF:F6:BA:21:88:A2:43:54:E1
Certificate issuer:       /CN=A91B58FF/serialNumber=24443AE83EDF96AF1942DBFF0ED4F8C17DD6796F
Certificate serial:       0607
Authority key identifier: 24:44:3A:E8:3E:DF:96:AF:19:42:DB:FF:0E:D4:F8:C1:7D:D6:79:6F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JEQ66D7flq8ZQtv_DtT4wX3WeW8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B58FF/1204AB3C3C3D11EBB9381F71C4F9AE02/A50523F43F5211EBB1B1701FC4F9AE02.roa
Signing time:             Thu 02 Nov 2023 23:32:01 +0000
ROA not before:           Thu 02 Nov 2023 23:32:01 +0000
ROA not after:            Fri 31 Jan 2025 00:00:00 +0000
asID:                     7474
IP address blocks:        2402:13c0::/48 maxlen: 48
                          2402:13c0:1::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B58FF/1204AB3C3C3D11EBB9381F71C4F9AE02/JEQ66D7flq8ZQtv_DtT4wX3WeW8.crl
                          rsync://rpki.apnic.net/member_repository/A91B58FF/1204AB3C3C3D11EBB9381F71C4F9AE02/JEQ66D7flq8ZQtv_DtT4wX3WeW8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JEQ66D7flq8ZQtv_DtT4wX3WeW8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 31 May 2024 23:46:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1543 (0x607)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B58FF/serialNumber=24443AE83EDF96AF1942DBFF0ED4F8C17DD6796F
        Validity
            Not Before: Nov  2 23:32:01 2023 GMT
            Not After : Jan 31 00:00:00 2025 GMT
        Subject: CN=65443171-4a04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:df:3c:77:77:d5:7d:2d:41:1f:39:4d:4f:87:
                    09:99:f4:e6:4d:f3:39:25:86:08:ed:be:e9:26:1f:
                    54:56:ce:ea:dd:f7:92:c4:50:26:e3:4a:da:67:e9:
                    f8:36:47:8b:c7:66:cc:93:7e:e4:88:4e:fe:9b:e9:
                    c3:d2:9e:bd:c4:a9:b1:80:2b:4c:38:2b:02:da:88:
                    4a:c2:85:26:35:f9:7b:27:7f:6b:71:e0:1c:8d:8a:
                    5b:4a:2b:ba:f7:ed:63:1a:57:95:ec:fb:04:1f:83:
                    69:70:f6:cb:d5:a9:04:6c:6e:f3:07:7d:f0:42:c3:
                    f0:a6:42:69:2d:a3:82:84:ac:0d:15:80:f5:a0:e7:
                    29:30:7f:3a:fb:7a:51:e5:26:fd:c5:80:27:4f:b5:
                    c4:54:3f:de:df:d6:db:e3:fa:c1:40:49:89:7f:d9:
                    72:1d:2c:e0:19:56:a8:ff:7b:e7:8d:cb:e3:4a:d9:
                    d2:8e:65:2c:9d:cf:ae:42:8c:4b:f1:61:e8:88:d4:
                    d6:3b:8e:ea:36:3e:0f:23:71:e2:8d:51:84:e0:54:
                    f1:96:ab:96:8f:10:d9:0c:6f:57:75:df:bc:db:5b:
                    8b:1f:9d:e4:c9:27:d9:76:d1:a0:c2:36:bf:11:44:
                    4d:ea:72:3c:4e:88:38:91:ae:2b:04:3b:f4:78:86:
                    1c:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:59:A4:87:E9:4A:81:C2:E1:FE:AF:DF:F6:BA:21:88:A2:43:54:E1
            X509v3 Authority Key Identifier:
                keyid:24:44:3A:E8:3E:DF:96:AF:19:42:DB:FF:0E:D4:F8:C1:7D:D6:79:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B58FF/1204AB3C3C3D11EBB9381F71C4F9AE02/JEQ66D7flq8ZQtv_DtT4wX3WeW8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JEQ66D7flq8ZQtv_DtT4wX3WeW8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B58FF/1204AB3C3C3D11EBB9381F71C4F9AE02/A50523F43F5211EBB1B1701FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:13c0::/47

    Signature Algorithm: sha256WithRSAEncryption
         40:82:b1:89:44:60:cd:3e:02:c2:84:b6:b6:bc:a6:10:5e:61:
         c6:78:dc:0b:1b:99:43:29:43:b4:96:65:ba:a1:e1:76:9a:8b:
         09:57:cb:50:b4:89:8a:d7:e7:10:8f:08:a7:3a:6a:7b:33:34:
         3c:18:73:7f:9e:1e:79:63:1c:d2:6a:d8:8a:14:f8:04:8c:53:
         0c:c7:5c:c7:11:d7:0f:6a:fc:d4:bf:e3:11:10:b8:84:09:c0:
         26:e5:5c:94:67:dc:4c:9f:57:88:87:dd:46:e6:3c:ff:2f:e2:
         d1:13:9a:06:0d:6a:f1:05:07:71:f2:16:a2:b0:e1:7d:07:69:
         b4:32:09:d1:c6:49:76:92:97:63:0e:d8:6b:95:d6:55:db:3a:
         b4:20:8f:08:42:14:3f:87:90:17:ab:97:5c:6e:24:84:71:32:
         18:0d:e0:4c:42:e2:97:25:3e:af:2f:48:be:87:e0:3d:42:e2:
         32:91:e3:dd:49:02:76:fe:24:56:c8:d8:35:d8:1f:37:30:e7:
         93:86:dd:65:92:b9:19:c2:90:84:99:e2:98:27:24:02:ca:15:
         ea:36:70:4b:52:16:52:4d:17:43:eb:e9:9c:ff:ab:22:97:78:
         31:db:11:1b:13:07:75:64:5e:11:b3:be:9e:26:72:49:82:0d:
         01:b5:a1:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 25 01:00:17 2024 by rpki-client on console-ams.rpki-client.org