Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BADCE/0F7281BC3AF411EC89CE072FC4F9AE02/56C4925E3B0711EC9715501EC4F9AE02.roa
File:                     56C4925E3B0711EC9715501EC4F9AE02.roa (raw, json)
Hash identifier:          zzgWG6q6KItbF0m0zrC3rt7sfg/sytV8ZrJ1Qdcqn+E=
Subject key identifier:   19:D6:69:71:EE:E3:4B:17:2C:F7:5C:A0:52:7B:6D:58:4A:A1:E3:F0
Certificate issuer:       /CN=A91BADCE/serialNumber=D79A8C7705E2419EAB42953B6BC8A57206BAC626
Certificate serial:       03C5
Authority key identifier: D7:9A:8C:77:05:E2:41:9E:AB:42:95:3B:6B:C8:A5:72:06:BA:C6:26
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15qMdwXiQZ6rQpU7a8ilcga6xiY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BADCE/0F7281BC3AF411EC89CE072FC4F9AE02/56C4925E3B0711EC9715501EC4F9AE02.roa
Signing time:             Fri 05 Apr 2024 03:05:18 +0000
ROA not before:           Fri 05 Apr 2024 03:05:18 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     23669
IP address blocks:        202.93.160.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BADCE/0F7281BC3AF411EC89CE072FC4F9AE02/15qMdwXiQZ6rQpU7a8ilcga6xiY.crl
                          rsync://rpki.apnic.net/member_repository/A91BADCE/0F7281BC3AF411EC89CE072FC4F9AE02/15qMdwXiQZ6rQpU7a8ilcga6xiY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15qMdwXiQZ6rQpU7a8ilcga6xiY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 965 (0x3c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BADCE/serialNumber=D79A8C7705E2419EAB42953B6BC8A57206BAC626
        Validity
            Not Before: Apr  5 03:05:18 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=660f6a6e-54fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ce:81:19:ea:25:79:95:83:64:8b:c7:e8:97:
                    12:39:1b:b9:a0:fb:ec:ef:4c:9f:9c:79:17:2f:17:
                    b8:e3:62:35:54:c1:2a:24:9b:22:ed:b9:ef:c0:94:
                    cf:cb:f2:68:05:a0:4b:08:75:ab:59:50:89:58:01:
                    79:3e:92:41:35:c5:8c:40:d8:5d:3b:86:bd:73:43:
                    f6:04:6b:b0:cb:e0:6a:81:76:33:ce:58:61:fc:33:
                    8c:81:6e:e9:5f:5c:a3:75:04:27:51:7b:81:50:6c:
                    cc:38:5f:27:1b:30:bb:03:11:91:5f:45:01:d8:73:
                    b8:32:f6:56:9e:f5:78:64:33:f3:bc:8c:67:0c:f6:
                    1b:f0:b4:37:ee:49:78:f6:4c:ed:c8:02:7f:c6:97:
                    f4:52:60:7a:4c:b7:75:c7:e1:99:cd:5b:b5:91:71:
                    0c:7c:d4:a5:de:30:57:ad:a1:98:1f:ce:14:4f:d4:
                    58:39:aa:d8:42:d4:02:c4:b5:7c:6e:47:db:8a:8a:
                    68:bc:68:04:f8:58:03:95:6f:f0:a5:9e:ee:1a:7b:
                    89:e3:4d:56:55:05:40:d2:7c:a2:36:11:d3:a8:82:
                    06:83:72:ae:5a:4b:9b:74:b8:a3:7c:a0:97:ab:40:
                    8c:8f:eb:84:8b:b8:a7:77:86:d3:e0:e1:6d:0e:48:
                    21:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:D6:69:71:EE:E3:4B:17:2C:F7:5C:A0:52:7B:6D:58:4A:A1:E3:F0
            X509v3 Authority Key Identifier:
                keyid:D7:9A:8C:77:05:E2:41:9E:AB:42:95:3B:6B:C8:A5:72:06:BA:C6:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BADCE/0F7281BC3AF411EC89CE072FC4F9AE02/15qMdwXiQZ6rQpU7a8ilcga6xiY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15qMdwXiQZ6rQpU7a8ilcga6xiY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BADCE/0F7281BC3AF411EC89CE072FC4F9AE02/56C4925E3B0711EC9715501EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.93.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         47:3d:1d:89:4b:c8:db:73:a4:a9:92:7a:b6:3f:66:ae:78:d6:
         cf:f3:93:c0:13:7b:ed:dc:db:0a:e3:31:b6:5a:62:e1:ec:b9:
         94:05:f2:84:ce:a6:9b:dc:9c:13:f2:25:38:d8:b2:a3:58:4d:
         ed:7e:44:c2:4a:89:5f:87:67:9d:57:41:ab:30:36:36:96:72:
         6f:2b:e7:49:95:07:e8:41:a6:81:73:38:90:02:cc:44:21:55:
         9f:cd:09:57:9e:73:34:d1:5d:fc:e1:10:33:77:12:2e:4d:88:
         64:e5:d5:c4:3f:f5:11:22:8a:b5:4a:8d:dc:19:a4:7b:4d:66:
         03:91:50:59:c1:1d:31:6d:46:c5:da:c7:cf:83:b5:14:22:8d:
         56:3f:08:6c:c0:c4:00:0c:af:be:95:1b:96:e7:0c:c2:d3:f2:
         c6:2c:17:c9:d3:05:2b:a7:86:42:e2:b6:51:37:af:bb:66:cf:
         49:2f:d5:1c:78:bd:45:a8:69:f1:68:dc:dd:19:13:5a:ab:8a:
         f4:9a:96:e5:df:ba:7d:8d:1e:18:08:89:c7:dd:93:85:0f:dd:
         08:98:c9:b8:c2:a5:2c:2c:6f:a9:c4:56:76:40:cd:6e:e2:b5:
         30:7f:65:24:4d:b5:4e:28:76:07:65:06:81:b3:cf:0c:a6:a8:
         3e:8f:3e:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:27:27 2024 by rpki-client on console-ams.rpki-client.org