Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/0E0DBEA4327411ED80554E32C4F9AE02.roa
File:                     0E0DBEA4327411ED80554E32C4F9AE02.roa (raw, json)
Hash identifier:          ykqiZN/ax0mi80bki6smfLnQDWFc8ZTMpUxvpUWkGPw=
Subject key identifier:   E9:1C:D5:D6:62:EB:C9:5B:80:43:19:6C:99:59:0B:3E:9A:69:1D:C6
Certificate issuer:       /CN=A91BE146/serialNumber=43EA3A2DC08C5E1F2CD68411644A05C076E88C08
Certificate serial:       04B2
Authority key identifier: 43:EA:3A:2D:C0:8C:5E:1F:2C:D6:84:11:64:4A:05:C0:76:E8:8C:08
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-o6LcCMXh8s1oQRZEoFwHbojAg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/0E0DBEA4327411ED80554E32C4F9AE02.roa
Signing time:             Fri 13 Oct 2023 00:32:36 +0000
ROA not before:           Fri 13 Oct 2023 00:32:36 +0000
ROA not after:            Sun 01 Dec 2024 00:00:00 +0000
asID:                     19807
IP address blocks:        2401:4700:3000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.crl
                          rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-o6LcCMXh8s1oQRZEoFwHbojAg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 May 2024 00:51:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1202 (0x4b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BE146/serialNumber=43EA3A2DC08C5E1F2CD68411644A05C076E88C08
        Validity
            Not Before: Oct 13 00:32:36 2023 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=65289024-e1ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:68:b3:e7:c2:02:fc:25:09:eb:05:b2:bd:c8:
                    28:72:f3:01:4a:bc:90:80:db:4e:75:7c:c7:b4:f6:
                    03:a3:18:2f:32:18:8a:01:96:52:c8:1f:34:ef:76:
                    1e:fc:10:ea:5e:d0:fd:6f:c7:3c:a1:0b:ee:3d:47:
                    6a:b4:96:e4:a7:25:d5:3d:a5:de:5f:5c:59:b8:3d:
                    46:6f:1e:19:4a:35:85:0b:96:4e:91:fc:2b:22:64:
                    e9:47:e3:43:ba:80:22:e3:e0:0e:f9:88:16:20:a8:
                    4d:a2:86:65:8e:bd:12:88:e0:bd:9f:0d:70:2d:f1:
                    84:96:eb:ed:bc:dd:7d:61:50:e1:bd:96:f3:7d:c7:
                    e7:56:87:f2:23:e7:c5:28:13:ef:d6:5a:93:fc:93:
                    74:07:f7:65:ff:4c:9e:74:b9:9c:8d:81:56:c4:50:
                    f0:e5:ee:44:d2:02:c9:74:25:53:b7:31:6b:92:d3:
                    aa:e6:8e:23:3a:99:84:09:dc:49:0f:5d:4b:00:41:
                    e0:b0:61:a8:1a:f3:bc:04:26:34:5d:83:f1:0a:d7:
                    37:ee:ad:50:c9:3c:e1:50:30:c1:b3:c3:cb:02:99:
                    43:60:13:c9:41:46:a3:6b:63:7d:4c:c7:92:2f:72:
                    cd:10:08:43:ee:51:4f:0e:d6:77:16:75:ee:4e:98:
                    63:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:1C:D5:D6:62:EB:C9:5B:80:43:19:6C:99:59:0B:3E:9A:69:1D:C6
            X509v3 Authority Key Identifier:
                keyid:43:EA:3A:2D:C0:8C:5E:1F:2C:D6:84:11:64:4A:05:C0:76:E8:8C:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-o6LcCMXh8s1oQRZEoFwHbojAg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/0E0DBEA4327411ED80554E32C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:4700:3000::/48

    Signature Algorithm: sha256WithRSAEncryption
         25:f0:84:5e:48:f0:af:b2:ea:7d:3f:69:fa:57:16:9d:e0:9b:
         da:19:69:94:f1:62:c3:6d:74:83:63:0a:cd:79:ab:bf:f1:1e:
         34:0d:74:a2:20:6d:bd:70:1f:fa:a6:85:c8:40:c1:a9:a3:3b:
         25:e9:83:e0:6e:df:60:a2:90:ea:0d:27:a0:8c:10:01:ee:d8:
         2e:00:c1:b0:36:70:86:11:bd:ad:01:78:28:e3:5f:94:4f:08:
         23:8f:81:0a:b1:43:1e:f9:45:6f:b5:75:cc:e8:c2:ac:da:03:
         39:fc:01:44:48:55:b5:47:41:c8:a1:5b:a4:f2:c4:c5:4c:9b:
         b6:4b:e2:60:c5:5e:b5:5e:a0:d0:94:3f:6d:cd:33:a2:52:86:
         13:36:90:9f:75:ca:04:58:96:c0:eb:9d:7e:a3:19:49:be:0e:
         11:01:cd:ef:9c:eb:af:a9:0b:46:31:97:bf:fc:0b:d0:4f:5d:
         fa:a0:fc:10:50:eb:64:69:43:cb:7d:4b:45:39:ae:27:4e:73:
         ba:d6:82:7f:a9:1c:e1:35:54:58:84:c0:e2:89:47:53:7a:3a:
         a8:34:a5:67:35:92:99:3d:44:4d:eb:f8:ae:9d:97:ce:29:59:
         48:98:c1:b5:92:d9:b9:9a:99:7a:65:2f:6d:b9:dc:4c:5e:54:
         8c:90:98:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 01:47:19 2024 by rpki-client on console-fra.rpki-client.org