Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/A5EB476201D811EEABCFDC80C4F9AE02.roa
File:                     A5EB476201D811EEABCFDC80C4F9AE02.roa (raw, json)
Hash identifier:          5RZU3ZNVwtwR3E5X7+WylxVlkEfJb6o654CeAqbYORY=
Subject key identifier:   81:0D:47:0C:51:A6:6E:24:CF:6F:53:FB:B9:D8:3F:6A:A6:03:B1:03
Certificate issuer:       /CN=A91C0BDE/serialNumber=A4B50BECD8BBA285587128D5919283DBE1690918
Certificate serial:       0763
Authority key identifier: A4:B5:0B:EC:D8:BB:A2:85:58:71:28:D5:91:92:83:DB:E1:69:09:18
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/A5EB476201D811EEABCFDC80C4F9AE02.roa
Signing time:             Sat 03 Jun 2023 06:34:10 +0000
ROA not before:           Sat 03 Jun 2023 06:34:10 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     59239
IP address blocks:        114.129.12.0/23 maxlen: 23
                          114.129.12.0/24 maxlen: 24
                          114.129.13.0/24 maxlen: 24
                          114.129.14.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.crl
                          rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Jun 2024 21:38:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1891 (0x763)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C0BDE/serialNumber=A4B50BECD8BBA285587128D5919283DBE1690918
        Validity
            Not Before: Jun  3 06:34:10 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=647adee2-57a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ef:ae:bc:65:08:76:8b:8c:78:1c:92:7f:3b:
                    c4:84:11:d2:1a:08:8e:2c:f1:d0:b3:00:b0:b5:65:
                    f8:b9:6f:41:46:b9:b5:cf:62:9d:75:dc:9d:4a:7e:
                    8f:20:09:e6:ac:10:dd:25:63:fb:73:11:63:4f:2b:
                    b2:51:51:f5:f9:ba:e5:7d:38:7b:df:00:99:2e:e6:
                    d3:0d:12:d1:8d:14:f3:cb:c2:4c:c2:c4:43:4a:35:
                    72:18:fb:2f:19:c3:b3:31:6b:61:f7:ba:0a:6a:a1:
                    97:9d:28:24:f9:43:59:10:50:d4:fb:9a:eb:48:74:
                    e3:ed:24:5c:79:11:c6:2d:60:9d:24:4e:07:99:b2:
                    c8:89:29:bb:5d:d9:68:32:f0:3c:65:d6:c3:a5:50:
                    8d:f5:5d:b4:ac:c6:b8:a7:7f:16:33:3f:9e:5c:22:
                    2f:f8:41:60:83:54:0f:98:0b:1e:4d:2e:0d:46:d2:
                    c4:05:b1:68:61:d5:ba:11:1c:58:5b:0c:a4:83:f8:
                    2f:48:15:c2:88:c9:66:68:a3:a2:95:87:64:4f:4a:
                    15:b9:c0:1d:2e:dd:18:9b:aa:74:48:06:38:ba:36:
                    a8:cb:0f:f1:d1:b5:ca:1a:8f:4e:57:06:30:06:f7:
                    49:66:bb:a1:a0:fc:d1:7d:56:dd:0a:9f:ef:93:a8:
                    58:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:0D:47:0C:51:A6:6E:24:CF:6F:53:FB:B9:D8:3F:6A:A6:03:B1:03
            X509v3 Authority Key Identifier:
                keyid:A4:B5:0B:EC:D8:BB:A2:85:58:71:28:D5:91:92:83:DB:E1:69:09:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/A5EB476201D811EEABCFDC80C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.129.12.0-114.129.14.255

    Signature Algorithm: sha256WithRSAEncryption
         81:26:0d:03:04:aa:e8:ca:d7:ad:cb:14:c4:e8:d2:6a:73:17:
         31:eb:64:89:28:7a:ce:12:07:db:fe:aa:c7:44:10:0d:5b:34:
         7f:e1:7b:12:f9:de:6f:41:11:19:d2:4e:73:d1:68:d7:50:76:
         c7:15:07:4f:18:5a:be:be:0e:cd:62:54:13:ab:50:8b:f7:44:
         a4:23:7f:85:fd:aa:2a:0c:34:47:52:78:3a:a1:65:8d:92:7e:
         41:dd:10:ad:57:a8:65:40:95:7e:76:83:89:2a:19:3d:98:04:
         fd:e6:94:5f:3f:89:9b:5f:02:cf:c1:2f:aa:55:6a:9e:e8:8f:
         5f:0e:59:11:55:b7:51:d7:64:88:fe:78:b7:0e:d8:27:c4:df:
         1c:c4:fc:49:7a:b3:b7:12:a4:2e:ad:58:67:d1:2b:11:41:65:
         5f:f4:8c:35:d6:d1:27:09:5c:fe:0a:91:b2:64:05:d7:83:90:
         86:fd:ef:41:aa:f6:49:3e:f3:0f:f1:84:ec:b9:ca:b0:2c:89:
         b0:19:16:93:24:46:c4:20:f9:e6:e5:12:3e:18:1e:7c:18:de:
         3b:99:98:5c:18:44:65:c1:f5:0b:2a:52:e3:60:b9:09:08:ec:
         3e:16:03:18:e2:e0:1a:b1:0c:77:63:1d:f6:24:d2:91:aa:59:
         9a:af:66:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:39 2024 by rpki-client on console-fra.rpki-client.org