Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/F585B320A4ED11EFBA65C13CC4F9AE02.roa
File:                     F585B320A4ED11EFBA65C13CC4F9AE02.roa (raw, json)
Hash identifier:          svSsv7iDDsESPj4djUfhOIqdOSSzOy7GY2n53ZHUYRM=
Subject key identifier:   11:DE:88:5D:74:DC:A1:88:D2:11:51:3D:DC:C2:5D:58:4F:2B:C2:C6
Certificate issuer:       /CN=A91C0BDE/serialNumber=A4B50BECD8BBA285587128D5919283DBE1690918
Certificate serial:       089E
Authority key identifier: A4:B5:0B:EC:D8:BB:A2:85:58:71:28:D5:91:92:83:DB:E1:69:09:18
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/F585B320A4ED11EFBA65C13CC4F9AE02.roa
Signing time:             Sun 17 Nov 2024 14:12:21 +0000
ROA not before:           Sun 17 Nov 2024 14:12:21 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     131464
IP address blocks:        114.129.13.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.crl
                          rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 19:45:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2206 (0x89e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C0BDE/serialNumber=A4B50BECD8BBA285587128D5919283DBE1690918
        Validity
            Not Before: Nov 17 14:12:21 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=6739f9c4-4bbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:bf:1b:8a:b0:2c:ba:98:b5:27:e9:a0:c9:e9:
                    1c:27:f8:5d:4c:e0:18:4d:e4:5e:07:77:64:51:50:
                    69:aa:48:b3:9d:27:55:ae:99:86:cb:e1:85:cc:56:
                    ec:c0:88:5d:aa:e0:14:85:cc:5a:1a:b2:20:48:96:
                    30:57:96:37:bc:fc:3f:d1:cd:36:4a:3d:38:57:b4:
                    67:7c:75:fd:f6:5e:d7:01:50:05:a2:de:64:f7:b3:
                    35:37:cd:79:1b:fe:08:f4:18:84:73:ad:ad:02:79:
                    d3:c1:6e:98:04:62:9b:6d:87:7c:e4:a0:d8:60:49:
                    f8:d1:31:b1:93:35:62:e4:13:0d:ec:1d:8a:65:fd:
                    26:d5:54:5a:d9:cc:92:32:0a:6b:c0:83:26:7f:1a:
                    c0:bc:57:b9:e0:b9:5b:7e:fa:e2:fc:59:c7:ef:ea:
                    b9:c6:5a:72:6f:9c:5e:c7:df:50:23:66:73:3e:03:
                    44:3b:91:63:f5:fe:9b:7f:97:5d:f1:99:11:ee:16:
                    e8:95:62:a0:63:6e:a4:b2:3d:ca:71:43:7d:fd:a2:
                    76:71:16:56:56:d1:e9:e5:fe:39:a9:7c:2d:8e:1d:
                    b3:64:34:3f:73:7f:72:bd:b5:51:8a:4f:12:d8:82:
                    ae:b2:c5:50:e4:04:71:2c:49:9a:c8:bc:9a:b5:c5:
                    af:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:DE:88:5D:74:DC:A1:88:D2:11:51:3D:DC:C2:5D:58:4F:2B:C2:C6
            X509v3 Authority Key Identifier:
                keyid:A4:B5:0B:EC:D8:BB:A2:85:58:71:28:D5:91:92:83:DB:E1:69:09:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/F585B320A4ED11EFBA65C13CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.129.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:4a:1f:d2:d2:37:ae:24:c5:f5:b6:4d:91:e8:c3:52:5a:ce:
         8d:59:27:4b:a3:09:bc:e1:6a:00:5f:e5:cc:89:0f:01:70:90:
         52:64:0f:ba:8b:d3:c9:b6:0b:54:0e:30:2d:4a:66:c9:3a:79:
         93:5e:7c:77:3c:8e:54:6f:de:6a:20:27:76:27:b9:0c:73:90:
         95:d5:e2:ef:02:44:86:bf:c9:39:70:65:d7:95:70:1b:82:37:
         78:f3:a6:01:78:b2:70:d9:eb:62:02:41:2c:05:5f:7f:9d:89:
         95:1f:1c:6a:3f:9f:14:f3:ca:2e:cb:35:50:a9:4b:c1:92:c6:
         76:b7:f7:11:c1:f8:49:fa:96:cf:f5:af:21:03:81:6c:09:0e:
         47:e8:fc:6f:c8:1b:c4:ca:99:b9:c8:e5:68:2a:90:79:73:dc:
         d0:40:0c:5d:9c:e0:ef:8e:5d:2f:03:93:37:72:7f:f7:c5:ec:
         4f:c8:3d:b7:c9:76:6d:d0:dc:c7:75:7d:6a:ca:06:35:2e:8d:
         8c:e4:97:18:12:27:b6:e8:27:61:bb:2b:09:d8:3d:a3:54:39:
         db:16:45:5e:f3:7d:64:9c:a9:b1:dc:1a:59:74:75:1f:19:50:
         d0:0b:58:f2:96:53:f2:6a:19:ba:70:73:e6:db:69:df:8f:88:
         9e:3f:8d:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:34:58 2024 by rpki-client on console-ams.rpki-client.org