Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/EABEFD16232E11EFA6F6B887C4F9AE02.roa
File:                     EABEFD16232E11EFA6F6B887C4F9AE02.roa (raw, json)
Hash identifier:          ia4Ra/GF14x26JDiIjwbkjuR5bTGoRpVxx3Eq8bwfHI=
Subject key identifier:   D1:BA:E4:05:37:00:ED:10:B8:94:B5:C6:3B:12:63:D4:85:73:B0:86
Certificate issuer:       /CN=A91C6550/serialNumber=456EEA0692C6A4F26F53D2D237D1CB4DCD783305
Certificate serial:       0150
Authority key identifier: 45:6E:EA:06:92:C6:A4:F2:6F:53:D2:D2:37:D1:CB:4D:CD:78:33:05
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/EABEFD16232E11EFA6F6B887C4F9AE02.roa
Signing time:             Wed 05 Jun 2024 11:29:49 +0000
ROA not before:           Wed 05 Jun 2024 11:29:49 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     5065
IP address blocks:        202.134.229.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.crl
                          rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 02:47:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 336 (0x150)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C6550/serialNumber=456EEA0692C6A4F26F53D2D237D1CB4DCD783305
        Validity
            Not Before: Jun  5 11:29:49 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=66604c2c-8fb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:d7:d8:27:05:2b:b2:c4:9f:0b:63:f2:6b:8a:
                    68:36:fb:c6:b5:fa:f2:db:b0:ea:08:d1:72:b4:d7:
                    49:07:3f:49:a7:a7:12:ea:23:c1:89:c2:bd:11:bc:
                    9c:07:24:42:aa:b7:31:97:9a:ea:b6:ad:0d:35:fe:
                    d3:53:80:98:9d:ed:2f:ed:e2:b9:c3:43:ad:fd:52:
                    c3:67:84:df:39:2b:89:c1:4a:f6:b4:9b:17:52:dc:
                    b1:b1:ae:4c:b5:73:9c:43:ec:9e:89:4b:ce:95:21:
                    a7:74:d8:10:89:ff:97:77:69:40:16:1f:8a:34:91:
                    bb:0e:ff:ab:f9:13:6a:0a:96:78:c4:bf:ee:3f:e6:
                    90:da:f5:32:b5:47:0f:42:20:bb:3d:94:17:f3:2b:
                    80:04:6c:1b:38:78:8d:cf:a7:d9:30:f3:2a:9a:ce:
                    c6:cf:a5:cf:0f:5e:5a:a6:5a:8e:e7:94:0a:a7:0d:
                    54:31:ae:2f:18:f2:b3:37:4a:e6:3c:77:90:10:9c:
                    7b:77:2f:fa:c5:20:ea:62:ee:72:ae:69:7e:c8:4c:
                    37:56:ac:ff:7b:9b:4f:8e:1f:04:83:64:69:12:56:
                    0c:4b:fb:44:d5:e8:de:be:e7:da:ac:91:38:36:b0:
                    74:b4:44:69:83:b2:c7:aa:9f:3c:3b:0c:43:ab:21:
                    ce:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:BA:E4:05:37:00:ED:10:B8:94:B5:C6:3B:12:63:D4:85:73:B0:86
            X509v3 Authority Key Identifier:
                keyid:45:6E:EA:06:92:C6:A4:F2:6F:53:D2:D2:37:D1:CB:4D:CD:78:33:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/EABEFD16232E11EFA6F6B887C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.134.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:02:88:d8:48:6d:2a:10:55:77:b7:96:c0:08:ca:6f:10:5d:
         a1:49:57:de:61:11:77:d2:1f:9a:8e:9a:b4:3d:92:3b:df:20:
         e0:c7:f6:42:72:e4:03:ed:4c:d7:02:9b:b0:c0:a6:3d:89:7c:
         79:8c:e2:c6:d6:7b:e1:8b:5f:9b:b8:b6:00:78:89:5d:7c:29:
         e6:4f:ca:f3:b8:e7:08:9a:c1:81:c2:15:90:f1:df:66:4a:5d:
         e0:67:ef:4a:df:0d:50:a3:82:b4:3f:8b:3a:72:88:1b:9e:6a:
         b9:42:eb:7c:b9:67:b4:ce:43:5e:c5:44:ca:51:1c:86:40:23:
         86:b6:8e:31:2e:6b:05:5e:76:e2:6e:26:78:bd:c6:ea:b0:24:
         dc:7a:6e:cb:4f:db:65:0f:6c:0e:0f:41:1d:f9:86:c3:97:f4:
         f7:92:ea:66:22:4b:07:d3:0a:1f:cc:7c:75:af:24:af:b9:ec:
         7c:44:7c:0d:67:bb:0e:de:a6:50:62:7b:fb:c8:e2:c3:ea:d7:
         77:01:fe:44:ee:36:15:f2:3a:8e:10:17:0a:bf:85:d4:49:68:
         0a:fc:17:a4:b3:a8:02:c5:8c:f2:fe:7a:1d:b2:b3:8b:ac:4e:
         3c:45:26:5a:70:57:16:9c:60:7b:48:9c:49:2f:34:dc:eb:0d:
         f4:c3:e3:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:37:16 2024 by rpki-client on console-ams.rpki-client.org