Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/75906378FC1F11ECAD09AF21C4F9AE02.roa
File:                     75906378FC1F11ECAD09AF21C4F9AE02.roa (raw, json)
Hash identifier:          bCe1ucptaaWPAXkhR5Cq8HI9H9bOhLd76hYHBtFEzAY=
Subject key identifier:   5F:BB:4A:AA:01:B6:EA:B6:CE:53:62:B6:E5:0A:32:9B:B6:3A:C0:28
Certificate issuer:       /CN=A91CEAA2/serialNumber=FF495293CB5F15E5D14BACC2DB1052B2E2C825C8
Certificate serial:       3364
Authority key identifier: FF:49:52:93:CB:5F:15:E5:D1:4B:AC:C2:DB:10:52:B2:E2:C8:25:C8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/75906378FC1F11ECAD09AF21C4F9AE02.roa
Signing time:             Wed 30 Aug 2023 15:00:56 +0000
ROA not before:           Wed 30 Aug 2023 15:00:56 +0000
ROA not after:            Thu 31 Oct 2024 00:00:00 +0000
asID:                     7468
IP address blocks:        116.214.110.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.crl
                          rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 09 May 2024 15:03:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13156 (0x3364)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CEAA2/serialNumber=FF495293CB5F15E5D14BACC2DB1052B2E2C825C8
        Validity
            Not Before: Aug 30 15:00:56 2023 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=64ef59a8-b7a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:ee:7b:75:29:9d:4f:18:b3:67:f6:66:7e:0d:
                    63:d3:c7:e7:28:20:8c:c5:22:d6:65:23:dc:3a:df:
                    9c:90:db:a5:fb:d2:33:cd:46:0c:4b:a9:b0:86:23:
                    4c:51:95:56:b3:92:54:a7:fa:74:48:46:82:d4:66:
                    32:c2:d1:0e:58:0f:af:a5:4f:27:2c:27:cd:86:9d:
                    03:d5:40:be:c5:1a:19:42:6e:5b:01:ed:3f:9a:32:
                    dc:6b:20:df:75:f2:1a:7a:aa:45:73:c8:3d:58:3e:
                    3d:7f:6d:fd:a4:67:c8:92:f3:73:06:93:1e:44:cd:
                    ec:32:6c:f2:12:4d:2d:e1:91:10:d3:24:60:77:59:
                    f7:13:3f:8d:81:b5:c4:09:00:0d:1c:66:4d:72:87:
                    4a:e4:83:76:5e:a9:d6:45:9a:85:aa:5d:28:38:24:
                    ce:02:34:ae:0d:5c:e4:7b:64:bb:40:f8:ce:af:b1:
                    f5:7e:0a:a3:52:7d:d0:2c:b9:e9:e2:de:de:0d:e9:
                    cd:1f:a7:49:37:52:56:ee:a4:14:bc:74:46:4d:0d:
                    0f:4e:1f:ab:56:22:67:21:ce:e5:66:bf:1d:60:b8:
                    67:18:1f:c7:e1:bf:20:51:af:90:0f:14:f7:06:09:
                    73:68:4e:72:7b:c6:d4:58:d1:0a:21:70:00:56:c6:
                    29:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:BB:4A:AA:01:B6:EA:B6:CE:53:62:B6:E5:0A:32:9B:B6:3A:C0:28
            X509v3 Authority Key Identifier:
                keyid:FF:49:52:93:CB:5F:15:E5:D1:4B:AC:C2:DB:10:52:B2:E2:C8:25:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/75906378FC1F11ECAD09AF21C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.214.110.0/23

    Signature Algorithm: sha256WithRSAEncryption
         77:85:85:1d:9b:b7:78:0b:60:0d:83:fc:85:ff:6a:b5:d3:27:
         e5:70:29:16:ec:0d:15:f4:19:30:75:23:a9:c5:42:34:73:da:
         f8:d6:cd:b6:b5:d1:bb:ea:95:30:45:88:81:64:29:f3:a4:82:
         31:8d:78:08:61:03:54:43:58:f9:de:31:cc:5f:99:45:08:c2:
         3a:89:5e:53:f8:b3:ef:ff:e8:7c:f8:fc:c8:b5:3b:fd:50:d0:
         26:28:fb:f2:4a:7f:a2:f9:18:6a:42:96:f6:24:c9:e7:72:12:
         53:dd:90:86:7b:fc:1f:12:50:75:3b:40:57:ec:e5:97:04:4f:
         8c:00:ab:3b:eb:37:4d:d7:43:93:60:25:28:de:c7:25:b5:55:
         84:a0:48:63:2a:60:13:de:d2:14:67:99:5c:ad:d5:62:4d:ee:
         58:78:74:ae:f3:2e:69:c8:d1:39:0e:da:5b:64:c7:a0:2b:21:
         ef:65:82:1f:d8:05:6b:85:1b:0a:98:db:82:e6:cf:c6:c9:87:
         c4:a4:79:be:ac:3b:25:bb:2d:b5:23:74:10:ff:34:0f:f7:d4:
         37:b7:93:a1:1e:3a:93:6f:66:14:4d:3d:dc:f0:8e:52:bf:22:
         51:2b:1f:ee:f6:de:73:dc:99:d4:17:0b:73:cb:55:8e:db:74:
         1b:ff:74:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 17:43:50 2024 by rpki-client on console-fra.rpki-client.org