Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/624A8CB0A75211EDB46F8967C4F9AE02.roa
File:                     624A8CB0A75211EDB46F8967C4F9AE02.roa (raw, json)
Hash identifier:          DNAussOAhhKTgiB9XEna+amUcXb0mthrv74FzgccW7M=
Subject key identifier:   CC:2C:59:F5:D0:88:07:F1:56:29:AC:C6:48:BE:A6:81:E2:61:8D:2C
Certificate issuer:       /CN=A91CFFA0/serialNumber=ADD9418F0F9B55F3B7376A093DB11DBAD3AEFEC8
Certificate serial:       0DB3
Authority key identifier: AD:D9:41:8F:0F:9B:55:F3:B7:37:6A:09:3D:B1:1D:BA:D3:AE:FE:C8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdlBjw-bVfO3N2oJPbEdutOu_sg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/624A8CB0A75211EDB46F8967C4F9AE02.roa
Signing time:             Thu 28 Dec 2023 18:56:37 +0000
ROA not before:           Thu 28 Dec 2023 18:56:37 +0000
ROA not after:            Mon 31 Mar 2025 00:00:00 +0000
asID:                     131094
IP address blocks:        210.57.74.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/rdlBjw-bVfO3N2oJPbEdutOu_sg.crl
                          rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/rdlBjw-bVfO3N2oJPbEdutOu_sg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdlBjw-bVfO3N2oJPbEdutOu_sg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 17:59:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3507 (0xdb3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CFFA0/serialNumber=ADD9418F0F9B55F3B7376A093DB11DBAD3AEFEC8
        Validity
            Not Before: Dec 28 18:56:37 2023 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=658dc4e4-6eb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:be:88:36:9d:05:c3:5e:45:27:95:0a:02:70:
                    09:5c:1f:5f:a9:b2:ea:c7:53:c9:1f:63:6f:a3:c4:
                    ef:18:f9:4c:85:a7:e7:76:90:cc:2c:b7:6c:a5:2c:
                    9e:89:c3:60:ec:da:a5:8a:c5:8a:81:2f:96:81:bf:
                    08:88:8d:2d:5b:ec:4f:2e:ab:6c:5d:1f:21:27:2c:
                    d2:0b:2d:d8:bd:e3:41:2e:d7:1f:1d:4c:39:7b:fe:
                    18:33:d2:09:d8:6f:7d:e9:93:49:1a:22:8c:51:29:
                    7f:0e:54:7c:bb:a7:70:23:96:f6:b0:92:6c:cf:bc:
                    9e:c1:a2:d4:ac:3d:bf:96:19:27:67:23:3f:a2:58:
                    6a:43:26:8b:04:cf:c6:f4:c3:da:f7:f2:36:60:d0:
                    40:f1:d6:a1:ec:93:ae:40:9d:6e:8f:86:cb:53:1d:
                    5a:e3:08:54:69:66:da:aa:1e:58:ce:1e:21:8a:cf:
                    31:92:82:9b:c5:d5:f6:e9:ac:b3:50:6a:d8:9f:c2:
                    c2:4d:ff:6c:da:29:c9:6b:ae:cf:8e:37:23:7b:53:
                    9c:37:dd:92:c8:70:ca:1d:4f:17:3d:35:a5:3c:36:
                    66:c2:b1:03:ec:ef:5a:b9:2e:ed:c8:8e:c4:25:e3:
                    09:0a:60:32:72:29:ea:97:ae:1d:32:65:e7:e4:86:
                    93:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:2C:59:F5:D0:88:07:F1:56:29:AC:C6:48:BE:A6:81:E2:61:8D:2C
            X509v3 Authority Key Identifier:
                keyid:AD:D9:41:8F:0F:9B:55:F3:B7:37:6A:09:3D:B1:1D:BA:D3:AE:FE:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/rdlBjw-bVfO3N2oJPbEdutOu_sg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdlBjw-bVfO3N2oJPbEdutOu_sg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/624A8CB0A75211EDB46F8967C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.57.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:23:3d:f9:21:ce:d1:58:83:0e:be:3d:b4:9d:fb:be:73:27:
         ce:73:e0:a8:55:8d:ce:82:d0:de:ec:a0:08:1d:94:7f:21:2c:
         52:da:d5:b0:a3:6c:30:14:7e:4c:ad:df:19:fd:85:67:de:8c:
         3b:86:6c:19:18:d3:aa:ac:2b:9c:af:fc:e9:38:f4:7d:b2:6f:
         cb:8e:62:b6:24:0c:cd:6f:70:24:95:61:a2:6e:93:1a:15:32:
         80:8c:da:9d:80:ee:e1:84:fe:8c:12:3a:0f:a8:eb:14:0b:86:
         a9:c5:0e:28:47:63:05:33:85:1b:54:ef:d6:a5:06:e0:ff:2b:
         cf:97:a1:6c:ff:83:9e:56:f5:14:b6:d5:45:81:94:3a:d6:cf:
         69:55:d2:41:4d:0b:ad:01:22:4d:cd:2d:9b:af:d9:48:fb:14:
         f1:d6:2d:ec:d0:e4:4e:e7:15:ea:e8:da:f9:09:15:96:ed:0c:
         65:85:ca:cb:34:11:bd:f6:bc:68:f2:5a:14:12:91:92:67:ca:
         16:03:e0:2d:d6:28:26:2c:25:be:7c:c0:28:15:a2:b5:e4:e1:
         70:e6:69:d1:f9:61:1e:b0:a5:47:53:ff:44:60:a4:af:13:a6:
         c0:1e:f7:7b:85:2c:ed:bf:19:7b:fd:25:13:53:25:9d:2f:95:
         c8:bc:9d:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 20:07:28 2024 by rpki-client on console-fra.rpki-client.org