Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/5A83C666350211EEB33A9B71C4F9AE02.roa
File:                     5A83C666350211EEB33A9B71C4F9AE02.roa (raw, json)
Hash identifier:          5hXuLPUl1oznYiZYUW2nmt4xTeI47MtrNRFOzwu+lXg=
Subject key identifier:   0E:77:90:7D:35:9F:96:58:AB:82:AA:C7:EC:66:DB:33:D5:60:33:EE
Certificate issuer:       /CN=A91D51A0/serialNumber=C6EABEB93E1D06E2C32E1C4CBE147CFB39992539
Certificate serial:       0333
Authority key identifier: C6:EA:BE:B9:3E:1D:06:E2:C3:2E:1C:4C:BE:14:7C:FB:39:99:25:39
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xuq-uT4dBuLDLhxMvhR8-zmZJTk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/5A83C666350211EEB33A9B71C4F9AE02.roa
Signing time:             Fri 01 Mar 2024 03:05:09 +0000
ROA not before:           Fri 01 Mar 2024 03:05:09 +0000
ROA not after:            Thu 01 May 2025 00:00:00 +0000
asID:                     151420
IP address blocks:        2400:54a0:20a0::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.crl
                          rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xuq-uT4dBuLDLhxMvhR8-zmZJTk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 01 Jun 2024 02:50:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 819 (0x333)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D51A0/serialNumber=C6EABEB93E1D06E2C32E1C4CBE147CFB39992539
        Validity
            Not Before: Mar  1 03:05:09 2024 GMT
            Not After : May  1 00:00:00 2025 GMT
        Subject: CN=65e145e5-deaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:59:b0:09:1f:6f:55:c7:db:67:14:8b:09:92:
                    1a:18:e2:d6:89:81:63:9c:92:e2:a2:8b:f7:f3:72:
                    04:0b:35:f8:3a:eb:9b:cb:e1:88:f6:0d:1b:7b:68:
                    c0:ad:0e:1c:dd:85:82:7e:08:5b:04:09:52:5b:4d:
                    d9:4f:88:52:61:e8:a4:d5:18:2c:13:9a:42:da:5e:
                    8d:cc:c4:ed:50:46:2c:6a:13:f5:b4:7d:65:23:e7:
                    61:08:3f:f4:7d:43:ae:39:95:45:9e:40:72:0f:c8:
                    db:2c:87:bc:de:89:08:f2:cf:e7:33:ff:36:8c:a7:
                    b8:9d:9b:33:22:a9:d8:18:b5:22:91:64:ef:02:ee:
                    53:d4:19:aa:cf:48:51:86:2d:7c:56:4c:f4:98:21:
                    1f:ab:2f:99:17:f4:70:d3:d9:2e:7d:90:6a:f4:64:
                    41:ea:7d:ee:19:23:9f:d1:0e:91:8e:03:1b:70:29:
                    4c:62:4a:77:3b:df:92:99:83:14:50:77:fe:3b:b2:
                    43:a1:f0:ec:38:1b:24:b2:e6:07:2f:62:45:55:1f:
                    6e:aa:2b:b6:56:cb:61:52:dd:d6:df:40:70:e9:bc:
                    d4:b6:02:8a:67:23:e3:dd:5f:13:a6:79:68:90:54:
                    4b:1b:44:3d:04:ea:20:5a:f2:d0:08:a9:68:f7:f4:
                    2c:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:77:90:7D:35:9F:96:58:AB:82:AA:C7:EC:66:DB:33:D5:60:33:EE
            X509v3 Authority Key Identifier:
                keyid:C6:EA:BE:B9:3E:1D:06:E2:C3:2E:1C:4C:BE:14:7C:FB:39:99:25:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xuq-uT4dBuLDLhxMvhR8-zmZJTk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/5A83C666350211EEB33A9B71C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:54a0:20a0::/44

    Signature Algorithm: sha256WithRSAEncryption
         8b:44:5f:a9:a6:3c:3b:63:3b:08:d9:00:4f:95:8d:9e:5f:79:
         00:74:a1:7a:81:0f:27:35:0a:2e:51:7d:1a:57:9d:95:bd:7c:
         ea:48:71:ad:09:f8:94:58:e8:7f:e8:32:1e:f9:78:49:50:cd:
         e3:de:3c:3a:11:fe:33:91:05:d8:01:7c:4d:d6:49:80:a3:f2:
         49:2f:00:d7:81:50:ef:89:7e:df:a4:f0:89:a3:9c:7a:56:d3:
         ea:b7:8b:99:17:79:6f:f8:99:61:d8:c6:76:de:ba:87:9b:4b:
         fe:aa:2d:92:ca:3d:c7:20:89:6a:4a:a5:28:b3:57:40:21:b5:
         7c:24:8c:8e:08:95:68:58:f5:38:03:e2:35:7f:ae:dc:8b:30:
         c8:a4:ef:4e:d2:78:05:02:4d:36:92:57:0e:f1:6d:fa:37:05:
         92:23:28:83:80:47:86:29:8a:a4:36:a2:e1:38:60:23:c6:88:
         be:3c:99:9e:be:e2:53:e6:38:2c:3a:d4:30:ab:41:ee:52:7c:
         d9:c5:f3:06:b6:23:53:e5:b4:83:14:2e:24:b6:88:c7:fd:a3:
         4a:ff:23:e9:c9:fb:13:14:fb:84:ad:ba:b4:d6:63:0a:1c:0f:
         f6:2f:81:6e:40:a4:d5:c8:6e:3e:51:c2:fb:da:47:40:25:fe:
         60:69:c7:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 25 03:45:27 2024 by rpki-client on console-fra.rpki-client.org