Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/13279E2C124011ED9E430A4CC4F9AE02.roa
File:                     13279E2C124011ED9E430A4CC4F9AE02.roa (raw, json)
Hash identifier:          85M/qz7mJYekYbZAgnSUCVink/uytYT+xqfjbzjrav8=
Subject key identifier:   7B:A1:02:E4:C6:09:9F:6E:08:53:D7:D5:EE:9C:26:E6:C1:16:0F:03
Certificate issuer:       /CN=A91DA10A/serialNumber=49B5A46463E3A2B70A33446014EBF40E5C9EFE74
Certificate serial:       068B
Authority key identifier: 49:B5:A4:64:63:E3:A2:B7:0A:33:44:60:14:EB:F4:0E:5C:9E:FE:74
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SbWkZGPjorcKM0RgFOv0Dlye_nQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/13279E2C124011ED9E430A4CC4F9AE02.roa
Signing time:             Thu 01 Jun 2023 00:16:08 +0000
ROA not before:           Thu 01 Jun 2023 00:16:08 +0000
ROA not after:            Tue 30 Jul 2024 00:00:00 +0000
asID:                     18013
IP address blocks:        144.48.6.0/24 maxlen: 24
                          144.48.7.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/SbWkZGPjorcKM0RgFOv0Dlye_nQ.crl
                          rsync://rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/SbWkZGPjorcKM0RgFOv0Dlye_nQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SbWkZGPjorcKM0RgFOv0Dlye_nQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 22:47:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1675 (0x68b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DA10A/serialNumber=49B5A46463E3A2B70A33446014EBF40E5C9EFE74
        Validity
            Not Before: Jun  1 00:16:08 2023 GMT
            Not After : Jul 30 00:00:00 2024 GMT
        Subject: CN=6477e348-afd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:36:90:97:36:26:63:c0:67:7d:60:30:b4:93:
                    a6:5e:45:f6:79:68:0b:cb:0a:92:dd:e4:26:6a:60:
                    e6:d0:b1:64:f6:dd:e5:3d:14:39:a8:7d:8d:f8:21:
                    c4:f3:31:7a:37:e6:86:be:ff:1d:61:d2:d9:ef:4c:
                    bf:80:2e:f7:99:db:5a:2d:85:e6:4e:ff:1c:76:80:
                    c8:84:19:ae:92:d4:cd:8e:69:41:77:57:1e:43:9f:
                    ec:6b:fd:5e:ca:39:6f:18:b1:6c:68:1e:68:69:dd:
                    ac:ed:ff:7a:4b:64:f6:d2:05:b8:9f:63:55:08:90:
                    3b:bb:cc:5b:1b:02:b7:7d:2c:72:56:60:01:d5:83:
                    20:dc:71:46:59:dd:3f:7c:da:fd:1f:ca:db:dc:8f:
                    96:7f:24:a3:95:88:62:7b:15:8c:36:e1:2b:ed:f7:
                    ef:e1:7d:6a:fb:d9:d5:83:ba:c7:f0:7a:e1:a0:02:
                    b4:ef:4d:74:c5:44:7e:4d:7f:73:14:9a:bf:37:34:
                    cf:c3:b3:14:56:7a:33:57:35:f6:c9:05:5b:b8:0e:
                    45:d8:b8:97:6a:cf:8b:f2:b0:59:24:3c:75:cc:35:
                    76:6e:e1:30:ea:c5:43:74:d6:52:39:b3:f1:bd:40:
                    2d:ff:a0:c5:d7:24:f2:e9:8c:c2:84:66:d2:2f:03:
                    99:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:A1:02:E4:C6:09:9F:6E:08:53:D7:D5:EE:9C:26:E6:C1:16:0F:03
            X509v3 Authority Key Identifier:
                keyid:49:B5:A4:64:63:E3:A2:B7:0A:33:44:60:14:EB:F4:0E:5C:9E:FE:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/SbWkZGPjorcKM0RgFOv0Dlye_nQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SbWkZGPjorcKM0RgFOv0Dlye_nQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/13279E2C124011ED9E430A4CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.48.6.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a4:b3:49:d1:fe:2b:43:5d:1a:5c:63:5e:ec:f7:1c:2a:29:db:
         91:6e:58:bc:b4:c3:e7:2d:08:19:b1:bd:33:69:20:85:f5:06:
         5e:b0:40:f9:29:46:10:40:12:94:0a:c3:6f:7d:6f:c8:15:b4:
         10:28:4c:95:82:c1:d6:69:ea:f0:b7:41:ab:68:c4:8c:e6:78:
         82:db:36:bb:20:66:33:38:3b:c0:e3:46:8f:92:2c:a6:eb:21:
         6f:21:1a:a2:18:e2:1c:98:91:90:a9:2d:ba:a4:93:ac:80:b5:
         28:7e:d6:7d:29:8d:4c:59:c8:7f:18:8c:43:35:3e:72:43:9b:
         3c:8f:be:17:2e:61:bd:25:c3:14:92:c6:9b:e2:15:e1:b3:17:
         8b:fa:8e:cd:11:0d:85:d3:f2:2c:c5:63:08:0f:58:97:21:d6:
         80:40:62:24:8a:c0:09:4f:d9:55:fc:2e:77:0a:0e:7e:2f:4b:
         ae:c8:e6:ed:b5:0c:d7:03:48:b2:4a:4e:14:c7:b2:69:cc:f6:
         d9:37:8c:f6:fb:86:3d:85:84:51:c9:96:af:b6:60:85:0c:9a:
         7d:b3:f6:43:ef:69:9f:a7:16:f5:bd:d9:93:c0:d7:d2:28:72:
         57:24:05:98:d0:c0:a7:2b:e0:22:eb:98:1a:91:9b:9c:43:7f:
         f5:af:1b:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 29 00:29:10 2024 by rpki-client on console-fra.rpki-client.org