Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4519/0426491E8CAE11EBAA1B1F5EC4F9AE02/C2B5BE908CAF11EBBADF6F60C4F9AE02.roa
File:                     C2B5BE908CAF11EBBADF6F60C4F9AE02.roa (raw, json)
Hash identifier:          C/81jIV8YO4+/1jy8YhOC6SC1nH71ReSQpKzFpw53eU=
Subject key identifier:   E6:4E:F4:42:46:22:9A:DE:63:26:E8:E9:AD:83:8A:42:D9:0A:54:64
Certificate issuer:       /CN=A91E4519/serialNumber=A9A75555ED70672F71D52F6593B91B4420BAA70B
Certificate serial:       056B
Authority key identifier: A9:A7:55:55:ED:70:67:2F:71:D5:2F:65:93:B9:1B:44:20:BA:A7:0B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qadVVe1wZy9x1S9lk7kbRCC6pws.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E4519/0426491E8CAE11EBAA1B1F5EC4F9AE02/C2B5BE908CAF11EBBADF6F60C4F9AE02.roa
Signing time:             Thu 21 Mar 2024 00:22:45 +0000
ROA not before:           Thu 21 Mar 2024 00:22:45 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     142011
IP address blocks:        203.89.151.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E4519/0426491E8CAE11EBAA1B1F5EC4F9AE02/qadVVe1wZy9x1S9lk7kbRCC6pws.crl
                          rsync://rpki.apnic.net/member_repository/A91E4519/0426491E8CAE11EBAA1B1F5EC4F9AE02/qadVVe1wZy9x1S9lk7kbRCC6pws.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qadVVe1wZy9x1S9lk7kbRCC6pws.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1387 (0x56b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E4519/serialNumber=A9A75555ED70672F71D52F6593B91B4420BAA70B
        Validity
            Not Before: Mar 21 00:22:45 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=65fb7dd5-deb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:55:bf:12:99:b9:23:57:b3:fb:6c:d2:fd:2a:
                    49:a5:59:58:20:31:ba:65:63:9a:0c:02:40:28:25:
                    a3:b8:8d:00:f8:e6:b9:67:c9:64:2f:25:ef:ed:8d:
                    c7:2d:ae:f1:58:90:7f:68:4f:40:a8:72:05:71:b8:
                    97:4f:ef:fc:19:b7:65:af:95:78:af:b2:94:d5:1c:
                    37:f0:d3:66:af:f6:08:88:d2:b5:24:25:0a:f1:d9:
                    80:57:2e:dd:57:0a:cd:8b:39:6f:ee:57:c2:67:24:
                    f2:0f:7c:cd:0c:50:2e:49:36:4e:80:c9:58:b0:26:
                    0b:51:cc:36:ac:16:67:33:d8:58:ea:7f:34:b1:f4:
                    6e:b2:8a:20:78:d7:fe:47:ec:46:ff:69:ac:c7:cb:
                    cb:71:92:fc:5f:75:49:5b:e5:c7:81:00:d2:17:f3:
                    ec:7d:7f:83:58:c5:f5:83:8d:7f:41:6b:60:a2:ba:
                    b8:8b:07:82:2e:c6:de:e0:b6:db:30:7e:44:52:86:
                    c4:5c:2b:f5:79:2b:31:6a:18:ee:72:8c:8c:5f:97:
                    52:ba:6e:57:ea:ca:ce:ce:e3:07:6a:f0:bb:b7:07:
                    13:71:61:ba:db:53:fb:8d:74:14:02:e3:b6:cf:5f:
                    7e:ae:6c:c0:86:16:e8:bc:b6:44:b9:8e:d4:40:2a:
                    9c:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:4E:F4:42:46:22:9A:DE:63:26:E8:E9:AD:83:8A:42:D9:0A:54:64
            X509v3 Authority Key Identifier:
                keyid:A9:A7:55:55:ED:70:67:2F:71:D5:2F:65:93:B9:1B:44:20:BA:A7:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E4519/0426491E8CAE11EBAA1B1F5EC4F9AE02/qadVVe1wZy9x1S9lk7kbRCC6pws.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qadVVe1wZy9x1S9lk7kbRCC6pws.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4519/0426491E8CAE11EBAA1B1F5EC4F9AE02/C2B5BE908CAF11EBBADF6F60C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.89.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:47:18:41:0d:54:ad:f7:97:c0:a1:f3:39:cc:ad:5f:d0:1c:
         3f:96:66:c9:77:5d:9a:27:2c:11:f8:47:11:fc:c7:c0:bc:9b:
         db:88:18:eb:1a:ed:51:0f:82:64:41:17:07:f4:3c:c4:3f:f7:
         7b:a2:dd:49:e6:35:25:7d:18:e9:2c:a4:e9:43:bf:bd:8e:1e:
         c1:58:87:a7:48:ac:8e:89:76:e6:fb:a6:dd:ab:74:81:10:a0:
         fc:fc:19:a6:e8:4d:2c:6c:f3:5b:6b:00:2a:d5:66:8a:dc:d8:
         db:25:3c:12:64:1c:7c:4c:6b:e3:cd:53:3a:89:bc:1b:5b:91:
         82:00:de:1e:82:7a:50:f5:2e:0c:23:63:cf:10:c1:07:69:8b:
         19:8b:c9:9a:d1:75:d7:f2:84:80:7c:f8:d0:f0:4e:9c:9b:de:
         8e:48:64:eb:5f:04:51:46:62:c6:be:e0:d6:ea:1f:48:eb:88:
         5b:46:ef:99:19:14:bb:6b:fd:e8:06:40:99:00:13:bd:65:25:
         2a:e0:37:9a:ee:ff:7b:f7:dd:2a:b0:cb:38:90:25:77:a0:c4:
         9c:88:62:e6:b6:15:d4:35:1b:90:a5:af:d9:3c:f1:eb:7a:c1:
         9f:ba:21:1b:73:eb:df:79:df:c0:7f:bd:75:b4:f1:46:08:a3:
         c4:1e:0c:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 23:39:36 2024 by rpki-client on console-fra.rpki-client.org