Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/C5FA430E179711EDB9008D18C4F9AE02.roa
File:                     C5FA430E179711EDB9008D18C4F9AE02.roa (raw, json)
Hash identifier:          B1hjBTYwx940cc+Ga3+hdRGNrla7mnw/WcZJINp2Si4=
Subject key identifier:   38:93:60:27:98:8A:E0:C4:71:BE:26:B3:E3:B1:88:C1:00:18:32:37
Certificate issuer:       /CN=A91E5D61/serialNumber=5E5109BE34B81C0CBBE0E4359A7781A4624B9FCD
Certificate serial:       114C
Authority key identifier: 5E:51:09:BE:34:B8:1C:0C:BB:E0:E4:35:9A:77:81:A4:62:4B:9F:CD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XlEJvjS4HAy74OQ1mneBpGJLn80.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/C5FA430E179711EDB9008D18C4F9AE02.roa
Signing time:             Tue 18 Jul 2023 14:30:12 +0000
ROA not before:           Tue 18 Jul 2023 14:30:12 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     144699
IP address blocks:        240a:a801::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/XlEJvjS4HAy74OQ1mneBpGJLn80.crl
                          rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/XlEJvjS4HAy74OQ1mneBpGJLn80.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XlEJvjS4HAy74OQ1mneBpGJLn80.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 14:22:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4428 (0x114c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E5D61/serialNumber=5E5109BE34B81C0CBBE0E4359A7781A4624B9FCD
        Validity
            Not Before: Jul 18 14:30:12 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=64b6a1f4-7267
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:42:99:00:83:a9:8c:b1:e9:13:3b:e1:43:f2:
                    18:42:0f:39:05:f6:75:6e:52:a1:77:04:0e:90:37:
                    5b:7f:44:28:66:57:42:77:6a:fd:23:2c:ae:62:2e:
                    11:6c:9f:e6:1a:33:a6:f5:61:5d:a4:15:47:e1:9a:
                    29:31:ba:25:b6:35:02:e8:d7:b3:69:78:ca:7b:37:
                    f4:15:6c:72:ce:74:d5:89:56:06:62:1b:fd:d2:39:
                    bb:3f:02:a9:9f:99:70:6c:80:58:1e:64:77:1c:dd:
                    2d:53:43:e4:92:cc:a1:a5:89:1c:e0:e7:73:5b:18:
                    fc:01:79:b5:a7:6e:f0:03:e7:ae:fb:a3:4e:ce:b4:
                    01:7f:9d:bc:4c:75:6e:b3:59:5a:81:d6:d3:b3:6c:
                    85:b4:c0:cb:c3:b7:0a:bd:ba:35:20:92:5e:e0:8f:
                    87:69:70:08:fc:dc:eb:f2:c4:eb:44:db:73:bc:f4:
                    ba:57:16:ac:d2:20:d2:54:60:13:25:2d:59:82:ea:
                    9c:17:bd:b7:a3:aa:f8:22:29:8c:ea:c9:d1:5b:e4:
                    98:c6:5d:56:0d:99:ee:c3:e2:3b:03:3e:d5:d5:f2:
                    ce:be:10:e6:ed:c3:87:43:20:3c:63:3e:4e:f5:b7:
                    dc:c2:0d:56:9d:44:1e:a5:98:eb:9f:c1:be:eb:7c:
                    09:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:93:60:27:98:8A:E0:C4:71:BE:26:B3:E3:B1:88:C1:00:18:32:37
            X509v3 Authority Key Identifier:
                keyid:5E:51:09:BE:34:B8:1C:0C:BB:E0:E4:35:9A:77:81:A4:62:4B:9F:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/XlEJvjS4HAy74OQ1mneBpGJLn80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XlEJvjS4HAy74OQ1mneBpGJLn80.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/C5FA430E179711EDB9008D18C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a801::/32

    Signature Algorithm: sha256WithRSAEncryption
         6d:52:15:39:c9:bf:66:36:d0:a3:b6:81:91:a0:30:c6:df:27:
         4c:0f:7c:53:69:7d:1d:37:bb:2b:be:e3:06:4c:ce:08:95:2c:
         47:33:a6:f5:30:53:f6:6c:2e:49:17:f1:ac:43:86:cd:dc:c1:
         1f:23:3a:e0:ce:81:eb:ef:17:f1:49:f3:ac:f2:92:16:c1:d7:
         a6:45:d7:e8:8d:eb:bb:e2:a8:25:b4:ab:5b:fd:5f:e8:17:c0:
         5b:f0:7e:69:5a:5c:18:8b:58:4e:73:b2:17:fa:25:11:a6:e8:
         05:d9:1a:73:51:da:ac:ee:72:48:85:fb:c6:49:68:2d:52:c8:
         4d:9c:13:53:a2:eb:a4:df:e0:d6:9e:7b:c9:b2:60:4b:ad:de:
         3a:c7:f5:5b:c4:82:a9:e5:e5:4c:48:b0:cc:8d:02:44:34:6d:
         b5:a0:99:02:e3:04:d4:a6:5e:84:0a:34:26:b5:45:f5:5e:8c:
         77:5d:db:48:6d:9c:31:1c:d6:63:6d:2a:b9:e9:6f:e4:74:63:
         36:af:60:9f:21:ee:1d:60:cd:93:7f:e4:c2:2b:a0:b1:66:1d:
         a4:05:14:9e:9c:71:df:d7:70:ac:bc:fb:88:0f:e6:be:79:2f:
         3c:f4:c9:cd:e5:05:99:c2:6c:50:41:be:89:f6:f7:be:7d:ea:
         cb:89:14:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 15:26:07 2024 by rpki-client on console-fra.rpki-client.org