Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/ACC8833824DE11EDAEC0E529C4F9AE02.roa
File:                     ACC8833824DE11EDAEC0E529C4F9AE02.roa (raw, json)
Hash identifier:          ZEsoO7d4Ck/GuDJLaWryEDW7qSN6cf21k/FYL5VpF1A=
Subject key identifier:   41:5A:23:DF:C5:05:66:2E:8C:4E:58:95:CF:81:01:1D:BA:8E:77:22
Certificate issuer:       /CN=A91E6D5D/serialNumber=64A665816AEFED73B3075007DA5337AC7DEC4B81
Certificate serial:       1912
Authority key identifier: 64:A6:65:81:6A:EF:ED:73:B3:07:50:07:DA:53:37:AC:7D:EC:4B:81
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/ACC8833824DE11EDAEC0E529C4F9AE02.roa
Signing time:             Thu 06 Apr 2023 14:50:30 +0000
ROA not before:           Thu 06 Apr 2023 14:50:30 +0000
ROA not after:            Wed 29 May 2024 00:00:00 +0000
asID:                     2914
IP address blocks:        116.51.16.0/20 maxlen: 20
                          116.51.40.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.crl
                          rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Apr 2023 14:50:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6418 (0x1912)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6D5D/serialNumber=64A665816AEFED73B3075007DA5337AC7DEC4B81
        Validity
            Not Before: Apr  6 14:50:30 2023 GMT
            Not After : May 29 00:00:00 2024 GMT
        Subject: CN=642edc36-40c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:68:99:9f:a8:24:bb:56:af:20:be:dc:e9:63:
                    79:b0:d1:69:2a:52:da:d2:51:d6:b4:a6:2a:07:5f:
                    b0:44:60:75:a6:ba:ea:6e:f6:78:1e:bf:28:1c:bb:
                    67:7b:0e:07:30:2e:bb:16:7c:c7:b7:14:99:e9:01:
                    df:aa:f6:85:b0:44:37:77:9a:f8:0c:a9:c3:6c:0c:
                    c9:7a:b4:8c:c8:b8:0d:fc:d5:8b:f6:b1:2f:14:71:
                    1d:b2:ba:2f:ab:4e:6c:0d:b0:33:4d:9c:2c:87:75:
                    b4:d6:96:5c:e4:57:7b:7b:e8:93:9c:45:0f:af:c6:
                    23:91:c5:a6:48:fe:06:50:b1:87:5a:b3:18:44:56:
                    35:75:98:77:83:cc:05:57:8a:df:8e:50:95:90:86:
                    f2:25:40:50:da:f1:93:ab:10:0f:8e:a5:fb:93:d1:
                    b1:11:ed:a0:4e:c7:38:96:1d:28:79:5c:81:cb:49:
                    c8:43:97:39:71:98:67:9b:e3:68:ef:21:19:e8:b0:
                    cd:ce:ca:62:65:9d:07:da:d4:18:1b:cf:3e:f8:cf:
                    9e:4c:83:d1:9d:de:18:b8:77:be:98:f6:3e:be:9c:
                    b7:03:09:2e:61:6d:cb:8a:41:d9:9e:4a:c3:d9:df:
                    b8:2f:0c:e7:9c:10:04:8d:da:a4:e1:ec:fd:f5:e7:
                    6a:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                41:5A:23:DF:C5:05:66:2E:8C:4E:58:95:CF:81:01:1D:BA:8E:77:22
            X509v3 Authority Key Identifier: 
                keyid:64:A6:65:81:6A:EF:ED:73:B3:07:50:07:DA:53:37:AC:7D:EC:4B:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/ACC8833824DE11EDAEC0E529C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.51.16.0/20
                  116.51.40.0/21

    Signature Algorithm: sha256WithRSAEncryption
         41:b2:2f:6f:05:3b:59:1e:fd:97:ec:76:ec:d4:3e:5b:2b:06:
         f6:f1:1c:d5:eb:51:45:de:3b:42:c6:db:6f:63:6b:a7:36:30:
         16:18:69:3a:3f:2a:78:6f:4b:a4:7c:df:3e:ba:fa:41:22:7e:
         da:9b:9c:dd:42:e9:b2:71:23:9c:50:6d:59:d8:61:18:aa:f7:
         ad:0e:02:69:16:01:71:f6:e1:15:aa:1b:3e:5a:2c:dd:93:18:
         ca:53:09:a9:09:9a:55:af:89:5b:56:28:df:3c:19:12:07:f9:
         cf:e8:38:c3:cf:53:c3:0f:84:47:12:01:16:1b:33:f0:0c:2d:
         71:eb:46:86:c6:6a:16:b0:5c:43:38:e6:72:7e:f9:e6:ec:2b:
         2c:db:72:d8:d1:07:3d:e1:bb:66:2c:46:01:dc:8e:18:31:e9:
         10:99:44:c4:dc:48:25:2c:b7:87:9d:cf:a5:12:29:d3:91:d1:
         51:cd:60:97:54:b4:72:63:00:54:9c:6c:de:59:2d:e3:73:d8:
         46:7b:6a:65:dd:d1:db:c8:60:8b:4d:7f:15:fe:ad:25:b7:f6:
         1e:72:eb:eb:03:f1:e2:fd:37:53:99:1e:81:97:1b:df:5f:03:
         a1:be:e4:61:3e:d1:15:64:c6:6c:a2:f8:cc:36:c3:a7:ef:3f:
         58:3a:61:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 6 15:19:18 2023 by rpki-client on console-fra.rpki-client.org