Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E91BC/A4E673CADBE911EC95110515C4F9AE02/129A21B0DC1611ECAACFC563C4F9AE02.roa
File:                     129A21B0DC1611ECAACFC563C4F9AE02.roa (raw, json)
Hash identifier:          5lEvngN+860DIPtDP1jQZ1cLSJ3eijMJ3OZtwv/uxtg=
Subject key identifier:   6E:E2:14:75:A4:27:5A:2C:A6:D3:76:3C:DD:B8:86:82:B7:46:22:59
Certificate issuer:       /CN=A91E91BC/serialNumber=414FB6178869130F826E9E30C0B794084D9760DD
Certificate serial:       0190
Authority key identifier: 41:4F:B6:17:88:69:13:0F:82:6E:9E:30:C0:B7:94:08:4D:97:60:DD
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QU-2F4hpEw-Cbp4wwLeUCE2XYN0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E91BC/A4E673CADBE911EC95110515C4F9AE02/129A21B0DC1611ECAACFC563C4F9AE02.roa
Signing time:             Sat 01 Jul 2023 02:52:40 +0000
ROA not before:           Sat 01 Jul 2023 02:52:40 +0000
ROA not after:            Sat 31 Aug 2024 00:00:00 +0000
asID:                     7545
IP address blocks:        192.188.107.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E91BC/A4E673CADBE911EC95110515C4F9AE02/QU-2F4hpEw-Cbp4wwLeUCE2XYN0.crl
                          rsync://rpki.apnic.net/member_repository/A91E91BC/A4E673CADBE911EC95110515C4F9AE02/QU-2F4hpEw-Cbp4wwLeUCE2XYN0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QU-2F4hpEw-Cbp4wwLeUCE2XYN0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 May 2024 02:50:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 400 (0x190)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E91BC/serialNumber=414FB6178869130F826E9E30C0B794084D9760DD
        Validity
            Not Before: Jul  1 02:52:40 2023 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=649f94f8-ab7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e9:c0:42:47:c7:42:7b:9f:6e:6f:a0:16:10:
                    9a:9b:da:8a:88:ea:bf:7d:46:1c:33:65:97:47:68:
                    ca:b6:ee:9a:6f:9e:90:02:58:cd:2f:d4:01:cb:bc:
                    8b:cb:c2:69:a4:d1:55:6f:9c:a8:4e:7d:07:94:24:
                    d9:01:c9:6b:d9:c2:c2:0c:bc:17:fe:b5:45:5f:27:
                    65:47:f4:85:e1:b9:bd:a7:87:9e:9c:62:4e:91:d9:
                    cb:3d:ef:b8:32:ee:0d:47:76:5d:17:92:43:fb:14:
                    3c:1a:2f:32:79:d0:47:7d:1a:91:b8:c2:8b:58:31:
                    f9:02:6b:0e:4e:ec:78:2c:4f:6d:bc:65:9c:fd:d1:
                    36:ba:d4:95:33:8b:30:25:ce:3a:99:57:34:e5:6c:
                    a8:55:70:cf:9d:87:71:51:d2:7e:3f:c4:a7:a8:c9:
                    14:68:fc:b7:5f:0c:9f:05:5c:26:33:df:3a:c3:28:
                    f3:e2:cf:68:7a:01:82:45:fb:12:b1:33:73:c5:73:
                    65:fa:45:a2:0f:07:da:f6:d0:47:b8:3c:85:d7:e6:
                    4d:3d:02:02:84:b7:69:b5:2a:d6:42:a3:59:23:44:
                    04:24:c8:ce:c0:97:4f:6a:87:4f:26:a2:bc:8b:5a:
                    d6:9e:27:12:5e:a1:77:21:9a:0c:2f:1c:ee:ad:33:
                    0b:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:E2:14:75:A4:27:5A:2C:A6:D3:76:3C:DD:B8:86:82:B7:46:22:59
            X509v3 Authority Key Identifier:
                keyid:41:4F:B6:17:88:69:13:0F:82:6E:9E:30:C0:B7:94:08:4D:97:60:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E91BC/A4E673CADBE911EC95110515C4F9AE02/QU-2F4hpEw-Cbp4wwLeUCE2XYN0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QU-2F4hpEw-Cbp4wwLeUCE2XYN0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E91BC/A4E673CADBE911EC95110515C4F9AE02/129A21B0DC1611ECAACFC563C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.188.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bb:86:f1:a5:1c:56:c0:b6:8d:cf:2a:82:8d:7d:b0:99:a2:a9:
         5f:36:38:2d:31:7f:ec:06:52:61:39:f1:3b:eb:f9:e9:d2:3e:
         4f:6c:30:7c:c5:e8:17:3b:4d:51:ff:63:ec:74:f9:7a:77:fd:
         23:d1:5c:4e:39:b1:ba:c7:94:bf:55:34:a9:30:12:4e:75:48:
         44:a4:91:e3:24:53:9d:2b:4f:35:1f:d9:e4:15:17:2a:6f:01:
         e6:ca:68:0d:0c:e9:e7:ca:17:5f:54:51:db:e2:02:9f:90:3f:
         d1:7d:13:25:91:71:dc:b2:cb:e8:35:85:9b:ab:3f:f8:6c:02:
         29:a1:7c:6d:ce:b7:15:0b:b6:2f:47:ce:ce:af:b1:cd:d8:f3:
         f8:4f:69:69:a9:03:4d:89:d9:d8:6f:fc:46:58:c8:62:d5:64:
         74:66:27:fe:fc:7f:66:18:5c:65:d7:58:5d:02:d8:27:e2:b6:
         62:4f:96:19:ad:3d:a7:9c:38:70:8b:d1:74:11:b4:c9:4c:61:
         3c:e6:90:29:cc:e2:74:86:3c:86:df:10:46:85:b9:c8:78:65:
         68:ce:00:f6:4e:7e:f4:40:94:eb:b1:3f:c0:ba:1c:50:9a:9e:
         9a:f5:ee:eb:3e:f8:8c:34:6f:a7:ec:30:04:b0:b2:33:bf:88:
         08:d9:a4:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 05:40:09 2024 by rpki-client on console-ams.rpki-client.org