Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/15434774090211EEA1C06509C4F9AE02.roa
File:                     15434774090211EEA1C06509C4F9AE02.roa (raw, json)
Hash identifier:          anwOPUmId3w7tNtAGaXwqIZNGB7IFd2lSkWvyx+fras=
Subject key identifier:   73:E7:25:7B:6B:25:33:F7:40:07:A4:DE:50:C7:CE:94:C7:0A:A8:2D
Certificate issuer:       /CN=A91EDB37/serialNumber=95FEBE93A33A3394BD1F60DCBBDDB9FDE072B7F3
Certificate serial:       0553
Authority key identifier: 95:FE:BE:93:A3:3A:33:94:BD:1F:60:DC:BB:DD:B9:FD:E0:72:B7:F3
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lf6-k6M6M5S9H2Dcu925_eByt_M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/15434774090211EEA1C06509C4F9AE02.roa
Signing time:             Tue 04 Jul 2023 23:29:55 +0000
ROA not before:           Tue 04 Jul 2023 23:29:55 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     136166
IP address blocks:        129.227.222.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.crl
                          rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lf6-k6M6M5S9H2Dcu925_eByt_M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 27 Jun 2024 21:54:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1363 (0x553)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EDB37/serialNumber=95FEBE93A33A3394BD1F60DCBBDDB9FDE072B7F3
        Validity
            Not Before: Jul  4 23:29:55 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=64a4ab73-e798
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:20:01:a5:33:93:77:ad:8c:60:94:2e:eb:6e:
                    f1:b5:ed:d3:6d:fc:2e:bf:64:ce:33:c8:9c:db:43:
                    9a:71:b5:f2:4b:bc:1c:18:18:22:f7:ff:a1:07:74:
                    fc:a8:4c:2c:bd:52:a8:6c:e4:28:ac:c1:d8:ba:17:
                    60:a8:30:95:55:ab:c4:ee:21:46:4f:c1:8e:f1:3b:
                    21:f2:5f:fb:84:01:d7:68:7f:17:e1:71:43:ca:af:
                    f0:25:03:4d:61:65:ed:ba:63:e0:ae:58:33:0b:13:
                    3b:f1:fe:99:c9:0c:95:a6:b3:16:2d:f3:90:b0:71:
                    8f:94:8c:57:6b:2a:e6:4d:4e:96:bb:68:ce:f7:25:
                    65:dc:d5:92:67:af:ac:4d:3f:85:65:a6:d5:12:63:
                    b4:10:e8:59:b1:86:ba:50:75:91:13:a6:6b:10:fe:
                    87:26:4d:27:4d:30:e4:fe:34:20:20:e7:c4:22:a6:
                    41:20:9d:68:73:09:64:9b:e9:e2:91:5d:8e:c6:0e:
                    25:8a:e5:1c:75:e9:68:2d:cd:d4:cc:7a:42:7c:2c:
                    ef:32:a5:44:b4:f8:12:ac:52:e7:cf:5b:02:e8:1a:
                    3a:b0:c9:ac:da:9d:c5:b0:70:10:32:c1:9b:93:83:
                    1a:f6:c1:4e:16:f9:a8:ff:03:d7:d5:4e:c8:e5:e2:
                    7e:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:E7:25:7B:6B:25:33:F7:40:07:A4:DE:50:C7:CE:94:C7:0A:A8:2D
            X509v3 Authority Key Identifier:
                keyid:95:FE:BE:93:A3:3A:33:94:BD:1F:60:DC:BB:DD:B9:FD:E0:72:B7:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lf6-k6M6M5S9H2Dcu925_eByt_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/15434774090211EEA1C06509C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.227.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:7c:93:dc:40:2e:f2:80:18:76:74:48:a8:bc:21:d3:d9:95:
         dc:b8:d2:f7:4a:11:d4:82:44:fe:a2:0d:9f:c0:50:da:03:fb:
         f9:a5:d4:ac:3f:36:3f:16:86:b2:53:79:19:71:6f:6a:a9:4f:
         a8:ea:45:8d:76:b1:70:6e:ee:bf:af:ef:59:0e:37:99:49:5d:
         37:99:18:a9:b7:51:90:0f:17:1a:11:a0:18:7a:73:d8:5d:fa:
         23:02:a2:46:64:85:97:b0:d2:ac:a7:4c:dd:bb:9b:bb:9a:bb:
         26:0e:d7:ad:cb:0b:12:5a:34:7f:f4:2f:78:86:e2:7d:a1:85:
         84:2f:47:30:4e:7c:b8:cc:7f:1b:7c:11:66:59:4e:ca:7f:cb:
         e4:e7:26:dc:39:25:5c:9c:82:b9:00:84:12:58:28:f2:d6:fa:
         36:1a:42:ff:8e:53:1f:37:52:05:26:46:78:f3:d1:84:99:f4:
         62:9e:19:bd:5d:25:98:92:c7:0c:7f:55:b9:d6:31:f7:eb:22:
         50:16:37:46:0f:7e:28:13:e0:8b:ca:da:da:73:1a:55:39:7e:
         4c:77:72:76:6a:b4:9e:45:16:7b:08:e2:2c:61:82:11:88:d8:
         a2:af:68:cf:3f:30:78:b0:8a:bd:0a:cd:a1:6b:ee:dd:d3:9a:
         b2:10:8d:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 00:20:25 2024 by rpki-client on console-ams.rpki-client.org