Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDB37/5764737A78A011EB950D3175C4F9AE02/DE7B831C37DA11EDBEF9D050C4F9AE02.roa
File:                     DE7B831C37DA11EDBEF9D050C4F9AE02.roa (raw, json)
Hash identifier:          6KgU2d73OHn6SoP3Z4fsTymWOz3Wh/4USqsGTCCfHTI=
Subject key identifier:   91:32:5B:25:E6:6A:70:0C:8A:F9:EC:7F:45:22:D5:69:45:F1:A2:DD
Certificate issuer:       /CN=A91EDB37/serialNumber=BB544176DDE68E3581C5C43F4FC7CC2CF68D6924
Certificate serial:       0522
Authority key identifier: BB:54:41:76:DD:E6:8E:35:81:C5:C4:3F:4F:C7:CC:2C:F6:8D:69:24
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EDB37/5764737A78A011EB950D3175C4F9AE02/DE7B831C37DA11EDBEF9D050C4F9AE02.roa
Signing time:             Tue 04 Jul 2023 23:30:01 +0000
ROA not before:           Tue 04 Jul 2023 23:30:01 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     55720
IP address blocks:        122.10.196.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EDB37/5764737A78A011EB950D3175C4F9AE02/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.crl
                          rsync://rpki.apnic.net/member_repository/A91EDB37/5764737A78A011EB950D3175C4F9AE02/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 May 2024 00:11:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1314 (0x522)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EDB37/serialNumber=BB544176DDE68E3581C5C43F4FC7CC2CF68D6924
        Validity
            Not Before: Jul  4 23:30:01 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=64a4ab79-b380
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:97:6f:1d:90:e4:2a:43:8b:70:6a:17:20:e8:
                    59:14:52:30:88:c7:c3:02:d7:54:a8:49:bc:2f:eb:
                    09:3a:7e:8b:0f:c7:50:6c:dd:72:41:e2:d9:f4:50:
                    a2:15:47:80:96:30:d2:5a:9c:7b:94:d9:28:b9:d2:
                    71:33:0d:10:ce:49:99:70:37:3c:20:e6:b8:ac:5d:
                    fd:8e:a0:59:03:b3:10:1a:66:80:a5:a5:98:86:83:
                    e2:41:45:ad:22:d3:c2:3a:44:9f:0c:cb:13:58:34:
                    db:9b:4e:28:97:76:ee:24:3c:c3:9c:07:e2:21:75:
                    33:6f:c3:17:dd:72:a6:2e:a6:c4:7d:61:de:c2:f8:
                    fc:02:6b:95:5e:ed:24:a7:ce:99:91:67:cc:47:8a:
                    dd:df:75:9d:3e:98:99:5f:62:9a:79:85:8c:e6:f9:
                    f3:27:fa:06:0d:35:06:c8:58:47:86:63:e3:e2:3c:
                    01:c4:56:da:0a:09:7c:36:f5:48:21:e1:60:1c:af:
                    ec:ff:b5:a5:fc:0d:a9:94:27:c9:5b:40:ad:a1:fa:
                    19:cb:57:d4:0e:0e:cf:6d:90:0b:4d:af:ff:96:2f:
                    df:7a:6a:79:95:1a:4a:be:4e:51:4e:bd:24:92:56:
                    be:dd:d8:39:87:82:f1:a4:f5:fa:dc:6e:e8:50:df:
                    b8:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:32:5B:25:E6:6A:70:0C:8A:F9:EC:7F:45:22:D5:69:45:F1:A2:DD
            X509v3 Authority Key Identifier:
                keyid:BB:54:41:76:DD:E6:8E:35:81:C5:C4:3F:4F:C7:CC:2C:F6:8D:69:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EDB37/5764737A78A011EB950D3175C4F9AE02/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDB37/5764737A78A011EB950D3175C4F9AE02/DE7B831C37DA11EDBEF9D050C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.10.196.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b6:cc:8e:2c:8f:2c:95:53:83:7d:4d:4a:0d:8d:55:ab:88:89:
         5c:b3:b2:56:4c:31:4a:ef:76:ed:d8:9d:46:e1:9b:c0:fe:10:
         57:ed:cf:bb:02:1b:eb:83:d6:c6:ed:8d:32:05:5d:fe:70:7c:
         a3:51:0a:a1:55:8a:c3:bc:92:66:6d:30:1c:dd:64:73:fb:a4:
         f0:db:1e:db:37:30:84:09:9d:88:37:1f:88:cf:81:c1:8b:68:
         9e:ff:d3:b6:06:16:b1:60:3c:ca:be:8b:46:7f:42:5e:71:70:
         54:fe:fa:55:0c:c5:ff:eb:e3:3b:e5:ca:fe:38:9d:7f:42:ec:
         a4:8d:60:7f:37:e0:71:9e:5a:16:76:24:80:13:43:41:fc:40:
         1b:16:bb:89:d5:88:6f:12:3c:78:54:2c:3b:9c:13:29:63:3e:
         ac:81:e2:30:41:18:92:b4:a3:8a:ae:16:5c:ac:8d:8c:75:d2:
         df:ec:6d:8c:91:24:97:05:e0:33:fc:c8:31:77:fb:c3:5b:c9:
         0c:be:00:6f:bd:6f:0f:06:22:c1:da:98:af:20:4f:a5:1d:29:
         1f:14:34:63:5d:d4:b3:8a:97:e8:f6:59:3b:b8:74:1c:77:5d:
         9d:09:c6:68:54:d4:2f:80:a4:94:d5:62:5d:dc:bd:77:be:6b:
         30:2f:89:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 02:01:36 2024 by rpki-client on console-ams.rpki-client.org