Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDB37/5764737A78A011EB950D3175C4F9AE02/DE7B831C37DA11EDBEF9D050C4F9AE02.roa
File:                     DE7B831C37DA11EDBEF9D050C4F9AE02.roa (raw, json)
Hash identifier:          +kKylmkca6+FAx4sOYGqHKzwXEhQ+5JcXHkL0UhejKI=
Subject key identifier:   BB:5B:43:4F:1C:F1:64:75:AF:68:61:20:DE:C1:EB:0B:EF:93:4B:7D
Certificate issuer:       /CN=A91EDB37/serialNumber=BB544176DDE68E3581C5C43F4FC7CC2CF68D6924
Certificate serial:       05F2
Authority key identifier: BB:54:41:76:DD:E6:8E:35:81:C5:C4:3F:4F:C7:CC:2C:F6:8D:69:24
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EDB37/5764737A78A011EB950D3175C4F9AE02/DE7B831C37DA11EDBEF9D050C4F9AE02.roa
Signing time:             Wed 24 Jul 2024 23:41:47 +0000
ROA not before:           Wed 24 Jul 2024 23:41:47 +0000
ROA not after:            Tue 30 Sep 2025 00:00:00 +0000
asID:                     55720
IP address blocks:        122.10.196.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EDB37/5764737A78A011EB950D3175C4F9AE02/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.crl
                          rsync://rpki.apnic.net/member_repository/A91EDB37/5764737A78A011EB950D3175C4F9AE02/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 20:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1522 (0x5f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EDB37/serialNumber=BB544176DDE68E3581C5C43F4FC7CC2CF68D6924
        Validity
            Not Before: Jul 24 23:41:47 2024 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=66a1913b-7cec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:01:ea:80:da:a8:54:67:a7:a4:94:e2:4b:28:
                    8f:81:15:30:d3:2c:0c:44:73:d2:7c:a3:e8:7e:04:
                    fd:c5:2d:85:8a:d9:8e:13:e6:01:f8:6f:6a:eb:76:
                    1a:20:22:f3:0b:b6:f9:47:82:ff:90:2c:c6:66:ac:
                    87:2d:75:11:96:90:80:31:f3:3d:4d:59:60:51:46:
                    84:bf:fb:6d:d8:39:8a:71:e4:a3:9c:ba:5c:9e:34:
                    94:52:ba:7b:c3:f8:eb:8b:62:ea:31:35:b1:bc:68:
                    4c:30:2e:4d:a7:70:eb:92:68:5e:b4:51:18:c4:c9:
                    d3:7f:0d:4d:51:9d:6f:5c:08:e5:41:03:f1:3e:a0:
                    94:fc:d1:78:8b:57:96:4e:48:56:f3:66:f9:c1:56:
                    28:bb:53:72:b8:6e:81:e6:28:ea:6b:2a:fa:c5:c9:
                    1e:ec:1f:df:23:b6:9c:81:4d:f6:9e:18:62:84:09:
                    cf:b4:f7:f3:ef:0c:70:82:4f:fd:d6:f6:13:a0:7d:
                    68:6f:c9:59:fb:fd:d1:3b:c8:34:01:f8:59:0a:ab:
                    00:91:2e:c0:2a:ab:62:76:38:7c:2a:d9:2f:03:10:
                    ea:d8:84:b5:51:c1:5c:fc:97:ba:9a:f0:56:24:cd:
                    95:ca:23:91:05:ac:9c:f2:65:c3:a2:d1:5e:be:30:
                    6b:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:5B:43:4F:1C:F1:64:75:AF:68:61:20:DE:C1:EB:0B:EF:93:4B:7D
            X509v3 Authority Key Identifier:
                keyid:BB:54:41:76:DD:E6:8E:35:81:C5:C4:3F:4F:C7:CC:2C:F6:8D:69:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EDB37/5764737A78A011EB950D3175C4F9AE02/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDB37/5764737A78A011EB950D3175C4F9AE02/DE7B831C37DA11EDBEF9D050C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.10.196.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c0:f6:b4:97:0a:3e:a3:c7:85:56:6b:b0:04:ab:25:33:9c:18:
         86:7b:1b:82:82:b2:ca:25:56:93:d6:87:b7:d6:6a:53:11:15:
         cb:dd:43:14:a1:e1:6f:28:a3:be:17:22:71:7c:62:98:a4:1d:
         9b:86:1d:2e:fd:1e:0b:7a:bc:0c:30:b8:3d:32:6d:ca:1e:6b:
         bd:d4:d1:a7:a2:68:47:d2:53:7c:a6:71:42:bf:c0:9c:c9:ae:
         19:c0:fa:2b:14:66:0f:e4:25:b1:a1:af:9a:3c:7b:d6:72:fc:
         77:a3:c0:91:f8:b3:4f:9f:e4:64:39:6d:40:9f:3a:4d:3a:0b:
         eb:48:48:e1:21:a6:b2:42:d2:ef:f3:db:a2:7c:8a:7e:91:90:
         f0:57:a2:04:2e:eb:12:b5:38:d6:38:7c:c8:7f:42:08:7e:80:
         6c:2a:63:49:8e:7b:c3:4d:ed:85:16:40:72:e4:e1:26:bb:41:
         29:4d:1a:44:3a:18:4d:aa:5e:86:6f:d9:82:43:04:58:96:57:
         85:69:85:14:9a:94:19:8a:d2:a7:d9:2c:1d:06:fa:75:30:cc:
         c2:f6:81:68:aa:f6:91:44:2a:8c:ee:f3:9d:58:9e:f6:4e:a9:
         ce:d2:ff:15:d3:fc:a0:4e:74:6b:68:98:d3:8d:ef:5e:0c:18:
         71:23:fd:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:11:50 2024 by rpki-client on console-fra.rpki-client.org