Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/A73C0BF6D93511E6B2617F7BC4F9AE02.roa
File:                     A73C0BF6D93511E6B2617F7BC4F9AE02.roa (raw, json)
Hash identifier:          9tFXAmM4OkPs0CLNO+5szMsstp127SsFTTf21T1G9Wk=
Subject key identifier:   8D:75:35:E2:AE:9D:66:21:7F:F9:BF:2C:2E:77:04:DA:25:10:00:AB
Certificate issuer:       /CN=A91F0EBF/serialNumber=3ACCB69539AC9F4288BCD0F0A54250D592F540D4
Certificate serial:       2090
Authority key identifier: 3A:CC:B6:95:39:AC:9F:42:88:BC:D0:F0:A5:42:50:D5:92:F5:40:D4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/A73C0BF6D93511E6B2617F7BC4F9AE02.roa
Signing time:             Tue 26 Sep 2023 16:13:06 +0000
ROA not before:           Tue 26 Sep 2023 16:13:06 +0000
ROA not after:            Sun 01 Dec 2024 00:00:00 +0000
asID:                     54836
IP address blocks:        43.230.26.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.crl
                          rsync://rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 16:20:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8336 (0x2090)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F0EBF/serialNumber=3ACCB69539AC9F4288BCD0F0A54250D592F540D4
        Validity
            Not Before: Sep 26 16:13:06 2023 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=65130312-3125
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a8:0c:76:3d:81:67:b7:7f:b5:c1:6c:5d:df:
                    ed:5c:9c:aa:f1:c9:78:f0:b0:ab:cf:02:22:20:f6:
                    3f:a7:a1:d1:95:78:5e:33:94:6d:f6:42:c3:42:8f:
                    57:66:0c:a5:c7:d3:e5:70:0e:ac:2b:b7:e1:ed:2e:
                    89:74:66:85:dc:04:55:2a:96:d6:31:25:8b:c9:a2:
                    9f:8a:db:d7:c1:1b:9e:fa:77:f3:c9:78:35:3c:30:
                    d8:74:90:98:49:0d:a5:bb:a2:21:aa:c9:0c:8c:33:
                    56:ab:23:02:80:c4:54:c4:54:97:07:40:d1:cf:80:
                    ed:dd:fd:44:64:8d:68:76:3d:29:73:c0:d4:3a:c1:
                    48:42:df:7b:73:f9:7e:f8:01:05:53:2f:1a:02:04:
                    50:a1:04:26:f2:96:d8:03:33:37:e9:ab:b1:81:b0:
                    79:87:1b:64:13:eb:5d:94:f0:1f:fd:67:9f:63:4c:
                    37:10:55:82:96:a2:fa:2c:fe:cb:c4:e1:08:39:7a:
                    58:0b:b9:6e:6c:cb:92:f9:94:7a:d5:03:3d:b9:2d:
                    06:cd:e9:d6:4a:d6:f0:fa:27:af:bd:a9:e5:b6:65:
                    31:6e:51:c3:2c:c5:27:c6:cf:9e:94:e5:0e:29:20:
                    f1:20:1c:03:de:c3:bf:49:e4:e6:3a:a3:6c:f1:9a:
                    2d:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:75:35:E2:AE:9D:66:21:7F:F9:BF:2C:2E:77:04:DA:25:10:00:AB
            X509v3 Authority Key Identifier:
                keyid:3A:CC:B6:95:39:AC:9F:42:88:BC:D0:F0:A5:42:50:D5:92:F5:40:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/A73C0BF6D93511E6B2617F7BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.230.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:03:b6:42:13:0e:bc:75:ed:98:c1:20:c9:0c:a1:e6:96:97:
         7d:87:6c:45:3a:d4:48:51:31:fb:c7:b4:98:26:78:dc:c7:bc:
         fc:cc:a9:ce:2b:3d:00:00:36:e4:26:a0:96:26:60:1d:32:fe:
         db:23:5c:21:97:6e:b4:b4:68:4a:9e:4b:51:c6:01:38:0e:7d:
         59:7e:43:34:33:a4:8a:3a:7b:8b:d5:41:d2:be:cb:64:1f:3e:
         f8:5d:61:0c:6f:09:f5:75:40:04:d4:fc:e4:b8:bb:77:97:99:
         c1:3e:d9:aa:28:27:3b:24:b0:4c:46:f1:a2:a2:db:08:4d:49:
         57:d8:20:55:14:77:d8:1d:a6:6b:f0:95:41:d7:e8:24:f1:2e:
         a5:8a:7f:2a:47:06:6c:98:cd:3a:cf:28:8d:9e:4f:0c:8b:5d:
         f2:ac:37:2b:30:e5:1c:53:17:59:37:a9:91:d8:42:f9:b9:38:
         b5:79:4d:9a:38:15:c6:98:c1:ac:2a:32:5e:68:10:18:b5:c8:
         7f:28:8f:34:11:7b:5d:d8:ac:82:da:2e:3d:c4:ec:bd:ac:6e:
         ad:f0:50:3f:21:4b:21:ba:45:07:d0:4d:d7:e4:0b:f9:7b:cd:
         b1:a8:55:87:24:39:33:4d:91:6f:bb:65:77:1a:76:59:23:8a:
         24:a1:5c:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 28 17:51:21 2024 by rpki-client on console-fra.rpki-client.org