Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/A98668464EEB11EFB3305C85C4F9AE02.roa
File:                     A98668464EEB11EFB3305C85C4F9AE02.roa (raw, json)
Hash identifier:          o00oY1mvFq1qalSn730w1Zx7f6lSQNkyqzmPEMq0qK4=
Subject key identifier:   90:5B:86:A5:A5:80:48:EE:F8:93:24:49:0D:8E:86:69:5F:FE:B3:F5
Certificate issuer:       /CN=A9110718/serialNumber=76174625E81632D38DF62A83B57B03BA2887E6F5
Certificate serial:       072B
Authority key identifier: 76:17:46:25:E8:16:32:D3:8D:F6:2A:83:B5:7B:03:BA:28:87:E6:F5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dhdGJegWMtON9iqDtXsDuiiH5vU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/A98668464EEB11EFB3305C85C4F9AE02.roa
Signing time:             Wed 31 Jul 2024 03:19:14 +0000
ROA not before:           Wed 31 Jul 2024 03:19:14 +0000
ROA not after:            Sun 31 Aug 2025 00:00:00 +0000
asID:                     132793
IP address blocks:        202.92.155.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/dhdGJegWMtON9iqDtXsDuiiH5vU.crl
                          rsync://rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/dhdGJegWMtON9iqDtXsDuiiH5vU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dhdGJegWMtON9iqDtXsDuiiH5vU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1835 (0x72b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9110718/serialNumber=76174625E81632D38DF62A83B57B03BA2887E6F5
        Validity
            Not Before: Jul 31 03:19:14 2024 GMT
            Not After : Aug 31 00:00:00 2025 GMT
        Subject: CN=66a9ad32-4f94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:36:00:ac:df:d2:62:d7:1f:9b:71:1b:2b:b1:
                    db:f8:21:06:64:0c:11:af:a7:6b:23:a0:83:15:c3:
                    97:83:a3:d7:a4:c1:0a:37:10:45:c2:dc:6d:50:57:
                    b4:bc:91:82:a0:7a:3f:24:c7:51:b5:b7:44:43:92:
                    a4:35:51:ac:8a:f5:83:dd:f3:27:e0:ca:3b:e4:fe:
                    44:50:d0:44:b1:0a:5e:ea:1e:b8:13:b2:d1:7f:c7:
                    ba:0e:e4:a6:3a:e7:7c:14:56:c3:54:10:27:d0:98:
                    88:81:9b:c3:85:ab:2b:e3:61:c5:b6:2f:43:f6:49:
                    89:8f:c2:57:64:5b:52:c7:c5:fc:fa:d0:c6:33:27:
                    3e:ef:2d:fa:b9:6e:df:57:64:15:08:93:1e:fa:00:
                    d5:37:ec:0b:32:2b:1f:5b:4a:a9:f5:fc:e1:ec:a7:
                    e6:38:90:c8:ed:12:d4:aa:75:be:5b:09:9e:b7:a6:
                    6b:5a:1e:92:59:27:78:7a:3a:9c:0d:34:d8:16:54:
                    49:78:07:1a:86:67:00:b7:b3:d7:40:b1:8e:39:a3:
                    9c:82:a9:a3:32:fb:7c:90:28:5f:de:f9:37:d8:b4:
                    2f:85:93:f8:70:77:05:b2:7c:16:f1:51:37:e2:a1:
                    09:48:5a:03:47:d3:55:f5:d6:50:d9:6a:e9:99:13:
                    f4:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:5B:86:A5:A5:80:48:EE:F8:93:24:49:0D:8E:86:69:5F:FE:B3:F5
            X509v3 Authority Key Identifier:
                keyid:76:17:46:25:E8:16:32:D3:8D:F6:2A:83:B5:7B:03:BA:28:87:E6:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/dhdGJegWMtON9iqDtXsDuiiH5vU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dhdGJegWMtON9iqDtXsDuiiH5vU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/A98668464EEB11EFB3305C85C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.92.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:bf:ae:96:6e:30:f8:b0:c6:f6:62:1e:1f:22:5e:48:48:66:
         e3:61:41:27:76:f5:9b:cd:e7:dd:42:b2:c2:a5:5c:57:a7:be:
         1b:0c:6c:56:d4:bb:f0:f8:76:5b:70:7e:b7:20:de:90:85:ce:
         40:63:06:47:18:2d:97:a3:d6:b6:06:59:8d:a1:19:c9:cd:f3:
         58:3e:f0:ac:ca:1e:d0:b4:e2:3f:42:09:02:85:ce:19:27:b9:
         5a:a7:10:3d:0e:d5:54:c3:69:87:84:e2:af:0a:f8:2e:a2:4b:
         21:28:7c:f0:15:fa:4b:95:c3:92:02:89:1a:c3:35:9e:9e:c2:
         32:84:d3:19:6d:86:78:8e:07:31:0d:7c:f0:cb:aa:3b:1d:65:
         db:83:4a:ba:d5:e4:ac:f7:fc:81:38:5f:a3:75:21:95:23:dd:
         58:7f:df:4a:e8:89:6b:20:d3:08:48:6b:7f:80:b3:92:bb:11:
         f1:3f:38:72:3c:0e:f1:73:74:d4:90:c8:ba:ca:ec:21:d1:58:
         1e:c2:5f:22:c8:b9:1c:19:ee:6e:23:5f:bd:a3:a3:7a:e2:3d:
         28:52:ed:68:00:fa:50:81:0f:1c:57:12:12:cb:66:8f:8d:f8:
         15:dd:ed:13:4d:f2:65:fb:85:96:d4:ee:bb:66:15:4a:5a:f0:
         6a:ce:81:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:24:05 2024 by rpki-client on console-fra.rpki-client.org