Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/E3865FE0784D11E898A8FA2BC4F9AE02.roa
File:                     E3865FE0784D11E898A8FA2BC4F9AE02.roa (raw, json)
Hash identifier:          eML7VuP1Hu+QIPmhlKFw6yBvEYxaETPptiBTrWEyjSU=
Subject key identifier:   01:A2:E0:E6:75:2D:1C:9D:D9:4D:32:73:D7:F2:9B:E4:FA:82:2B:6F
Certificate issuer:       /CN=A911BD54/serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C
Certificate serial:       2810
Authority key identifier: BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/E3865FE0784D11E898A8FA2BC4F9AE02.roa
Signing time:             Thu 28 Dec 2023 16:02:49 +0000
ROA not before:           Thu 28 Dec 2023 16:02:49 +0000
ROA not after:            Sun 02 Mar 2025 00:00:00 +0000
asID:                     134162
IP address blocks:        110.49.0.0/24 maxlen: 24
                          119.31.108.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl
                          rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 16:10:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10256 (0x2810)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911BD54/serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C
        Validity
            Not Before: Dec 28 16:02:49 2023 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=658d9c29-9128
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:a6:ed:94:ba:5e:f6:4b:47:37:7a:29:78:bd:
                    dd:8e:56:9d:9e:77:b2:10:5b:da:45:1a:74:72:54:
                    63:0d:bd:d1:a1:44:23:38:5e:05:05:2b:38:e6:df:
                    03:36:74:54:bd:cd:f7:d1:f0:90:13:81:8a:df:dd:
                    13:df:2c:a0:25:3d:12:a1:06:19:11:f0:6a:7f:6c:
                    a9:0e:d4:5c:12:8d:99:bd:5b:28:29:7c:27:51:be:
                    90:85:af:06:ff:da:74:14:3b:65:e8:4b:07:c5:05:
                    26:58:d1:4c:0b:66:29:c0:70:18:e3:d4:ba:ea:40:
                    f2:64:c0:f5:77:86:95:9b:df:86:43:8f:e1:e6:15:
                    45:93:33:43:75:d9:f2:30:06:59:44:dc:02:c9:f2:
                    d5:f2:15:ef:52:aa:df:13:99:9d:cf:b7:26:35:e0:
                    98:e5:01:6d:82:31:5b:5c:37:6d:50:81:44:23:ae:
                    48:db:54:cd:fb:38:a7:5a:02:2e:ec:1d:f7:2c:c8:
                    37:4a:24:e9:21:3c:67:78:df:09:23:48:4e:23:93:
                    01:2a:eb:11:2f:30:cf:d8:de:57:1c:83:e0:53:a0:
                    5c:ae:70:22:9f:17:ff:26:38:90:32:e7:66:48:4c:
                    45:ff:f9:33:1f:01:7b:19:f4:fc:67:a1:af:97:58:
                    e5:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:A2:E0:E6:75:2D:1C:9D:D9:4D:32:73:D7:F2:9B:E4:FA:82:2B:6F
            X509v3 Authority Key Identifier:
                keyid:BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/E3865FE0784D11E898A8FA2BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.49.0.0/24
                  119.31.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:a9:1c:ed:49:8c:5a:3d:fb:69:00:43:2e:1a:ff:1d:73:a9:
         02:39:4a:cf:9b:78:f6:d0:e3:5d:36:f4:29:68:43:65:18:32:
         85:22:43:4a:87:10:43:6c:d2:f6:b6:29:58:f6:b3:0b:bd:77:
         e2:3c:e5:02:3e:75:9b:99:c4:35:a4:ed:3b:e8:5f:e5:29:23:
         b4:21:3a:4f:f8:c6:ce:35:85:16:76:0a:8d:ed:dc:c9:b3:97:
         58:15:c7:a1:bb:0e:d7:2f:cf:49:de:83:16:99:8e:7c:bf:8a:
         c5:ac:94:db:43:71:94:86:1a:af:91:b2:4e:c4:77:25:65:25:
         c1:3b:d8:17:ff:c6:20:98:f5:79:1b:cb:8a:24:6f:53:6b:59:
         34:f6:e9:f2:e3:f5:b4:a6:a0:ef:7e:a3:6a:db:3b:29:43:e0:
         32:3b:4f:ce:c5:f1:df:79:9b:f8:99:1b:13:ce:8d:c9:87:26:
         43:c6:e8:60:15:47:69:74:b0:07:b9:5b:9f:6f:6d:1f:c3:9e:
         f0:ae:7b:8d:22:54:5a:4a:57:d1:a0:73:fb:50:c4:17:6b:ad:
         aa:69:11:b1:ca:d8:40:b6:65:6c:ea:b4:ab:c9:a8:54:d9:1f:
         53:5d:e9:8e:74:9f:ce:51:e5:9b:19:e1:59:9f:2d:c1:1b:ba:
         df:14:16:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 17:44:22 2024 by rpki-client on console-fra.rpki-client.org