Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A381A/28E86E4479FF11EEB32C2379C4F9AE02/EBB7A41AB4DA11EEBD650259C4F9AE02.roa
File:                     EBB7A41AB4DA11EEBD650259C4F9AE02.roa (raw, json)
Hash identifier:          l8sRE2YAPh1eQYlp9y5e6VCbUFJp+lvUI5lEd97/izs=
Subject key identifier:   82:A4:25:9C:69:50:37:34:95:89:43:E7:07:40:AC:96:AA:29:E2:6E
Certificate issuer:       /CN=A91A381A/serialNumber=B3EC1FF6AD552AA16EE1019564BAD9F761FDB5D8
Certificate serial:       92
Authority key identifier: B3:EC:1F:F6:AD:55:2A:A1:6E:E1:01:95:64:BA:D9:F7:61:FD:B5:D8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-wf9q1VKqFu4QGVZLrZ92H9tdg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A381A/28E86E4479FF11EEB32C2379C4F9AE02/EBB7A41AB4DA11EEBD650259C4F9AE02.roa
Signing time:             Sat 03 Aug 2024 06:37:00 +0000
ROA not before:           Sat 03 Aug 2024 06:37:00 +0000
ROA not after:            Tue 30 Sep 2025 00:00:00 +0000
asID:                     131323
IP address blocks:        202.37.93.0/24 maxlen: 24
                          2001:df0:22d::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A381A/28E86E4479FF11EEB32C2379C4F9AE02/s-wf9q1VKqFu4QGVZLrZ92H9tdg.crl
                          rsync://rpki.apnic.net/member_repository/A91A381A/28E86E4479FF11EEB32C2379C4F9AE02/s-wf9q1VKqFu4QGVZLrZ92H9tdg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-wf9q1VKqFu4QGVZLrZ92H9tdg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 146 (0x92)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A381A/serialNumber=B3EC1FF6AD552AA16EE1019564BAD9F761FDB5D8
        Validity
            Not Before: Aug  3 06:37:00 2024 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=66add00c-424a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:7e:3a:96:9a:02:7b:90:0b:63:ae:48:f1:b8:
                    8f:73:87:3f:e5:ee:04:d8:f7:6f:16:ce:6c:b3:f1:
                    00:5a:50:3c:50:b8:a4:c8:fa:cc:61:60:51:42:01:
                    9d:2c:67:5c:00:b8:7e:7e:41:d1:94:23:c3:81:7d:
                    42:27:60:07:80:f8:29:b9:0b:0f:54:75:0e:c2:3e:
                    04:b5:5a:46:cf:c7:da:ca:15:23:98:3e:fd:7a:6d:
                    a3:24:2e:e4:de:c4:72:75:59:46:d6:3b:05:bf:e3:
                    b9:ea:c2:bd:46:46:7a:46:2d:4d:f0:86:fd:e0:53:
                    ef:20:ad:45:7e:64:96:47:98:5b:23:99:30:f7:00:
                    e8:fb:86:fc:dd:22:87:3b:a9:b8:af:74:b2:25:29:
                    6f:18:a9:3e:8c:cb:d4:59:23:29:fd:95:cb:70:a8:
                    68:cc:85:59:f6:bc:af:85:02:c4:97:8d:73:ed:c1:
                    70:f5:cb:33:20:1b:4f:66:14:d0:59:e5:aa:29:47:
                    f8:f7:a6:5b:81:b4:85:15:48:66:d4:8a:34:14:61:
                    b3:f5:b5:fe:fa:6e:7e:36:36:6e:7b:c3:b0:ba:01:
                    0b:b7:41:18:9d:e7:14:e7:13:e7:c0:58:08:b6:66:
                    af:e1:92:2b:22:16:17:81:2b:75:13:00:07:4a:59:
                    e8:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:A4:25:9C:69:50:37:34:95:89:43:E7:07:40:AC:96:AA:29:E2:6E
            X509v3 Authority Key Identifier:
                keyid:B3:EC:1F:F6:AD:55:2A:A1:6E:E1:01:95:64:BA:D9:F7:61:FD:B5:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A381A/28E86E4479FF11EEB32C2379C4F9AE02/s-wf9q1VKqFu4QGVZLrZ92H9tdg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-wf9q1VKqFu4QGVZLrZ92H9tdg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A381A/28E86E4479FF11EEB32C2379C4F9AE02/EBB7A41AB4DA11EEBD650259C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.37.93.0/24
                IPv6:
                  2001:df0:22d::/48

    Signature Algorithm: sha256WithRSAEncryption
         0a:59:f4:38:de:51:4b:e8:6e:62:3b:59:93:61:fa:b9:5a:e4:
         ed:f1:48:ba:ee:03:8a:1c:f4:21:d2:5e:c6:9a:67:1b:1c:02:
         e9:23:f7:64:f7:a9:ab:c5:b1:64:06:5e:67:bf:87:10:29:e3:
         16:bb:56:0f:1d:5f:4c:c7:7b:f3:1d:19:77:91:4e:48:d3:36:
         74:5d:79:00:72:7d:54:97:99:bb:b4:fb:ec:43:da:71:ba:64:
         54:07:42:14:f2:c7:55:1e:35:95:cc:e0:62:1c:e9:ec:8c:03:
         2a:4b:0c:c8:19:96:2a:29:26:e1:c0:b1:aa:70:cd:f7:46:fe:
         3a:01:6f:3b:4f:fc:44:09:22:dc:b4:9a:c4:48:5b:95:62:50:
         db:96:b6:c3:30:d7:59:48:f0:45:f8:89:d5:44:fd:8d:57:04:
         c3:44:0d:b3:ac:ec:5f:96:14:d9:c9:7a:cd:c7:56:3c:bb:8d:
         af:99:dc:0f:d0:60:03:37:7a:37:cb:cd:f7:af:be:6c:d8:a4:
         d1:9b:32:8c:2e:fd:23:86:84:14:4b:55:83:40:92:a2:22:af:
         05:93:67:4f:61:7b:89:b0:86:17:cc:86:dc:0b:48:e4:c1:2b:
         09:dd:a7:8f:e4:98:9f:ce:c9:e8:41:48:33:a1:ef:3f:1e:98:
         aa:9e:09:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:13:18 2024 by rpki-client on console-ams.rpki-client.org