Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7C90/00D7B04E4EE911EFBADBBF6DC4F9AE02/55EA7D9E4EEB11EF902A7B84C4F9AE02.roa
File:                     55EA7D9E4EEB11EF902A7B84C4F9AE02.roa (raw, json)
Hash identifier:          hYGISbkx0iOPIWsemxA5+ThrUTq4VIEQEwarwfGguJw=
Subject key identifier:   97:39:C5:35:57:5A:B2:52:E5:23:8E:B6:FD:BF:47:3D:8A:9B:BD:0E
Certificate issuer:       /CN=A91B7C90/serialNumber=10EA6532651025029443CE124357D33D28AC24C0
Certificate serial:       12
Authority key identifier: 10:EA:65:32:65:10:25:02:94:43:CE:12:43:57:D3:3D:28:AC:24:C0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EOplMmUQJQKUQ84SQ1fTPSisJMA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B7C90/00D7B04E4EE911EFBADBBF6DC4F9AE02/55EA7D9E4EEB11EF902A7B84C4F9AE02.roa
Signing time:             Tue 27 Aug 2024 07:52:27 +0000
ROA not before:           Tue 27 Aug 2024 07:52:27 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     45744
IP address blocks:        110.232.184.0/24 maxlen: 24
                          110.232.185.0/24 maxlen: 24
                          110.232.186.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B7C90/00D7B04E4EE911EFBADBBF6DC4F9AE02/EOplMmUQJQKUQ84SQ1fTPSisJMA.crl
                          rsync://rpki.apnic.net/member_repository/A91B7C90/00D7B04E4EE911EFBADBBF6DC4F9AE02/EOplMmUQJQKUQ84SQ1fTPSisJMA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EOplMmUQJQKUQ84SQ1fTPSisJMA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18 (0x12)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B7C90/serialNumber=10EA6532651025029443CE124357D33D28AC24C0
        Validity
            Not Before: Aug 27 07:52:27 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=66cd85bb-3f13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:15:06:a1:04:b2:59:2c:d7:e5:73:c9:79:19:
                    f3:9d:17:26:91:d6:63:67:72:f3:fa:d9:c8:75:b0:
                    13:f4:4c:16:00:28:53:b2:3a:67:e9:bf:e8:b0:12:
                    4c:99:47:42:7b:e2:54:ed:22:74:b5:d9:c6:8d:08:
                    7b:1d:e5:6d:36:f8:15:bf:9d:cc:a7:74:66:53:01:
                    29:35:e6:70:d4:43:93:56:a0:54:35:49:5e:cb:11:
                    2b:f5:93:4b:d2:97:c2:4a:c6:ce:b2:2a:f9:2c:59:
                    be:68:49:83:f2:7d:c4:c5:95:02:33:97:9c:fa:82:
                    33:6c:26:6e:ac:8d:1d:a7:bf:a8:7f:45:4d:ab:d0:
                    41:0a:9d:be:4a:2d:84:eb:6a:11:48:aa:7a:64:c6:
                    8b:27:4d:82:ab:c2:1d:61:dc:b2:04:bb:74:94:19:
                    33:71:60:63:2d:fd:11:6d:9d:68:c8:64:02:51:eb:
                    93:09:1b:b9:62:31:94:dd:ef:26:8b:bc:10:a7:d1:
                    2a:c0:91:db:fe:23:5c:a9:f8:c6:7b:df:23:70:91:
                    12:af:1b:62:54:48:a2:c4:2e:0b:5f:4a:e4:c9:7b:
                    4a:f8:b1:a1:5c:44:01:b2:fa:c9:9c:c7:4f:81:98:
                    c3:2a:04:79:a5:7e:3d:90:65:65:5c:d2:74:5e:2e:
                    f1:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:39:C5:35:57:5A:B2:52:E5:23:8E:B6:FD:BF:47:3D:8A:9B:BD:0E
            X509v3 Authority Key Identifier:
                keyid:10:EA:65:32:65:10:25:02:94:43:CE:12:43:57:D3:3D:28:AC:24:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B7C90/00D7B04E4EE911EFBADBBF6DC4F9AE02/EOplMmUQJQKUQ84SQ1fTPSisJMA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EOplMmUQJQKUQ84SQ1fTPSisJMA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7C90/00D7B04E4EE911EFBADBBF6DC4F9AE02/55EA7D9E4EEB11EF902A7B84C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.232.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6b:a4:a4:84:ed:60:21:82:70:d1:e6:7b:0e:06:75:43:70:fe:
         88:d6:42:57:46:4c:06:79:a5:1a:56:06:14:06:bf:01:05:74:
         e7:85:0a:a7:c3:c0:28:f5:2b:18:0d:7c:23:9f:d3:51:af:53:
         df:cb:69:c9:bd:e6:68:5a:1e:f6:ff:93:27:d4:63:57:d7:7d:
         43:cd:36:13:0c:d8:91:42:8d:00:79:8c:9e:54:61:12:d7:09:
         d8:08:87:6b:80:bc:1a:d2:fb:7a:81:07:4e:b0:ce:f3:38:fd:
         64:8a:7b:3d:0d:5c:c1:fe:86:5e:22:30:47:73:1e:fc:0c:7e:
         02:c5:9a:7a:cd:e4:91:19:6c:dd:d4:74:bc:f2:9f:e7:ca:ca:
         f0:20:aa:c1:f0:fb:68:a6:1b:74:27:6e:4f:83:8e:ed:28:a6:
         cf:e8:12:30:84:99:db:36:3e:8d:00:83:eb:33:ed:1e:29:00:
         c4:ad:f6:42:5c:f9:62:de:da:bf:86:29:e4:de:8c:e6:43:b4:
         59:d3:bf:59:4c:7b:b0:d9:0d:f0:7f:18:10:e7:a4:a1:5d:35:
         66:fe:18:18:c2:04:d2:41:96:3e:3d:a5:de:df:ab:1a:cf:b6:
         c0:a6:17:b0:8e:8a:f7:59:c6:e5:b0:14:07:ef:49:84:06:f6:
         10:aa:67:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:13:21 2024 by rpki-client on console-ams.rpki-client.org