Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB916/74EC397E7D3D11EE9AF7391AC4F9AE02/18066BD682CD11EE82EA6452C4F9AE02.roa
File:                     18066BD682CD11EE82EA6452C4F9AE02.roa (raw, json)
Hash identifier:          3T8n7XFrrCjc9ierjYTs1Q2T8wlu+fKt96UZROhsq48=
Subject key identifier:   D2:AC:4F:1A:B1:E5:3C:4E:78:73:90:B8:CB:2B:09:BA:A4:2A:51:1F
Certificate issuer:       /CN=A91DB916/serialNumber=D50D11837308AB1F15A75F351643FB7FC014854C
Certificate serial:       0B
Authority key identifier: D5:0D:11:83:73:08:AB:1F:15:A7:5F:35:16:43:FB:7F:C0:14:85:4C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Q0Rg3MIqx8Vp181FkP7f8AUhUw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DB916/74EC397E7D3D11EE9AF7391AC4F9AE02/18066BD682CD11EE82EA6452C4F9AE02.roa
Signing time:             Tue 14 Nov 2023 09:07:23 +0000
ROA not before:           Tue 14 Nov 2023 09:07:23 +0000
ROA not after:            Fri 31 Jan 2025 00:00:00 +0000
asID:                     152103
IP address blocks:        180.131.134.0/23 maxlen: 23
                          180.131.134.0/24 maxlen: 24
                          180.131.135.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DB916/74EC397E7D3D11EE9AF7391AC4F9AE02/1Q0Rg3MIqx8Vp181FkP7f8AUhUw.crl
                          rsync://rpki.apnic.net/member_repository/A91DB916/74EC397E7D3D11EE9AF7391AC4F9AE02/1Q0Rg3MIqx8Vp181FkP7f8AUhUw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Q0Rg3MIqx8Vp181FkP7f8AUhUw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11 (0xb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DB916/serialNumber=D50D11837308AB1F15A75F351643FB7FC014854C
        Validity
            Not Before: Nov 14 09:07:23 2023 GMT
            Not After : Jan 31 00:00:00 2025 GMT
        Subject: CN=655338cb-e6a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:41:47:ae:fa:29:2e:a3:96:f4:8f:6b:15:6f:
                    8e:3b:8b:01:cd:f1:7a:2d:46:fb:b9:82:c7:24:13:
                    58:05:2b:75:2a:2b:d9:ac:4b:47:57:e0:56:9e:04:
                    87:39:f1:63:9f:c6:02:ad:7c:c3:1a:fe:10:f5:87:
                    d8:13:b2:de:e1:81:86:71:be:23:e2:78:82:ba:d3:
                    11:3e:17:5a:0c:28:cb:2a:54:af:4b:ee:83:50:d6:
                    98:0e:3d:3b:7e:a1:0f:19:2e:30:cc:fb:0d:b2:fb:
                    54:a7:5d:48:a7:9f:95:6d:35:5c:66:5f:b1:68:1b:
                    0e:17:99:9b:8d:3c:e0:b7:a1:ae:7d:1a:24:2a:10:
                    20:b3:38:f1:30:93:23:2c:b5:d9:f1:40:14:b0:2e:
                    54:55:67:86:e3:40:f7:db:be:a2:e6:fa:8f:ac:7a:
                    74:7c:a2:9b:17:01:5b:d2:70:0f:a1:e0:01:eb:28:
                    55:24:d9:b8:e9:be:cb:03:d1:a3:ec:6f:cf:9a:c8:
                    71:cb:07:d7:83:62:2a:e5:b4:83:c9:aa:34:e0:0a:
                    3f:09:39:b0:f3:cb:4d:f4:e1:08:eb:49:ef:a0:81:
                    e8:9b:c5:34:0e:e9:2e:5b:3f:ce:73:94:92:55:00:
                    9d:87:99:61:3b:fd:92:c2:af:e0:47:eb:e0:7e:65:
                    ee:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:AC:4F:1A:B1:E5:3C:4E:78:73:90:B8:CB:2B:09:BA:A4:2A:51:1F
            X509v3 Authority Key Identifier:
                keyid:D5:0D:11:83:73:08:AB:1F:15:A7:5F:35:16:43:FB:7F:C0:14:85:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DB916/74EC397E7D3D11EE9AF7391AC4F9AE02/1Q0Rg3MIqx8Vp181FkP7f8AUhUw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Q0Rg3MIqx8Vp181FkP7f8AUhUw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB916/74EC397E7D3D11EE9AF7391AC4F9AE02/18066BD682CD11EE82EA6452C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.131.134.0/23

    Signature Algorithm: sha256WithRSAEncryption
         98:56:c8:2f:1b:03:e8:b9:eb:ec:34:4c:5f:82:d5:f8:5d:61:
         3f:82:60:91:30:24:15:fa:8c:a1:a7:dc:61:28:ad:d3:29:06:
         04:aa:0e:5f:bc:d3:47:fd:9b:94:70:6d:5a:54:f3:75:39:fe:
         84:81:65:e2:f0:fa:d9:a3:20:4c:d0:be:46:01:73:29:57:b5:
         4e:8f:d2:ad:96:ea:c6:ba:65:7e:77:58:cc:27:20:41:01:25:
         1a:42:8b:9a:fd:fa:eb:c4:e9:eb:b8:cd:54:f1:4a:10:c9:d2:
         d5:87:8e:7d:a8:88:63:f3:b0:f5:04:46:4d:dc:ca:f9:fa:23:
         67:8f:56:1f:c9:82:c9:7c:2a:ad:56:1a:62:da:ef:db:b2:ef:
         d4:fb:00:c4:76:44:b8:10:26:52:57:44:2d:75:38:34:cb:f4:
         e6:bd:ba:31:99:5f:be:3e:79:c5:22:dd:6d:d6:80:0c:73:0e:
         0e:10:89:82:5d:46:df:2d:cc:7f:e5:22:81:9b:2e:96:dc:3d:
         d0:65:c8:c3:f4:02:ce:16:d5:d9:5e:83:c7:a1:bd:47:5b:32:
         7f:c1:33:38:8b:8e:26:94:66:04:1f:75:a2:22:8d:2f:9e:19:
         b1:9e:5a:a8:99:cc:33:26:cb:47:69:1c:4b:14:76:9c:41:20:
         4c:89:5c:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:13:25 2024 by rpki-client on console-ams.rpki-client.org