Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/1E5945A69E4111EDB7C9020EC4F9AE02.roa
File:                     1E5945A69E4111EDB7C9020EC4F9AE02.roa (raw, json)
Hash identifier:          ICF+dHQWnJNnfViptqUTP7VKsB6pk9eDoAT9uFZY3Dc=
Subject key identifier:   73:79:B3:E2:D5:16:58:49:3E:5E:A3:F6:05:0E:EA:B9:FA:23:AA:40
Certificate issuer:       /CN=A9110718/serialNumber=76174625E81632D38DF62A83B57B03BA2887E6F5
Certificate serial:       0688
Authority key identifier: 76:17:46:25:E8:16:32:D3:8D:F6:2A:83:B5:7B:03:BA:28:87:E6:F5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dhdGJegWMtON9iqDtXsDuiiH5vU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/1E5945A69E4111EDB7C9020EC4F9AE02.roa
Signing time:             Mon 23 Oct 2023 07:59:33 +0000
ROA not before:           Mon 23 Oct 2023 07:59:33 +0000
ROA not after:            Sat 31 Aug 2024 00:00:00 +0000
asID:                     135162
IP address blocks:        202.92.140.0/24 maxlen: 24
                          202.92.142.0/24 maxlen: 24
                          2400:b000:1000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/dhdGJegWMtON9iqDtXsDuiiH5vU.crl
                          rsync://rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/dhdGJegWMtON9iqDtXsDuiiH5vU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dhdGJegWMtON9iqDtXsDuiiH5vU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 May 2024 20:05:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1672 (0x688)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9110718/serialNumber=76174625E81632D38DF62A83B57B03BA2887E6F5
        Validity
            Not Before: Oct 23 07:59:33 2023 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=653627e5-b45f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:54:07:8b:29:1b:1f:5b:5b:21:39:a6:26:b2:
                    a4:bb:8d:41:63:12:6b:e4:99:9f:44:7c:34:55:46:
                    20:17:e7:87:db:bc:0f:c6:a5:48:6b:a3:2f:27:07:
                    91:0f:c5:8e:1a:22:13:53:de:7d:11:fe:db:2e:8f:
                    1a:e0:9c:e5:fc:db:e3:20:77:e4:6f:37:39:59:6c:
                    27:3d:d4:23:28:da:9d:7a:32:33:b4:6a:25:31:2b:
                    f7:37:b1:a4:6a:20:5d:0e:92:61:8f:56:f8:52:96:
                    bf:89:fd:69:4f:e9:d6:4f:23:dc:29:d6:b3:d1:25:
                    a2:96:13:25:49:65:82:d6:7e:77:ca:90:5c:2e:06:
                    1b:b2:87:22:f2:1f:bc:d7:cc:d4:26:3a:f1:74:4b:
                    a7:0b:b5:07:64:58:43:61:72:48:c6:83:5b:c1:c8:
                    06:f6:8f:e7:eb:e7:90:dd:c2:5e:b2:f4:d0:98:ef:
                    3e:ab:15:a9:29:80:d4:c9:a5:ab:c7:81:91:83:8f:
                    b7:18:d4:1a:9d:f1:56:c1:b6:7b:cd:9c:86:b6:13:
                    2f:a4:14:e2:f5:9c:27:ce:41:28:e3:8e:07:b9:17:
                    71:03:c5:32:45:38:38:c2:0c:60:6f:bd:bd:49:51:
                    ba:6a:e0:45:12:4d:13:2c:3d:08:1b:33:97:c0:ce:
                    40:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:79:B3:E2:D5:16:58:49:3E:5E:A3:F6:05:0E:EA:B9:FA:23:AA:40
            X509v3 Authority Key Identifier:
                keyid:76:17:46:25:E8:16:32:D3:8D:F6:2A:83:B5:7B:03:BA:28:87:E6:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/dhdGJegWMtON9iqDtXsDuiiH5vU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dhdGJegWMtON9iqDtXsDuiiH5vU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/1E5945A69E4111EDB7C9020EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.92.140.0/24
                  202.92.142.0/24
                IPv6:
                  2400:b000:1000::/48

    Signature Algorithm: sha256WithRSAEncryption
         3b:85:52:f7:56:11:91:72:a2:1e:eb:fc:42:90:25:3d:f9:cc:
         19:f3:88:70:90:b9:3a:c5:60:2a:7e:06:1f:45:bf:cd:c4:3e:
         20:7c:8f:56:22:57:4b:fe:7b:cd:bd:db:fb:68:72:80:cc:08:
         1e:ca:95:71:15:85:ad:e9:47:cf:b0:16:8b:7f:97:df:1f:16:
         79:a9:7a:6d:8f:65:7d:e2:b5:0b:b6:67:f3:74:db:e6:21:b3:
         91:98:d9:9a:7f:72:fd:f3:38:80:23:06:78:86:81:e6:76:46:
         f0:1c:21:a7:a3:72:d2:a3:bd:f2:58:69:36:26:9a:51:3c:be:
         9e:3a:42:7f:25:f4:ad:a8:ac:cc:33:0c:57:3a:86:dd:fc:8e:
         a3:e3:13:2e:f5:8b:ac:da:9a:72:96:76:23:e8:b8:90:bd:67:
         fc:d0:09:ac:79:06:28:88:a4:3b:30:e8:24:87:dc:61:0f:8a:
         de:cb:70:4f:21:7a:db:a0:0d:01:78:2e:34:b1:d9:16:82:7b:
         ca:9d:4b:26:e1:29:e2:d3:a2:e1:22:dd:3f:f0:7c:61:2e:f1:
         14:10:e1:a5:0a:01:60:37:90:50:dc:75:d4:0a:12:d2:72:bd:
         45:9c:b7:86:c8:f1:28:d2:5a:3b:e7:42:f1:3b:ff:35:15:e4:
         90:b4:2f:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 23:48:39 2024 by rpki-client on console-fra.rpki-client.org