Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/0B547536204F11ED80FBAB21C4F9AE02.roa
File:                     0B547536204F11ED80FBAB21C4F9AE02.roa (raw, json)
Hash identifier:          eAq8KEuxN4It+afNg/ki+nsnMKu4JyCtqenArtfLp7A=
Subject key identifier:   62:20:C2:24:A4:94:E7:CF:84:26:96:37:28:1F:74:87:B2:16:2D:B9
Certificate issuer:       /CN=A911BD54/serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C
Certificate serial:       2824
Authority key identifier: BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/0B547536204F11ED80FBAB21C4F9AE02.roa
Signing time:             Thu 28 Dec 2023 16:03:08 +0000
ROA not before:           Thu 28 Dec 2023 16:03:08 +0000
ROA not after:            Sun 02 Mar 2025 00:00:00 +0000
asID:                     150124
IP address blocks:        110.49.10.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl
                          rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 15:43:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10276 (0x2824)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911BD54/serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C
        Validity
            Not Before: Dec 28 16:03:08 2023 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=658d9c3b-0a76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:79:50:04:8c:45:c3:ab:31:e2:7a:08:54:c0:
                    2c:2b:ce:64:3c:8f:27:38:63:64:df:05:04:8b:84:
                    42:89:d5:6c:a0:54:fc:d4:47:d4:9a:31:41:de:5f:
                    8d:04:24:b9:8a:e8:84:5d:6a:fb:10:66:5b:70:d8:
                    33:16:74:67:e7:3b:24:1b:d7:29:b7:95:85:7c:c1:
                    eb:e2:c6:29:78:dc:cf:32:58:51:71:24:f3:2e:96:
                    b1:3c:b8:0f:30:66:74:6b:f0:ca:2b:c9:76:72:92:
                    92:45:d7:db:a1:5a:0d:01:86:f2:76:37:75:40:f5:
                    02:6d:39:87:d6:78:54:2b:45:b8:34:3f:eb:c5:fb:
                    8c:7d:fc:c8:a7:73:bb:2f:9c:7c:65:f0:e9:9c:47:
                    1b:0a:9e:10:8b:c8:47:8d:35:6a:be:66:ac:53:f9:
                    58:97:82:5b:e8:e4:13:5c:9b:f5:30:09:33:03:42:
                    f7:6e:34:c7:87:44:08:b2:01:d1:24:be:32:c4:d4:
                    36:53:be:93:aa:3b:ef:68:bf:cd:55:1d:5a:a8:f0:
                    e1:04:b8:d3:24:39:23:eb:56:15:c8:2f:e0:59:c8:
                    3a:0c:30:9b:cd:0f:31:10:f9:b8:70:2f:41:fe:53:
                    45:45:97:65:5e:ec:c0:a6:03:ad:64:01:c6:ba:d4:
                    21:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:20:C2:24:A4:94:E7:CF:84:26:96:37:28:1F:74:87:B2:16:2D:B9
            X509v3 Authority Key Identifier:
                keyid:BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/0B547536204F11ED80FBAB21C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.49.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:33:d6:96:e4:85:bc:7e:5d:7c:a6:8c:87:32:03:ba:38:0c:
         e3:0f:dd:4c:b0:7d:f3:6a:34:a6:c4:7c:a5:29:2b:2e:9e:c5:
         e1:93:16:58:5e:16:28:3b:00:bc:d0:06:cc:11:94:01:84:1f:
         0a:df:69:29:2e:aa:2f:b4:50:b3:2e:b1:d5:c5:c9:c4:e6:8b:
         42:fb:cd:31:9f:17:cf:98:db:d4:be:02:66:17:d0:c3:ed:8a:
         8a:3d:f5:cf:28:6b:e0:74:58:04:b9:2a:0b:50:33:e9:0b:d1:
         f8:4a:2b:a5:60:e5:3e:62:e8:07:b7:d1:db:90:03:dc:7a:04:
         8c:aa:fb:7f:ec:48:d0:d8:ee:14:75:50:dd:10:69:4a:dd:3f:
         34:91:44:23:9c:c8:d7:38:24:c7:d1:f3:3b:93:6c:b6:b4:15:
         f9:81:ef:f9:12:5b:50:48:3b:bc:cd:cd:37:83:d8:b8:05:f8:
         d4:4e:eb:88:4c:b8:59:5e:8e:47:77:53:9f:5f:d8:59:54:39:
         9f:87:8e:83:e4:e2:b5:1d:b7:09:2a:6b:18:56:ea:38:55:0a:
         87:dc:37:4c:89:2f:94:0c:5b:86:8d:d8:32:03:6b:63:bc:df:
         4d:31:c7:a6:af:25:88:b7:ec:2e:f5:d6:28:d1:96:f2:cc:19:
         af:78:40:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 19:05:11 2024 by rpki-client on console-ams.rpki-client.org