Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/6A47064CD60D11E9A0539B2EC4F9AE02.roa
File:                     6A47064CD60D11E9A0539B2EC4F9AE02.roa (raw, json)
Hash identifier:          pWxTUtqxVTa8fmJaMDVfLRczVEh9wjHPYj7wjsD9HOE=
Subject key identifier:   85:7B:D4:CF:92:B7:AB:94:AA:43:46:4F:79:16:2A:A8:2E:EE:B4:7E
Certificate issuer:       /CN=A911BD54/serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C
Certificate serial:       2819
Authority key identifier: BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/6A47064CD60D11E9A0539B2EC4F9AE02.roa
Signing time:             Thu 28 Dec 2023 16:02:58 +0000
ROA not before:           Thu 28 Dec 2023 16:02:58 +0000
ROA not after:            Sun 02 Mar 2025 00:00:00 +0000
asID:                     137885
IP address blocks:        110.49.12.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl
                          rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Dec 2024 15:39:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10265 (0x2819)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911BD54/serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C
        Validity
            Not Before: Dec 28 16:02:58 2023 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=658d9c31-1373
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:2e:3a:26:64:5e:4a:5c:00:17:0a:1b:3e:8d:
                    96:1a:ff:3d:87:08:38:29:78:66:64:ba:07:fb:30:
                    22:57:d5:c6:3e:35:31:56:67:83:fb:bb:20:28:59:
                    eb:bc:27:68:27:20:ed:c3:2f:58:c3:c3:ef:90:f8:
                    ae:c2:c1:b9:3a:de:16:27:fe:b6:93:d6:dc:9f:7b:
                    dc:4a:33:09:52:27:10:50:6a:98:78:cf:2d:1c:41:
                    c7:02:41:8b:10:09:c4:e2:87:5d:9e:4d:c7:c8:85:
                    ee:5d:3e:54:af:b6:45:6d:ed:19:12:2e:94:c2:73:
                    5d:9e:77:86:b3:3b:b2:84:c6:45:5c:70:57:6d:70:
                    84:68:91:e6:61:7d:32:e3:c1:37:58:b2:22:a3:4c:
                    47:3e:1d:08:cc:7a:17:0d:8d:1a:c2:f1:ea:29:4e:
                    33:a2:0a:0d:7d:c1:8e:dc:bc:81:5d:28:8d:fc:9e:
                    a5:3d:77:1c:d6:8b:b8:a0:fd:d6:37:53:7c:be:14:
                    dd:3a:8f:37:21:e9:b8:53:35:98:b5:3e:a7:75:45:
                    04:3e:41:c7:50:29:bb:2b:3f:21:d3:e0:3d:ba:64:
                    22:b9:87:53:24:83:e3:2f:d0:04:8c:b7:05:39:a3:
                    46:d7:ea:4b:77:cb:3c:14:ea:70:cd:40:a0:f6:ef:
                    18:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:7B:D4:CF:92:B7:AB:94:AA:43:46:4F:79:16:2A:A8:2E:EE:B4:7E
            X509v3 Authority Key Identifier:
                keyid:BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/6A47064CD60D11E9A0539B2EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.49.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c0:d1:55:e4:48:3d:b2:82:b1:be:ca:af:0f:25:67:5d:ec:ca:
         36:24:ac:05:87:35:51:cd:68:d2:47:d3:de:d6:53:38:0a:a3:
         4f:3b:fc:b7:c9:60:16:b4:87:9a:f9:56:5e:9d:e0:97:31:22:
         85:85:c3:56:e5:a7:42:ac:76:ac:9e:97:cc:e4:98:9b:3f:ee:
         5d:4e:10:50:79:b4:e4:80:1c:af:17:88:03:71:cd:5c:a0:25:
         3d:b3:b7:43:d1:aa:04:85:b6:ef:88:a2:de:0c:6f:72:ad:e5:
         b4:bc:a3:0c:31:b8:81:10:e0:d2:ce:63:9e:21:cd:e7:af:d9:
         34:e2:ed:b7:9f:0d:61:69:9f:c2:06:57:0d:91:be:42:2b:32:
         11:74:51:e3:51:f0:b6:11:8f:56:bd:26:75:bd:92:0c:33:f9:
         40:f6:a1:b8:84:bd:05:8c:c4:80:0c:95:dc:46:c1:0d:f8:eb:
         0f:59:40:d8:e1:42:09:38:e8:2a:97:fe:34:68:4c:9c:d4:e2:
         83:e6:5c:6f:e2:6f:e3:52:02:f9:70:b3:62:1e:90:f5:96:0c:
         73:d6:ce:36:60:29:b0:ea:30:8c:23:92:27:78:7f:4b:32:d3:
         0d:af:92:8a:da:b6:0b:11:8b:3c:1e:57:71:a1:1e:63:95:91:
         22:38:28:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 18:24:03 2024 by rpki-client on console-ams.rpki-client.org