Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/D739C032ABB411EF831ABD31C4F9AE02.roa
File:                     D739C032ABB411EF831ABD31C4F9AE02.roa (raw, json)
Hash identifier:          uY0bWUf8Cjabfot4cnprNCqwK43zihKEipQ5uvIRhLA=
Subject key identifier:   0E:AC:BE:8B:5C:F5:DB:DA:D2:BF:B7:13:A4:CF:62:37:3A:AC:1B:B7
Certificate issuer:       /CN=A911BD54/serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C
Certificate serial:       2981
Authority key identifier: BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/D739C032ABB411EF831ABD31C4F9AE02.roa
Signing time:             Tue 31 Dec 2024 15:53:09 +0000
ROA not before:           Tue 31 Dec 2024 15:53:09 +0000
ROA not after:            Mon 02 Mar 2026 00:00:00 +0000
asID:                     153459
IP address blocks:        110.49.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl
                          rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 27 Feb 2025 15:57:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10625 (0x2981)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911BD54
        Validity
            Not Before: Dec 31 15:53:09 2024 GMT
            Not After : Mar  2 00:00:00 2026 GMT
        Subject: CN=67741365-7e9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:c9:44:38:e7:b5:7c:0c:18:31:d5:24:8a:50:
                    0f:d0:5b:6e:ad:b0:89:92:71:10:b8:c1:5d:1b:f1:
                    88:db:80:e5:f4:44:43:ec:af:97:06:9a:f5:9a:2b:
                    29:28:83:7f:76:cc:64:36:01:7d:18:e2:31:e0:4d:
                    93:1d:ac:e7:02:02:2c:32:d2:d6:c9:dc:a4:a6:4c:
                    e2:60:21:63:d1:48:b1:10:95:45:c6:97:91:b4:4c:
                    19:18:8b:7c:ec:3c:67:a8:22:90:a5:95:57:ab:9c:
                    b3:3a:ff:79:4a:e1:71:6c:e7:c3:62:94:58:7d:2c:
                    65:4c:af:6c:d9:97:b7:68:8f:4d:95:ab:84:5f:ef:
                    c0:b3:bd:53:2b:e9:b3:bc:88:e9:f3:dd:40:8d:40:
                    49:12:f0:7b:43:35:ef:98:cc:b2:24:51:e7:a2:36:
                    6a:72:61:d3:41:95:f0:0e:74:31:6a:68:c1:c8:b3:
                    e9:48:4d:05:0b:b7:f6:e6:82:3e:63:da:18:29:c9:
                    13:6f:19:dc:b2:33:e7:11:ec:42:f1:ab:57:b7:40:
                    98:04:49:60:5e:e6:35:2b:28:bb:64:56:dd:5b:d3:
                    84:81:36:74:41:e1:96:bd:00:97:93:d2:df:44:1c:
                    16:fc:6d:c7:64:ea:a9:17:b0:5f:4f:32:e5:c1:f0:
                    58:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:AC:BE:8B:5C:F5:DB:DA:D2:BF:B7:13:A4:CF:62:37:3A:AC:1B:B7
            X509v3 Authority Key Identifier:
                keyid:BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/D739C032ABB411EF831ABD31C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.49.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:d6:74:38:5e:1b:ef:93:4f:08:1f:1d:32:50:3b:89:be:e7:
         cd:80:6b:7f:59:14:b5:6c:ec:fc:b1:20:78:f8:00:aa:32:e7:
         d2:0f:ac:a5:7e:7d:42:0f:48:04:a6:be:6f:bc:f0:32:07:92:
         5e:0f:7d:8b:39:ad:26:c7:0e:a2:ca:90:f5:97:50:fb:82:72:
         ba:f5:03:a0:09:75:a3:0b:ef:1d:61:e6:6f:5b:dd:f9:67:c5:
         c7:7f:1f:2d:3c:87:d5:21:0f:10:ac:a2:51:8f:f3:40:69:95:
         c0:40:0a:c9:18:bb:c1:0c:e6:7a:68:04:25:2e:88:f7:58:bf:
         d9:bb:23:3c:da:2b:b0:69:a9:12:1e:ce:75:a3:61:ba:81:68:
         a7:69:b3:df:ce:c3:64:72:ff:9b:36:69:36:98:40:7b:a6:6c:
         c7:54:e5:bb:ee:88:52:25:a7:65:b3:71:22:8b:2e:23:58:b0:
         54:a5:00:0a:dc:9a:0e:a5:65:dd:05:93:c3:72:39:eb:fd:89:
         84:0c:7b:1a:b9:49:66:6b:be:c3:bc:9c:11:86:2b:ed:50:5d:
         77:76:6d:56:36:90:77:65:da:1e:b6:1c:eb:7d:5f:44:f9:e3:
         21:d9:64:aa:e3:80:06:9b:79:a0:81:1d:55:28:65:f7:0a:00:
         4b:61:29:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 22 04:31:29 2025 by rpki-client