Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/1A83389CC35211EE8CE04C38C4F9AE02.roa
File:                     1A83389CC35211EE8CE04C38C4F9AE02.roa (raw, json)
Hash identifier:          qt+b79qUZeUfV9aMLkK2Vf0knDB1FC/92rGPVNLCE5Y=
Subject key identifier:   42:BF:5F:BD:D1:11:7F:7A:37:2A:18:D6:4B:B5:B4:E6:3E:47:6C:D9
Certificate issuer:       /CN=A911C5B0/serialNumber=7A961769549E0AAD0A9BF9925683BAEF733A2F1A
Certificate serial:       3435
Authority key identifier: 7A:96:17:69:54:9E:0A:AD:0A:9B:F9:92:56:83:BA:EF:73:3A:2F:1A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epYXaVSeCq0Km_mSVoO673M6Lxo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/1A83389CC35211EE8CE04C38C4F9AE02.roa
Signing time:             Tue 30 Jul 2024 14:50:18 +0000
ROA not before:           Tue 30 Jul 2024 14:50:18 +0000
ROA not after:            Tue 30 Sep 2025 00:00:00 +0000
asID:                     23925
IP address blocks:        210.246.92.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/epYXaVSeCq0Km_mSVoO673M6Lxo.crl
                          rsync://rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/epYXaVSeCq0Km_mSVoO673M6Lxo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epYXaVSeCq0Km_mSVoO673M6Lxo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:22:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13365 (0x3435)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C5B0/serialNumber=7A961769549E0AAD0A9BF9925683BAEF733A2F1A
        Validity
            Not Before: Jul 30 14:50:18 2024 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=66a8fda9-d66a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:00:5b:76:0a:f5:66:b7:40:af:b7:ee:e0:6d:
                    bd:c9:c2:54:4e:13:1d:6d:fa:48:93:da:13:66:9a:
                    49:c7:1e:4f:d4:eb:b2:6f:71:5a:2b:86:df:9c:70:
                    ed:af:3c:a3:d1:e4:a1:77:d5:db:13:a6:bd:3e:d1:
                    79:64:51:14:82:dd:29:77:23:c4:e4:af:a0:b1:de:
                    79:78:bb:88:6e:6d:71:a3:43:24:80:14:cd:48:7c:
                    5a:c0:ad:91:00:22:3d:60:02:b1:72:93:27:f5:db:
                    c1:07:40:ff:af:6c:78:47:ca:23:24:3d:07:89:2e:
                    1d:15:ec:d0:99:70:e2:fc:8d:e5:3b:76:64:d1:c0:
                    ae:47:55:1d:5a:91:ce:75:97:04:ed:59:13:d9:12:
                    e9:64:b4:88:3d:22:29:6e:2a:cd:3d:82:85:e9:7a:
                    7d:72:72:43:c5:1d:70:f5:38:9f:97:9e:99:ee:eb:
                    04:a9:a2:5e:e2:33:9c:27:0c:4c:6d:cd:ad:b4:0e:
                    e1:14:7c:d6:36:21:64:fe:1e:29:ef:20:79:bc:3e:
                    b1:ad:f6:d9:d6:9f:75:97:79:b6:c1:81:2e:af:08:
                    9c:11:9e:b6:8e:fa:12:c6:6a:ff:93:a0:21:47:54:
                    14:49:5e:5c:0c:db:09:20:df:7e:be:7f:c0:67:94:
                    f4:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:BF:5F:BD:D1:11:7F:7A:37:2A:18:D6:4B:B5:B4:E6:3E:47:6C:D9
            X509v3 Authority Key Identifier:
                keyid:7A:96:17:69:54:9E:0A:AD:0A:9B:F9:92:56:83:BA:EF:73:3A:2F:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/epYXaVSeCq0Km_mSVoO673M6Lxo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epYXaVSeCq0Km_mSVoO673M6Lxo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/1A83389CC35211EE8CE04C38C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.246.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:97:c4:3f:87:e0:56:d1:68:36:11:ea:76:c7:2e:69:1d:0a:
         1d:f4:14:f5:f7:02:19:8f:f3:26:b4:a9:a7:21:4c:98:fd:bf:
         76:a7:cc:ec:b8:22:81:93:40:2d:d3:b3:f5:93:88:6b:fc:67:
         43:82:83:36:0a:e8:60:a3:99:31:df:ad:b9:53:80:78:2f:25:
         19:bf:fe:b8:49:01:da:b9:f4:37:c7:34:ee:5b:d6:27:c4:66:
         dd:7a:6a:6b:e8:22:87:dc:3c:33:c8:88:31:70:21:21:bc:67:
         f1:95:c1:f1:7c:c2:0e:49:4a:39:57:4d:65:84:d9:19:64:50:
         be:9a:27:39:07:38:2c:6b:a9:e0:d4:b1:39:dd:3e:74:7f:72:
         64:c0:f4:97:21:7c:33:34:3c:38:dc:81:60:d5:cb:15:d8:cf:
         9b:8c:a3:ff:11:d3:23:eb:d8:04:90:9d:5d:27:55:03:fd:1c:
         a9:5f:6f:25:47:c0:98:4c:4b:c9:69:61:2d:8c:63:da:cb:1f:
         2c:fd:b4:ff:dc:33:63:cc:61:ce:6e:c0:cf:a7:15:04:10:2b:
         15:77:ab:12:2d:8c:64:3c:e6:fa:bb:17:de:ba:2b:bc:8c:88:
         e9:a4:7c:94:ae:33:0e:81:72:97:1d:13:9f:af:61:c1:8f:a4:
         34:32:6e:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:25:34 2024 by rpki-client on console-fra.rpki-client.org