Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912BC39/B37B158E3F2911EB9B9A2314C4F9AE02/688EAE1E8A1911EC94921D85C4F9AE02.roa
File:                     688EAE1E8A1911EC94921D85C4F9AE02.roa (raw, json)
Hash identifier:          MTlBKQOvD3H5x3p8f5g16DXDYpM2GkLqkKOyF+T4GdA=
Subject key identifier:   23:C5:4B:70:B8:F9:14:7F:55:D4:55:64:BF:19:DF:18:9D:CB:8B:06
Certificate issuer:       /CN=A912BC39/serialNumber=5D0D75004956EDCCAB9B84271A7340E63855FF8A
Certificate serial:       05D2
Authority key identifier: 5D:0D:75:00:49:56:ED:CC:AB:9B:84:27:1A:73:40:E6:38:55:FF:8A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XQ11AElW7cyrm4QnGnNA5jhV_4o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912BC39/B37B158E3F2911EB9B9A2314C4F9AE02/688EAE1E8A1911EC94921D85C4F9AE02.roa
Signing time:             Sat 02 Sep 2023 22:50:11 +0000
ROA not before:           Sat 02 Sep 2023 22:50:11 +0000
ROA not after:            Thu 31 Oct 2024 00:00:00 +0000
asID:                     138186
IP address blocks:        110.76.176.0/23 maxlen: 24
                          110.76.178.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912BC39/B37B158E3F2911EB9B9A2314C4F9AE02/XQ11AElW7cyrm4QnGnNA5jhV_4o.crl
                          rsync://rpki.apnic.net/member_repository/A912BC39/B37B158E3F2911EB9B9A2314C4F9AE02/XQ11AElW7cyrm4QnGnNA5jhV_4o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XQ11AElW7cyrm4QnGnNA5jhV_4o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 31 May 2024 23:48:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1490 (0x5d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912BC39/serialNumber=5D0D75004956EDCCAB9B84271A7340E63855FF8A
        Validity
            Not Before: Sep  2 22:50:11 2023 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=64f3bc22-5fe6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:40:fe:06:81:54:cd:81:97:a1:ad:8c:7f:d4:
                    00:95:8e:50:a0:c2:6d:fb:ee:2f:49:ac:99:15:3c:
                    c2:81:53:a4:6e:58:32:79:46:30:ae:8b:09:6b:ce:
                    b6:53:64:cf:c0:fc:d9:b1:05:15:c7:3e:2b:db:bd:
                    3f:ea:e2:a6:22:bf:2a:dc:58:c2:a2:a6:6f:ef:7d:
                    fe:f7:1a:1e:4a:47:56:2a:a8:48:87:b9:2b:67:10:
                    66:85:a2:2e:b4:e3:29:d5:d6:e2:6e:ad:21:f6:08:
                    1d:ff:84:96:6f:77:af:1f:86:e5:d1:82:2c:b9:d2:
                    e3:20:c9:a6:35:8d:8e:a5:5c:b7:72:fb:2c:1b:61:
                    08:1f:7f:39:07:ef:cd:d7:f3:cf:ff:ed:be:66:de:
                    1f:0e:d9:12:86:82:43:9d:fa:81:a2:76:53:c9:47:
                    8e:6f:30:e6:22:34:21:b7:af:37:89:31:28:02:8e:
                    0c:7a:a8:d2:41:c7:23:0b:71:73:18:8a:4d:a8:d2:
                    cc:3b:d5:2e:c4:4a:d2:46:fb:42:da:82:f9:60:1e:
                    53:e8:0b:50:77:5d:8e:8e:e3:a8:55:ad:f9:0e:38:
                    e9:3d:76:ce:8e:31:0d:8b:89:07:23:a9:c6:93:26:
                    0e:f4:ea:b8:09:fb:c0:c6:ab:f7:94:8a:9f:06:2d:
                    fc:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:C5:4B:70:B8:F9:14:7F:55:D4:55:64:BF:19:DF:18:9D:CB:8B:06
            X509v3 Authority Key Identifier:
                keyid:5D:0D:75:00:49:56:ED:CC:AB:9B:84:27:1A:73:40:E6:38:55:FF:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912BC39/B37B158E3F2911EB9B9A2314C4F9AE02/XQ11AElW7cyrm4QnGnNA5jhV_4o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XQ11AElW7cyrm4QnGnNA5jhV_4o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BC39/B37B158E3F2911EB9B9A2314C4F9AE02/688EAE1E8A1911EC94921D85C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.76.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6e:b3:6a:78:84:28:61:d4:c9:c0:ef:29:25:08:41:e4:e6:8a:
         78:1a:2d:a8:d0:bb:7a:79:0d:a7:52:72:ba:db:ac:67:ae:6d:
         bd:8e:46:e7:c0:01:19:f8:21:ca:82:69:4b:7b:01:bf:b0:d5:
         b4:ea:90:1b:82:2a:47:4f:b3:26:a1:8f:d9:5d:22:f7:e4:f9:
         1f:7c:88:b0:3d:1c:c9:8d:55:a8:28:de:c0:01:28:09:4a:3b:
         83:56:c5:86:aa:69:a4:2f:0e:da:d5:22:f8:aa:39:1c:5c:aa:
         37:a4:69:9a:e5:a5:a8:64:62:96:92:21:a0:11:43:b0:a5:cb:
         6d:1d:09:4b:c1:72:96:ff:fb:c5:8c:93:a3:0b:a5:62:67:51:
         fe:97:14:9b:4c:34:5e:d1:03:76:43:1c:7d:50:2e:33:87:20:
         99:34:bb:6c:03:f6:76:01:2d:8b:b5:eb:6d:42:58:36:bf:aa:
         21:92:0f:9a:fe:e6:f4:cf:e9:f5:6d:93:d9:14:5d:bb:d7:3d:
         6b:78:98:eb:a1:14:a2:22:9b:16:11:43:96:7c:93:b2:8e:d0:
         fa:46:0e:43:4a:45:93:0e:41:60:9a:2e:86:38:cc:c0:d2:69:
         bb:86:00:24:f4:0f:d4:02:91:41:7b:07:de:c2:71:e6:c7:ee:
         f1:91:95:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 25 01:24:47 2024 by rpki-client on console-fra.rpki-client.org