Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912BC39/B37B158E3F2911EB9B9A2314C4F9AE02/8EBA772E3F2B11EB87759716C4F9AE02.roa
File:                     8EBA772E3F2B11EB87759716C4F9AE02.roa (raw, json)
Hash identifier:          q4TouYnOJK9kw6DthKwE6ddGIfkkP54GXsDvT4D8ffw=
Subject key identifier:   8F:27:A4:D9:E7:69:0E:03:99:3C:BB:A1:DF:A2:8D:5F:A4:A2:5D:53
Certificate issuer:       /CN=A912BC39/serialNumber=5D0D75004956EDCCAB9B84271A7340E63855FF8A
Certificate serial:       05D3
Authority key identifier: 5D:0D:75:00:49:56:ED:CC:AB:9B:84:27:1A:73:40:E6:38:55:FF:8A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XQ11AElW7cyrm4QnGnNA5jhV_4o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912BC39/B37B158E3F2911EB9B9A2314C4F9AE02/8EBA772E3F2B11EB87759716C4F9AE02.roa
Signing time:             Sat 02 Sep 2023 22:50:12 +0000
ROA not before:           Sat 02 Sep 2023 22:50:12 +0000
ROA not after:            Thu 31 Oct 2024 00:00:00 +0000
asID:                     37978
IP address blocks:        110.76.176.0/23 maxlen: 23
                          110.76.178.0/23 maxlen: 23
                          110.76.178.0/24 maxlen: 24
                          110.76.179.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912BC39/B37B158E3F2911EB9B9A2314C4F9AE02/XQ11AElW7cyrm4QnGnNA5jhV_4o.crl
                          rsync://rpki.apnic.net/member_repository/A912BC39/B37B158E3F2911EB9B9A2314C4F9AE02/XQ11AElW7cyrm4QnGnNA5jhV_4o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XQ11AElW7cyrm4QnGnNA5jhV_4o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 31 May 2024 23:46:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1491 (0x5d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912BC39/serialNumber=5D0D75004956EDCCAB9B84271A7340E63855FF8A
        Validity
            Not Before: Sep  2 22:50:12 2023 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=64f3bc23-3f8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:dd:15:0c:b8:4b:94:dc:69:d9:21:33:a6:93:
                    69:95:8b:22:ef:83:2a:3c:d4:75:00:66:c4:05:89:
                    25:79:59:5d:08:24:7a:23:19:a0:76:fd:dd:92:a1:
                    db:3e:1e:14:d8:8b:e0:61:6a:57:7f:19:06:b2:37:
                    c8:60:9b:aa:2a:5c:b1:ef:04:7f:fa:fe:f2:c5:66:
                    3d:43:a0:91:a3:61:12:6d:fd:45:21:74:23:8a:04:
                    68:fc:76:c2:92:73:c5:c4:84:1d:27:a4:2a:c0:c4:
                    b9:e0:c4:35:43:e2:79:22:8f:e2:97:de:8a:e8:c2:
                    f4:97:a8:82:a2:7d:a9:10:c0:05:97:de:19:f9:5f:
                    0f:e0:97:88:9e:cd:83:9d:78:bf:c7:93:03:22:af:
                    31:7b:2e:83:1b:b7:72:86:c2:31:6a:8c:6a:3a:3e:
                    e7:30:8e:7d:98:66:0c:59:6a:2a:e9:d6:2b:f4:d2:
                    9d:b4:c9:72:02:2d:6f:9d:67:c5:df:b1:e1:01:3e:
                    f8:f0:4e:bf:df:71:a5:4e:94:1c:9f:33:42:29:6f:
                    cd:db:58:bc:48:ec:59:37:79:de:2d:5a:a1:12:89:
                    aa:40:f9:0e:5e:dc:0f:59:b3:88:cd:59:b9:3a:4c:
                    e9:7f:82:c3:91:91:7f:ac:e1:d7:92:04:bc:f9:cf:
                    24:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:27:A4:D9:E7:69:0E:03:99:3C:BB:A1:DF:A2:8D:5F:A4:A2:5D:53
            X509v3 Authority Key Identifier:
                keyid:5D:0D:75:00:49:56:ED:CC:AB:9B:84:27:1A:73:40:E6:38:55:FF:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912BC39/B37B158E3F2911EB9B9A2314C4F9AE02/XQ11AElW7cyrm4QnGnNA5jhV_4o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XQ11AElW7cyrm4QnGnNA5jhV_4o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BC39/B37B158E3F2911EB9B9A2314C4F9AE02/8EBA772E3F2B11EB87759716C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.76.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         74:65:4c:f8:4e:61:ac:cf:77:94:54:c8:c3:6a:42:c9:02:22:
         f8:6c:6e:be:d0:20:f1:e2:6e:c7:d1:6f:cf:7b:08:36:70:0e:
         d0:2b:5e:d8:bd:1b:21:94:5f:4d:68:04:1c:42:18:ae:7e:7f:
         09:f9:b8:88:a4:e1:37:8d:b5:e3:4c:80:d1:f7:11:cf:7c:9a:
         e1:d7:b1:2a:cb:fb:75:b5:9f:e5:80:59:f7:0a:0f:7b:e9:70:
         92:f6:b2:a0:eb:a9:a0:48:c8:48:0d:33:42:a7:2e:3c:8b:2b:
         6a:75:82:51:e1:6d:fa:f6:9a:b5:e0:0e:43:15:dc:03:b0:3c:
         f3:d9:7b:f3:7f:85:c9:d1:e7:fb:3e:0e:50:a6:4a:30:d2:f9:
         67:e1:da:01:e6:7f:34:6f:ea:6c:a7:28:d3:21:e7:ef:30:35:
         14:2f:7e:4b:d6:8c:b2:5d:ac:e3:07:f4:69:4f:ec:82:88:b3:
         5a:10:bb:4a:5c:86:46:96:5f:95:4b:47:ed:bb:8e:ab:f9:c4:
         f2:db:38:da:9a:fd:80:9e:2b:d4:55:35:09:94:4d:e4:17:c3:
         04:46:48:66:95:c0:8d:a2:b4:2d:a0:96:f9:4a:a7:fa:4f:eb:
         4d:0b:cd:90:e9:c2:cc:18:c2:72:4e:95:57:eb:f0:7a:cb:c1:
         ef:69:29:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 25 00:59:47 2024 by rpki-client on console-ams.rpki-client.org