Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9131589/37E390A00CCC11EDB0993C15C4F9AE02/82759C100CCE11ED97C94316C4F9AE02.roa
File:                     82759C100CCE11ED97C94316C4F9AE02.roa (raw, json)
Hash identifier:          cG28lDeyahzWWkmTahaq+sCJHYmimDEkICh6+dm+qWU=
Subject key identifier:   59:56:47:2B:CD:7A:5C:D1:5D:31:4F:06:88:9D:6D:74:C9:02:43:67
Certificate issuer:       /CN=A9131589/serialNumber=E1DB2FC825EC3BBBE72857A73EC086A0821E20FD
Certificate serial:       01FF
Authority key identifier: E1:DB:2F:C8:25:EC:3B:BB:E7:28:57:A7:3E:C0:86:A0:82:1E:20:FD
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4dsvyCXsO7vnKFenPsCGoIIeIP0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9131589/37E390A00CCC11EDB0993C15C4F9AE02/82759C100CCE11ED97C94316C4F9AE02.roa
Signing time:             Sat 21 Sep 2024 02:15:38 +0000
ROA not before:           Sat 21 Sep 2024 02:15:38 +0000
ROA not after:            Mon 01 Dec 2025 00:00:00 +0000
asID:                     134592
IP address blocks:        143.92.110.0/23 maxlen: 23
                          143.92.110.0/24 maxlen: 24
                          143.92.111.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9131589/37E390A00CCC11EDB0993C15C4F9AE02/4dsvyCXsO7vnKFenPsCGoIIeIP0.crl
                          rsync://rpki.apnic.net/member_repository/A9131589/37E390A00CCC11EDB0993C15C4F9AE02/4dsvyCXsO7vnKFenPsCGoIIeIP0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4dsvyCXsO7vnKFenPsCGoIIeIP0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 19:45:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 511 (0x1ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9131589/serialNumber=E1DB2FC825EC3BBBE72857A73EC086A0821E20FD
        Validity
            Not Before: Sep 21 02:15:38 2024 GMT
            Not After : Dec  1 00:00:00 2025 GMT
        Subject: CN=66ee2c49-ced6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:60:8d:36:44:0c:9f:17:68:4a:1a:18:50:c1:
                    b5:a9:70:98:1c:ea:01:78:0e:d5:ed:23:1d:c5:c4:
                    a0:37:1d:b3:b0:41:dd:54:7b:4e:d2:6d:d1:30:ea:
                    ea:5a:c7:e9:56:16:7b:30:ac:e0:c6:fb:df:05:4b:
                    f2:03:cb:57:9d:c7:15:3f:9a:f8:f1:6e:96:31:a7:
                    8f:df:26:bd:0a:6a:0b:81:61:a4:3e:3a:48:46:9d:
                    b8:5c:47:31:61:8c:90:ca:c8:8e:0c:e9:10:55:a4:
                    a1:89:ff:7a:d5:76:2c:98:48:1a:93:d8:fe:78:f4:
                    4f:ef:53:eb:2e:df:6c:02:06:1f:b7:7c:b6:d2:f2:
                    14:fc:cb:cd:2c:9c:fd:fe:0a:60:44:45:31:70:ef:
                    7c:84:99:00:a8:4d:9c:fc:a5:4a:13:86:a9:63:9c:
                    33:24:34:80:d2:5f:d8:5b:52:b4:07:b7:35:a3:40:
                    ff:46:20:cd:b5:2b:b9:96:93:66:20:a0:80:8d:8c:
                    4d:d8:0e:f3:90:66:11:7c:2d:5b:ea:a4:ff:73:2f:
                    e8:c4:5f:b6:c5:bd:4f:c1:6c:d4:d0:78:7a:ce:a9:
                    00:c0:e9:f7:bc:24:cf:26:6c:6f:aa:a5:3a:55:9e:
                    00:0f:1c:ba:79:09:01:de:47:58:d0:89:4f:c1:db:
                    d1:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:56:47:2B:CD:7A:5C:D1:5D:31:4F:06:88:9D:6D:74:C9:02:43:67
            X509v3 Authority Key Identifier:
                keyid:E1:DB:2F:C8:25:EC:3B:BB:E7:28:57:A7:3E:C0:86:A0:82:1E:20:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9131589/37E390A00CCC11EDB0993C15C4F9AE02/4dsvyCXsO7vnKFenPsCGoIIeIP0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4dsvyCXsO7vnKFenPsCGoIIeIP0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131589/37E390A00CCC11EDB0993C15C4F9AE02/82759C100CCE11ED97C94316C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.92.110.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2e:80:d2:9e:f1:6f:e1:d9:e8:37:e6:de:21:15:8c:3d:c2:b3:
         b0:fa:c8:65:04:cc:72:04:75:c2:75:c2:1e:95:41:46:83:ff:
         05:01:8a:a5:59:e9:5a:1b:97:82:ff:b3:bc:9a:85:60:54:48:
         67:db:2e:35:a9:dd:27:87:6a:8c:2d:c6:8d:fc:4e:33:d5:80:
         1a:6a:d5:a1:24:53:be:1d:5e:47:a0:0c:59:c7:81:55:a4:2c:
         2c:d7:29:92:33:ad:b2:2e:0d:8b:30:70:f6:e8:a1:91:e5:43:
         9e:64:43:27:75:c5:53:8b:a1:b7:5f:36:80:1e:69:01:71:1b:
         77:22:99:87:f3:80:86:97:06:f8:06:37:48:d6:6d:0a:32:b4:
         35:6d:bd:66:a8:de:c6:0d:f9:28:10:f1:d3:d6:95:99:b6:6c:
         ac:d0:83:c3:1a:a8:0b:2b:f6:dd:4f:f3:b1:d0:98:cc:bd:a1:
         62:84:98:17:0a:c5:66:b3:43:44:53:95:04:d7:c0:7f:7c:62:
         89:96:e6:22:dc:9f:31:76:71:ac:0d:47:37:3e:4f:52:3d:96:
         28:2d:80:f9:9b:e0:21:52:8e:33:78:0d:2d:0d:f1:bf:0e:8d:
         a6:c3:cc:1d:ea:be:14:4d:2e:7f:1a:71:f1:06:d2:ad:0c:e8:
         a4:e6:72:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:11:52 2024 by rpki-client on console-fra.rpki-client.org