Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/E19410B657F511EC83549412C4F9AE02.roa
File:                     E19410B657F511EC83549412C4F9AE02.roa (raw, json)
Hash identifier:          yq+tRGAIRsM5gnfuH2BH+y41AXHJup3pnGYaivGPZeI=
Subject key identifier:   11:C1:C5:CB:47:90:A9:B8:C3:19:95:32:16:DE:1C:29:38:CC:05:B5
Certificate issuer:       /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Certificate serial:       3892
Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/E19410B657F511EC83549412C4F9AE02.roa
Signing time:             Tue 16 Jul 2024 14:30:44 +0000
ROA not before:           Tue 16 Jul 2024 14:30:44 +0000
ROA not after:            Tue 30 Sep 2025 00:00:00 +0000
asID:                     149036
IP address blocks:        210.86.194.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
                          rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Dec 2024 14:20:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14482 (0x3892)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
        Validity
            Not Before: Jul 16 14:30:44 2024 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=66968414-af08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:90:76:59:f6:cf:5f:ba:55:d9:72:87:3c:28:
                    de:85:2d:72:10:1e:dc:43:6a:dd:c8:f4:b4:24:c9:
                    a6:a6:69:34:12:a7:34:55:b2:b8:0d:6b:aa:e6:e2:
                    ce:e2:81:ac:ed:ba:f1:91:03:72:7c:48:c7:d3:b8:
                    ce:74:ed:d8:5e:43:62:c6:b5:14:b7:0e:b3:73:99:
                    cb:ca:cf:22:8a:53:b0:4b:18:b2:32:18:d6:88:ce:
                    42:9a:e8:98:75:6d:e6:48:d6:b9:7f:8e:9b:b2:76:
                    be:f6:77:87:c8:e0:b2:89:64:21:dc:86:f1:ec:05:
                    6e:fe:f8:ab:20:1f:69:56:85:7b:90:2a:8b:bc:13:
                    05:c8:4a:bc:7f:10:cf:33:3d:06:01:aa:de:1e:66:
                    b7:93:62:84:01:88:3f:e8:db:bf:4a:c9:02:99:58:
                    57:de:c8:3d:85:11:15:bd:ea:ba:d6:3c:16:24:ee:
                    4e:e2:0c:41:f9:81:76:e7:c4:36:b4:29:79:57:a2:
                    f5:93:57:b7:20:db:e8:ae:e5:35:be:95:99:99:c0:
                    ee:da:e1:b2:f5:4e:ad:6a:65:e8:f8:ae:be:fa:dd:
                    d3:6e:cf:98:2b:e2:b1:5b:bb:44:40:9d:6f:b3:81:
                    71:0a:a9:eb:26:41:c8:7f:20:8f:d4:6d:17:8c:1a:
                    4b:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:C1:C5:CB:47:90:A9:B8:C3:19:95:32:16:DE:1C:29:38:CC:05:B5
            X509v3 Authority Key Identifier:
                keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/E19410B657F511EC83549412C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.86.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:cb:02:9d:12:1a:26:01:8e:bc:9e:ef:49:92:b5:65:6e:80:
         27:80:b2:fd:dc:ef:92:b8:e0:e5:86:1b:f5:71:3f:fb:06:c8:
         a6:ac:34:62:a0:df:11:33:54:4c:1e:7f:04:01:f5:c5:a3:88:
         3a:40:40:49:6e:81:16:03:cf:76:84:0d:eb:49:c2:b5:59:2d:
         df:a7:af:7e:b8:4a:58:88:ef:c3:fb:8a:53:7e:04:dd:a4:ad:
         32:40:46:8d:cf:bd:f1:49:f6:6d:e5:d4:66:04:20:d9:9f:c5:
         96:02:0e:e0:22:ef:5b:4d:a4:6c:36:12:39:cc:b4:32:b3:d8:
         2e:7a:cd:c2:66:08:69:ba:a0:2b:3b:bc:31:28:88:9a:c3:5e:
         ec:0c:51:12:8e:5c:9a:2f:97:19:95:76:c6:80:21:65:85:24:
         e3:10:8a:16:6d:2e:4e:1e:d5:b2:bd:a4:5e:08:b1:ec:cd:fc:
         a8:34:a0:bb:14:28:57:3f:bb:29:e2:88:64:03:7f:67:97:45:
         e9:e4:47:de:81:2d:16:a1:79:31:31:9c:6d:8d:81:21:96:67:
         5d:f4:e5:9c:16:1e:79:48:f8:be:b8:f3:0d:d2:78:80:70:47:
         62:b7:ee:48:9c:52:72:9f:ac:6b:9c:42:27:fd:69:43:6b:0a:
         4d:1f:cb:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 17:20:00 2024 by rpki-client on console-fra.rpki-client.org