Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/B81F8808A72E11EDA708F167C4F9AE02.roa
File:                     B81F8808A72E11EDA708F167C4F9AE02.roa (raw, json)
Hash identifier:          +C42MncUiVmA8hEMkv7M2svsEqpivYDCaY3SuFqVREQ=
Subject key identifier:   8A:84:75:6F:A0:2C:A4:1A:A6:62:8A:54:72:50:ED:4C:7F:FE:A9:CB
Certificate issuer:       /CN=A91406AA/serialNumber=315513E54AB0C99B8BCA84042E38358B60DB1B2C
Certificate serial:       05B9
Authority key identifier: 31:55:13:E5:4A:B0:C9:9B:8B:CA:84:04:2E:38:35:8B:60:DB:1B:2C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MVUT5UqwyZuLyoQELjg1i2DbGyw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/B81F8808A72E11EDA708F167C4F9AE02.roa
Signing time:             Wed 04 Oct 2023 23:41:32 +0000
ROA not before:           Wed 04 Oct 2023 23:41:32 +0000
ROA not after:            Sun 01 Dec 2024 00:00:00 +0000
asID:                     55454
IP address blocks:        182.23.176.0/21 maxlen: 24
                          202.50.246.0/24 maxlen: 24
                          2404:1c00::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/MVUT5UqwyZuLyoQELjg1i2DbGyw.crl
                          rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/MVUT5UqwyZuLyoQELjg1i2DbGyw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MVUT5UqwyZuLyoQELjg1i2DbGyw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 May 2024 00:34:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1465 (0x5b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91406AA/serialNumber=315513E54AB0C99B8BCA84042E38358B60DB1B2C
        Validity
            Not Before: Oct  4 23:41:32 2023 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=651df82c-3b41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:08:8c:3f:40:84:fa:83:60:9b:21:a4:df:f3:
                    e2:5c:09:9d:12:c9:18:25:48:d2:9f:f9:92:52:56:
                    ec:1c:f0:77:00:44:d1:d3:24:56:d9:43:4f:31:5f:
                    96:67:e6:1e:c0:b2:98:1a:80:3d:76:75:3b:1e:ad:
                    55:58:c9:95:e2:ee:d6:71:32:43:94:b6:f0:35:d4:
                    b6:03:31:5c:7d:18:09:cc:aa:7d:d0:91:dc:f7:70:
                    98:52:02:0c:e0:0b:c3:71:92:b8:6f:8d:c6:55:2c:
                    e2:f7:69:4c:46:e3:d5:db:11:36:14:b9:c9:e1:5a:
                    b3:08:27:cf:93:ff:c5:7b:38:61:73:43:10:58:a2:
                    8d:b4:fd:98:91:79:9d:93:df:56:e1:74:f0:6c:64:
                    c4:e7:fd:8c:9e:16:9d:e3:06:dd:90:cc:3f:8d:90:
                    8a:57:37:18:e8:25:95:26:c4:e0:7c:c6:2e:f7:0c:
                    97:50:0d:7c:7b:9c:0b:63:a4:16:3c:e9:ed:ab:c6:
                    21:18:32:a3:65:db:64:fd:3f:62:d2:9a:cc:75:23:
                    15:66:e6:39:df:33:63:2e:00:04:23:84:58:2c:de:
                    7e:1a:de:fd:42:35:e1:22:2e:86:be:36:93:2b:d6:
                    a5:49:77:21:ab:ca:b6:6b:e7:87:ef:d1:a7:e9:08:
                    4f:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:84:75:6F:A0:2C:A4:1A:A6:62:8A:54:72:50:ED:4C:7F:FE:A9:CB
            X509v3 Authority Key Identifier:
                keyid:31:55:13:E5:4A:B0:C9:9B:8B:CA:84:04:2E:38:35:8B:60:DB:1B:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/MVUT5UqwyZuLyoQELjg1i2DbGyw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MVUT5UqwyZuLyoQELjg1i2DbGyw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/B81F8808A72E11EDA708F167C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.23.176.0/21
                  202.50.246.0/24
                IPv6:
                  2404:1c00::/32

    Signature Algorithm: sha256WithRSAEncryption
         55:c9:9b:47:7b:7e:b3:42:64:3c:cb:c8:ae:08:a2:6b:ff:ef:
         e4:44:86:53:95:7e:31:1c:97:40:44:b8:35:51:08:7c:c8:70:
         4e:95:22:09:e3:59:43:8c:eb:ed:90:58:99:d3:f0:d9:31:9c:
         66:df:5f:45:5b:93:81:b7:ec:61:0a:c9:54:7d:2e:b0:8c:47:
         f9:fd:44:ab:09:9e:dd:7c:9e:e8:dd:37:aa:d5:bb:3f:bf:07:
         95:5b:17:6d:98:7e:59:ad:7c:c2:aa:c2:97:4f:c3:60:cf:3f:
         21:52:d9:b6:87:57:c0:ce:df:2d:1a:6e:ca:c3:b9:41:b2:cb:
         c8:f6:63:d9:79:1d:9c:66:29:84:bb:71:f4:c9:e0:ba:67:55:
         93:e2:ae:36:68:9a:29:25:65:ea:15:d7:89:d3:7b:8a:e2:53:
         f8:ab:d5:d5:3b:5a:aa:28:a2:89:50:f5:af:ef:9f:ad:9c:e7:
         da:db:90:19:4e:16:ff:45:9e:37:98:9f:ca:f6:e0:75:ab:20:
         8c:be:9b:7f:bf:9b:6a:d6:16:fd:44:ec:47:94:6c:38:a3:3b:
         3d:25:12:19:08:4a:d8:44:33:94:67:05:d9:10:ca:4b:9e:21:
         31:02:b5:98:de:60:f9:d6:a9:22:40:75:db:a6:11:cf:a6:c5:
         00:2d:8a:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 02:01:40 2024 by rpki-client on console-ams.rpki-client.org