Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/4BB76870066011EEA5F59657C4F9AE02.roa
File:                     4BB76870066011EEA5F59657C4F9AE02.roa (raw, json)
Hash identifier:          LDal1HTT1g7sLlGFpI3TeXgi0GQb4KJLi3q3Ymiti+U=
Subject key identifier:   39:E9:A2:84:96:EC:1B:CA:0C:C1:A3:D8:4D:38:01:B7:1E:E7:F6:15
Certificate issuer:       /CN=A914EAE4/serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA
Certificate serial:       1D23
Authority key identifier: AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/4BB76870066011EEA5F59657C4F9AE02.roa
Signing time:             Tue 02 Jan 2024 16:54:19 +0000
ROA not before:           Tue 02 Jan 2024 16:54:19 +0000
ROA not after:            Sun 01 Dec 2024 00:00:00 +0000
asID:                     140330
IP address blocks:        110.87.0.0/19 maxlen: 19
                          110.87.64.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.crl
                          rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 14:50:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7459 (0x1d23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914EAE4/serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA
        Validity
            Not Before: Jan  2 16:54:19 2024 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=65943fba-bd8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:2f:a2:29:e8:50:37:dd:2f:2a:35:23:53:85:
                    3f:65:f7:2b:e3:37:88:7f:22:67:81:b1:4a:62:02:
                    c1:4b:a9:d8:0f:c9:d2:a9:50:c9:47:cf:99:24:5a:
                    b4:23:5e:16:91:c5:0b:2d:a6:ee:a4:bf:d5:39:14:
                    53:05:c8:a8:d2:30:58:95:2b:e7:ad:14:21:c6:a7:
                    c3:76:a6:9b:6b:39:28:0e:1b:60:84:04:81:c8:45:
                    ae:3c:b2:79:21:5c:26:e3:70:40:bb:6d:ef:f5:2f:
                    e8:bb:aa:f9:0d:b0:af:c9:43:c7:0c:11:b2:a7:27:
                    79:e6:93:bc:fb:1f:7f:50:78:7f:d9:d3:af:14:95:
                    a8:61:54:54:70:4f:da:94:71:3e:b8:ca:fa:85:e2:
                    61:66:70:64:aa:ac:d7:a3:cf:e0:4f:4c:d7:58:a5:
                    76:33:42:91:3a:5f:1a:0a:32:22:88:45:a2:3d:e5:
                    32:09:17:e9:2e:1c:13:11:4f:83:04:21:6b:90:ca:
                    02:18:54:0c:91:05:1e:e5:bb:f4:33:2e:0a:61:53:
                    ce:79:a2:2a:48:63:16:b3:36:ce:85:e1:e0:76:04:
                    78:5c:6b:6e:a2:f5:1c:94:58:93:4a:15:cd:35:27:
                    4e:30:f9:f8:09:e0:f2:dc:7e:a7:ee:3f:ce:77:cf:
                    06:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:E9:A2:84:96:EC:1B:CA:0C:C1:A3:D8:4D:38:01:B7:1E:E7:F6:15
            X509v3 Authority Key Identifier:
                keyid:AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/4BB76870066011EEA5F59657C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.87.0.0/19
                  110.87.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         3d:dc:09:d8:b9:97:2d:3d:7f:c5:c3:6b:cd:21:04:58:81:c3:
         33:d5:78:ca:9a:52:eb:45:79:6b:c8:c2:ce:98:02:15:8c:35:
         5e:0a:e8:48:9e:99:eb:bd:8b:b8:0d:6d:f6:c6:9d:54:9d:a2:
         c7:26:2d:71:8f:d8:76:34:b5:13:f2:67:3a:ad:d1:a4:d9:fd:
         15:a9:c8:f6:72:0b:cd:cb:fc:cc:56:a8:99:cb:3d:a3:11:e0:
         e1:61:40:6d:f9:70:41:4d:73:47:4c:56:a9:07:6e:b3:c0:1e:
         b4:0d:17:72:24:b8:e2:c9:dc:cb:06:68:9a:79:13:10:cd:db:
         53:d1:47:b6:70:bd:5a:d0:9c:75:d4:3a:a5:0f:d1:58:07:1b:
         f4:e4:45:47:1a:45:68:0c:3f:b7:6d:d9:0e:d0:9c:ae:b7:d2:
         5a:f3:ca:0f:44:43:9e:c8:02:8b:4e:d5:85:c2:fe:75:58:a8:
         47:c1:ce:fc:fa:58:ca:cd:ab:40:58:78:41:4f:bc:7f:28:bb:
         18:be:46:dc:d3:80:88:ac:6c:1d:b1:23:b9:6d:2e:45:62:bf:
         5c:29:b5:f1:7d:8d:7d:02:d5:98:b9:bd:cd:34:d0:75:37:8a:
         8d:1a:f4:b5:ae:88:9e:ab:c7:1d:45:7c:dd:45:86:dc:2e:d4:
         6e:d0:94:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 18:21:36 2024 by rpki-client on console-ams.rpki-client.org