Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91596C4/F3DDEEDE833011EC8FF39383C4F9AE02/0AE155E6833411ECBB74C786C4F9AE02.roa
File:                     0AE155E6833411ECBB74C786C4F9AE02.roa (raw, json)
Hash identifier:          P2hgHU8XOvbHIrBabwcVzNSzMatmcwCF4tAzz5uDO10=
Subject key identifier:   37:97:08:BE:DE:4C:EC:1B:12:89:81:BE:EE:0E:37:C8:AE:CE:17:DC
Certificate issuer:       /CN=A91596C4/serialNumber=3EE26FBA4BE359DEAE500792EBFF78D00ACB760C
Certificate serial:       0379
Authority key identifier: 3E:E2:6F:BA:4B:E3:59:DE:AE:50:07:92:EB:FF:78:D0:0A:CB:76:0C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PuJvukvjWd6uUAeS6_940ArLdgw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91596C4/F3DDEEDE833011EC8FF39383C4F9AE02/0AE155E6833411ECBB74C786C4F9AE02.roa
Signing time:             Mon 21 Oct 2024 00:44:11 +0000
ROA not before:           Mon 21 Oct 2024 00:44:11 +0000
ROA not after:            Mon 01 Dec 2025 00:00:00 +0000
asID:                     198949
IP address blocks:        149.234.189.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91596C4/F3DDEEDE833011EC8FF39383C4F9AE02/PuJvukvjWd6uUAeS6_940ArLdgw.crl
                          rsync://rpki.apnic.net/member_repository/A91596C4/F3DDEEDE833011EC8FF39383C4F9AE02/PuJvukvjWd6uUAeS6_940ArLdgw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PuJvukvjWd6uUAeS6_940ArLdgw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Dec 2024 17:11:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 889 (0x379)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91596C4/serialNumber=3EE26FBA4BE359DEAE500792EBFF78D00ACB760C
        Validity
            Not Before: Oct 21 00:44:11 2024 GMT
            Not After : Dec  1 00:00:00 2025 GMT
        Subject: CN=6715a3db-bcb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:1e:0b:20:05:9a:82:81:8f:e1:19:39:33:af:
                    bd:79:5a:18:da:ec:20:83:f3:d2:62:12:df:f0:49:
                    62:91:d1:79:94:29:8f:f9:dc:0a:b7:7b:41:6e:fb:
                    7b:53:62:15:29:f8:8e:37:67:31:e9:30:fd:42:5a:
                    3b:5e:0d:65:f6:95:84:4f:b3:83:d7:70:c2:9d:04:
                    33:2e:bf:9b:50:b1:9e:81:03:b1:e6:fe:52:9a:64:
                    7d:b2:c2:a7:ea:0d:79:89:8c:83:ee:3e:1f:f3:81:
                    7e:fe:d9:22:00:6b:c3:d7:d8:b2:f3:96:86:dd:bd:
                    f4:34:e4:d9:8b:64:94:a5:b7:3a:0d:25:26:c9:f6:
                    af:03:fb:a3:14:b6:df:93:31:a7:bd:41:cc:10:58:
                    32:59:3a:bc:f8:29:75:ee:ce:9f:96:33:6f:ef:81:
                    9f:e2:16:5f:2d:7e:95:70:64:12:43:9c:59:9c:bb:
                    32:64:d6:a3:fd:9d:c5:36:ef:be:5e:93:b7:8e:06:
                    57:d8:d0:34:7a:23:8e:0d:9e:ca:12:92:63:02:b6:
                    90:46:97:67:2c:40:df:af:25:e2:6b:3f:bf:75:68:
                    87:92:03:4f:76:4f:af:ca:1f:e2:c1:37:97:c9:05:
                    85:a2:2d:f8:f8:7c:19:7a:d3:c5:98:29:3c:95:85:
                    4c:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:97:08:BE:DE:4C:EC:1B:12:89:81:BE:EE:0E:37:C8:AE:CE:17:DC
            X509v3 Authority Key Identifier:
                keyid:3E:E2:6F:BA:4B:E3:59:DE:AE:50:07:92:EB:FF:78:D0:0A:CB:76:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91596C4/F3DDEEDE833011EC8FF39383C4F9AE02/PuJvukvjWd6uUAeS6_940ArLdgw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PuJvukvjWd6uUAeS6_940ArLdgw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91596C4/F3DDEEDE833011EC8FF39383C4F9AE02/0AE155E6833411ECBB74C786C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.234.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:27:5b:d6:17:8d:61:e6:d4:c2:b7:97:1b:38:4d:74:9d:11:
         e7:6d:71:74:30:1e:02:6e:fa:f0:d8:35:f0:07:1a:0a:96:d8:
         3c:ef:63:2b:b5:a6:54:d1:d2:44:ad:b4:34:21:02:b8:ac:1e:
         a0:9a:69:88:5c:15:27:69:2d:aa:fd:12:51:69:fd:e6:db:72:
         8d:84:fa:54:e3:3d:03:e9:3f:73:6a:a5:4c:65:df:f9:53:6b:
         38:62:df:02:82:c8:ab:b1:63:9c:12:b6:60:04:27:d8:db:a6:
         98:cc:70:43:40:bc:e2:bd:9c:aa:f7:52:54:73:97:97:87:44:
         6b:71:46:a2:4a:04:98:80:c3:6b:b8:23:9a:be:14:f8:f0:86:
         58:aa:08:83:48:15:4c:b4:55:d6:21:f4:d3:78:96:1f:5c:39:
         0c:32:b8:53:00:e1:7a:96:ce:e7:bd:67:0c:e6:97:a8:7d:84:
         a2:0e:0f:c1:c0:8c:39:a7:23:e6:25:e3:2d:93:a6:64:48:40:
         cd:ec:1a:b7:46:1b:18:6f:f6:d4:e0:57:cf:b8:df:40:35:8e:
         be:a4:bb:69:07:7d:f2:cd:c2:d2:6d:71:9f:5a:06:4c:20:a3:
         07:c2:f5:4b:46:e7:09:e6:be:76:96:b9:9f:96:b1:fd:77:d7:
         f0:f7:2b:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 01:01:27 2024 by rpki-client on console-ams.rpki-client.org