Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/31745126CD1811EC917CB819C4F9AE02.roa
File:                     31745126CD1811EC917CB819C4F9AE02.roa (raw, json)
Hash identifier:          7VoWeqZEfm/uzTTHWTd+5tooaNNEQjkz4m3jweXJHQc=
Subject key identifier:   66:8B:EC:21:C6:21:E6:2F:1D:01:7D:56:8E:9B:FB:19:F5:67:4B:53
Certificate issuer:       /CN=A9167B50/serialNumber=991B3F17084F76F12F9F0509D597F0FFECA04B4A
Certificate serial:       3498
Authority key identifier: 99:1B:3F:17:08:4F:76:F1:2F:9F:05:09:D5:97:F0:FF:EC:A0:4B:4A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/31745126CD1811EC917CB819C4F9AE02.roa
Signing time:             Sat 02 Nov 2024 14:50:51 +0000
ROA not before:           Sat 02 Nov 2024 14:50:51 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     38187
IP address blocks:        182.54.136.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.crl
                          rsync://rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 14:40:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13464 (0x3498)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9167B50/serialNumber=991B3F17084F76F12F9F0509D597F0FFECA04B4A
        Validity
            Not Before: Nov  2 14:50:51 2024 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=67263c4b-44c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:26:32:ff:54:d2:cd:44:9f:60:6b:d0:68:28:
                    c2:17:77:42:8c:b0:15:90:3c:5e:1f:d0:79:f9:a2:
                    85:c0:3f:c2:84:86:27:2a:dc:e1:52:f5:72:7a:a2:
                    23:a3:d9:cc:2b:ed:30:d6:4b:55:fb:af:f6:a9:03:
                    e5:42:cf:69:fa:16:4a:d8:37:da:9d:32:b7:b1:d1:
                    43:9d:92:8b:f8:e9:2b:e1:df:d1:18:ff:18:c6:85:
                    c6:26:52:6d:a1:00:4b:5b:c6:05:17:b8:f1:b9:94:
                    81:e7:ef:d9:90:54:26:d5:5a:01:5b:cf:18:91:59:
                    03:21:6c:7b:43:b3:52:8e:98:09:a0:39:c2:46:6f:
                    e6:17:06:df:11:0c:11:c7:80:51:e5:bc:26:13:33:
                    6a:ba:ad:e9:b0:81:fe:dc:4c:1e:35:d4:d0:9c:a2:
                    55:a4:14:a6:2a:d9:1e:15:ce:c5:40:43:26:b7:f9:
                    9d:e0:68:93:3a:e9:6c:32:79:5c:79:9a:f1:06:aa:
                    5f:a1:f1:c9:2a:7d:ee:43:c6:32:3a:7b:20:64:39:
                    b4:d9:5f:c2:d9:5d:72:34:01:e4:16:84:a1:b2:4e:
                    9e:ee:58:4e:c8:fe:fa:ef:fa:57:29:35:42:a6:f0:
                    c3:2e:3b:eb:88:e9:61:09:14:e5:4d:2f:c4:e2:bd:
                    f1:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:8B:EC:21:C6:21:E6:2F:1D:01:7D:56:8E:9B:FB:19:F5:67:4B:53
            X509v3 Authority Key Identifier:
                keyid:99:1B:3F:17:08:4F:76:F1:2F:9F:05:09:D5:97:F0:FF:EC:A0:4B:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/31745126CD1811EC917CB819C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.54.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:39:6e:85:83:61:2a:fb:65:08:1c:3a:55:88:e3:6d:25:d5:
         9d:a0:a0:72:4e:b8:2f:a5:b4:5f:68:96:79:b6:d0:a9:40:25:
         f3:f8:be:24:ef:0a:45:52:04:c1:7a:d4:40:af:a4:db:6e:80:
         52:3e:99:4e:94:de:a3:57:c3:e4:10:08:d1:38:b8:b8:a7:fa:
         a0:23:cc:e1:b7:71:6c:70:35:b2:02:1f:bf:58:9d:43:36:6c:
         2f:03:c3:21:ab:a5:e1:1f:82:7d:cc:41:ce:35:c4:7a:51:de:
         37:df:b9:10:a0:3c:71:60:da:64:f3:7b:82:2e:c3:c7:01:a8:
         94:39:c6:0c:95:8d:1d:bb:2c:5c:5d:fc:da:56:63:f1:15:89:
         69:f7:5e:e3:f6:4a:d3:f6:74:b6:32:4b:8d:60:66:2e:75:62:
         09:ec:14:26:b6:fc:11:07:14:32:c9:ab:ee:ae:b8:93:b3:e6:
         24:e5:6c:73:14:e4:81:f8:2e:19:b4:29:aa:69:8d:b4:e6:1a:
         e4:df:b7:41:13:d8:d3:0e:e0:5f:36:f9:01:d2:0b:7d:4e:17:
         e9:ef:a1:0b:4a:09:01:32:ad:e4:32:70:c4:9f:49:af:d3:41:
         c2:a1:f6:7e:79:43:07:73:8a:4b:74:e3:df:3b:33:12:45:de:
         e5:a1:cf:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 16:00:09 2024 by rpki-client on console-ams.rpki-client.org