Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/31745126CD1811EC917CB819C4F9AE02.roa
File:                     31745126CD1811EC917CB819C4F9AE02.roa (raw, json)
Hash identifier:          j5OV2OvF8tNNP+AVLmMvlYAh+dmIQcDsjYusvsFeVL0=
Subject key identifier:   04:FF:54:83:6C:23:A5:0F:25:C0:D4:52:86:81:2E:B8:FA:74:CF:33
Certificate issuer:       /CN=A9167B50/serialNumber=991B3F17084F76F12F9F0509D597F0FFECA04B4A
Certificate serial:       33D1
Authority key identifier: 99:1B:3F:17:08:4F:76:F1:2F:9F:05:09:D5:97:F0:FF:EC:A0:4B:4A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/31745126CD1811EC917CB819C4F9AE02.roa
Signing time:             Sat 28 Oct 2023 15:00:45 +0000
ROA not before:           Sat 28 Oct 2023 15:00:45 +0000
ROA not after:            Mon 30 Dec 2024 00:00:00 +0000
asID:                     38187
IP address blocks:        182.54.136.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.crl
                          rsync://rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 14:45:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13265 (0x33d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9167B50/serialNumber=991B3F17084F76F12F9F0509D597F0FFECA04B4A
        Validity
            Not Before: Oct 28 15:00:45 2023 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=653d221d-bb79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ca:45:53:c0:a4:26:9e:07:02:f4:41:60:63:
                    b8:65:94:af:9c:f2:de:3b:c1:46:9f:a8:18:49:56:
                    7d:9c:0d:7d:fc:34:9d:2d:b5:c1:a1:11:ba:e6:5f:
                    90:4d:a0:89:29:a3:77:0f:c8:a8:b3:7b:db:8b:38:
                    cc:07:8e:64:bf:44:b3:51:0b:d5:4f:fc:99:02:06:
                    42:c2:1c:9b:98:e1:4e:80:af:42:d1:a1:1a:30:ea:
                    0c:6c:d1:e6:a3:cd:9d:a2:55:09:72:4e:b5:02:c1:
                    db:0a:a1:88:ca:5b:47:f6:a0:d5:8e:09:0e:d3:94:
                    28:73:78:be:51:c0:78:5b:74:1f:3c:fc:74:6b:a2:
                    bc:20:a7:d2:22:60:3f:63:3c:cd:ea:9b:18:41:fa:
                    9d:15:b7:2e:43:44:0c:b9:33:93:02:6f:ed:46:e5:
                    5b:db:a1:a6:74:24:f5:3d:38:f2:bf:08:99:88:7c:
                    a2:ef:9c:0d:95:94:39:7e:59:13:68:d3:0f:c6:c3:
                    64:a0:ab:a7:77:58:30:a7:cb:ed:0a:61:51:b5:c0:
                    5a:a3:6d:c3:3e:49:79:76:1f:56:a3:2f:4d:1e:e8:
                    97:0d:e9:b9:d4:4d:e6:f3:84:e8:22:68:1c:1c:1e:
                    f8:aa:56:f6:7c:6f:c0:92:c8:ff:b9:c0:06:0c:fb:
                    39:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:FF:54:83:6C:23:A5:0F:25:C0:D4:52:86:81:2E:B8:FA:74:CF:33
            X509v3 Authority Key Identifier:
                keyid:99:1B:3F:17:08:4F:76:F1:2F:9F:05:09:D5:97:F0:FF:EC:A0:4B:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/31745126CD1811EC917CB819C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.54.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:1a:75:9a:9a:99:21:09:35:92:c0:3c:2e:13:b9:d5:b4:02:
         1d:e9:92:7c:7f:9b:d3:63:dd:99:71:7b:d1:00:41:66:89:30:
         12:15:86:81:55:bd:fb:c9:27:db:b8:2a:95:1a:7e:31:b1:51:
         80:d5:e6:ca:e2:68:9c:4e:33:1e:d9:b3:9c:87:f8:dd:ad:3f:
         cb:04:47:ac:f3:5f:da:aa:92:2d:b8:da:5c:d4:3e:4d:c3:4f:
         12:57:93:b0:90:1a:1d:79:ec:fa:f0:89:59:3f:64:ce:e1:b3:
         a6:dd:e2:06:0c:13:63:23:18:b7:d1:e5:f6:2a:5e:b6:1e:99:
         41:bc:83:13:91:3d:ff:12:90:62:b0:78:0c:f0:ca:56:fb:69:
         7e:52:15:4d:bb:b6:aa:1c:ac:31:a7:47:97:61:48:27:1e:c6:
         72:ae:be:e8:36:f2:11:5e:1b:1e:ad:f1:ec:05:f0:08:11:cf:
         ce:80:04:89:d0:95:e2:fb:04:cb:af:30:94:4e:c1:fb:e4:c4:
         45:89:55:78:7e:95:21:e5:10:ac:ca:72:0a:72:69:6a:dd:0d:
         90:42:6f:9f:7a:41:4f:eb:67:0d:75:a0:33:8e:55:1e:12:4e:
         52:36:a2:b4:4c:6c:50:64:f4:8d:a0:c0:11:aa:68:cf:c0:ce:
         91:c2:ee:4d
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICM9EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjdCNTAxMTAvBgNVBAUTKDk5MUIzRjE3MDg0Rjc2RjEyRjlGMDUwOUQ1OTdGMEZG
RUNBMDRCNEEwHhcNMjMxMDI4MTUwMDQ1WhcNMjQxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NTNkMjIxZC1iYjc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxMpFU8CkJp4HAvRBYGO4ZZSvnPLeO8FGn6gYSVZ9nA19/DSdLbXBoRG65l+Q
TaCJKaN3D8ios3vbizjMB45kv0SzUQvVT/yZAgZCwhybmOFOgK9C0aEaMOoMbNHm
o82dolUJck61AsHbCqGIyltH9qDVjgkO05Qoc3i+UcB4W3QfPPx0a6K8IKfSImA/
YzzN6psYQfqdFbcuQ0QMuTOTAm/tRuVb26GmdCT1PTjyvwiZiHyi75wNlZQ5flkT
aNMPxsNkoKund1gwp8vtCmFRtcBao23DPkl5dh9Woy9NHuiXDem51E3m84ToImgc
HB74qlb2fG/Aksj/ucAGDPs5MQIDAQABo4IClTCCApEwHQYDVR0OBBYEFAT/VINs
I6UPJcDUUoaBLrj6dM8zMB8GA1UdIwQYMBaAFJkbPxcIT3bxL58FCdWX8P/soEtK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0I1MC85RDEzMDVDODFE
OEYxMUUyQTAyQkNERUUwOEIwMkNEMi9tUnNfRndoUGR2RXZud1VKMVpmd18teWdT
MG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL21Sc19Gd2hQZHZFdm53VUoxWmZ3Xy15Z1Mwby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NjdCNTAvOUQxMzA1QzgxRDhGMTFFMkEwMkJDREVFMDhCMDJDRDIvMzE3NDUxMjZD
RDE4MTFFQzkxN0NCODE5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAC2NogwDQYJKoZIhvcNAQELBQADggEBAE0adZqamSEJNZLA
PC4TudW0Ah3pknx/m9Nj3Zlxe9EAQWaJMBIVhoFVvfvJJ9u4KpUafjGxUYDV5sri
aJxOMx7Zs5yH+N2tP8sER6zzX9qqki242lzUPk3DTxJXk7CQGh157PrwiVk/ZM7h
s6bd4gYME2MjGLfR5fYqXrYemUG8gxORPf8SkGKweAzwylb7aX5SFU27tqocrDGn
R5dhSCcexnKuvug28hFeGx6t8ewF8AgRz86ABInQleL7BMuvMJROwfvkxEWJVXh+
lSHlEKzKcgpyaWrdDZBCb596QU/rZw11oDOOVR4STlI2orRMbFBk9I2gwBGqaM/A
zpHC7k0=
-----END CERTIFICATE-----
Generated at Sat May 18 15:58:22 2024 by rpki-client on console-ams.rpki-client.org