Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916E377/8A6D10B6883C11EE9556BB6EC4F9AE02/54692EB02FB111EFAD1C6322C4F9AE02.roa
File:                     54692EB02FB111EFAD1C6322C4F9AE02.roa (raw, json)
Hash identifier:          htvjEjCXOkW/zLBD0gHg0KDfRWwqB/ypPFNwonZP/5s=
Subject key identifier:   4A:A1:08:CA:05:63:9F:37:FE:71:8B:06:1B:22:C4:26:DA:4B:43:68
Certificate issuer:       /CN=A916E377/serialNumber=E79493F30A3EE9F0EE40522FF19D685C8062BA6E
Certificate serial:       78
Authority key identifier: E7:94:93:F3:0A:3E:E9:F0:EE:40:52:2F:F1:9D:68:5C:80:62:BA:6E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/55ST8wo-6fDuQFIv8Z1oXIBium4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916E377/8A6D10B6883C11EE9556BB6EC4F9AE02/54692EB02FB111EFAD1C6322C4F9AE02.roa
Signing time:             Fri 21 Jun 2024 09:33:34 +0000
ROA not before:           Fri 21 Jun 2024 09:33:34 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     16509
IP address blocks:        124.110.200.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916E377/8A6D10B6883C11EE9556BB6EC4F9AE02/55ST8wo-6fDuQFIv8Z1oXIBium4.crl
                          rsync://rpki.apnic.net/member_repository/A916E377/8A6D10B6883C11EE9556BB6EC4F9AE02/55ST8wo-6fDuQFIv8Z1oXIBium4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/55ST8wo-6fDuQFIv8Z1oXIBium4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 14 Sep 2024 03:20:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120 (0x78)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916E377/serialNumber=E79493F30A3EE9F0EE40522FF19D685C8062BA6E
        Validity
            Not Before: Jun 21 09:33:34 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=667548ee-aeed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:c3:ea:f8:7b:f1:5f:9e:35:20:ab:43:19:78:
                    42:89:96:b2:e2:d9:b7:7e:8f:27:ab:fc:df:bc:2b:
                    2f:62:ae:45:83:cd:84:fc:a4:6b:e3:47:81:6b:cc:
                    cd:a4:df:20:79:b3:3b:e2:fd:d1:42:8f:bb:a6:f7:
                    dc:87:64:91:66:d4:c7:8f:aa:f7:af:6a:21:64:f9:
                    91:b6:e6:07:d5:b6:c1:cf:77:13:02:a3:d9:f7:82:
                    63:07:fc:0a:bc:51:7b:36:b5:c7:d2:a6:4a:95:56:
                    96:d8:69:00:86:c2:e9:46:e8:40:21:3f:89:ac:4f:
                    3f:32:c6:80:b9:29:13:2f:b7:55:7c:b6:ad:c7:b8:
                    eb:69:77:a3:fa:5d:ca:1a:20:33:68:3b:fc:19:31:
                    97:36:92:e4:d7:53:55:c0:89:d2:20:fb:d7:27:14:
                    55:af:d9:20:66:11:9f:35:52:10:80:17:1b:3f:20:
                    91:36:4a:10:c5:8b:0f:f2:7f:f7:62:75:35:3d:c4:
                    ce:e8:ab:46:77:15:17:51:9f:d5:8d:cf:4f:7c:cb:
                    f4:09:db:b1:45:2e:97:a0:3d:0b:3d:35:c1:7c:f4:
                    ab:29:83:8a:f0:ea:c5:6c:22:e7:2b:bc:d1:e4:7d:
                    ba:09:f0:55:f4:ea:c6:fe:29:da:c4:64:44:f3:c5:
                    ee:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:A1:08:CA:05:63:9F:37:FE:71:8B:06:1B:22:C4:26:DA:4B:43:68
            X509v3 Authority Key Identifier:
                keyid:E7:94:93:F3:0A:3E:E9:F0:EE:40:52:2F:F1:9D:68:5C:80:62:BA:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916E377/8A6D10B6883C11EE9556BB6EC4F9AE02/55ST8wo-6fDuQFIv8Z1oXIBium4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/55ST8wo-6fDuQFIv8Z1oXIBium4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E377/8A6D10B6883C11EE9556BB6EC4F9AE02/54692EB02FB111EFAD1C6322C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.110.200.0/21

    Signature Algorithm: sha256WithRSAEncryption
         46:82:07:4b:00:93:27:01:fb:05:36:1a:4f:45:dc:ed:7c:7b:
         b2:da:c3:57:24:64:c4:b3:c3:76:9b:db:89:4d:45:20:02:63:
         4c:6c:87:1d:64:f2:3e:21:e4:14:81:fb:4f:33:c3:cf:0d:5b:
         b5:6a:b1:f6:9b:7b:45:48:93:d0:fb:02:36:5b:52:c4:5c:0c:
         9e:f8:d0:56:fe:79:45:f4:ff:e1:92:22:d6:f0:d6:b9:6a:d8:
         1b:05:01:19:43:73:e8:f9:13:e8:eb:cc:c3:55:a3:b9:fd:44:
         d4:fa:d4:3b:88:2c:dd:fb:49:c2:de:b3:83:05:b2:d5:27:76:
         12:ad:51:ec:73:9b:74:6a:ef:08:b9:78:73:77:88:16:b4:e3:
         28:04:37:20:c1:38:a2:a4:4b:13:d0:94:16:0b:c8:b8:25:1b:
         d9:92:f9:7c:3b:80:33:f8:bb:8a:e3:63:70:c4:e0:1b:72:a0:
         4f:61:aa:35:e8:46:60:3f:ca:e1:64:e7:cb:ef:d9:cb:d4:b2:
         de:f3:eb:a9:d3:db:2b:2a:fe:b0:36:70:74:a7:01:32:21:40:
         68:14:31:36:0d:34:64:b1:60:0b:09:64:da:c3:ab:22:3b:69:
         0e:f6:fb:d6:30:cd:a2:7a:02:97:02:5d:50:aa:8f:b5:1d:ea:
         99:9e:11:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 08:24:31 2024 by rpki-client on console-ams.rpki-client.org