Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9174880/69F04BA81D6A11E2BB7014A808B02CD2/B5885EF852D411EC8C8CE26CC4F9AE02.roa
File:                     B5885EF852D411EC8C8CE26CC4F9AE02.roa (raw, json)
Hash identifier:          ACWwhCc36Yo54BE+udYTmjJtznm+t8mF+fXdNiyCz9s=
Subject key identifier:   8B:E4:7F:FB:DE:D5:13:9A:51:A6:4A:2C:E4:EA:0A:A2:B7:DE:A1:9F
Certificate issuer:       /CN=A9174880/serialNumber=4F2FD3F00B58F134A9A8E3E7DDA8D8D20AC03527
Certificate serial:       3404
Authority key identifier: 4F:2F:D3:F0:0B:58:F1:34:A9:A8:E3:E7:DD:A8:D8:D2:0A:C0:35:27
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ty_T8AtY8TSpqOPn3ajY0grANSc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9174880/69F04BA81D6A11E2BB7014A808B02CD2/B5885EF852D411EC8C8CE26CC4F9AE02.roa
Signing time:             Sat 20 Jan 2024 14:30:11 +0000
ROA not before:           Sat 20 Jan 2024 14:30:11 +0000
ROA not after:            Mon 31 Mar 2025 00:00:00 +0000
asID:                     24548
IP address blocks:        110.173.174.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9174880/69F04BA81D6A11E2BB7014A808B02CD2/Ty_T8AtY8TSpqOPn3ajY0grANSc.crl
                          rsync://rpki.apnic.net/member_repository/A9174880/69F04BA81D6A11E2BB7014A808B02CD2/Ty_T8AtY8TSpqOPn3ajY0grANSc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ty_T8AtY8TSpqOPn3ajY0grANSc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:16:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13316 (0x3404)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9174880/serialNumber=4F2FD3F00B58F134A9A8E3E7DDA8D8D20AC03527
        Validity
            Not Before: Jan 20 14:30:11 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=65abd8f2-1232
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:0e:af:19:dd:66:6e:41:42:17:48:e1:fa:d5:
                    0f:1f:46:5d:aa:3d:fe:ef:57:87:2c:01:2f:bf:74:
                    c4:f0:86:1d:14:5a:6e:0a:b0:03:0c:01:43:e4:ae:
                    8d:7b:25:cc:be:99:6a:b0:fe:7a:25:a8:58:67:26:
                    39:a9:ea:c2:c0:a5:91:47:2d:c2:ff:66:f5:d4:68:
                    95:23:18:cf:a3:eb:a6:ea:6b:79:0d:40:0e:04:b8:
                    da:09:df:dc:22:9a:bc:90:c8:bd:75:9a:2c:e1:bd:
                    66:cf:62:11:18:1e:b7:25:27:c9:50:67:87:19:2a:
                    78:25:34:fb:da:c5:cf:04:f6:46:66:ef:94:d6:44:
                    96:cd:ae:f7:bc:26:5e:72:7d:89:8b:55:3f:a4:fa:
                    78:2d:55:c2:dd:63:a4:35:63:65:31:54:02:31:1e:
                    50:1d:2a:53:43:49:64:8d:60:39:d8:d2:92:5c:1e:
                    25:4e:aa:37:ea:5d:e9:bd:3d:ca:6a:73:fa:0c:f7:
                    36:20:72:e3:73:70:de:04:3e:b5:79:c2:26:ab:71:
                    00:07:cd:25:4f:54:bb:32:5e:05:83:78:3c:74:39:
                    cd:a1:b9:d0:4f:b5:c5:de:70:7d:80:a6:a7:4b:e6:
                    72:de:57:7f:6a:78:f1:c6:99:dd:6e:46:9f:eb:c8:
                    15:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:E4:7F:FB:DE:D5:13:9A:51:A6:4A:2C:E4:EA:0A:A2:B7:DE:A1:9F
            X509v3 Authority Key Identifier:
                keyid:4F:2F:D3:F0:0B:58:F1:34:A9:A8:E3:E7:DD:A8:D8:D2:0A:C0:35:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9174880/69F04BA81D6A11E2BB7014A808B02CD2/Ty_T8AtY8TSpqOPn3ajY0grANSc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ty_T8AtY8TSpqOPn3ajY0grANSc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174880/69F04BA81D6A11E2BB7014A808B02CD2/B5885EF852D411EC8C8CE26CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.173.174.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3d:54:c4:9c:49:69:e0:3e:63:47:9a:b1:ff:ac:09:c8:57:d9:
         ee:55:ca:2a:05:88:9d:f2:79:16:e9:2a:77:a5:bc:c5:2d:cd:
         3b:75:4d:a3:5a:05:18:07:83:99:b6:b1:10:fb:a7:cc:50:d0:
         36:c3:70:b3:d0:0a:70:b6:e6:91:37:f3:3f:c7:c7:0c:42:92:
         de:82:b7:1e:4c:77:14:7b:bc:e0:64:5a:05:49:7f:a4:62:89:
         45:35:c8:b1:64:9f:f5:1f:a9:fb:76:b2:48:4f:8f:f5:9d:61:
         8b:70:d4:1b:43:56:86:89:f0:3e:f2:16:e2:4e:a2:af:1d:82:
         b1:b4:5b:56:00:89:e4:3c:50:a0:12:61:1e:1d:14:49:7e:30:
         fd:67:63:f1:52:15:66:11:b1:07:07:d6:c3:97:e0:94:87:51:
         a5:30:78:1d:6c:d6:90:c8:a8:eb:69:6a:a9:ad:9e:8b:a3:72:
         39:82:62:01:5d:2e:4b:b1:62:f8:24:6b:ca:ba:1f:e5:25:cc:
         c1:98:e5:0c:48:a6:a6:46:07:6a:31:ec:f2:1a:56:06:bb:84:
         b3:f7:c7:d7:da:55:e4:38:73:80:c4:f8:78:ed:83:57:73:d1:
         cf:21:0a:bc:6e:61:35:f6:c4:62:7e:91:52:ee:05:38:7a:86:
         a9:e5:15:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:49:22 2024 by rpki-client on console-ams.rpki-client.org