Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919536C/7E4D8460366011EE88E0F530C4F9AE02/99A281E8BC3411EE878F6918C4F9AE02.roa
File:                     99A281E8BC3411EE878F6918C4F9AE02.roa (raw, json)
Hash identifier:          zVKpCpOayxsidw1JOYsz294fveicstXuh2567adaxh4=
Subject key identifier:   85:97:C8:5D:6D:C4:F0:D5:4B:89:A2:BE:F0:0A:EF:D9:BB:B1:A0:09
Certificate issuer:       /CN=A919536C/serialNumber=488970506264EF96D81EC12E6ABD256DB30FDCFA
Certificate serial:       6F
Authority key identifier: 48:89:70:50:62:64:EF:96:D8:1E:C1:2E:6A:BD:25:6D:B3:0F:DC:FA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SIlwUGJk75bYHsEuar0lbbMP3Po.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919536C/7E4D8460366011EE88E0F530C4F9AE02/99A281E8BC3411EE878F6918C4F9AE02.roa
Signing time:             Fri 26 Jan 2024 10:21:00 +0000
ROA not before:           Fri 26 Jan 2024 10:21:00 +0000
ROA not after:            Sat 31 Aug 2024 00:00:00 +0000
asID:                     152445
IP address blocks:        119.110.240.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919536C/7E4D8460366011EE88E0F530C4F9AE02/SIlwUGJk75bYHsEuar0lbbMP3Po.crl
                          rsync://rpki.apnic.net/member_repository/A919536C/7E4D8460366011EE88E0F530C4F9AE02/SIlwUGJk75bYHsEuar0lbbMP3Po.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SIlwUGJk75bYHsEuar0lbbMP3Po.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 14 Jun 2024 07:17:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111 (0x6f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919536C/serialNumber=488970506264EF96D81EC12E6ABD256DB30FDCFA
        Validity
            Not Before: Jan 26 10:21:00 2024 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=65b3878b-d366
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:f2:df:73:bf:f4:19:40:30:bc:f8:63:fb:24:
                    32:40:98:0f:57:09:bf:12:c6:7e:cb:e7:69:4c:eb:
                    2f:02:19:4d:3e:68:86:c9:1a:ba:e5:7a:11:3f:aa:
                    a3:4e:2a:c0:94:8d:04:48:7b:12:86:b1:e4:a6:2a:
                    b2:4d:6f:37:9c:64:9d:9d:e0:60:14:20:01:97:fd:
                    ab:1d:2e:d1:e7:86:dd:7f:e9:74:65:00:2f:7f:63:
                    1f:f3:04:c5:35:ef:c6:68:bb:b0:1b:4a:9c:36:ca:
                    21:27:46:5a:54:60:23:fd:31:f7:00:a1:05:f2:6f:
                    35:d2:ca:fd:57:8c:79:d1:f9:08:97:7b:af:17:a9:
                    2b:d7:b0:32:66:5e:fa:0c:5a:df:05:44:4f:7e:96:
                    4b:7b:07:22:58:ea:db:ae:5c:77:3f:67:df:8f:c5:
                    1b:60:dc:bf:86:7c:25:28:e0:af:24:78:f5:79:fd:
                    e3:ba:6f:63:0d:9c:7a:13:73:19:7a:bc:3a:31:fd:
                    6c:e7:ed:e9:2e:41:dd:97:e1:58:86:74:0e:91:f0:
                    f5:5a:a7:cb:04:ac:5d:26:ef:a9:81:23:fb:5e:42:
                    7b:1c:7c:75:38:c2:eb:8a:80:f4:a8:cd:0e:b9:84:
                    0e:54:3e:7d:0b:4d:0b:7e:5f:3c:fd:be:ea:8c:0e:
                    46:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:97:C8:5D:6D:C4:F0:D5:4B:89:A2:BE:F0:0A:EF:D9:BB:B1:A0:09
            X509v3 Authority Key Identifier:
                keyid:48:89:70:50:62:64:EF:96:D8:1E:C1:2E:6A:BD:25:6D:B3:0F:DC:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919536C/7E4D8460366011EE88E0F530C4F9AE02/SIlwUGJk75bYHsEuar0lbbMP3Po.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SIlwUGJk75bYHsEuar0lbbMP3Po.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919536C/7E4D8460366011EE88E0F530C4F9AE02/99A281E8BC3411EE878F6918C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.110.240.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:c4:4f:92:0e:6f:5e:cb:89:6b:69:83:9c:99:36:e0:74:0c:
         c9:bb:1b:5f:b7:d7:fe:d1:64:52:8e:90:cd:e1:55:ac:aa:b6:
         c2:18:24:62:75:db:3b:01:b7:ee:d9:49:da:2e:73:b4:5b:34:
         01:4f:18:fc:db:03:75:2b:c2:1f:5e:2a:dd:c5:67:f0:f5:d3:
         08:2e:8f:6b:6e:87:dc:39:37:13:f6:29:8a:ad:6d:37:a6:d0:
         0a:63:99:7d:30:30:a4:e6:59:31:24:0b:fb:a7:78:52:97:e9:
         82:49:3a:23:8a:f7:84:a0:13:58:fb:c2:13:cd:7c:14:36:26:
         36:21:80:9b:34:0f:ae:bc:c9:e2:a7:f4:db:d5:fa:52:9e:8f:
         6d:5c:37:58:0a:66:b8:36:22:3e:47:69:a8:aa:22:e6:c5:96:
         23:a6:3c:40:fc:e3:89:87:ad:16:5a:46:b4:0e:73:3e:5d:14:
         41:d3:7a:50:f9:c7:66:40:e0:f2:28:7b:a9:5f:f2:4a:8a:d4:
         80:81:49:40:d0:9d:fa:2c:2a:43:cf:c0:58:9f:0e:0c:bc:2e:
         3c:c9:ae:09:c8:3f:8e:b7:b0:a1:1e:74:17:bd:6b:09:5a:6b:
         6e:af:17:df:b0:87:24:35:f0:f6:46:42:fa:1f:cb:47:3d:f1:
         a6:7f:31:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 09:41:02 2024 by rpki-client on console-ams.rpki-client.org