Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/9EE8F55206E911EE88450147C4F9AE02.roa
File:                     9EE8F55206E911EE88450147C4F9AE02.roa (raw, json)
Hash identifier:          xqi0fyo9pYw63B4k/7OwfLMW8Zv6WUfvY5OXteBY87I=
Subject key identifier:   06:CF:55:44:4F:10:B6:63:F6:D5:1E:6C:E0:47:44:71:35:D7:7F:4B
Certificate issuer:       /CN=A91A1818/serialNumber=92D456E99B60DCED148C93D594B6F431270A24C4
Certificate serial:       0109
Authority key identifier: 92:D4:56:E9:9B:60:DC:ED:14:8C:93:D5:94:B6:F4:31:27:0A:24:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/9EE8F55206E911EE88450147C4F9AE02.roa
Signing time:             Thu 05 Sep 2024 05:18:19 +0000
ROA not before:           Thu 05 Sep 2024 05:18:19 +0000
ROA not after:            Mon 01 Dec 2025 00:00:00 +0000
asID:                     14618
IP address blocks:        139.180.12.0/24 maxlen: 24
                          139.180.13.0/24 maxlen: 24
                          139.180.14.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.crl
                          rsync://rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 265 (0x109)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A1818/serialNumber=92D456E99B60DCED148C93D594B6F431270A24C4
        Validity
            Not Before: Sep  5 05:18:19 2024 GMT
            Not After : Dec  1 00:00:00 2025 GMT
        Subject: CN=66d93f1b-f517
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:94:0f:52:63:3e:1e:89:09:fb:89:d3:ec:72:
                    35:4e:42:87:f4:6b:3c:57:2f:06:5a:6b:f7:e7:0f:
                    d8:03:03:9c:6e:f4:0b:19:70:db:a4:db:c5:5c:89:
                    8f:32:2d:9a:17:6e:0d:b8:4a:89:aa:bd:5b:fc:cc:
                    3d:d5:90:75:48:43:22:ad:25:62:af:7f:90:4a:a3:
                    07:9d:3f:26:18:77:95:dc:00:69:16:98:af:a8:25:
                    28:cc:b7:75:ac:bc:b8:cb:67:91:4b:d3:df:ee:02:
                    c9:a0:91:3b:2b:94:36:52:cc:ea:ed:54:c2:25:cc:
                    d8:99:7b:7e:6f:61:a5:41:82:0b:34:83:a8:5e:15:
                    6e:e8:a1:63:22:bb:f9:ec:01:e8:94:3f:f4:d1:00:
                    5d:be:e6:ef:d5:85:ba:fe:10:82:63:8a:47:57:7a:
                    48:66:58:6d:e0:a4:17:69:f2:a8:23:fc:5d:7c:18:
                    33:dc:38:69:86:f7:3a:cb:a0:4d:7b:31:2f:40:9e:
                    3d:8f:02:4e:0d:8f:cf:22:4f:3e:74:fb:55:fc:e9:
                    47:a5:8c:12:a9:89:5c:cb:50:1b:3f:a9:47:ad:2a:
                    db:af:8b:e0:15:d3:d3:34:ce:f1:dc:24:ba:28:04:
                    47:b9:02:c5:e4:94:b8:e9:99:91:45:2d:2c:94:61:
                    85:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:CF:55:44:4F:10:B6:63:F6:D5:1E:6C:E0:47:44:71:35:D7:7F:4B
            X509v3 Authority Key Identifier:
                keyid:92:D4:56:E9:9B:60:DC:ED:14:8C:93:D5:94:B6:F4:31:27:0A:24:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/9EE8F55206E911EE88450147C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.180.12.0-139.180.14.255

    Signature Algorithm: sha256WithRSAEncryption
         1d:f6:55:d3:fd:42:d6:6a:e4:bb:d9:e7:7e:36:eb:f9:fd:cd:
         b0:06:69:f7:f7:4d:de:3c:af:6e:9e:e6:b3:c8:ed:f1:8b:13:
         74:3f:b4:99:e7:36:61:83:7a:30:fd:3e:73:12:4f:3e:ff:24:
         cf:d2:0d:d0:42:ad:f1:1e:64:e3:46:bf:9d:1c:34:50:77:dd:
         77:cd:8a:9c:0e:f2:8e:6b:93:bc:6f:24:99:c5:f9:e4:60:50:
         b9:3c:57:0c:55:6c:42:a2:18:8d:60:3b:fe:69:96:62:cf:5e:
         32:4c:8c:4a:d4:ff:19:12:71:f2:71:2f:bc:94:80:e3:0c:58:
         3b:ac:3d:1e:9a:71:e8:b0:b8:80:36:97:86:36:43:fa:72:53:
         ec:e9:e2:bf:c1:11:68:b5:ab:aa:23:8f:a5:55:ee:a0:9d:36:
         61:b5:8a:a3:18:a7:f1:a7:c3:44:87:74:c8:8f:28:d6:3c:7c:
         b1:16:aa:ba:25:53:87:e9:b8:de:26:b9:f9:7e:2d:5f:2a:15:
         39:93:70:c7:aa:df:ad:bd:1a:90:ef:19:d2:56:4e:97:cc:e5:
         07:e9:f5:6b:9a:9f:1f:66:bf:b3:46:41:29:07:ef:c7:dd:5e:
         27:39:42:17:40:45:df:9e:13:ac:ca:47:ee:54:0c:8a:88:b9:
         f7:a0:fb:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:58:46 2024 by rpki-client on console-ams.rpki-client.org