Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1C06/6DEAE21C1D9D11E28B1FA78C08B02CD2/FB50A65027B311EFBA31BB40C4F9AE02.roa
File:                     FB50A65027B311EFBA31BB40C4F9AE02.roa (raw, json)
Hash identifier:          aVfEOKnVDm2poRF4e8I0r6U1onr3PWkW1eUF2/DigYY=
Subject key identifier:   B0:FF:97:EC:93:C9:C7:70:15:42:68:59:0E:18:D4:A2:22:22:39:99
Certificate issuer:       /CN=A91A1C06/serialNumber=9737713004819B6B66FC56E6EC86BE4DC2E28E17
Certificate serial:       33EF
Authority key identifier: 97:37:71:30:04:81:9B:6B:66:FC:56:E6:EC:86:BE:4D:C2:E2:8E:17
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lzdxMASBm2tm_Fbm7Ia-TcLijhc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A1C06/6DEAE21C1D9D11E28B1FA78C08B02CD2/FB50A65027B311EFBA31BB40C4F9AE02.roa
Signing time:             Tue 11 Jun 2024 05:32:24 +0000
ROA not before:           Tue 11 Jun 2024 05:32:24 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     23655
IP address blocks:        110.92.18.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A1C06/6DEAE21C1D9D11E28B1FA78C08B02CD2/lzdxMASBm2tm_Fbm7Ia-TcLijhc.crl
                          rsync://rpki.apnic.net/member_repository/A91A1C06/6DEAE21C1D9D11E28B1FA78C08B02CD2/lzdxMASBm2tm_Fbm7Ia-TcLijhc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lzdxMASBm2tm_Fbm7Ia-TcLijhc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13295 (0x33ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A1C06/serialNumber=9737713004819B6B66FC56E6EC86BE4DC2E28E17
        Validity
            Not Before: Jun 11 05:32:24 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=6667e168-00d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:5b:05:fe:93:ea:ca:c6:e1:c6:1d:ee:79:0c:
                    ce:3a:9d:ae:d6:8a:87:92:12:be:e5:60:13:a5:81:
                    10:7a:6c:a9:cc:96:af:a4:83:61:8c:6f:a0:57:2e:
                    26:f1:b6:a4:a2:d3:fa:7d:4e:97:32:b6:36:7f:bc:
                    a2:e4:e9:20:66:e1:24:e8:79:76:51:89:e1:a5:00:
                    3c:e3:88:88:d1:1e:9f:de:9d:38:3a:1e:17:2b:4f:
                    44:de:c8:17:f9:25:f8:34:69:50:06:de:c8:c1:39:
                    a7:37:40:c5:de:5d:0f:21:6a:b0:c4:d4:be:d3:3f:
                    89:ec:48:f3:49:85:f8:da:9a:d5:ae:bb:15:d2:7f:
                    0a:20:75:bf:1f:15:77:cd:e9:65:36:86:50:08:63:
                    87:9d:7a:f3:2f:ee:5f:f3:6a:7e:1c:28:25:74:dd:
                    d0:4a:7f:97:68:ee:d1:df:f6:c6:31:60:d0:6d:1e:
                    1d:a7:9b:98:6f:ff:b0:13:4d:05:66:c8:fe:c5:1a:
                    57:3b:29:c8:d4:aa:ee:07:7e:a2:6f:a6:0a:78:3f:
                    7e:36:18:8a:f7:b8:e1:0e:a0:ae:ec:3f:4b:9f:2f:
                    af:e7:6a:12:50:93:ef:4d:09:45:16:0a:36:f4:5d:
                    48:24:6f:26:5f:99:51:09:c5:de:42:de:2e:cc:26:
                    e0:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:FF:97:EC:93:C9:C7:70:15:42:68:59:0E:18:D4:A2:22:22:39:99
            X509v3 Authority Key Identifier:
                keyid:97:37:71:30:04:81:9B:6B:66:FC:56:E6:EC:86:BE:4D:C2:E2:8E:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A1C06/6DEAE21C1D9D11E28B1FA78C08B02CD2/lzdxMASBm2tm_Fbm7Ia-TcLijhc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lzdxMASBm2tm_Fbm7Ia-TcLijhc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1C06/6DEAE21C1D9D11E28B1FA78C08B02CD2/FB50A65027B311EFBA31BB40C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.92.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         e6:59:b7:ce:65:d5:a6:f9:02:cf:4d:58:f1:3a:d2:57:40:dd:
         1a:39:1c:c0:f8:03:d9:d0:87:be:1a:8d:32:4f:a1:f8:72:08:
         d0:7a:d6:93:b5:c1:72:b9:72:33:16:23:9c:dc:a4:25:eb:e9:
         03:42:ea:e3:3e:b4:90:c8:7c:06:ff:69:7e:d1:78:38:b2:81:
         7c:ae:68:c4:9b:f4:22:2b:da:7d:03:40:95:fc:a0:5a:e9:61:
         9d:de:f1:9f:92:7e:de:cb:8a:19:23:48:d6:89:fe:5b:30:59:
         62:db:88:cb:c8:0b:06:d7:42:68:88:bd:4f:7a:04:6e:95:90:
         10:48:e0:cf:e1:86:8b:f2:48:15:fc:39:7a:85:c9:5e:b2:cf:
         5e:33:3f:c2:4b:1c:02:ce:84:6d:de:d6:05:a7:17:93:2a:55:
         e3:9d:d5:c3:39:46:a9:1b:e9:33:65:f0:45:6c:ac:e0:76:58:
         62:e8:70:6e:c0:3a:de:c6:78:23:01:38:1b:c1:ac:e3:74:8a:
         a6:9b:f7:c5:95:06:e2:2c:62:96:15:3e:2c:09:a1:38:a5:79:
         bb:86:ff:3a:8d:63:0c:98:09:b3:d3:44:5d:45:11:f7:fd:18:
         73:7c:13:e6:8c:b3:a7:b8:93:9e:b3:52:06:07:48:cc:f1:ea:
         c8:fa:1f:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:49:59 2024 by rpki-client on console-ams.rpki-client.org