Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/82003A8A5FA911EFA257682FC4F9AE02.roa
File:                     82003A8A5FA911EFA257682FC4F9AE02.roa (raw, json)
Hash identifier:          W7UUOTitRmV7VatTbNa4y5kz9GWBQ2qifJrsz47tjOs=
Subject key identifier:   EE:D4:85:E3:00:FE:51:FC:E3:D3:2F:55:76:5D:9A:80:22:24:35:01
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       4656
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/82003A8A5FA911EFA257682FC4F9AE02.roa
Signing time:             Thu 05 Sep 2024 03:35:58 +0000
ROA not before:           Thu 05 Sep 2024 03:35:58 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     45542
IP address blocks:        112.137.128.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 11:15:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18006 (0x4656)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Sep  5 03:35:58 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=66d9271e-be07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:2a:27:11:da:f7:f5:fb:ec:dc:8d:78:01:af:
                    eb:24:2a:8b:77:93:c9:ee:f4:8c:b6:07:77:5c:03:
                    ba:68:9f:f6:01:23:5e:40:9a:d1:52:72:4f:b8:d3:
                    8f:76:f3:ed:32:a0:d3:18:47:9f:fc:6c:98:af:8a:
                    9e:14:b9:9e:d6:3f:22:89:27:90:98:93:3d:ad:b9:
                    28:2a:fb:6b:ba:06:04:5c:4a:c0:cb:15:d4:cf:04:
                    2a:0e:2f:fc:5c:9a:fb:4c:1b:e9:95:4f:a0:22:13:
                    26:7f:12:b6:fc:b0:0e:04:0d:80:bd:d8:a8:2b:c5:
                    46:dc:7a:81:6a:6e:29:53:fb:94:4e:4a:22:fb:5d:
                    3d:55:03:d7:a0:89:f4:e2:23:2c:48:c6:f5:70:c3:
                    ea:c9:f3:2d:15:c6:d9:f7:88:78:c4:73:a3:6b:72:
                    13:16:b1:7a:ab:d0:76:90:71:19:18:5a:f5:72:e0:
                    dd:f7:76:8d:cd:f5:fc:46:0f:bf:2f:93:0d:da:7b:
                    bc:0e:7c:93:e4:46:e1:3e:2e:51:d2:23:c8:16:9c:
                    02:05:79:0a:ff:3d:6a:0d:af:7d:cc:c1:7b:56:16:
                    cc:a2:54:a7:8b:a1:71:32:53:8f:74:92:38:d3:79:
                    9a:7e:c9:de:a5:b3:6b:d6:a6:f8:7a:30:1c:ca:e7:
                    4e:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:D4:85:E3:00:FE:51:FC:E3:D3:2F:55:76:5D:9A:80:22:24:35:01
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/82003A8A5FA911EFA257682FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.137.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         33:9b:93:82:da:48:b3:40:fc:9e:23:f4:36:af:fc:6b:fa:91:
         4b:0e:10:29:a7:7e:f3:9c:3e:ee:f3:ba:6f:89:c7:f5:05:6f:
         b3:eb:34:03:3a:8f:19:e0:69:fb:e9:4d:c5:71:67:33:06:6f:
         4b:46:53:95:22:bb:3e:f0:30:c7:c9:01:46:94:ca:ca:33:fc:
         c0:fb:c9:9d:2d:2a:0c:9e:c8:ee:63:05:c9:1a:c2:97:55:1b:
         30:b3:18:c5:c2:1b:79:5e:7c:af:68:73:b3:0a:5e:6f:76:26:
         33:3c:89:67:aa:57:cb:c6:72:e9:14:c3:99:1c:e0:df:1a:be:
         72:9d:39:32:b6:0e:a6:96:8b:da:4c:16:1a:40:9c:03:7a:51:
         de:a2:2d:8a:24:8b:a3:1f:f3:8c:37:52:34:09:e4:72:07:2f:
         e8:29:a1:77:23:ca:3a:07:fe:04:35:6c:de:9f:50:31:b2:84:
         bd:d1:fb:3d:2a:75:35:04:e8:0c:71:a5:4e:ac:a5:e9:a3:02:
         05:8f:11:fe:ba:f3:9c:bc:0f:02:52:a3:36:e4:a5:b5:bb:e2:
         9b:9d:6f:37:dd:2c:02:d0:3d:4c:ca:95:79:94:c4:a8:28:87:
         b9:36:cd:fe:48:14:96:16:c2:70:58:b0:8d:fc:1f:43:bd:3d:
         49:66:b4:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 13:05:15 2024 by rpki-client on console-fra.rpki-client.org