Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC532/DAA0D0B4037E11EF8520E758C4F9AE02/222F2952038511EFAF036327C4F9AE02.roa
File:                     222F2952038511EFAF036327C4F9AE02.roa (raw, json)
Hash identifier:          KBmo0sEjOHPtQbAwqBkwVaK+cU+kvXHgvj32jPo+3ms=
Subject key identifier:   61:CC:A4:A1:85:71:74:17:64:7E:1F:B9:7B:A3:D3:4D:79:61:05:0D
Certificate issuer:       /CN=A91AC532/serialNumber=BCAB3E76F84ED43742F2A081242708E799CE1B5F
Certificate serial:       12
Authority key identifier: BC:AB:3E:76:F8:4E:D4:37:42:F2:A0:81:24:27:08:E7:99:CE:1B:5F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vKs-dvhO1DdC8qCBJCcI55nOG18.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AC532/DAA0D0B4037E11EF8520E758C4F9AE02/222F2952038511EFAF036327C4F9AE02.roa
Signing time:             Fri 26 Apr 2024 04:42:28 +0000
ROA not before:           Fri 26 Apr 2024 04:42:28 +0000
ROA not after:            Wed 28 May 2025 00:00:00 +0000
asID:                     4213
IP address blocks:        110.34.151.0/24 maxlen: 24
                          110.34.217.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AC532/DAA0D0B4037E11EF8520E758C4F9AE02/vKs-dvhO1DdC8qCBJCcI55nOG18.crl
                          rsync://rpki.apnic.net/member_repository/A91AC532/DAA0D0B4037E11EF8520E758C4F9AE02/vKs-dvhO1DdC8qCBJCcI55nOG18.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vKs-dvhO1DdC8qCBJCcI55nOG18.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 May 2024 02:50:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18 (0x12)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AC532/serialNumber=BCAB3E76F84ED43742F2A081242708E799CE1B5F
        Validity
            Not Before: Apr 26 04:42:28 2024 GMT
            Not After : May 28 00:00:00 2025 GMT
        Subject: CN=662b30b4-1d8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:21:14:4d:b8:14:ea:ea:af:19:5d:87:8f:50:
                    cc:bb:51:95:89:e3:b9:1c:bb:6d:9c:8e:f3:2d:4c:
                    63:96:43:b0:56:91:f8:b3:4b:06:30:92:70:fa:ae:
                    d8:82:3d:9b:3f:24:e2:1b:db:ab:e7:15:4e:9b:eb:
                    bd:69:0c:90:92:34:6e:3a:ab:ee:53:e9:0e:81:49:
                    65:58:96:49:10:18:b0:9a:b1:e6:ef:14:db:50:c6:
                    4b:12:25:1c:4b:3f:29:34:6a:2c:3d:84:29:64:24:
                    a6:90:ba:6b:0d:10:54:d9:a4:4e:9f:a4:ee:e0:47:
                    aa:f0:f8:41:f1:17:ae:52:bf:53:82:1c:84:76:47:
                    57:2a:59:95:02:1e:25:3c:2f:18:ca:c1:b2:cd:1d:
                    cc:2d:04:b1:a3:90:de:e1:c0:b3:85:85:cf:1f:ec:
                    80:87:fe:f8:8a:67:69:e2:0b:41:c7:93:10:12:b0:
                    de:04:8f:c7:53:f1:83:8a:d8:13:bf:25:c1:12:8e:
                    94:58:88:86:34:cc:a8:dd:34:3d:b4:b3:c5:01:5d:
                    e1:f1:4e:c5:af:3c:22:40:a4:1f:16:db:67:b7:fb:
                    27:77:b0:3f:16:97:7b:5c:16:eb:98:75:0a:fd:76:
                    12:62:a2:ca:17:82:97:15:f0:bd:e7:f6:4e:e2:04:
                    7f:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:CC:A4:A1:85:71:74:17:64:7E:1F:B9:7B:A3:D3:4D:79:61:05:0D
            X509v3 Authority Key Identifier:
                keyid:BC:AB:3E:76:F8:4E:D4:37:42:F2:A0:81:24:27:08:E7:99:CE:1B:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AC532/DAA0D0B4037E11EF8520E758C4F9AE02/vKs-dvhO1DdC8qCBJCcI55nOG18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vKs-dvhO1DdC8qCBJCcI55nOG18.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC532/DAA0D0B4037E11EF8520E758C4F9AE02/222F2952038511EFAF036327C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.34.151.0/24
                  110.34.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:2e:59:b8:b9:66:75:d3:d6:c8:d3:d8:0a:bd:57:eb:52:1c:
         42:27:ae:0a:46:cf:04:d9:83:9e:25:8b:c7:3f:27:5f:44:44:
         e5:03:e4:d1:ed:fb:c8:49:a9:71:75:b2:91:ad:52:47:c0:3d:
         96:39:2a:fc:24:6b:e5:91:49:2c:12:a5:ed:4b:6c:22:47:8f:
         9f:ee:23:22:21:e3:42:aa:1c:f5:6c:fd:55:c3:79:06:dc:3d:
         a8:52:c1:71:ad:ca:9a:da:8b:af:b9:fd:b8:4f:46:82:5d:39:
         a6:b4:a1:d8:1f:69:1c:e2:f4:23:94:b4:c1:42:76:53:50:54:
         a2:e0:9c:40:da:0a:87:08:a5:87:c1:4a:c4:94:93:d0:8f:40:
         50:7f:89:37:7b:d0:34:52:06:4c:a3:68:a6:99:4c:4d:92:ac:
         5e:9c:0f:aa:15:84:f6:a4:fa:cf:f3:53:8d:b7:96:25:42:25:
         61:ed:5b:10:c5:8a:39:eb:c3:ac:50:78:df:1a:a6:19:bd:de:
         10:85:b3:07:92:59:82:a4:a0:8e:d8:21:28:c9:48:57:11:22:
         55:f5:6f:e3:76:f1:22:8e:2b:7e:22:f4:8b:2d:f4:29:f9:90:
         24:df:11:8c:fe:e8:d1:1a:04:6b:55:0d:35:79:3c:c6:da:1a:
         51:81:5e:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 09:32:18 2024 by rpki-client on console-ams.rpki-client.org