Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/49FAAD72591211EDA743880DC4F9AE02.roa
File:                     49FAAD72591211EDA743880DC4F9AE02.roa (raw, json)
Hash identifier:          krevIMI6IUNw/+chMIBio+O1qxsYHBvCeuqJ7cXD7Gc=
Subject key identifier:   A6:24:4D:87:7D:22:C4:03:BB:AE:4B:B7:09:F3:14:84:F2:4E:77:3D
Certificate issuer:       /CN=A91BE146/serialNumber=43EA3A2DC08C5E1F2CD68411644A05C076E88C08
Certificate serial:       0566
Authority key identifier: 43:EA:3A:2D:C0:8C:5E:1F:2C:D6:84:11:64:4A:05:C0:76:E8:8C:08
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-o6LcCMXh8s1oQRZEoFwHbojAg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/49FAAD72591211EDA743880DC4F9AE02.roa
Signing time:             Mon 16 Sep 2024 23:22:12 +0000
ROA not before:           Mon 16 Sep 2024 23:22:12 +0000
ROA not after:            Mon 01 Dec 2025 00:00:00 +0000
asID:                     19809
IP address blocks:        119.31.165.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.crl
                          rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-o6LcCMXh8s1oQRZEoFwHbojAg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 20:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1382 (0x566)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BE146/serialNumber=43EA3A2DC08C5E1F2CD68411644A05C076E88C08
        Validity
            Not Before: Sep 16 23:22:12 2024 GMT
            Not After : Dec  1 00:00:00 2025 GMT
        Subject: CN=66e8bda4-5e98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:44:23:de:25:c1:1b:4c:ae:2b:b3:fa:00:61:
                    23:93:a6:62:f0:0f:42:c4:bf:22:08:97:91:96:e1:
                    38:a8:e7:b0:ec:6b:02:0c:b4:a3:78:06:ad:c0:cb:
                    a7:c3:cf:8e:6e:96:04:c3:08:c6:f1:67:76:fc:87:
                    cf:f8:58:3b:85:62:02:2a:17:72:7f:24:46:1a:4b:
                    df:1f:21:a0:8b:46:d6:1a:8d:e5:af:96:42:18:03:
                    2f:c3:d7:23:c7:93:16:38:77:36:3f:0e:8b:ac:44:
                    27:75:ab:65:0f:ad:06:19:7a:c6:f7:65:e8:ba:72:
                    95:86:3d:a8:e7:8e:cb:bb:7d:d1:24:b4:0b:0d:16:
                    79:d6:62:da:5e:bd:46:79:c0:ad:44:da:1a:de:70:
                    09:27:42:f4:98:e4:32:1b:99:98:2d:e9:c6:ae:24:
                    7a:d9:67:68:b5:d3:6c:69:d6:ac:4a:46:49:d4:b2:
                    d0:f8:89:79:53:d2:df:af:fe:a4:48:6b:8e:b4:34:
                    b1:1a:53:12:bb:b7:96:a9:ff:08:24:51:4a:cc:48:
                    8a:e8:6e:07:c4:78:ac:2b:9c:a8:ae:25:c1:9d:87:
                    af:f7:95:d5:8e:6d:94:7d:39:af:86:87:15:14:d9:
                    08:b2:8a:81:ac:19:3e:d6:65:fd:c4:2f:1b:ee:df:
                    d8:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:24:4D:87:7D:22:C4:03:BB:AE:4B:B7:09:F3:14:84:F2:4E:77:3D
            X509v3 Authority Key Identifier:
                keyid:43:EA:3A:2D:C0:8C:5E:1F:2C:D6:84:11:64:4A:05:C0:76:E8:8C:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-o6LcCMXh8s1oQRZEoFwHbojAg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/49FAAD72591211EDA743880DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.31.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:3f:74:b7:fc:ca:f9:3b:5e:a5:9b:21:08:bb:47:1b:e5:ad:
         37:99:51:eb:46:32:c4:0e:0c:a3:16:e7:65:cb:ba:bd:e9:5b:
         1c:bc:5f:b7:82:6e:88:5f:94:05:d8:56:2c:de:4a:d6:1a:34:
         de:7a:0e:7f:ba:14:69:e1:22:79:6c:16:f4:e3:9b:ef:3c:f5:
         bf:39:a8:3a:aa:b7:ff:de:92:60:07:cf:46:06:9a:68:51:97:
         e6:05:63:11:62:6e:84:71:c3:47:29:13:e1:ab:a3:25:17:07:
         79:a0:d2:73:bb:1a:4c:58:98:95:36:7d:ac:17:e0:1e:a2:54:
         11:25:aa:b1:62:81:e8:3e:18:7f:b8:aa:7f:84:db:06:6e:a8:
         18:bf:5e:dc:2c:06:37:0c:f3:1a:be:df:36:6e:85:25:a3:91:
         fe:29:f1:28:67:33:d4:5c:46:60:7a:90:e3:6a:4d:52:35:7a:
         9c:fa:06:c4:f6:68:a8:83:94:5c:2c:5d:19:b6:de:06:0a:a9:
         5f:c9:51:7a:29:01:7e:26:26:10:14:0d:91:d7:de:b7:7c:24:
         97:a1:66:12:39:28:0d:55:12:a5:77:c5:00:91:ac:85:8b:d6:
         3f:5d:c9:81:1e:11:71:e6:44:d1:e4:62:f5:f3:cd:4b:b5:66:
         b7:5c:5b:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:55:52 2024 by rpki-client on console-ams.rpki-client.org