Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCA92/999E8EAC87BE11EFBC41C268C4F9AE02/C14680A887BF11EF8804736AC4F9AE02.roa
File:                     C14680A887BF11EF8804736AC4F9AE02.roa (raw, json)
Hash identifier:          vUX/KRddfhkkOiY2HuYAilZhXg6VXmP4jwsIgzgvq3o=
Subject key identifier:   65:07:92:F9:74:93:B9:21:F3:FC:12:91:76:A7:4F:71:9F:60:B6:0B
Certificate issuer:       /CN=A91CCA92/serialNumber=6A458AB0FC56282933183D468051BFC507911632
Certificate serial:       06
Authority key identifier: 6A:45:8A:B0:FC:56:28:29:33:18:3D:46:80:51:BF:C5:07:91:16:32
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akWKsPxWKCkzGD1GgFG_xQeRFjI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CCA92/999E8EAC87BE11EFBC41C268C4F9AE02/C14680A887BF11EF8804736AC4F9AE02.roa
Signing time:             Fri 11 Oct 2024 11:07:49 +0000
ROA not before:           Fri 11 Oct 2024 11:07:49 +0000
ROA not after:            Sun 02 Mar 2025 00:00:00 +0000
asID:                     152144
IP address blocks:        210.87.106.0/24 maxlen: 24
                          210.87.107.0/24 maxlen: 24
                          2401:5760::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CCA92/999E8EAC87BE11EFBC41C268C4F9AE02/akWKsPxWKCkzGD1GgFG_xQeRFjI.crl
                          rsync://rpki.apnic.net/member_repository/A91CCA92/999E8EAC87BE11EFBC41C268C4F9AE02/akWKsPxWKCkzGD1GgFG_xQeRFjI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akWKsPxWKCkzGD1GgFG_xQeRFjI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CCA92/serialNumber=6A458AB0FC56282933183D468051BFC507911632
        Validity
            Not Before: Oct 11 11:07:49 2024 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=67090705-27db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:1f:0c:b1:fa:bd:1b:4f:8d:83:68:3a:13:6f:
                    e6:f3:d2:06:7a:ba:0f:d5:6f:d4:7c:f2:3b:f7:b5:
                    21:b6:08:0c:d1:05:fe:36:be:12:19:77:e1:b4:58:
                    ad:cd:03:1a:55:eb:31:95:b4:29:f4:c5:a6:e9:b5:
                    4f:90:e9:df:61:2c:f9:61:d8:25:dc:41:0d:9c:e4:
                    74:5c:bf:18:c7:20:b6:6f:20:6c:f0:d0:56:e9:fe:
                    56:70:b0:a4:db:72:e3:34:f2:bc:ca:bd:ec:58:6f:
                    d3:a5:c3:d6:33:a9:b4:02:76:c4:c5:5e:fd:c5:b4:
                    69:9a:9a:56:dc:f2:7a:95:43:14:bb:27:00:39:bf:
                    4e:fd:0d:9d:dd:ba:0c:90:d9:13:41:1e:91:16:f6:
                    85:66:cf:92:9e:b2:f6:4a:f3:d9:e2:65:28:25:d4:
                    d6:23:f7:53:1b:47:6a:61:b3:fd:88:c7:64:ed:df:
                    32:1f:f3:1f:5e:6b:6f:71:25:07:78:cb:4f:27:e2:
                    5f:18:eb:6f:29:2b:92:08:91:d0:f3:90:5c:87:e9:
                    a9:61:4c:0f:67:f3:0e:27:f0:2f:f9:a4:f8:89:48:
                    1f:b0:85:3d:7a:f6:d6:c4:48:fb:28:9a:1a:fd:86:
                    e5:ef:6f:35:3b:9f:de:57:a4:d5:31:6d:40:d7:fd:
                    92:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:07:92:F9:74:93:B9:21:F3:FC:12:91:76:A7:4F:71:9F:60:B6:0B
            X509v3 Authority Key Identifier:
                keyid:6A:45:8A:B0:FC:56:28:29:33:18:3D:46:80:51:BF:C5:07:91:16:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CCA92/999E8EAC87BE11EFBC41C268C4F9AE02/akWKsPxWKCkzGD1GgFG_xQeRFjI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akWKsPxWKCkzGD1GgFG_xQeRFjI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCA92/999E8EAC87BE11EFBC41C268C4F9AE02/C14680A887BF11EF8804736AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.87.106.0/23
                IPv6:
                  2401:5760::/32

    Signature Algorithm: sha256WithRSAEncryption
         60:13:ef:f4:ac:4a:fd:0d:e0:3e:0d:4f:3c:be:f0:f6:a3:47:
         09:b7:f0:b3:2e:1b:c9:b8:04:50:14:34:e4:f7:de:ad:70:e2:
         6c:4f:58:12:fa:83:7e:0b:51:97:d0:d7:da:d8:7c:3c:37:12:
         e2:7c:37:bd:51:26:85:ae:e8:3c:c6:b7:e1:ee:53:44:bb:9a:
         d7:1e:d1:4b:c3:27:78:b2:bb:90:48:5d:a3:ef:26:68:94:6b:
         d7:03:10:c3:6c:a6:f3:f3:12:cf:ee:f0:9d:79:d5:66:31:e8:
         27:b7:94:91:d5:2a:76:94:90:2c:72:1d:68:88:8c:46:2f:11:
         3d:5d:20:17:16:8d:63:9b:bc:97:f2:33:ea:5b:2b:6c:80:34:
         46:90:f7:c3:e4:1d:e3:0c:49:cd:45:99:a9:4e:e9:c1:7c:1d:
         18:3f:dd:8a:73:ec:8a:46:e6:7c:40:4e:ac:ae:9b:3b:f0:5d:
         f2:5c:e2:f7:74:71:1c:d5:f4:fb:e3:b8:75:32:ab:4a:fa:31:
         67:b3:83:5a:f6:e2:fb:9f:2e:17:d0:de:bf:53:de:2f:6b:04:
         2e:f1:eb:4d:a1:ca:d3:dd:15:6a:75:21:d9:e5:fe:7d:36:5a:
         20:cf:b4:8f:e8:26:a2:05:e7:f1:85:91:85:4f:a0:a0:a2:57:
         07:a1:3d:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:31:32 2024 by rpki-client on console-fra.rpki-client.org