Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5114/34E19E88E5A211ED808CF377C4F9AE02/ED0DECA6E5A611EDADDD1074C4F9AE02.roa
File:                     ED0DECA6E5A611EDADDD1074C4F9AE02.roa (raw, json)
Hash identifier:          z3xacBjovMyDRqTM7g6iTpB77mlZVh09tcUD0xiN+xY=
Subject key identifier:   06:18:C4:D3:0C:FA:0F:AD:82:FB:76:51:15:EE:79:4D:B8:DA:6F:BA
Certificate issuer:       /CN=A91D5114/serialNumber=2C88BC60A38479793B55470C377ED23EA02D0722
Certificate serial:       EE
Authority key identifier: 2C:88:BC:60:A3:84:79:79:3B:55:47:0C:37:7E:D2:3E:A0:2D:07:22
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LIi8YKOEeXk7VUcMN37SPqAtByI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D5114/34E19E88E5A211ED808CF377C4F9AE02/ED0DECA6E5A611EDADDD1074C4F9AE02.roa
Signing time:             Sat 13 Jul 2024 05:46:05 +0000
ROA not before:           Sat 13 Jul 2024 05:46:05 +0000
ROA not after:            Tue 30 Sep 2025 00:00:00 +0000
asID:                     21859
IP address blocks:        113.212.90.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D5114/34E19E88E5A211ED808CF377C4F9AE02/LIi8YKOEeXk7VUcMN37SPqAtByI.crl
                          rsync://rpki.apnic.net/member_repository/A91D5114/34E19E88E5A211ED808CF377C4F9AE02/LIi8YKOEeXk7VUcMN37SPqAtByI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LIi8YKOEeXk7VUcMN37SPqAtByI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 02:54:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 238 (0xee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D5114/serialNumber=2C88BC60A38479793B55470C377ED23EA02D0722
        Validity
            Not Before: Jul 13 05:46:05 2024 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=6692149d-e6a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c7:1e:4c:56:75:50:29:b4:04:5c:e0:84:f6:
                    c8:e3:fe:18:78:d8:67:6a:97:97:57:07:73:ab:c5:
                    45:6e:1d:10:d4:47:ae:fa:6d:a1:65:06:a1:26:06:
                    e0:21:eb:86:c8:eb:0c:39:a4:4c:2c:f0:60:58:2e:
                    5a:ee:e7:90:26:58:ae:dc:51:a2:70:7a:69:61:fc:
                    e3:7c:37:ee:20:a1:38:f8:b7:00:24:f8:7f:7b:b8:
                    4b:12:5c:08:9a:f1:17:e0:a4:fa:a7:ef:3a:65:e5:
                    d9:0d:fe:7a:dd:4f:69:00:a3:68:a1:bb:c7:23:c8:
                    49:f8:71:65:56:7f:99:4e:44:14:85:83:3d:b4:88:
                    7e:1f:5e:14:95:67:81:83:0f:0d:b1:7d:4c:83:60:
                    91:12:7e:6e:12:57:bd:ff:cc:80:f8:26:f0:ff:26:
                    43:fc:cb:2a:30:cf:4a:40:28:d7:3c:7e:b6:56:aa:
                    06:74:a8:3f:ae:44:fb:95:7c:95:d6:97:3a:f4:bf:
                    b8:de:eb:8a:95:1b:39:fc:55:49:8b:ac:f4:26:b8:
                    eb:01:d4:48:54:90:8f:52:82:62:84:29:53:77:32:
                    fb:fb:b4:08:2e:c3:a7:36:96:39:3f:ba:23:c0:1b:
                    30:3c:38:4b:98:e5:fa:2d:09:43:bc:cf:9b:fe:9d:
                    88:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:18:C4:D3:0C:FA:0F:AD:82:FB:76:51:15:EE:79:4D:B8:DA:6F:BA
            X509v3 Authority Key Identifier:
                keyid:2C:88:BC:60:A3:84:79:79:3B:55:47:0C:37:7E:D2:3E:A0:2D:07:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D5114/34E19E88E5A211ED808CF377C4F9AE02/LIi8YKOEeXk7VUcMN37SPqAtByI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LIi8YKOEeXk7VUcMN37SPqAtByI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5114/34E19E88E5A211ED808CF377C4F9AE02/ED0DECA6E5A611EDADDD1074C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.212.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:45:b7:1c:9e:6a:51:4f:52:4c:f8:44:cd:a6:a2:1e:23:b4:
         47:1c:c0:a9:db:a5:8d:f0:82:3b:67:df:83:7a:62:16:3e:12:
         48:16:34:b7:96:3d:55:05:8a:ab:8b:52:3c:74:a7:46:02:db:
         4c:69:53:28:ec:89:7c:55:25:23:b3:18:da:64:7e:8f:23:04:
         b3:d3:c1:cf:f3:30:fd:59:40:e7:b1:91:c4:b3:81:3f:1a:74:
         b4:ee:e8:43:43:db:36:9f:3e:47:c5:e9:fe:e1:0f:d5:4c:98:
         ab:76:e2:86:40:6e:91:df:0b:bb:74:47:57:26:cb:91:86:8f:
         fc:45:65:f0:6b:92:45:d2:26:6d:ae:4f:99:75:2e:0d:75:2d:
         29:02:e1:c8:79:ec:23:cc:78:25:f7:bf:6b:7c:f3:9d:1a:da:
         e7:fc:4a:6d:c0:9a:87:e0:95:6c:d6:7a:eb:83:cc:58:23:a8:
         e3:02:ed:f0:f2:01:ef:10:b5:9c:36:e4:f9:ab:97:c5:0a:9d:
         e8:f4:f6:1d:5c:88:52:46:67:62:bb:bf:9c:41:fe:ec:94:17:
         39:93:44:75:98:03:f5:10:c4:e8:96:65:5d:94:c8:be:31:48:
         d3:3f:b8:ef:23:5f:f3:b7:27:b0:22:92:66:2a:df:7c:e2:cb:
         4c:be:30:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:37:17 2024 by rpki-client on console-ams.rpki-client.org