Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/1D6F108A00D511ED9262EB53C4F9AE02.roa
File:                     1D6F108A00D511ED9262EB53C4F9AE02.roa (raw, json)
Hash identifier:          ER+mxMq7fWPop6Mh+I1B9cH//3Uv1rN8D8hXzTSIngw=
Subject key identifier:   C3:24:A0:F8:A2:30:28:AB:80:CB:B5:C8:37:A9:A5:24:47:E8:2E:E4
Certificate issuer:       /CN=A91E7561/serialNumber=25BC7D4DE77BD01B3D191587696E5AFDD8CECD04
Certificate serial:       0554
Authority key identifier: 25:BC:7D:4D:E7:7B:D0:1B:3D:19:15:87:69:6E:5A:FD:D8:CE:CD:04
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/1D6F108A00D511ED9262EB53C4F9AE02.roa
Signing time:             Tue 03 Sep 2024 01:15:31 +0000
ROA not before:           Tue 03 Sep 2024 01:15:31 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     45807
IP address blocks:        110.164.143.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 20:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1364 (0x554)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E7561/serialNumber=25BC7D4DE77BD01B3D191587696E5AFDD8CECD04
        Validity
            Not Before: Sep  3 01:15:31 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=66d66333-1d79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:20:6b:ff:85:47:be:4f:41:c6:9c:f3:fa:29:
                    ed:fd:55:35:ca:22:f3:bb:57:42:49:d3:c2:7a:de:
                    4b:92:0e:9c:2f:3c:34:a9:8c:3b:1c:b0:4c:d8:2b:
                    33:f7:39:45:4b:aa:c7:76:34:0e:f7:bf:d9:b6:65:
                    38:b1:1c:25:12:6a:26:03:f6:1a:b1:9e:52:dd:d1:
                    5f:23:9f:78:0d:c5:6b:22:07:63:d5:ed:2b:26:87:
                    39:bb:b4:c5:16:5c:9e:11:24:32:e0:af:ef:aa:d4:
                    ec:da:c8:65:fa:2e:ac:ed:f3:3e:0b:13:e1:99:9f:
                    25:c6:fc:74:6e:1e:19:62:3c:3c:6e:ac:6c:f8:3c:
                    1f:a6:5b:6b:82:a0:57:65:95:6d:a1:67:ef:9c:1b:
                    96:ca:b2:7e:94:93:71:ae:d4:2e:54:ee:01:15:7d:
                    0a:14:98:d3:6e:38:68:44:3a:76:97:97:2e:0d:73:
                    d1:53:15:7b:16:f2:69:28:73:70:9a:6a:5a:1a:7f:
                    e6:40:a7:f0:cd:87:4f:da:35:6e:ed:f4:fe:c7:9e:
                    83:9d:9a:fd:48:32:8d:98:fd:63:6e:33:b7:0f:20:
                    de:dd:d3:81:23:76:f5:37:b9:da:2a:a0:cd:f5:03:
                    1a:2a:80:de:91:7f:db:10:37:0e:1b:dd:73:9d:0c:
                    ce:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:24:A0:F8:A2:30:28:AB:80:CB:B5:C8:37:A9:A5:24:47:E8:2E:E4
            X509v3 Authority Key Identifier:
                keyid:25:BC:7D:4D:E7:7B:D0:1B:3D:19:15:87:69:6E:5A:FD:D8:CE:CD:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/1D6F108A00D511ED9262EB53C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.164.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:a6:aa:c8:5c:8e:ed:76:51:14:36:9b:79:7c:ef:62:d4:ab:
         9d:18:50:5b:a0:84:ec:f8:62:22:1a:21:d0:8e:aa:2b:80:6d:
         3a:76:73:bd:15:c4:eb:92:fd:12:85:83:ea:e9:c5:e4:be:91:
         07:93:79:54:2d:8a:09:37:07:aa:bc:71:35:9a:54:14:31:57:
         2a:48:a7:d2:fa:c0:ff:45:7f:8f:0c:35:f1:2f:58:2b:11:ee:
         13:ea:13:dd:5e:e7:b1:dd:15:49:9f:c0:06:7d:05:79:32:bf:
         74:5f:54:16:87:bb:7c:f6:3a:c3:a2:a0:1e:20:27:3d:ad:01:
         51:d7:2f:1a:ad:02:8e:8a:46:7b:00:7e:d7:b7:25:ec:ff:f0:
         0a:2a:6f:e9:30:d1:90:27:74:8c:a8:55:cc:f4:c2:5a:52:c1:
         c6:11:28:ee:d5:a3:21:36:f9:c5:d1:72:16:a9:07:5d:c9:9b:
         a6:e4:91:64:7e:d1:c4:05:6e:2f:04:3a:36:10:e6:d3:2f:07:
         46:56:ae:f2:af:56:8c:94:a8:67:d1:4c:c6:80:87:81:8e:e9:
         ab:66:64:67:d8:fb:ca:ad:0b:0e:85:21:38:dc:f3:3d:e2:62:
         21:d3:e6:c6:8b:0a:8d:79:81:e2:f2:3f:5c:a2:37:06:69:78:
         8e:ac:68:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 00:21:25 2024 by rpki-client on console-fra.rpki-client.org