Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/52564FC4836B11EE960BCA6FC4F9AE02.roa
File:                     52564FC4836B11EE960BCA6FC4F9AE02.roa (raw, json)
Hash identifier:          1VJie0nCCZ3IBg900OIXPZucge83OX3RKmMvS9NKEBI=
Subject key identifier:   74:44:60:2D:86:18:48:2C:3E:5C:59:43:01:EB:F7:50:8A:33:8F:38
Certificate issuer:       /CN=A91E7561/serialNumber=25BC7D4DE77BD01B3D191587696E5AFDD8CECD04
Certificate serial:       0556
Authority key identifier: 25:BC:7D:4D:E7:7B:D0:1B:3D:19:15:87:69:6E:5A:FD:D8:CE:CD:04
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/52564FC4836B11EE960BCA6FC4F9AE02.roa
Signing time:             Tue 03 Sep 2024 01:15:33 +0000
ROA not before:           Tue 03 Sep 2024 01:15:33 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     55451
IP address blocks:        110.164.167.0/24 maxlen: 24
                          2403:6200:792c::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1366 (0x556)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E7561/serialNumber=25BC7D4DE77BD01B3D191587696E5AFDD8CECD04
        Validity
            Not Before: Sep  3 01:15:33 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=66d66335-e61f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:7f:95:1d:81:0f:eb:e5:d2:22:32:b1:59:12:
                    5f:37:32:a4:32:08:04:10:a6:6f:de:10:0f:d5:74:
                    de:10:d3:23:a8:09:75:1a:57:dc:17:fe:23:95:e7:
                    71:d4:66:4e:33:cd:07:37:a9:4d:a5:8f:df:1f:8d:
                    4a:56:27:f0:64:ae:1a:af:f5:57:48:7b:67:a3:84:
                    92:43:ef:61:0e:db:92:be:1e:82:00:32:fe:93:00:
                    2c:02:64:52:a2:2d:1f:fd:7a:84:72:79:58:be:b8:
                    2b:29:14:68:c8:cb:16:33:71:f0:39:bb:17:19:e9:
                    3d:7b:e5:9e:1a:83:ce:9b:79:c6:e4:ff:71:61:c6:
                    3b:c2:60:01:0e:e0:0d:0a:dc:a8:72:84:5b:e7:e7:
                    01:c7:b9:84:60:b7:82:24:b9:bb:4d:29:bf:a6:b7:
                    af:15:60:5b:70:d0:b5:06:96:ef:05:77:41:ec:d8:
                    18:3d:81:de:96:65:d5:ad:a4:12:16:4a:f0:12:4e:
                    7d:94:9e:2a:87:7e:e3:5c:0e:2f:ca:67:8f:a0:d7:
                    fe:e7:3a:90:7e:ab:fb:1f:c0:ce:10:47:40:b9:cc:
                    f8:91:aa:4a:a3:19:ae:6c:55:12:1f:78:42:a4:23:
                    bd:f7:28:e8:ef:b5:74:5f:d2:ee:b0:02:aa:94:1e:
                    d5:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:44:60:2D:86:18:48:2C:3E:5C:59:43:01:EB:F7:50:8A:33:8F:38
            X509v3 Authority Key Identifier:
                keyid:25:BC:7D:4D:E7:7B:D0:1B:3D:19:15:87:69:6E:5A:FD:D8:CE:CD:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/52564FC4836B11EE960BCA6FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.164.167.0/24
                IPv6:
                  2403:6200:792c::/48

    Signature Algorithm: sha256WithRSAEncryption
         16:00:e3:7c:f8:c3:47:86:69:08:59:ad:2f:37:8b:d8:bf:64:
         90:2a:40:b3:08:5c:2a:e9:8d:13:9f:73:1c:e6:49:d1:43:f0:
         6b:f3:1d:8f:b6:f4:5e:37:83:10:97:e4:ab:35:d0:e9:37:7c:
         37:b1:7a:db:a4:3e:32:9b:d9:3d:3b:62:37:39:60:c7:8d:e4:
         38:71:1f:52:1f:16:37:2e:33:5c:68:8d:0f:ff:e7:53:e9:b8:
         1f:66:40:3b:a2:68:ab:ac:26:f8:fa:d0:15:d9:d7:21:9a:02:
         d1:0e:00:48:61:3f:75:b0:78:f1:aa:96:c1:9a:08:2d:28:99:
         87:e8:b8:df:ae:74:e3:12:60:79:16:12:f7:bb:7b:73:99:a0:
         36:cb:f1:41:dd:b9:2a:e7:a1:33:c2:1c:e5:d1:b1:d9:e0:9e:
         aa:38:0e:31:b6:ff:bc:5e:00:cd:aa:67:2b:1e:a8:97:07:c2:
         6d:1c:c0:8f:a4:c6:eb:78:b0:ce:65:e2:6d:12:c4:25:94:ea:
         2b:bd:04:ff:47:24:52:f7:49:ba:67:93:4b:b3:37:67:ed:c8:
         ea:cc:05:ed:a5:ff:89:31:8f:01:e8:c8:a9:c9:7d:48:39:9e:
         72:62:07:8d:f8:19:a6:5f:07:c9:6c:10:0d:eb:61:24:d9:b0:
         2e:3a:cd:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:27:29 2024 by rpki-client on console-ams.rpki-client.org