Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/76FA56B208B611EDACE57065C4F9AE02.roa
File:                     76FA56B208B611EDACE57065C4F9AE02.roa (raw, json)
Hash identifier:          I3TiTQI97S/iDWNW5QBw/7N6MZUvJuhLqCD9/DcXYyI=
Subject key identifier:   66:8D:28:B7:C5:5B:BE:94:08:1E:06:83:42:0F:5E:09:3C:DB:24:DC
Certificate issuer:       /CN=A91E7561/serialNumber=25BC7D4DE77BD01B3D191587696E5AFDD8CECD04
Certificate serial:       0551
Authority key identifier: 25:BC:7D:4D:E7:7B:D0:1B:3D:19:15:87:69:6E:5A:FD:D8:CE:CD:04
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/76FA56B208B611EDACE57065C4F9AE02.roa
Signing time:             Tue 03 Sep 2024 01:15:29 +0000
ROA not before:           Tue 03 Sep 2024 01:15:29 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     45455
IP address blocks:        110.164.200.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1361 (0x551)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E7561/serialNumber=25BC7D4DE77BD01B3D191587696E5AFDD8CECD04
        Validity
            Not Before: Sep  3 01:15:29 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=66d66330-442d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:0d:10:12:9b:09:5f:94:67:ce:ca:3a:02:cf:
                    e7:2c:35:ed:c7:8a:aa:bb:0f:2d:d6:22:0e:7c:6f:
                    5f:3f:95:af:05:00:ee:77:4f:42:66:a2:21:2b:7b:
                    61:14:5f:82:3b:f8:b8:6b:ae:50:b0:c5:47:cb:57:
                    4e:14:f8:6f:c6:48:39:f0:5f:b1:93:8c:c8:0c:a9:
                    08:21:0a:7f:68:b1:7e:ae:07:33:bb:09:f0:02:e4:
                    06:cc:98:b8:7e:37:03:89:4a:25:6b:75:9e:ae:1b:
                    e2:77:fc:43:b3:85:fa:17:03:bb:0e:db:40:5d:a0:
                    b9:a6:ff:52:6a:c5:2e:19:d1:99:6c:27:46:72:b0:
                    74:dd:86:da:14:92:f0:78:f9:56:fc:9f:e5:f1:c9:
                    86:f6:5c:dc:2c:7c:ba:97:f6:63:84:6a:52:63:5a:
                    b9:ca:cf:79:c2:42:14:4c:63:65:65:df:1d:5d:f5:
                    38:a2:0d:16:4c:31:6f:2f:fd:f3:97:3f:61:44:97:
                    69:b5:29:db:17:e3:08:c7:10:f5:03:bb:33:4c:71:
                    a1:1d:b2:df:71:8a:8f:89:97:7d:5c:8d:44:78:4d:
                    1b:93:92:77:6d:41:47:bf:7d:01:17:a5:ae:75:12:
                    d3:a4:94:ed:47:cf:a9:6a:d5:4b:78:e3:19:b6:42:
                    49:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:8D:28:B7:C5:5B:BE:94:08:1E:06:83:42:0F:5E:09:3C:DB:24:DC
            X509v3 Authority Key Identifier:
                keyid:25:BC:7D:4D:E7:7B:D0:1B:3D:19:15:87:69:6E:5A:FD:D8:CE:CD:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/76FA56B208B611EDACE57065C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.164.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:f1:9f:e5:b2:cf:71:f4:af:9d:ac:9a:96:05:34:b2:5c:b5:
         41:e5:3c:da:d6:32:35:87:ec:2e:7e:98:ad:e2:b8:36:94:73:
         43:a7:18:c2:1f:48:11:51:dc:05:b3:d7:a2:b0:b3:4a:3f:02:
         33:66:a1:b8:44:90:33:18:3c:61:25:63:60:50:0f:18:95:27:
         23:53:63:32:66:a1:40:5a:9f:f2:5b:7c:09:0b:60:1d:5c:e6:
         b8:d0:7a:4d:a7:73:da:db:80:66:be:00:09:6d:da:a6:2d:38:
         b9:5a:b9:b6:3c:ae:ef:18:9f:61:7e:c6:eb:f9:8a:99:0f:03:
         de:a4:85:3a:dd:5e:62:19:95:e8:98:9b:f1:5b:12:b3:5e:9f:
         c4:7d:af:b8:ed:dd:fb:8b:7e:cc:98:8d:eb:43:f1:18:1d:3d:
         0d:cb:b7:7a:79:86:8b:f5:7d:3d:f1:6d:ad:bd:a9:8b:6a:55:
         2e:e0:3c:be:cd:53:d5:10:c6:77:8f:c2:7d:53:26:df:95:cb:
         68:a6:eb:34:39:6a:84:1f:53:ff:c8:bd:ee:af:ef:4f:81:69:
         f0:40:bf:97:fb:8f:03:0d:e8:38:a0:60:a2:ac:c1:b8:1d:ea:
         b9:47:5d:7a:ba:a8:cc:21:15:1c:b6:c3:07:33:3e:fc:87:1a:
         a9:a0:ac:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:49:38 2024 by rpki-client on console-fra.rpki-client.org