Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/7B2B3168064911ECA853EB0FC4F9AE02.roa
File:                     7B2B3168064911ECA853EB0FC4F9AE02.roa (raw, json)
Hash identifier:          LJFG0FHuNHdH5wLtq3ShFCXW+xDnUS2QORT5xkQz4wI=
Subject key identifier:   8B:9F:1E:43:41:BB:41:79:DD:03:C5:12:87:9E:F0:73:27:14:5C:02
Certificate issuer:       /CN=A91E7561/serialNumber=25BC7D4DE77BD01B3D191587696E5AFDD8CECD04
Certificate serial:       0555
Authority key identifier: 25:BC:7D:4D:E7:7B:D0:1B:3D:19:15:87:69:6E:5A:FD:D8:CE:CD:04
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/7B2B3168064911ECA853EB0FC4F9AE02.roa
Signing time:             Tue 03 Sep 2024 01:15:32 +0000
ROA not before:           Tue 03 Sep 2024 01:15:32 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     54994
IP address blocks:        110.164.35.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Dec 2024 23:16:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1365 (0x555)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E7561/serialNumber=25BC7D4DE77BD01B3D191587696E5AFDD8CECD04
        Validity
            Not Before: Sep  3 01:15:32 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=66d66334-d072
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:f7:d2:75:b8:f2:0d:03:b0:99:21:d2:b1:a5:
                    4e:54:74:63:ef:b2:6f:09:07:38:94:aa:a2:57:ac:
                    1f:ed:37:3f:90:b6:e3:60:0d:26:9a:e4:e0:9a:b9:
                    13:60:62:7e:ff:ca:d5:51:4e:81:63:69:4e:49:f4:
                    f6:1f:7e:a4:53:48:cc:96:47:49:8f:b9:2b:80:97:
                    00:a4:a1:c9:74:38:e5:23:eb:ad:20:a6:3c:c1:15:
                    77:8a:4f:a3:03:f7:0b:f3:93:51:48:29:97:22:d5:
                    4e:31:5f:49:2e:35:4e:aa:5c:01:36:ed:25:0d:8a:
                    0a:22:4b:33:d0:6d:de:2a:90:31:fc:b4:98:a6:59:
                    24:dd:0e:3c:28:4a:2c:be:31:7d:53:1b:b8:97:e2:
                    7f:77:7d:e1:ed:74:1d:e2:ef:38:80:39:5e:15:4b:
                    de:b7:02:de:49:bb:8a:fb:d9:46:2a:eb:5d:2d:02:
                    b6:9c:53:2d:5a:2e:06:48:81:98:b1:8e:45:a0:10:
                    65:80:c4:78:2e:b2:55:9d:81:36:8a:b0:20:32:17:
                    a0:fa:0a:3f:69:6e:0d:20:8a:28:54:ef:70:3a:f8:
                    73:aa:aa:fd:86:1b:d8:f4:fe:0d:a4:c4:4f:53:cb:
                    8b:59:57:4c:8c:b6:15:0e:d2:c7:92:3d:8a:b5:4c:
                    ad:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:9F:1E:43:41:BB:41:79:DD:03:C5:12:87:9E:F0:73:27:14:5C:02
            X509v3 Authority Key Identifier:
                keyid:25:BC:7D:4D:E7:7B:D0:1B:3D:19:15:87:69:6E:5A:FD:D8:CE:CD:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/7B2B3168064911ECA853EB0FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.164.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:be:af:f3:2e:29:c9:db:b7:79:66:d9:1b:c0:30:57:ef:0e:
         61:58:98:a4:fb:48:2b:3a:4a:e0:40:0e:f8:b7:f3:c0:fe:56:
         be:ff:a9:a5:a0:8e:53:6c:84:6c:a2:c2:08:bb:a0:69:86:0e:
         4e:f8:af:58:49:8d:eb:ad:4e:57:3c:8d:57:91:61:74:b6:13:
         a4:ba:d1:77:3d:06:13:97:4c:aa:7d:87:6e:12:ad:99:ed:50:
         5f:e6:f1:ec:3b:6f:be:74:16:e6:5f:65:78:9e:89:49:20:61:
         cd:4c:59:86:9c:c9:70:d4:a3:4d:ca:ec:fc:f7:b9:dc:e8:ae:
         5e:9f:71:01:08:6c:7d:26:ea:6d:8e:e9:ad:27:86:11:45:e5:
         da:9e:79:65:fc:62:f2:f9:ec:8d:62:84:03:a2:ce:08:57:99:
         df:5d:bd:0c:36:2b:91:ea:fe:f7:7d:ea:f3:48:14:e8:5d:94:
         03:ee:de:59:6b:9c:86:02:3f:ba:0a:8a:77:f7:64:97:bf:a7:
         73:2b:8b:6a:60:0a:eb:68:81:95:40:5d:a2:09:fb:ce:e8:0d:
         30:5f:7d:5d:83:be:d2:7d:17:92:d9:3f:4b:bd:39:0a:78:59:
         86:68:cd:f9:67:b9:41:9a:86:5e:7d:7c:02:38:55:66:9e:7a:
         3f:e5:06:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 01:01:34 2024 by rpki-client on console-ams.rpki-client.org