Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB297/9A890E6EB5E111EEA0A6176DC4F9AE02/FE9EA8D4B67A11EEB24FA643C4F9AE02.roa
File:                     FE9EA8D4B67A11EEB24FA643C4F9AE02.roa (raw, json)
Hash identifier:          yVJ5vVhcvh07DTWMIUUrXFoLzgDKRoP+ZXjLJb156dc=
Subject key identifier:   36:30:CF:C3:2E:F8:4E:D6:0B:AA:BE:EB:A0:D8:13:7B:92:A1:09:C7
Certificate issuer:       /CN=A91FB297/serialNumber=C542BDE0B8347C379DE1DE1D8243A92CB94C874D
Certificate serial:       03
Authority key identifier: C5:42:BD:E0:B8:34:7C:37:9D:E1:DE:1D:82:43:A9:2C:B9:4C:87:4D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUK94Lg0fDed4d4dgkOpLLlMh00.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FB297/9A890E6EB5E111EEA0A6176DC4F9AE02/FE9EA8D4B67A11EEB24FA643C4F9AE02.roa
Signing time:             Fri 19 Jan 2024 03:29:47 +0000
ROA not before:           Fri 19 Jan 2024 03:29:47 +0000
ROA not after:            Sun 02 Mar 2025 00:00:00 +0000
asID:                     152153
IP address blocks:        113.192.49.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FB297/9A890E6EB5E111EEA0A6176DC4F9AE02/xUK94Lg0fDed4d4dgkOpLLlMh00.crl
                          rsync://rpki.apnic.net/member_repository/A91FB297/9A890E6EB5E111EEA0A6176DC4F9AE02/xUK94Lg0fDed4d4dgkOpLLlMh00.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUK94Lg0fDed4d4dgkOpLLlMh00.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FB297/serialNumber=C542BDE0B8347C379DE1DE1D8243A92CB94C874D
        Validity
            Not Before: Jan 19 03:29:47 2024 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=65a9ecab-ad79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:fb:6e:7c:b2:93:31:b3:b1:7b:d5:75:b6:a8:
                    26:f6:23:96:a6:a9:15:50:d3:5a:8a:6c:22:ce:ea:
                    7b:fb:2a:d8:75:03:a2:e2:39:0d:a0:cb:03:61:14:
                    50:2a:eb:a4:a7:2e:71:23:bf:a5:de:cd:1b:03:ac:
                    fe:b7:c2:71:69:db:f9:f5:de:25:bc:d1:6c:e9:1f:
                    d0:fb:b3:82:ce:1a:ae:8d:2b:fe:5d:11:33:f6:b6:
                    42:67:98:8b:65:d3:59:b0:cd:f7:43:e5:7c:b4:47:
                    8e:b4:38:d5:58:4d:ed:a7:0c:88:2e:f8:9f:80:fa:
                    90:68:f7:fb:aa:57:da:17:d4:a5:50:8d:21:40:0e:
                    58:ba:fe:8c:52:d4:9c:8e:d6:6a:d0:c2:6b:3b:73:
                    10:01:41:7e:4d:df:c1:12:9f:7d:dd:48:3e:98:e7:
                    14:ae:8b:3f:d0:38:90:ca:ad:de:80:5b:50:00:e3:
                    bf:5d:00:d9:24:db:33:e0:6e:fb:27:66:b5:f3:a1:
                    5d:f8:68:78:04:1f:e5:83:ca:fd:89:8c:03:44:b2:
                    a4:25:ab:70:8b:6d:36:fb:2c:f1:7a:3a:85:33:1d:
                    0a:58:59:b3:18:18:43:e2:e1:48:3e:41:b2:b6:4b:
                    a0:15:52:c7:f2:1b:e0:1b:94:d8:d1:cc:79:3c:b6:
                    b6:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:30:CF:C3:2E:F8:4E:D6:0B:AA:BE:EB:A0:D8:13:7B:92:A1:09:C7
            X509v3 Authority Key Identifier:
                keyid:C5:42:BD:E0:B8:34:7C:37:9D:E1:DE:1D:82:43:A9:2C:B9:4C:87:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FB297/9A890E6EB5E111EEA0A6176DC4F9AE02/xUK94Lg0fDed4d4dgkOpLLlMh00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUK94Lg0fDed4d4dgkOpLLlMh00.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB297/9A890E6EB5E111EEA0A6176DC4F9AE02/FE9EA8D4B67A11EEB24FA643C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.192.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:52:4e:5d:98:37:48:8a:99:37:48:d1:05:13:e6:ff:24:d1:
         77:30:aa:ac:ea:b0:fa:e9:d5:c6:9e:f4:68:93:09:50:93:11:
         4f:eb:17:b7:29:1c:4b:76:7f:94:18:64:d2:57:7e:82:6a:c9:
         57:03:30:6b:27:2f:61:a4:a6:21:2c:5d:60:ce:df:a5:72:f3:
         dc:b3:cc:d0:6c:ab:c2:25:82:30:37:82:9e:bf:f5:93:9f:a6:
         25:69:f4:ae:0e:83:4c:15:f7:38:03:c8:bd:9b:0e:2e:7e:21:
         df:9c:cb:dd:aa:54:f2:17:e7:92:48:1c:01:f3:a3:df:3d:4d:
         dc:7d:55:92:de:0f:9b:56:92:b1:2f:03:25:f0:d8:93:b2:b3:
         48:fe:a8:20:66:3c:43:28:3d:e9:da:69:11:ae:c6:f8:6f:32:
         85:28:61:59:87:de:a8:f5:d1:33:4f:bc:9e:e1:d7:ae:9b:73:
         c6:2b:ab:d5:a4:6a:f8:e9:ad:3a:60:66:05:75:84:90:25:aa:
         b6:f6:7e:bb:35:27:3f:b8:a9:32:59:3a:64:00:c1:ab:04:76:
         f0:3e:2a:63:0f:f7:88:70:98:5f:61:0b:de:79:61:e3:7d:db:
         f9:95:7d:64:db:7c:0c:81:4b:80:82:a5:44:d5:cd:0c:09:4d:
         30:d5:2a:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:13:27 2024 by rpki-client on console-ams.rpki-client.org