Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/264D7C4671E711EC93623E71C4F9AE02.roa
File:                     264D7C4671E711EC93623E71C4F9AE02.roa (raw, json)
Hash identifier:          DDcRrsPjMkroidWt85P2YA/amylifImyteE2yr50UNY=
Subject key identifier:   41:25:ED:7A:05:23:04:45:BD:21:50:26:41:3B:FE:06:A7:58:E1:B8
Certificate issuer:       /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Certificate serial:       36CA
Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/264D7C4671E711EC93623E71C4F9AE02.roa
Signing time:             Sat 08 Jul 2023 14:31:24 +0000
ROA not before:           Sat 08 Jul 2023 14:31:24 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     55538
IP address blocks:        110.170.141.0/24 maxlen: 24
                          2001:fb0:1074::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
                          rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 19 Jun 2024 14:21:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14026 (0x36ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
        Validity
            Not Before: Jul  8 14:31:24 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=64a9733b-18f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:92:95:31:32:ea:56:73:6f:c1:82:65:c6:9e:
                    00:e7:0f:f0:da:d5:0d:2a:60:55:2c:a1:dd:de:86:
                    33:d0:0a:83:75:15:8b:15:07:f6:05:e3:27:a1:11:
                    54:64:3f:4d:3b:87:1a:e5:9e:f7:5e:fb:02:06:d9:
                    86:a2:64:7d:5f:30:32:2c:02:63:be:3a:f3:89:6a:
                    49:76:1a:69:e0:e1:85:38:e0:74:f4:89:bc:29:9c:
                    c9:40:d8:87:ec:f9:15:3a:91:31:05:b5:1b:b8:69:
                    32:d8:bf:3e:69:20:a1:ee:d8:53:a9:39:e4:e7:67:
                    86:40:4b:1d:1e:33:4f:dd:c0:3d:88:87:c7:06:64:
                    41:40:86:e4:f1:33:61:79:85:8c:d1:c8:f3:de:bc:
                    2d:13:73:f5:02:bd:f6:e6:41:e0:a9:2b:95:ae:b0:
                    60:21:c8:97:ad:c5:73:2f:c6:83:c0:05:bd:27:47:
                    48:48:1e:c3:8b:d9:89:87:35:11:d9:e5:8b:64:30:
                    7b:9c:54:c9:0d:85:88:26:57:b9:f0:f4:2c:f5:0f:
                    06:b1:6e:02:f5:78:42:7b:d5:c1:a3:63:58:fe:63:
                    65:78:43:6e:90:5c:0f:89:76:74:97:af:53:38:67:
                    13:58:99:17:61:48:59:14:fb:45:82:24:ee:24:20:
                    30:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:25:ED:7A:05:23:04:45:BD:21:50:26:41:3B:FE:06:A7:58:E1:B8
            X509v3 Authority Key Identifier:
                keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/264D7C4671E711EC93623E71C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.170.141.0/24
                IPv6:
                  2001:fb0:1074::/48

    Signature Algorithm: sha256WithRSAEncryption
         7a:ad:07:4f:38:7d:5f:fd:b5:92:b6:5d:9c:af:78:6d:98:60:
         af:39:14:eb:ab:db:00:27:2f:99:fa:62:4d:11:ff:05:bf:a3:
         30:b9:d1:be:ad:c1:29:c5:c8:d5:08:01:f4:7b:2a:4e:60:49:
         83:4a:3f:c5:03:42:4a:0e:52:43:a5:aa:a2:e4:4e:3a:2b:55:
         8c:8c:23:ad:a0:d2:6c:38:45:5a:e1:a9:a7:37:f1:0c:88:2c:
         09:d1:e0:29:e0:9e:66:4c:7b:6c:3d:15:89:9e:71:b6:bb:ab:
         ea:cf:22:42:ef:3e:9a:f1:cb:ff:4a:0f:e8:a3:72:1d:79:39:
         1e:d6:9d:d8:01:66:3c:ab:51:e2:98:94:d3:83:bb:a9:fc:5b:
         11:93:78:d5:d9:b0:5c:36:ac:89:b2:67:30:ab:d1:b0:6c:61:
         5b:32:9b:ab:8e:a4:4e:96:a1:e5:61:e6:82:24:3a:79:d5:b8:
         51:cb:29:c6:be:83:39:52:6f:15:20:fe:40:51:97:d9:c6:83:
         ac:c2:aa:f9:d1:43:15:a4:b8:f2:3c:01:92:9e:2b:80:e1:a2:
         18:5f:8d:3e:30:1a:7e:10:45:a0:9d:d0:27:6f:fc:85:d3:3e:
         f2:f0:62:8d:aa:47:48:c9:26:a0:a6:4a:a7:b2:aa:a3:65:59:
         67:c7:2c:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 12 16:27:34 2024 by rpki-client on console-fra.rpki-client.org