Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/371AC6101E0111E9A590C837C4F9AE02.roa
File:                     371AC6101E0111E9A590C837C4F9AE02.roa (raw, json)
Hash identifier:          bFhTNlpDjkTH2ec3r3D2PTt+bEsYI1uu1lXgusCs0tU=
Subject key identifier:   F7:E0:AC:01:45:36:9D:B2:E3:9A:3C:76:09:20:EC:63:D5:F5:18:6D
Certificate issuer:       /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Certificate serial:       3813
Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/371AC6101E0111E9A590C837C4F9AE02.roa
Signing time:             Fri 22 Mar 2024 03:30:52 +0000
ROA not before:           Fri 22 Mar 2024 03:30:52 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     134095
IP address blocks:        110.170.137.0/24 maxlen: 24
                          110.170.147.0/24 maxlen: 24
                          110.170.238.0/24 maxlen: 24
                          210.86.152.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
                          rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 14:21:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14355 (0x3813)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
        Validity
            Not Before: Mar 22 03:30:52 2024 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=65fcfb6c-8525
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a5:5f:9e:b4:fa:77:98:2f:86:58:57:a4:5b:
                    e4:d9:e4:fd:62:ef:a9:77:82:d2:6d:fd:e9:43:53:
                    55:cc:a5:2b:c7:8f:ae:8b:2a:a2:99:73:ac:8e:7b:
                    03:f3:26:3e:ea:57:73:c6:73:e1:82:78:75:f0:75:
                    ee:9d:dd:4a:b6:06:5f:b4:47:4c:82:cf:78:3c:26:
                    ec:e7:c8:9a:77:d3:09:00:0a:ac:28:a0:db:f6:75:
                    ad:17:6b:23:ec:e2:88:05:50:a6:3b:9c:85:f8:1c:
                    50:a3:f4:6a:4b:6c:20:11:21:19:56:b0:46:13:5a:
                    5c:f2:cb:b2:30:6a:1d:de:8f:d0:f1:d3:40:8d:28:
                    26:46:72:9c:ed:99:af:b3:72:f6:4c:df:88:05:d8:
                    76:8b:69:32:cd:df:30:a6:e5:ed:fe:8f:cd:15:37:
                    c5:d1:31:36:50:60:94:3c:f0:f5:e8:93:d6:76:dd:
                    11:77:e7:73:3f:3d:67:61:a5:e9:78:a6:a2:d2:78:
                    d0:67:d2:fb:92:30:27:ea:c1:91:ae:75:b8:4e:10:
                    66:0d:20:78:26:98:67:ad:1e:f5:33:cc:60:3e:83:
                    d1:6e:ae:4a:85:58:2a:ce:9a:ce:75:17:3b:17:0c:
                    1c:2e:80:1b:85:3c:c2:f3:3d:a5:7a:e0:7b:fb:23:
                    83:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:E0:AC:01:45:36:9D:B2:E3:9A:3C:76:09:20:EC:63:D5:F5:18:6D
            X509v3 Authority Key Identifier:
                keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/371AC6101E0111E9A590C837C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.170.137.0/24
                  110.170.147.0/24
                  110.170.238.0/24
                  210.86.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:cf:26:60:67:92:2b:55:b3:8d:80:db:6f:77:89:41:7f:a8:
         b0:d6:0b:64:c6:02:8e:5b:8f:b7:fa:84:fc:bf:37:8e:2e:40:
         41:3b:37:9b:8f:ce:89:7f:3b:3c:ad:a2:01:63:30:07:a3:47:
         fe:85:0f:b3:fb:74:bf:7d:9c:6b:cd:da:1b:b0:a2:a6:ba:a2:
         4a:40:99:6e:81:22:ce:a1:cb:d2:b0:cd:ae:0c:2e:80:83:0c:
         fa:28:b9:44:ab:cd:24:2b:1f:e2:91:b6:4e:f6:8c:3d:18:de:
         2a:00:55:33:c3:39:bf:23:bb:b7:1a:cc:8c:95:b5:46:10:28:
         ec:0b:a2:7e:bf:3a:58:9b:90:6a:1e:84:77:b4:24:34:1d:8d:
         63:d3:fe:3e:6f:10:75:36:f3:ed:cf:f2:b6:33:50:35:9a:1a:
         5d:03:fe:11:60:17:63:d6:68:98:01:c6:6b:bf:b7:af:da:8c:
         01:24:c5:8e:f3:13:f9:fc:9f:86:76:1f:e7:a1:6c:7f:c0:25:
         da:15:fb:e4:45:4e:a2:ca:b1:a7:f9:5b:77:48:7b:d3:3a:0d:
         6f:77:71:30:83:42:30:58:7f:e1:a2:e8:86:b5:98:0d:b9:ea:
         a9:6b:d4:78:da:60:1c:53:a0:79:62:71:25:bc:f4:25:71:98:
         09:4e:ca:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 15:08:08 2024 by rpki-client on console-fra.rpki-client.org