Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/464E04581E0111E9A590C837C4F9AE02.roa
File:                     464E04581E0111E9A590C837C4F9AE02.roa (raw, json)
Hash identifier:          0JhD9f+qwwQ7C8CPKYsnG4nhrVKq8I5VpyjwV6gz6h8=
Subject key identifier:   DD:52:8B:0D:5B:9D:D8:3F:9F:52:2A:AC:1C:3A:76:31:A7:B9:F7:DC
Certificate issuer:       /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Certificate serial:       36B0
Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/464E04581E0111E9A590C837C4F9AE02.roa
Signing time:             Sat 08 Jul 2023 14:31:00 +0000
ROA not before:           Sat 08 Jul 2023 14:31:00 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     37977
IP address blocks:        203.144.241.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
                          rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 14:21:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14000 (0x36b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
        Validity
            Not Before: Jul  8 14:31:00 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=64a97324-cf42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:f6:71:8a:bb:20:bb:15:7b:f4:5d:ff:6a:fe:
                    c8:3d:d9:00:4a:05:28:cb:3f:63:c0:53:26:ac:fe:
                    f3:22:74:87:0e:98:06:fa:46:a7:d0:af:d1:f8:4b:
                    87:26:78:16:92:b3:4f:36:0d:16:96:95:34:45:6e:
                    ab:57:cd:bd:5e:a0:f0:49:e5:45:bc:24:8b:61:ae:
                    50:79:b6:f9:7b:b9:ab:c1:1e:c3:d4:ce:46:8d:b2:
                    a0:42:1a:66:be:8d:ae:3c:ca:1e:5f:be:ac:0f:60:
                    50:7d:81:f5:ba:d5:f6:89:15:b6:36:74:30:05:3e:
                    6f:c3:52:45:be:69:b7:9e:be:ca:40:a1:61:cc:a5:
                    bb:fc:cf:0a:19:21:d8:ee:03:0c:53:5d:bb:02:b6:
                    31:e3:9a:4e:69:3f:d3:02:e1:fe:f6:53:1e:ba:4f:
                    af:d4:30:90:99:23:47:ac:7f:64:6f:34:84:68:36:
                    30:5e:27:b6:ad:d0:7b:41:58:25:3b:8f:04:ee:6d:
                    35:28:38:eb:49:4c:fd:ee:7e:16:84:ec:9c:a5:29:
                    3e:67:a8:bb:ad:a7:bb:1c:d6:bb:ad:86:16:73:30:
                    c4:6e:44:e5:20:57:0b:29:51:ee:02:8c:9b:5c:e3:
                    ae:9b:2f:5c:c2:4a:55:3a:99:84:30:99:e0:78:97:
                    0c:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:52:8B:0D:5B:9D:D8:3F:9F:52:2A:AC:1C:3A:76:31:A7:B9:F7:DC
            X509v3 Authority Key Identifier:
                keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/464E04581E0111E9A590C837C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.144.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:f3:14:a9:71:83:15:15:77:48:09:f0:85:7e:44:b8:19:d4:
         ed:c7:7d:77:9e:1f:0d:66:fb:b3:2f:fe:5b:9c:0b:47:24:5e:
         b2:1b:78:36:21:ec:6a:c8:24:cb:e3:89:ee:97:28:6a:03:83:
         cf:a6:46:66:8f:99:c3:58:7c:d5:65:95:60:42:48:97:0b:52:
         b3:c9:6e:bb:94:1c:66:97:f6:0c:72:66:9f:b3:89:2a:a1:d5:
         bb:58:a0:48:4c:e7:87:da:92:55:62:58:01:4b:16:86:10:96:
         33:38:78:56:21:04:e9:6b:2c:d0:a8:6c:35:0a:83:57:32:36:
         e8:58:76:89:34:93:89:67:99:b4:f5:4d:34:ad:a8:5f:a4:3a:
         71:19:76:a4:45:85:f2:e2:0f:b2:62:14:a1:99:d0:fe:c3:b4:
         14:af:df:9a:88:b0:b1:6a:bd:55:9a:06:9c:2b:1e:3e:73:4f:
         f6:b4:17:72:a4:9c:e4:2d:aa:2e:06:b5:4c:d0:36:0d:8d:86:
         0b:51:fa:0f:70:7b:f3:2e:8c:b9:c7:66:9f:b8:40:5e:0f:eb:
         8c:a5:53:cb:67:62:4a:4a:f9:9e:32:98:15:81:43:8b:8d:ae:
         82:ab:17:5d:c3:23:38:cc:b0:5a:02:2e:63:d1:7c:85:57:10:
         5b:65:4f:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 16:40:54 2024 by rpki-client on console-ams.rpki-client.org