Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/9BC27CB01E0211E9862ECE3FC4F9AE02.roa
File:                     9BC27CB01E0211E9862ECE3FC4F9AE02.roa (raw, json)
Hash identifier:          fSLJoie2khERMxr/i0eD8eCDcKYI3dOqj0v+ZhxCoLo=
Subject key identifier:   94:D9:85:01:A0:3E:2D:6F:82:1A:74:E3:E3:FF:A7:77:DE:F2:5D:95
Certificate issuer:       /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Certificate serial:       367A
Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/9BC27CB01E0211E9862ECE3FC4F9AE02.roa
Signing time:             Sat 08 Jul 2023 14:30:15 +0000
ROA not before:           Sat 08 Jul 2023 14:30:15 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     132063
IP address blocks:        171.102.42.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
                          rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 14:21:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13946 (0x367a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
        Validity
            Not Before: Jul  8 14:30:15 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=64a972f7-c19c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:bf:38:ce:6a:d8:e2:f4:8b:49:ea:e3:bc:e0:
                    38:96:e1:61:18:5f:0c:30:45:5c:b2:58:13:57:0c:
                    f0:32:51:4f:76:ba:4e:39:c2:c0:30:0e:e2:93:8f:
                    af:79:b7:f4:ec:ec:36:7f:b1:21:40:66:8f:f5:1b:
                    ca:58:14:52:65:48:16:5d:00:e6:65:bd:37:66:c3:
                    e2:39:39:a0:0b:28:93:4a:8e:b1:63:1e:cf:05:a7:
                    f5:66:44:02:82:76:a1:eb:ee:92:2b:f8:db:9a:e9:
                    6c:f6:65:44:e6:79:1a:ab:4e:32:c7:ca:39:e6:bd:
                    fb:d4:18:6e:46:9e:b8:38:57:b7:7a:d4:4e:2f:f9:
                    44:75:be:c0:fd:cb:9d:64:57:d8:e8:7b:a0:c5:b6:
                    0d:cb:3f:74:df:ca:74:e2:28:3a:cc:5e:da:40:29:
                    4d:13:2b:42:a9:ae:51:53:1d:f6:c0:ea:d3:d3:ea:
                    32:31:e8:98:ed:af:57:2b:70:ae:58:49:db:08:c1:
                    7c:2c:a7:31:58:66:b6:ee:ad:a5:65:c7:32:2b:71:
                    49:7b:18:0b:e7:fb:80:b3:c9:40:36:79:57:ee:48:
                    62:54:0c:ff:45:8e:78:73:4b:d7:e8:a6:80:e3:dd:
                    24:f7:7f:97:7c:60:68:7f:5f:86:64:c4:45:3b:d9:
                    b7:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:D9:85:01:A0:3E:2D:6F:82:1A:74:E3:E3:FF:A7:77:DE:F2:5D:95
            X509v3 Authority Key Identifier:
                keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/9BC27CB01E0211E9862ECE3FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  171.102.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:df:d4:5d:21:7d:cd:dc:50:09:9f:92:3b:a7:fe:b5:4b:c2:
         ff:db:bf:4d:76:7c:18:fd:9a:d4:01:e1:a4:56:3a:ca:fb:60:
         0e:1c:aa:87:9b:52:64:86:20:d3:6a:b4:cf:1e:d4:55:14:bd:
         23:8b:ba:11:e7:3c:05:41:a8:68:88:d7:fd:aa:3b:df:77:7b:
         86:56:2f:8a:d9:18:9c:20:a8:64:d7:46:bc:7c:87:15:fa:5c:
         1c:ff:55:81:d5:37:bc:f5:9a:c8:5c:d0:45:7a:18:52:ff:bd:
         f0:b2:b6:36:75:2c:bb:c6:f0:eb:62:c3:53:e4:7f:fa:1d:51:
         9a:01:92:ca:47:b0:cc:28:09:17:c9:62:a6:49:ac:7d:50:62:
         10:9c:75:2a:0a:d9:e5:cb:fd:af:66:ad:f8:fb:40:bb:df:50:
         d5:b0:69:c7:1e:80:d2:cc:0e:b1:c1:b3:a6:b0:43:bc:19:b7:
         fd:d5:7c:2a:18:14:3b:90:00:4e:6d:84:67:50:b1:98:e5:9d:
         0d:8d:8c:90:00:d5:02:96:55:ee:30:7e:20:75:7e:4b:ab:ca:
         e1:14:02:68:ff:24:e9:90:bf:ac:dc:e6:f4:5b:02:a4:79:8e:
         55:dc:45:5e:a0:7a:06:c9:3c:95:8a:64:58:f9:19:11:62:26:
         3b:fb:4c:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 16:40:54 2024 by rpki-client on console-ams.rpki-client.org