Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/F8784A5E36DF11ECA0E1FC78C4F9AE02.roa
File:                     F8784A5E36DF11ECA0E1FC78C4F9AE02.roa (raw, json)
Hash identifier:          UNHDC5VVRoUo3FUKIyxAU2OmB2ru16Pa4abSX5nK0fc=
Subject key identifier:   F6:78:DF:5A:F1:F1:DE:68:AA:64:99:FA:72:2E:38:D2:74:7E:12:B0
Certificate issuer:       /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Certificate serial:       3683
Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/F8784A5E36DF11ECA0E1FC78C4F9AE02.roa
Signing time:             Sat 08 Jul 2023 14:30:23 +0000
ROA not before:           Sat 08 Jul 2023 14:30:23 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     133328
IP address blocks:        110.170.144.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
                          rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Jun 2024 14:21:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13955 (0x3683)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
        Validity
            Not Before: Jul  8 14:30:23 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=64a972ff-0b43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:26:19:d8:0f:1f:40:e1:f2:5c:14:31:8f:7d:
                    52:0e:72:8f:5c:9b:02:aa:5d:e8:19:77:3c:a3:41:
                    82:08:9d:07:ec:c7:de:17:be:97:dd:cc:7d:4d:81:
                    52:d6:db:b8:92:f2:d7:35:e4:c9:f5:f8:53:22:24:
                    ba:58:74:80:0a:e2:8f:b2:58:7b:79:e6:d1:25:57:
                    0b:35:a9:76:a6:79:de:90:88:f3:44:f5:08:6b:ea:
                    73:cc:9e:a8:56:4c:f5:e5:0f:f6:52:0d:30:cc:26:
                    0c:ac:33:6e:48:a0:71:2b:4a:b4:2a:27:e7:3c:12:
                    a7:6d:a9:d9:be:f7:b0:29:1c:e6:92:07:56:61:9c:
                    ae:41:89:c5:b2:bc:70:f8:96:15:af:dc:9e:73:13:
                    d0:37:dd:30:27:42:af:6e:5f:2d:30:2f:fa:2e:ae:
                    08:cf:ce:4b:35:c5:79:f6:a0:19:81:9d:05:e5:f6:
                    6a:61:b8:56:e9:68:05:eb:fe:a3:1f:c2:26:43:4b:
                    8f:0c:ee:2c:0e:f1:ec:c0:e3:c8:6e:ee:a1:23:14:
                    67:7a:e4:6c:a6:72:d8:7c:3c:84:3d:91:ec:b7:ec:
                    f8:3f:28:bd:8b:8e:4d:ae:db:26:3b:19:32:7f:97:
                    95:a5:32:b8:fb:9d:35:75:2f:3e:5b:2e:67:f1:6b:
                    31:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:78:DF:5A:F1:F1:DE:68:AA:64:99:FA:72:2E:38:D2:74:7E:12:B0
            X509v3 Authority Key Identifier:
                keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/F8784A5E36DF11ECA0E1FC78C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.170.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:f8:d2:da:7d:bc:9d:9d:31:b3:33:ad:68:dc:5a:56:f7:55:
         f8:e6:55:84:15:4c:1f:94:44:c1:e1:60:12:6b:0c:32:43:4a:
         69:32:95:0a:bb:d8:8d:8c:0a:49:6e:02:2c:9f:52:3f:7a:ee:
         ae:9e:d9:cb:26:b1:1f:9e:70:eb:6f:7c:1b:7f:e3:d4:7b:24:
         c0:74:df:85:28:1d:00:89:cd:b1:ac:45:c5:89:c8:4a:57:63:
         23:92:91:d1:5c:1e:0b:a5:22:2e:6f:e7:aa:d8:1e:39:74:e5:
         0e:74:ab:ec:a5:59:b2:0a:05:b3:4a:f0:5f:ac:b5:d9:9f:25:
         af:7c:58:dd:89:fa:e4:5f:71:b7:c4:53:10:52:f3:c1:8c:41:
         92:9a:20:e5:71:ba:e0:dd:05:d2:a9:cd:3f:30:a8:92:d9:f3:
         55:1f:d1:15:7e:ba:80:54:66:f9:79:b9:c6:ca:5b:a3:1e:2b:
         c6:43:6b:0d:e5:51:20:91:cf:c9:46:21:71:fe:c8:5e:6c:3e:
         6e:1a:47:89:21:a8:a5:7a:3e:f0:f1:6f:a8:12:92:7a:ed:02:
         be:49:51:a3:88:38:4d:79:f2:eb:e9:3c:74:93:7e:4a:64:25:
         40:8d:c4:3b:c7:33:57:cb:79:0b:43:7d:a3:93:9f:39:76:9e:
         fb:25:20:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 14 16:49:12 2024 by rpki-client on console-fra.rpki-client.org