Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/3BE907D6178411EC83735974C4F9AE02.roa
File:                     3BE907D6178411EC83735974C4F9AE02.roa (raw, json)
Hash identifier:          aTs7H8gmIfGkkMnKdQdsGTmXB1TU844SK9IPYrf0dQM=
Subject key identifier:   82:32:FD:61:8F:55:5F:2C:A9:87:24:8B:9B:8C:ED:55:2D:EC:D1:2B
Certificate issuer:       /CN=A91514B1/serialNumber=6171432D5594CB3F608D3BE0F52600BBEC46E5FB
Certificate serial:       044B
Authority key identifier: 61:71:43:2D:55:94:CB:3F:60:8D:3B:E0:F5:26:00:BB:EC:46:E5:FB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YXFDLVWUyz9gjTvg9SYAu-xG5fs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/3BE907D6178411EC83735974C4F9AE02.roa
Signing time:             Thu 03 Aug 2023 01:02:16 +0000
ROA not before:           Thu 03 Aug 2023 01:02:16 +0000
ROA not after:            Thu 31 Oct 2024 00:00:00 +0000
asID:                     9738
IP address blocks:        61.88.58.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.crl
                          rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YXFDLVWUyz9gjTvg9SYAu-xG5fs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 02:43:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1099 (0x44b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91514B1/serialNumber=6171432D5594CB3F608D3BE0F52600BBEC46E5FB
        Validity
            Not Before: Aug  3 01:02:16 2023 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=64cafc98-fc11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:54:7d:4a:a2:6c:2c:41:ab:7d:b5:71:9e:2b:
                    45:91:37:62:0e:34:4c:99:ef:0b:bb:26:57:09:90:
                    c9:50:31:4f:a1:5a:86:99:be:50:86:be:52:91:46:
                    e6:0f:e2:8a:27:fa:e5:2e:5e:e3:0c:e0:3d:6a:5f:
                    cf:ab:5a:ae:dd:6b:66:a6:8f:95:9c:d7:06:6c:02:
                    32:6c:31:54:da:07:09:c6:50:a0:dc:46:c8:14:53:
                    26:1c:ec:80:54:2c:ad:9d:0d:b9:4c:39:85:c7:fb:
                    b0:c2:e5:ee:f6:05:08:d2:36:7b:2f:07:2e:b8:64:
                    a8:aa:a6:66:1d:ad:b6:c7:bd:11:6c:8c:54:55:7d:
                    43:81:66:33:e5:95:9e:c1:71:63:96:45:2d:35:8b:
                    74:3b:72:46:6c:8b:62:23:d1:c0:51:b5:d4:5e:26:
                    68:c3:11:f0:76:c1:df:3e:db:d2:6d:0b:57:4d:13:
                    db:de:c4:bf:f5:c2:63:cd:7c:69:70:38:65:13:8d:
                    c0:96:e7:0a:e0:9f:47:45:39:49:eb:ec:fb:b3:cc:
                    14:70:51:66:d5:0f:17:7e:d4:55:c6:d7:42:eb:63:
                    73:53:f6:ba:5b:72:2d:f6:a6:9c:31:3d:b2:60:45:
                    4d:9d:6e:39:80:75:54:aa:d6:20:74:9f:ce:c8:bf:
                    d8:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:32:FD:61:8F:55:5F:2C:A9:87:24:8B:9B:8C:ED:55:2D:EC:D1:2B
            X509v3 Authority Key Identifier:
                keyid:61:71:43:2D:55:94:CB:3F:60:8D:3B:E0:F5:26:00:BB:EC:46:E5:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YXFDLVWUyz9gjTvg9SYAu-xG5fs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/3BE907D6178411EC83735974C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.88.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:29:91:4e:2d:64:d0:ec:e5:9b:b3:e0:57:e8:a0:96:62:a4:
         ef:75:e3:db:34:e4:ce:c5:b4:fb:2f:e6:5d:7e:47:5d:67:21:
         36:bf:a7:7f:7a:cd:42:01:e4:bf:92:ab:60:d9:5d:a5:e0:a6:
         a3:f4:81:e6:86:75:97:76:7b:43:bd:10:e3:dd:33:ff:f4:3e:
         64:dd:04:21:4d:0c:c9:73:c0:5e:97:ae:9c:9c:9b:ef:69:90:
         6a:d8:4f:ea:97:fa:25:22:9a:6c:d6:d7:8b:55:12:44:e6:a1:
         df:82:23:29:4c:df:31:58:8e:34:dd:68:18:d7:1c:7a:2e:86:
         29:c0:3f:6d:7b:9c:96:1f:81:53:d7:7e:82:b0:2f:d8:aa:05:
         b3:e6:3a:9a:56:42:69:b8:22:9e:5c:08:de:2e:34:85:82:f7:
         87:fc:24:ac:76:23:5d:56:8f:9f:bb:de:f6:72:6b:38:82:73:
         1f:38:3b:72:df:aa:d4:e5:9b:43:b9:2a:7a:f2:5a:37:cd:8e:
         ab:1d:bf:e4:0b:5c:63:df:39:e2:8e:9b:74:a0:e1:f9:73:f4:
         a2:32:a8:98:b6:b2:4d:47:19:f2:2a:0d:65:17:f5:b6:43:b1:
         74:6f:0f:9b:ca:df:b0:b3:d2:16:d0:28:b3:67:4f:e5:35:52:
         52:4b:f6:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 04:59:01 2024 by rpki-client on console-fra.rpki-client.org