Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917FFB0/E557C0001D9211E2933A21F608B02CD2/A88A36D0003A11EEB8430127C4F9AE02.roa
File:                     A88A36D0003A11EEB8430127C4F9AE02.roa (raw, json)
Hash identifier:          N57rL5fKbXwMf5CByCP0JXzKVNE3IgOrgAh6i/naj3g=
Subject key identifier:   5F:86:67:E3:EE:5B:BC:F0:9E:56:09:70:5A:F1:B5:9B:BE:25:4D:20
Certificate issuer:       /CN=A917FFB0/serialNumber=1324043021BB45D7FF66F20AFC6839343130C3F2
Certificate serial:       33B6
Authority key identifier: 13:24:04:30:21:BB:45:D7:FF:66:F2:0A:FC:68:39:34:31:30:C3:F2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917FFB0/E557C0001D9211E2933A21F608B02CD2/A88A36D0003A11EEB8430127C4F9AE02.roa
Signing time:             Wed 20 Sep 2023 14:50:54 +0000
ROA not before:           Wed 20 Sep 2023 14:50:54 +0000
ROA not after:            Thu 31 Oct 2024 00:00:00 +0000
asID:                     9260
IP address blocks:        110.38.31.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917FFB0/E557C0001D9211E2933A21F608B02CD2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.crl
                          rsync://rpki.apnic.net/member_repository/A917FFB0/E557C0001D9211E2933A21F608B02CD2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 14:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13238 (0x33b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917FFB0/serialNumber=1324043021BB45D7FF66F20AFC6839343130C3F2
        Validity
            Not Before: Sep 20 14:50:54 2023 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=650b06cd-d41e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e7:47:01:df:90:e0:b3:a1:7e:ad:93:0a:ff:
                    86:4f:c3:fa:01:09:60:eb:9c:52:0d:c1:00:d8:eb:
                    c0:40:8e:94:3c:9c:d5:aa:15:9a:5d:8e:3a:d8:fc:
                    fd:46:db:57:c2:a6:98:10:c5:eb:86:b2:24:83:eb:
                    7b:bd:25:d5:be:65:35:cb:a2:06:b8:5f:1b:cc:b9:
                    85:06:a2:87:dc:e7:3f:bf:0f:22:4e:04:e0:a8:df:
                    48:4b:f4:a1:93:9b:56:8a:f3:ec:d7:0f:dc:a3:56:
                    2b:4c:43:21:12:65:42:3e:5f:b7:ce:95:7b:69:f7:
                    33:61:43:7a:97:07:31:f0:67:d2:cd:b8:bd:ef:f7:
                    d3:76:30:6d:ef:b3:28:e6:71:5b:90:a9:e0:60:c6:
                    bc:97:61:fa:5c:42:14:20:cd:20:2a:f3:ca:ee:24:
                    f5:65:9d:0d:ac:79:82:c2:d3:18:5c:f5:bd:c7:cb:
                    36:48:88:b0:02:52:99:a3:ee:9d:8e:a7:fc:69:99:
                    71:c1:04:6e:74:26:c6:f3:13:65:ae:1e:5e:de:07:
                    db:85:ab:cf:62:4a:27:26:74:d5:ee:82:bc:a8:10:
                    46:40:ab:1b:00:00:d3:9f:28:20:2c:e0:2a:22:f4:
                    d0:a2:44:15:cd:ed:8a:00:96:ac:70:72:c9:c2:52:
                    74:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:86:67:E3:EE:5B:BC:F0:9E:56:09:70:5A:F1:B5:9B:BE:25:4D:20
            X509v3 Authority Key Identifier:
                keyid:13:24:04:30:21:BB:45:D7:FF:66:F2:0A:FC:68:39:34:31:30:C3:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917FFB0/E557C0001D9211E2933A21F608B02CD2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FFB0/E557C0001D9211E2933A21F608B02CD2/A88A36D0003A11EEB8430127C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.38.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c3:96:45:5d:e7:10:c8:06:9a:18:c2:67:dd:66:75:2e:24:dc:
         b7:d1:48:dc:0c:e1:db:93:a8:df:db:bc:30:57:a5:1f:a5:c7:
         02:04:d0:26:fc:22:00:6f:c5:e2:e6:b3:a3:77:40:2f:8e:2f:
         2c:b4:43:fb:a9:3b:c3:00:76:fb:35:f0:1a:58:04:41:09:1c:
         55:f9:5b:53:97:38:f8:ea:d6:f8:7f:fc:b1:ef:26:09:4f:0f:
         e7:d7:d9:b6:e1:7f:97:21:34:e3:e5:b4:23:e8:94:05:65:bd:
         87:08:bd:07:d8:bf:01:3f:cd:a4:e8:b0:c2:ec:68:10:e2:c8:
         62:4e:2d:d6:e9:6c:31:a2:c7:9b:92:75:5f:d0:a1:f7:34:a2:
         b6:5c:ba:c0:b9:01:30:94:fb:3a:74:55:c0:af:40:f9:de:c9:
         d2:cc:5a:c5:0b:22:a1:45:2c:15:51:11:59:c9:73:bb:0b:36:
         18:b5:bf:95:6f:57:33:1f:5d:e1:ca:bc:76:44:c0:c7:c3:c8:
         cc:7c:d8:f6:f6:50:46:f3:cf:09:19:3a:ce:77:20:72:57:aa:
         72:62:34:55:8f:fa:9c:18:41:f3:e1:64:c6:d8:3b:43:3d:5f:
         27:34:24:d4:d1:65:0a:d7:74:20:64:a0:50:ee:6a:41:05:89:
         3d:ae:b9:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:47:50 2024 by rpki-client on console-fra.rpki-client.org