Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/1703348238F611EFAE53A822C4F9AE02.roa
File:                     1703348238F611EFAE53A822C4F9AE02.roa (raw, json)
Hash identifier:          9PbBml0/E97tyIZ6LCJAYyx/+6Li47fLfQEcz5pzevQ=
Subject key identifier:   1F:F9:96:40:1C:5D:7A:E2:F7:E4:00:4D:A1:A3:2A:9E:13:A8:73:0A
Certificate issuer:       /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Certificate serial:       3899
Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/1703348238F611EFAE53A822C4F9AE02.roa
Signing time:             Tue 16 Jul 2024 14:30:50 +0000
ROA not before:           Tue 16 Jul 2024 14:30:50 +0000
ROA not after:            Tue 30 Sep 2025 00:00:00 +0000
asID:                     152915
IP address blocks:        61.91.255.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
                          rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Oct 2024 13:49:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14489 (0x3899)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
        Validity
            Not Before: Jul 16 14:30:50 2024 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=66968419-bcaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:71:a8:2a:ae:29:6a:e5:fc:d4:b0:7b:e5:06:
                    4d:59:c1:5c:2a:76:9b:8d:30:4a:ec:09:bd:4b:10:
                    8f:5e:1d:a3:38:ac:ff:47:e4:8c:d1:0a:f3:40:81:
                    43:50:df:c4:5e:11:13:a6:c3:30:20:63:6d:67:a5:
                    bc:96:14:34:02:ac:a4:cc:07:31:dc:f4:13:a3:bf:
                    d4:32:cb:38:a6:34:77:d7:f3:41:df:7c:da:35:72:
                    1a:f1:22:e4:c1:89:dc:aa:7c:9f:a4:1d:80:17:47:
                    0f:46:d7:0a:cf:3f:b3:06:8f:14:ad:ad:bb:81:ad:
                    ab:89:2c:2b:e9:ca:98:5c:38:7e:4a:b4:47:4b:62:
                    02:6d:e0:53:cb:b5:90:d1:bc:d5:af:c7:52:c3:5e:
                    a9:f2:3a:bd:f8:f9:82:ea:46:84:f4:60:39:9c:71:
                    98:a6:ee:31:7e:43:4b:2f:0f:f2:c7:8f:77:3d:98:
                    d1:0f:fa:72:af:32:cb:d7:3d:50:81:8c:e1:3e:49:
                    42:a8:ab:a5:29:89:aa:02:a0:0d:dd:6e:82:7a:58:
                    89:bb:49:51:5c:25:5b:d5:d8:0c:ca:31:9f:8e:08:
                    a0:e1:01:db:12:fc:8f:20:58:d2:94:d4:0e:22:b9:
                    ed:32:dc:ed:d4:6e:36:4f:1e:65:05:b4:c2:d3:a4:
                    25:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:F9:96:40:1C:5D:7A:E2:F7:E4:00:4D:A1:A3:2A:9E:13:A8:73:0A
            X509v3 Authority Key Identifier:
                keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/1703348238F611EFAE53A822C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.91.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:cd:ce:c0:7e:da:2a:41:07:33:10:e1:35:4c:66:59:44:96:
         53:72:06:69:ab:1b:b6:46:ed:72:93:c2:22:74:42:90:d6:5b:
         22:4a:d0:71:50:c5:48:c7:7a:74:c4:4c:dd:a6:26:2e:0f:68:
         03:94:f1:3e:5e:6e:b3:0b:08:2c:47:d9:44:8d:e8:ea:87:8e:
         3e:3e:20:f4:2f:cb:33:0e:2f:4a:5d:74:4d:fa:c7:98:50:45:
         3b:59:81:1a:8c:af:66:f7:73:e2:42:31:ac:cb:0e:7d:1b:8e:
         6f:af:ee:07:f5:1e:82:16:7f:c3:9d:67:bb:5c:d7:66:3f:2c:
         72:30:12:64:9d:9a:a4:d1:87:a9:ca:7f:c5:3a:89:d5:28:47:
         6e:19:6e:dd:07:02:a0:bf:2d:01:a0:c0:ce:de:e7:0e:25:80:
         fe:92:2f:db:46:51:07:54:b5:cc:4d:b3:05:4d:81:38:05:18:
         33:30:e1:44:04:95:4f:48:f1:60:6f:3e:72:96:76:a7:2b:1a:
         d2:d5:2b:4b:cd:40:59:b1:77:0a:ef:0e:9c:02:02:4c:76:5c:
         a7:ce:08:a9:57:43:c0:6a:d7:30:fc:57:18:c8:48:4e:5a:84:
         f1:4d:e6:0b:e2:48:39:69:50:9e:d8:d6:c7:eb:00:31:c8:e2:
         34:e7:36:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 15:00:17 2024 by rpki-client on console-fra.rpki-client.org