Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/215ADBDAC12D11ECB27B492EC4F9AE02.roa
File:                     215ADBDAC12D11ECB27B492EC4F9AE02.roa (raw, json)
Hash identifier:          0MLOHWlMr/CC3VbFsIHxpmkFlHMdP3aeh57aZpMqVZE=
Subject key identifier:   8D:A3:B3:1A:28:7C:69:DE:46:A5:55:F8:31:2B:78:A7:8A:F8:B8:14
Certificate issuer:       /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Certificate serial:       3871
Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/215ADBDAC12D11ECB27B492EC4F9AE02.roa
Signing time:             Tue 16 Jul 2024 14:30:14 +0000
ROA not before:           Tue 16 Jul 2024 14:30:14 +0000
ROA not after:            Tue 30 Sep 2025 00:00:00 +0000
asID:                     131162
IP address blocks:        58.97.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
                          rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14449 (0x3871)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137ABC
        Validity
            Not Before: Jul 16 14:30:14 2024 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=669683f6-4a3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:49:bc:12:d7:de:21:68:fd:d3:b4:b5:8f:91:
                    88:1c:64:d8:6f:f3:ea:f6:72:92:93:56:f8:71:8c:
                    54:1c:1b:68:b9:e7:7e:85:a0:64:fd:af:45:42:10:
                    0f:54:3f:52:bf:6b:31:a2:b5:85:50:32:28:b8:79:
                    5c:8f:80:84:db:70:44:f4:fc:5e:b4:f0:b8:2f:84:
                    bf:c4:8a:3d:18:8c:ba:76:95:ce:5c:18:17:0a:dc:
                    a1:84:ae:16:4e:95:f4:40:99:8a:d5:9e:25:8f:31:
                    fc:6f:4c:61:0a:74:72:15:9a:e8:88:33:b2:90:c7:
                    c3:7a:c8:e0:bf:f0:53:c1:33:6b:2e:92:a3:ba:a0:
                    56:d8:6e:f6:0e:f7:1b:00:45:f3:ac:be:0f:b8:32:
                    6c:65:65:6c:ac:a2:b7:36:2e:d8:3f:db:68:82:d4:
                    94:03:1a:1c:56:ec:66:9e:b6:25:ee:a9:50:2d:4e:
                    ba:21:83:9f:52:43:bc:95:bc:34:ae:eb:67:48:34:
                    40:de:12:e9:f3:88:25:ea:f6:d8:0f:75:28:1b:df:
                    61:f9:dc:ce:d6:c2:a3:4a:1b:91:3f:1a:ce:e9:2d:
                    3e:20:54:60:fa:65:85:8d:c6:1d:b3:1a:5e:ac:dd:
                    33:c7:e3:ba:25:2e:d0:46:75:4d:3d:13:65:e0:37:
                    0c:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:A3:B3:1A:28:7C:69:DE:46:A5:55:F8:31:2B:78:A7:8A:F8:B8:14
            X509v3 Authority Key Identifier:
                keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/215ADBDAC12D11ECB27B492EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  58.97.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:62:d8:80:3c:88:d2:48:f0:77:3e:ba:fe:c1:3f:79:4c:8e:
         2f:31:b5:50:44:ff:1b:cc:d2:58:bd:8c:45:a1:aa:ad:23:17:
         5d:e3:2e:6a:86:2b:a6:ff:92:07:97:0b:e8:59:9b:3e:8e:e2:
         c8:7e:29:7c:83:56:cb:91:88:3b:c2:ec:b8:04:ec:80:cc:46:
         e6:20:bd:bb:36:57:10:dc:31:99:da:31:9e:48:35:76:89:31:
         92:cc:e6:f1:a7:07:68:03:11:61:8d:ed:22:cd:b4:e4:5c:80:
         25:07:cc:10:87:7f:ed:2c:19:5b:cb:cd:78:b2:f5:25:02:7b:
         c2:21:ec:6c:19:64:00:27:b8:ea:6a:6f:3d:25:c4:6d:e7:52:
         89:32:e9:cb:c4:6a:c5:b6:75:f8:c2:f5:5f:8e:2b:bc:95:ba:
         b9:0b:01:16:c5:32:11:cd:6c:23:25:56:9d:4c:0b:af:2b:38:
         b4:32:df:2c:96:61:ce:55:ec:a5:21:62:94:4a:cd:ad:75:ee:
         96:d9:fa:27:da:3d:77:51:3d:c9:2f:6e:7a:0c:00:42:06:45:
         c8:15:23:6c:80:14:0c:e8:ca:d1:0d:8a:ad:8a:99:8b:52:5b:
         4a:b0:2a:d6:79:15:c3:de:c7:53:9e:f8:ea:b1:30:e4:f3:ce:
         97:79:9f:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:09:07 2025 by rpki-client