Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/3EF600FC1E0111E9A590C837C4F9AE02.roa
File:                     3EF600FC1E0111E9A590C837C4F9AE02.roa (raw, json)
Hash identifier:          bey5hy5HcODmLXhjfsaAfLQA6Wa2HYtMura4+T9+toc=
Subject key identifier:   E1:8D:9A:66:86:96:77:0A:AD:32:9B:34:12:1D:75:55:16:8B:04:1E
Certificate issuer:       /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Certificate serial:       369F
Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/3EF600FC1E0111E9A590C837C4F9AE02.roa
Signing time:             Sat 08 Jul 2023 14:30:46 +0000
ROA not before:           Sat 08 Jul 2023 14:30:46 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     18197
IP address blocks:        58.97.37.0/24 maxlen: 24
                          110.170.149.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
                          rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 14:21:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13983 (0x369f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
        Validity
            Not Before: Jul  8 14:30:46 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=64a97316-5d48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:8a:74:f9:4c:05:75:4f:92:cf:d3:50:72:39:
                    45:0c:d7:57:89:22:08:a7:be:4c:e0:b9:0b:43:50:
                    56:f1:2f:f8:4a:f9:2f:fb:c4:e2:1b:b3:d3:86:ba:
                    56:60:b5:8f:b6:97:4b:cd:ef:3b:0c:22:51:04:9e:
                    65:57:c0:ce:33:7b:57:48:87:c1:94:d4:85:90:96:
                    b5:3b:78:c6:59:f0:a5:a3:03:be:7a:7f:16:a7:3e:
                    42:64:71:c2:6f:98:ee:f3:b0:9c:b8:5f:9c:50:d8:
                    49:56:29:6f:9e:6c:88:f2:0c:9d:f0:9e:90:cc:5f:
                    c0:04:8c:3a:83:cd:dd:aa:75:c4:97:9d:1a:5f:b2:
                    34:7f:6f:d9:d6:e9:77:4a:8e:75:3c:e5:e4:9d:51:
                    e8:2d:dc:cb:c7:ae:50:ed:13:57:8c:63:98:93:f2:
                    ba:cd:04:c4:c0:3b:5e:cc:56:b9:44:37:eb:76:dd:
                    20:2b:d9:29:14:07:73:a2:be:79:6e:01:2b:b4:e7:
                    6f:58:c9:41:11:90:57:6c:e1:3e:81:9c:64:47:e9:
                    4b:68:8f:7c:0f:1c:ad:8e:47:97:6a:e5:59:26:f7:
                    65:18:48:13:da:23:e5:b3:8e:5f:3d:15:59:12:07:
                    29:5a:54:d2:48:24:29:02:1d:6e:dc:cc:cb:b4:76:
                    0f:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:8D:9A:66:86:96:77:0A:AD:32:9B:34:12:1D:75:55:16:8B:04:1E
            X509v3 Authority Key Identifier:
                keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/3EF600FC1E0111E9A590C837C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  58.97.37.0/24
                  110.170.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:45:98:14:97:64:eb:7f:02:01:95:73:8c:1b:96:19:d5:2b:
         32:18:78:77:f7:d2:a4:28:30:25:29:f6:51:c4:79:42:9a:02:
         fc:b3:a7:fc:0b:ec:e3:6a:9d:fd:6b:65:cb:6d:a5:59:49:22:
         db:2d:72:c1:cc:01:f4:fb:20:fb:bb:01:35:da:de:8e:0f:d6:
         21:1a:5c:57:e2:ef:b2:1a:04:1c:47:86:ca:9a:cd:ba:11:8f:
         b4:45:f0:cc:07:6f:ee:20:86:7c:dc:3f:f8:64:e9:b6:da:92:
         dd:be:6c:0f:e9:ab:29:3e:41:be:50:a5:03:4d:26:e2:b3:8c:
         6b:0a:92:62:77:0f:4a:45:33:6e:45:f7:ad:d5:b9:f0:10:66:
         f9:33:c8:e8:db:c5:32:1a:84:51:f6:47:66:68:2d:d6:39:fa:
         fd:0b:06:d1:a0:bd:1d:17:94:4e:0c:26:3c:bb:a0:d6:ef:cd:
         ed:cb:5c:02:de:d0:ae:c6:bc:5d:c4:3d:47:b3:22:86:d0:55:
         ba:a8:d0:49:eb:b9:a6:e9:3a:6d:1f:7f:00:c1:be:e8:60:69:
         b5:16:3d:80:52:cd:39:8c:0e:ab:8f:37:2b:2d:91:c6:06:82:
         7c:0c:e7:f8:e7:3b:c6:d9:97:cd:16:41:87:d5:99:e4:85:29:
         f9:24:fc:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 15:58:21 2024 by rpki-client on console-ams.rpki-client.org