Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/4CAD34861E0111E9A590C837C4F9AE02.roa
File:                     4CAD34861E0111E9A590C837C4F9AE02.roa (raw, json)
Hash identifier:          Yur6ZCioIZDfQeQW02oFUInaq2gPLGhfilXMTE9/7t8=
Subject key identifier:   49:C8:56:2A:08:0B:72:87:21:4B:DC:D4:18:A3:46:A4:C8:DE:49:49
Certificate issuer:       /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Certificate serial:       36BC
Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/4CAD34861E0111E9A590C837C4F9AE02.roa
Signing time:             Sat 08 Jul 2023 14:31:11 +0000
ROA not before:           Sat 08 Jul 2023 14:31:11 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     45173
IP address blocks:        58.97.9.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
                          rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 31 May 2024 14:21:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14012 (0x36bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
        Validity
            Not Before: Jul  8 14:31:11 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=64a9732e-57ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:e8:e2:fa:1e:30:6f:9b:25:26:2e:d6:56:f6:
                    39:00:30:71:a1:f7:54:d6:05:42:0e:fd:1f:38:b1:
                    fb:e9:c8:e9:91:fd:0c:9c:69:9f:13:6f:60:b7:bb:
                    76:ee:c1:42:5d:32:0f:56:3c:3d:03:d8:25:51:2b:
                    2e:81:0d:26:23:14:8b:9a:c3:6a:02:07:5d:08:42:
                    54:14:8c:f9:f9:bf:59:4e:10:e2:39:4d:47:fc:66:
                    8e:05:89:4b:20:4e:ee:ff:6d:43:f4:9f:ef:98:3c:
                    3a:35:b7:44:99:b4:b7:89:96:cc:f0:7d:1a:ea:23:
                    2c:29:a2:d1:aa:a7:9f:53:23:4c:9f:5f:13:7b:45:
                    6b:29:86:ee:63:ae:9e:2a:a9:2f:e0:94:62:8f:fa:
                    f7:88:1d:0d:e3:49:59:b4:f3:9f:4a:4e:4f:e4:8c:
                    f2:9f:f7:c3:51:26:7c:31:b8:e4:53:74:14:59:f7:
                    89:d7:83:ee:a8:59:e8:2e:57:b1:0c:96:67:20:4b:
                    48:37:47:8b:42:05:38:ec:34:8a:f0:d1:d6:4c:b3:
                    e5:8f:56:1c:3a:84:1c:69:2b:17:2b:8b:28:1f:9f:
                    61:0a:44:1e:77:1e:99:cb:89:71:8e:71:5d:87:33:
                    c3:94:67:5b:43:2b:5c:b3:60:58:71:d5:d0:90:ff:
                    5e:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:C8:56:2A:08:0B:72:87:21:4B:DC:D4:18:A3:46:A4:C8:DE:49:49
            X509v3 Authority Key Identifier:
                keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/4CAD34861E0111E9A590C837C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  58.97.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:62:0c:b2:2f:df:ab:47:ba:ce:93:ff:26:20:e2:e0:bc:6b:
         a5:d4:06:c8:7d:88:7c:6a:dc:81:e8:58:cd:ec:c7:b1:17:2a:
         79:50:54:ec:89:7c:67:ae:7f:45:fe:99:9d:9d:e5:88:73:7d:
         1a:8f:dc:d8:03:3b:e5:d9:bb:d6:16:e9:5f:1c:40:c6:b2:72:
         af:9b:ac:cd:d3:b0:39:5f:8c:fa:68:84:71:04:01:a4:7a:e9:
         a6:8c:5e:f4:40:af:a4:c6:b3:ad:1e:f9:e1:c9:92:2d:0f:de:
         3c:2a:f3:1c:d7:15:0f:2d:48:e6:b7:47:7a:c4:1e:28:e7:2b:
         08:78:e5:f3:50:a6:7b:38:fa:3c:51:01:08:c9:d8:96:15:26:
         49:51:34:d5:69:2d:f7:37:dc:aa:5f:65:2d:dc:2b:b9:66:cf:
         0f:ab:82:41:cd:98:31:48:02:5e:c1:cf:65:48:d4:69:a7:db:
         46:ee:1b:26:82:49:1a:a4:3a:34:be:fc:f0:6c:5f:f7:0e:86:
         cd:18:df:63:67:2c:7f:7d:28:4d:6e:e4:c1:ef:1b:e0:79:a4:
         1f:52:ef:ec:45:27:8d:b5:fa:54:e6:0c:67:d6:f9:45:e5:29:
         73:9e:ac:d7:50:d2:60:9a:52:c9:62:6d:e2:d7:db:95:17:8e:
         6d:aa:51:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 24 18:22:52 2024 by rpki-client on console-ams.rpki-client.org