Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/8778740652C911EA93D1814FC4F9AE02.roa
File:                     8778740652C911EA93D1814FC4F9AE02.roa (raw, json)
Hash identifier:          RqfeuTdXodlNokE6GaD/Kqp4ZuIKIpqdnQb+i6++nYs=
Subject key identifier:   B5:AF:21:D0:DA:98:49:AC:42:26:B3:C2:35:8D:75:2E:BA:1A:64:65
Certificate issuer:       /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Certificate serial:       38AA
Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/8778740652C911EA93D1814FC4F9AE02.roa
Signing time:             Tue 16 Jul 2024 14:31:04 +0000
ROA not before:           Tue 16 Jul 2024 14:31:04 +0000
ROA not after:            Tue 30 Sep 2025 00:00:00 +0000
asID:                     24344
IP address blocks:        110.170.124.0/24 maxlen: 24
                          110.170.138.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
                          rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Dec 2024 14:20:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14506 (0x38aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
        Validity
            Not Before: Jul 16 14:31:04 2024 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=66968428-0e44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:28:dc:c6:88:e8:b3:8c:a9:6a:5b:a4:b5:40:
                    03:cb:cf:ba:de:85:0a:d2:58:c7:9d:11:5e:f8:b6:
                    21:74:ee:4e:6c:74:6e:6f:bf:0d:9b:bd:39:ca:73:
                    7b:0e:7c:9a:67:98:dc:57:a9:28:5e:27:06:bd:42:
                    c6:77:da:1c:d6:7f:1a:ea:dc:83:87:90:4f:29:e3:
                    27:45:7e:78:1e:d0:ef:8e:ec:f6:56:94:81:d8:e1:
                    ed:59:4b:c2:87:02:ed:24:75:12:fb:0f:f0:b1:3d:
                    c5:ff:1a:d8:d2:2e:d0:a5:f0:de:37:6c:55:0c:f1:
                    f2:55:03:97:5f:dc:3c:8c:55:29:dd:87:94:31:63:
                    d2:76:af:0d:04:d2:1a:a0:47:91:1b:f1:97:89:19:
                    0d:dc:67:92:5f:2b:fb:b3:8d:da:73:79:67:44:3c:
                    3b:d8:49:3e:f1:7a:6b:cb:01:09:63:fd:06:56:89:
                    c7:66:0e:f2:8e:ee:d5:de:61:b9:97:1d:dd:14:dd:
                    78:d6:c3:5a:5c:a4:0a:a7:3e:3d:f8:f2:1f:e3:cc:
                    8f:5e:f3:ee:e1:97:19:bc:cb:7b:87:79:51:a5:31:
                    60:cd:5f:2e:0f:69:4d:dd:8c:1b:5c:4e:a0:9b:26:
                    f4:89:45:ba:98:c6:f2:28:fb:fb:69:0e:75:7c:f5:
                    b3:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:AF:21:D0:DA:98:49:AC:42:26:B3:C2:35:8D:75:2E:BA:1A:64:65
            X509v3 Authority Key Identifier:
                keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/8778740652C911EA93D1814FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.170.124.0/24
                  110.170.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:90:f2:08:42:b7:02:2e:6a:1d:d0:ee:75:60:60:e3:43:3e:
         d0:da:53:55:e1:8b:e5:70:25:e3:96:0c:8a:b2:45:a4:04:ac:
         19:99:8d:81:89:0b:28:97:41:52:28:b0:2b:e8:d8:5e:63:70:
         95:90:1e:97:ba:a8:b9:96:d2:05:71:e7:7c:4f:0d:9e:fb:e2:
         da:5d:55:84:1f:a5:d4:0e:8c:ce:2c:de:ff:c4:be:17:0b:00:
         77:8b:d8:c7:fd:f5:2b:1b:3f:0e:1a:b7:16:14:f9:69:f6:68:
         99:20:fd:a9:3a:ec:c4:b9:dc:47:5d:61:dc:b9:4c:81:bb:7a:
         02:4b:de:e7:7c:04:fc:61:c3:ed:70:69:76:17:e2:9b:8a:03:
         fc:10:e4:5f:e1:c1:c9:11:78:51:db:d0:a7:d6:73:ac:87:40:
         de:9c:4a:09:8a:03:46:ac:68:5a:ff:ac:08:39:ea:8d:af:49:
         30:50:37:42:62:53:68:83:75:74:c9:76:01:5a:2f:46:4c:d1:
         c4:2e:c4:1e:a0:d1:59:28:9e:8c:6a:15:68:b4:79:68:0f:87:
         2d:a8:dc:b1:70:17:6a:8c:8e:2b:ac:5c:a5:ce:a9:37:d1:21:
         f7:c7:b1:b2:95:17:69:83:84:14:e2:b2:6c:b8:32:48:9b:d3:
         ae:f1:f8:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 17:20:00 2024 by rpki-client on console-fra.rpki-client.org