Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/88B3BAE252C911EA93D1814FC4F9AE02.roa
File:                     88B3BAE252C911EA93D1814FC4F9AE02.roa (raw, json)
Hash identifier:          rt9gwjbF0Mxu5WkCVhHljnG0Yav/vHXoPLVS/GQbQQg=
Subject key identifier:   46:99:32:83:65:4E:E6:30:E8:8A:88:4B:95:8C:59:42:92:B4:91:38
Certificate issuer:       /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Certificate serial:       38C7
Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/88B3BAE252C911EA93D1814FC4F9AE02.roa
Signing time:             Tue 16 Jul 2024 14:31:31 +0000
ROA not before:           Tue 16 Jul 2024 14:31:31 +0000
ROA not after:            Tue 30 Sep 2025 00:00:00 +0000
asID:                     55554
IP address blocks:        113.21.240.0/24 maxlen: 24
                          122.144.27.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
                          rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 14:20:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14535 (0x38c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
        Validity
            Not Before: Jul 16 14:31:31 2024 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=66968442-4100
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:0a:83:8f:ff:85:32:31:6d:25:90:38:2b:a4:
                    58:9a:31:ed:e3:67:40:c4:ea:df:ca:7b:c3:2d:98:
                    99:19:83:cf:ec:58:90:b5:3c:c4:62:0d:c0:0f:2e:
                    93:d8:23:ae:be:96:39:b7:9c:48:d4:46:f6:13:e4:
                    ce:68:46:7f:a9:f2:5f:22:a9:23:fa:0e:86:70:9a:
                    f7:66:26:88:11:69:99:94:c7:9b:01:a7:8a:c1:21:
                    bd:89:99:eb:c6:c6:b0:f1:c6:b2:1a:74:5d:bf:8d:
                    4a:7f:18:e5:17:0e:c5:5f:d0:f7:dc:18:97:ca:c0:
                    73:c7:c0:c3:72:38:50:d5:84:d1:8f:e8:0a:f7:86:
                    b9:8e:20:05:c2:9e:a6:a0:c0:ff:6a:25:c1:4b:a6:
                    d7:12:c9:e1:4c:51:d4:6e:93:0b:76:ac:68:6b:92:
                    bf:23:89:ec:a0:f1:62:d7:b2:50:e4:27:56:75:fa:
                    85:d6:a6:bb:22:f8:5f:90:f7:50:91:e4:44:62:78:
                    a8:97:0a:35:b2:9f:c6:83:25:14:48:80:5a:1e:4a:
                    20:b0:42:e3:72:24:52:ae:80:f7:71:2c:2c:9b:af:
                    56:65:ed:b3:75:18:83:49:c1:00:5f:bc:12:55:e8:
                    ff:b5:28:9b:0a:4f:5c:95:b6:55:df:f7:a2:1e:26:
                    ad:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:99:32:83:65:4E:E6:30:E8:8A:88:4B:95:8C:59:42:92:B4:91:38
            X509v3 Authority Key Identifier:
                keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/88B3BAE252C911EA93D1814FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.21.240.0/24
                  122.144.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:09:98:d8:9d:b4:93:aa:41:57:a8:16:31:b5:a1:81:66:91:
         99:a7:8e:ad:6b:e8:04:44:a7:7a:53:c7:78:5e:f6:ea:33:64:
         e4:55:45:f2:71:b6:3e:75:8f:d2:6f:aa:ea:dc:72:52:95:5f:
         6d:2c:23:6b:e4:c9:75:92:9f:19:36:80:2b:43:96:09:73:94:
         b6:74:14:ea:99:8a:26:f6:55:fd:61:78:03:ff:fe:06:8b:9b:
         61:72:12:2c:d1:45:fa:ce:77:1e:4e:ee:99:42:58:8e:1f:49:
         d9:50:d5:86:64:82:3f:9f:91:dd:2e:e1:ae:50:c8:55:96:19:
         f0:37:07:24:87:ab:2c:d5:75:18:c3:5a:5d:1b:61:f2:91:79:
         78:cb:ea:49:73:09:bb:22:2a:6a:2e:22:c6:87:a8:e5:5b:8d:
         cb:d0:c7:d3:dc:96:58:5a:97:6b:fc:22:c5:4e:d9:f2:74:2f:
         fb:d4:13:fa:17:09:56:d5:12:c2:56:40:82:e4:f7:b9:0b:02:
         e1:44:ef:8a:1d:10:b6:22:ab:77:0b:b0:32:b1:a7:34:44:ab:
         ea:af:ad:d3:08:50:4a:ea:81:36:22:86:e7:9b:41:4d:a8:05:
         9b:de:5d:f1:14:de:5e:db:a8:f9:f5:37:b2:01:5a:5e:47:c2:
         b8:b0:2c:b4
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICOMcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzdBQkMxMTAvBgNVBAUTKDYxQkYzRUQ0QzNCRkJDMDkxNkVGOTQ4MEFBRkYyMjJB
NDM3QUYwMkMwHhcNMjQwNzE2MTQzMTMxWhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02Njk2ODQ0Mi00MTAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsQqDj/+FMjFtJZA4K6RYmjHt42dAxOrfynvDLZiZGYPP7FiQtTzEYg3ADy6T
2COuvpY5t5xI1Eb2E+TOaEZ/qfJfIqkj+g6GcJr3ZiaIEWmZlMebAaeKwSG9iZnr
xsaw8cayGnRdv41KfxjlFw7FX9D33BiXysBzx8DDcjhQ1YTRj+gK94a5jiAFwp6m
oMD/aiXBS6bXEsnhTFHUbpMLdqxoa5K/I4nsoPFi17JQ5CdWdfqF1qa7IvhfkPdQ
keREYniolwo1sp/GgyUUSIBaHkogsELjciRSroD3cSwsm69WZe2zdRiDScEAX7wS
Vej/tSibCk9clbZV3/eiHiatzQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFEaZMoNl
TuYw6IqIS5WMWUKStJE4MB8GA1UdIwQYMBaAFGG/PtTDv7wJFu+UgKr/IipDevAs
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzN0FCQy83MTNEOUZCMDFE
NzgxMUUyODI4NjhEQzQwOEIwMkNEMi9ZYjgtMU1PX3ZBa1c3NVNBcXY4aUtrTjY4
Q3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1liOC0xTU9fdkFrVzc1U0FxdjhpS2tONjhDdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzdBQkMvNzEzRDlGQjAxRDc4MTFFMjgyODY4REM0MDhCMDJDRDIvODhCM0JBRTI1
MkM5MTFFQTkzRDE4MTRGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBABxFfADBAB6kBswDQYJKoZIhvcNAQELBQADggEBABUJmNid
tJOqQVeoFjG1oYFmkZmnjq1r6AREp3pTx3he9uozZORVRfJxtj51j9JvqurcclKV
X20sI2vkyXWSnxk2gCtDlglzlLZ0FOqZiib2Vf1heAP//gaLm2FyEizRRfrOdx5O
7plCWI4fSdlQ1YZkgj+fkd0u4a5QyFWWGfA3BySHqyzVdRjDWl0bYfKReXjL6klz
CbsiKmouIsaHqOVbjcvQx9Pcllhal2v8IsVO2fJ0L/vUE/oXCVbVEsJWQILk97kL
AuFE74odELYiq3cLsDKxpzREq+qvrdMIUErqgTYihuebQU2oBZveXfEU3l7bqPn1
N7IBWl5HwriwLLQ=
-----END CERTIFICATE-----
Generated at Wed Nov 20 16:11:24 2024 by rpki-client on console-fra.rpki-client.org