Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/88B3BAE252C911EA93D1814FC4F9AE02.roa
File:                     88B3BAE252C911EA93D1814FC4F9AE02.roa (raw, json)
Hash identifier:          piIPXF0onrgPLp7WFxV6NFuRyLFBm/I7xyce3F/MpQ4=
Subject key identifier:   E8:6A:5C:40:55:F0:0F:B1:E4:FA:60:02:F7:C4:C5:D2:A7:0D:A6:66
Certificate issuer:       /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Certificate serial:       377B
Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/88B3BAE252C911EA93D1814FC4F9AE02.roa
Signing time:             Fri 11 Aug 2023 09:20:36 +0000
ROA not before:           Fri 11 Aug 2023 09:20:36 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     55554
IP address blocks:        113.21.240.0/24 maxlen: 24
                          122.144.27.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
                          rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 31 May 2024 14:21:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14203 (0x377b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
        Validity
            Not Before: Aug 11 09:20:36 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=64d5fd63-f3af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:a2:1d:7a:c9:62:41:e4:e8:05:20:5e:cc:35:
                    25:4e:ed:17:b1:d0:c7:86:f9:62:f3:ab:98:83:3f:
                    27:64:d8:9c:d5:2b:04:e6:4a:87:c4:ae:6d:c2:ef:
                    b8:27:2a:7a:26:cb:b3:83:7a:9a:7e:5c:c3:a7:ed:
                    bb:ca:17:79:75:8b:24:39:b9:8d:c3:2d:ea:90:51:
                    3b:b4:73:45:01:f4:9c:eb:fd:41:d9:21:5a:ad:f1:
                    47:d1:2d:fa:a8:91:d8:82:1b:4f:54:52:d6:e5:fc:
                    c5:ce:f6:1e:fc:f2:6a:46:db:0e:44:4b:a9:1a:b3:
                    39:18:bb:73:17:8d:21:b8:f5:fb:56:e1:8a:37:16:
                    2b:dc:22:7f:8b:cb:90:4f:de:c7:48:8e:c4:e7:ea:
                    73:77:e6:a4:58:1a:03:b8:7e:37:63:1e:c4:d4:ab:
                    f6:9e:f9:8c:bf:6c:c7:0e:ee:35:47:ae:ac:3e:95:
                    b7:57:0e:5a:bd:16:bf:f8:d6:31:11:f8:40:07:e9:
                    35:ac:a0:2f:b6:af:84:af:00:9f:47:6b:da:2b:fb:
                    01:62:f6:fe:a0:62:3e:7a:d1:5b:be:30:94:19:f5:
                    dc:50:ec:7f:f7:fc:07:3f:e5:a6:69:40:1e:65:84:
                    c2:9e:f1:38:1e:80:53:94:1c:0b:cf:66:8f:6f:81:
                    7d:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:6A:5C:40:55:F0:0F:B1:E4:FA:60:02:F7:C4:C5:D2:A7:0D:A6:66
            X509v3 Authority Key Identifier:
                keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/88B3BAE252C911EA93D1814FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.21.240.0/24
                  122.144.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:8c:4b:0b:d6:e2:7b:04:b5:90:f8:f3:6b:b2:ea:b4:69:45:
         7a:cd:77:5e:44:30:69:19:71:b9:7f:aa:48:1a:35:70:fe:63:
         33:28:fa:c9:1d:fd:75:30:49:65:38:ce:e5:52:b1:bb:ea:db:
         90:91:a4:2a:ea:39:2f:70:36:a4:5d:57:95:0d:df:c1:29:51:
         30:ae:b2:c3:d9:28:bd:f6:fa:f9:9c:c2:78:06:95:49:43:4e:
         48:d2:bc:84:21:ee:f3:24:4d:4b:fa:24:39:0f:9d:c7:dd:67:
         4e:9e:57:19:8b:b8:17:4c:79:5f:f4:17:cc:39:2e:c7:ca:ed:
         cd:09:01:9f:f8:47:48:54:b7:83:d6:49:50:f0:53:28:ae:fa:
         cf:48:4b:fa:2c:11:2d:de:27:34:1f:f1:33:b3:55:f0:45:49:
         4f:a2:0f:d5:f8:ea:a9:ec:2e:66:73:54:f9:d2:be:ad:c8:a6:
         2d:2c:8b:37:3d:0d:bd:99:a2:5c:17:ec:7e:6c:4d:09:e1:53:
         21:a2:4a:83:58:a2:50:a2:13:ce:49:e4:c4:f4:d9:25:cb:3f:
         e5:fc:72:62:f2:a9:b4:ad:af:89:e2:0b:13:ed:09:11:33:f4:
         88:f5:b7:7c:e6:0f:cf:f7:d4:f5:4c:af:c7:80:10:ac:de:1a:
         c5:dc:28:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 24 18:22:53 2024 by rpki-client on console-ams.rpki-client.org