Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/8C14C710729F11EC85AE6D45C4F9AE02.roa
File:                     8C14C710729F11EC85AE6D45C4F9AE02.roa (raw, json)
Hash identifier:          wk4J51rRhyIewxw4W7rwlkBvys4Y5Gafkv7Mf1VsnNc=
Subject key identifier:   D4:EC:28:D4:5C:D0:79:E8:0C:96:BB:13:B7:76:22:87:D8:5B:82:9D
Certificate issuer:       /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Certificate serial:       38C4
Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/8C14C710729F11EC85AE6D45C4F9AE02.roa
Signing time:             Tue 16 Jul 2024 14:31:28 +0000
ROA not before:           Tue 16 Jul 2024 14:31:28 +0000
ROA not after:            Tue 30 Sep 2025 00:00:00 +0000
asID:                     55514
IP address blocks:        171.102.38.0/24 maxlen: 24
                          171.102.39.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
                          rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Dec 2024 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14532 (0x38c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
        Validity
            Not Before: Jul 16 14:31:28 2024 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=66968440-8605
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:32:79:9d:f1:d0:d6:79:40:39:4e:0e:d1:8b:
                    f0:45:f3:37:91:f0:e9:86:37:79:e2:1c:4f:09:df:
                    39:32:22:0b:59:9d:22:1b:d4:bf:a5:cc:4c:c5:f4:
                    10:4f:67:9f:4b:d8:b6:9d:a5:91:8a:db:e1:ac:3b:
                    f4:de:0c:92:df:f7:ff:ae:43:9f:31:b0:c9:b7:37:
                    24:d5:fa:9a:87:6e:10:7c:47:c7:47:df:e8:39:ad:
                    ea:bc:b4:04:e8:58:ee:88:5a:02:75:8d:24:1f:37:
                    2f:5a:aa:36:23:72:dc:ce:26:e9:6b:11:b1:0d:17:
                    c2:1f:da:36:ea:4f:ca:17:20:c6:12:44:37:8d:f3:
                    0c:41:e0:0b:a3:73:44:a8:2a:5f:00:66:3a:f7:b5:
                    3a:96:a1:94:55:b1:e4:b9:b9:0d:24:2d:f7:48:0d:
                    94:d5:38:18:99:e7:26:d8:79:6a:0c:12:ae:28:fb:
                    fd:af:e9:f8:78:62:2c:c7:c6:4a:ae:df:73:dd:a0:
                    55:06:b1:18:83:49:70:c7:73:83:1f:de:9e:65:05:
                    0c:b9:b5:a6:4a:ce:db:58:0b:67:a7:a4:87:48:f2:
                    b4:2f:75:0d:a1:49:fd:06:85:98:5a:df:f0:32:94:
                    ae:c3:5e:db:9e:c7:c7:b2:c9:f1:c3:b8:92:96:02:
                    1c:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:EC:28:D4:5C:D0:79:E8:0C:96:BB:13:B7:76:22:87:D8:5B:82:9D
            X509v3 Authority Key Identifier:
                keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/8C14C710729F11EC85AE6D45C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  171.102.38.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3c:19:ef:05:2f:70:c7:e4:8a:e3:e4:bc:37:35:a5:b2:01:d1:
         3c:28:85:e9:b3:92:67:7e:0f:1c:ea:3a:a1:6a:f1:4c:e2:1c:
         73:9f:09:e4:1c:e8:54:c2:c3:c5:c3:30:cb:e8:1e:e1:b6:19:
         48:77:7a:b1:84:1a:bc:ef:10:02:e0:9d:3a:ea:13:a9:7f:08:
         7f:9d:85:c4:95:3d:5c:2c:31:f7:66:0d:de:da:82:a5:ab:8b:
         1f:fb:c4:1f:d9:d2:bc:b1:c8:d7:45:69:db:db:c9:53:91:2a:
         d6:c1:4d:9f:8e:75:43:68:07:84:bb:38:c8:98:2e:3e:b8:e6:
         2f:c3:b6:15:80:6d:ce:6a:cd:88:0b:dd:75:c0:e7:29:51:c3:
         0e:86:dd:c9:2f:90:93:b5:a8:64:fe:72:60:71:0b:28:c5:45:
         95:a5:9a:10:e3:c6:74:35:e7:38:fd:eb:9f:01:c1:af:b3:5b:
         f1:fb:0f:f9:64:0b:ec:5d:e2:9d:18:13:89:c1:51:0a:f8:b2:
         c4:33:56:9a:3b:3f:76:d5:03:09:63:63:f8:ab:3c:be:4a:c9:
         e0:de:b7:81:5d:d6:22:ba:2f:b7:dc:47:eb:e1:92:f4:48:1f:
         5f:91:39:5d:cb:79:60:c6:01:af:26:00:93:ed:c4:c0:09:fa:
         92:09:e4:d3
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICOMQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzdBQkMxMTAvBgNVBAUTKDYxQkYzRUQ0QzNCRkJDMDkxNkVGOTQ4MEFBRkYyMjJB
NDM3QUYwMkMwHhcNMjQwNzE2MTQzMTI4WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02Njk2ODQ0MC04NjA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyzJ5nfHQ1nlAOU4O0YvwRfM3kfDphjd54hxPCd85MiILWZ0iG9S/pcxMxfQQ
T2efS9i2naWRitvhrDv03gyS3/f/rkOfMbDJtzck1fqah24QfEfHR9/oOa3qvLQE
6FjuiFoCdY0kHzcvWqo2I3LczibpaxGxDRfCH9o26k/KFyDGEkQ3jfMMQeALo3NE
qCpfAGY697U6lqGUVbHkubkNJC33SA2U1TgYmecm2HlqDBKuKPv9r+n4eGIsx8ZK
rt9z3aBVBrEYg0lwx3ODH96eZQUMubWmSs7bWAtnp6SHSPK0L3UNoUn9BoWYWt/w
MpSuw17bnsfHssnxw7iSlgIc8wIDAQABo4IClTCCApEwHQYDVR0OBBYEFNTsKNRc
0HnoDJa7E7d2IofYW4KdMB8GA1UdIwQYMBaAFGG/PtTDv7wJFu+UgKr/IipDevAs
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzN0FCQy83MTNEOUZCMDFE
NzgxMUUyODI4NjhEQzQwOEIwMkNEMi9ZYjgtMU1PX3ZBa1c3NVNBcXY4aUtrTjY4
Q3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1liOC0xTU9fdkFrVzc1U0FxdjhpS2tONjhDdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzdBQkMvNzEzRDlGQjAxRDc4MTFFMjgyODY4REM0MDhCMDJDRDIvOEMxNEM3MTA3
MjlGMTFFQzg1QUU2RDQ1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAGrZiYwDQYJKoZIhvcNAQELBQADggEBADwZ7wUvcMfkiuPk
vDc1pbIB0Twohemzkmd+DxzqOqFq8UziHHOfCeQc6FTCw8XDMMvoHuG2GUh3erGE
GrzvEALgnTrqE6l/CH+dhcSVPVwsMfdmDd7agqWrix/7xB/Z0ryxyNdFadvbyVOR
KtbBTZ+OdUNoB4S7OMiYLj645i/DthWAbc5qzYgL3XXA5ylRww6G3ckvkJO1qGT+
cmBxCyjFRZWlmhDjxnQ15zj9658Bwa+zW/H7D/lkC+xd4p0YE4nBUQr4ssQzVpo7
P3bVAwljY/irPL5KyeDet4Fd1iK6L7fcR+vhkvRIH1+ROV3LeWDGAa8mAJPtxMAJ
+pIJ5NM=
-----END CERTIFICATE-----
Generated at Sun Nov 24 15:31:14 2024 by rpki-client on console-ams.rpki-client.org