Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/9D7043441E0211E9862ECE3FC4F9AE02.roa
File:                     9D7043441E0211E9862ECE3FC4F9AE02.roa (raw, json)
Hash identifier:          cLqUPDsIoSCdZ23KL8tR2S8uRoNXMf9cfaBpPysU8Bs=
Subject key identifier:   AD:63:14:44:E5:7A:EC:DA:AA:A6:69:7D:6D:50:8C:A3:F9:D9:09:CE
Certificate issuer:       /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Certificate serial:       367E
Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/9D7043441E0211E9862ECE3FC4F9AE02.roa
Signing time:             Sat 08 Jul 2023 14:30:19 +0000
ROA not before:           Sat 08 Jul 2023 14:30:19 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     132605
IP address blocks:        110.170.135.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
                          rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 31 May 2024 14:21:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13950 (0x367e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
        Validity
            Not Before: Jul  8 14:30:19 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=64a972fa-a269
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:cc:bf:6c:30:17:53:9e:e3:b8:e2:71:2b:30:
                    2c:ff:71:c2:9a:55:99:63:3f:94:02:e3:4a:6f:d8:
                    73:f0:88:ef:93:8d:39:19:c9:40:33:45:35:52:28:
                    ff:6b:f2:b3:09:d1:62:96:8e:4e:65:bc:00:85:ed:
                    af:0e:b9:7f:ba:a1:56:70:58:e5:d6:c3:16:18:8a:
                    ac:da:43:73:58:6f:a8:39:67:61:4a:88:16:46:94:
                    3e:3d:d2:78:aa:cc:e3:1b:8f:c2:28:30:ee:86:58:
                    ab:a6:a9:ee:bb:3e:89:cd:d8:3f:ce:6e:da:17:ce:
                    21:3d:b7:fa:54:fd:02:2c:24:e0:45:7a:02:24:88:
                    03:21:9d:9b:68:7b:20:be:9a:55:0a:a3:f6:46:2c:
                    8f:7d:89:2d:b7:c9:e7:fc:ed:d1:5e:e6:56:39:91:
                    ab:0f:19:23:60:cf:c2:fb:29:f0:f4:c7:1c:ce:b4:
                    ee:a0:fb:7b:cd:05:98:59:57:52:96:1e:9b:8f:46:
                    d9:c0:05:88:97:59:f3:d7:6e:31:2d:dd:15:87:59:
                    b9:67:70:ae:39:8d:4c:21:c8:ee:28:90:ff:6d:b9:
                    52:e2:55:0b:30:d3:d6:65:50:fe:3d:98:21:f4:b7:
                    91:d4:a6:f9:2b:53:02:79:9a:ac:39:d2:42:8c:7c:
                    2c:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:63:14:44:E5:7A:EC:DA:AA:A6:69:7D:6D:50:8C:A3:F9:D9:09:CE
            X509v3 Authority Key Identifier:
                keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/9D7043441E0211E9862ECE3FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.170.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:a2:d7:d9:43:26:8e:85:56:a3:89:9b:77:2d:88:76:e7:1d:
         0b:7f:52:5b:ba:6f:cf:f4:b9:71:80:0c:a9:2b:6c:0c:85:fc:
         5b:f5:72:a6:76:90:78:45:97:74:69:c9:eb:39:e2:3c:b7:4b:
         d9:4b:6b:b8:76:19:bb:7e:4a:73:cc:25:f1:4d:b3:15:31:6a:
         0a:c4:8b:bf:4b:10:52:26:a3:6b:e1:32:4f:42:20:ac:48:20:
         4c:84:40:e7:43:58:7f:39:36:b0:b4:96:77:80:9c:28:6e:1d:
         7f:62:b8:8c:70:b8:cd:ee:7d:3c:0f:17:68:78:bb:b8:14:7f:
         14:42:d6:01:89:29:31:f5:c5:b2:de:35:b4:61:8b:04:f3:07:
         f3:b3:7d:9a:95:33:80:b9:1f:d7:f7:d0:6a:0e:01:ce:78:d2:
         06:79:0d:39:40:7a:1d:2f:04:b2:c7:d6:9f:29:31:af:2b:f2:
         b0:0c:a6:a6:20:c1:35:52:62:48:9a:ae:21:7e:7c:dd:fc:1c:
         71:f1:de:da:1e:55:9f:f9:f2:18:6c:d6:d4:7a:94:3d:ac:01:
         ce:2b:21:d8:9d:43:73:c3:36:ca:19:91:97:66:90:73:44:61:
         d9:6e:ec:43:1b:61:40:88:41:d1:32:f3:b3:7f:2f:14:63:47:
         24:50:8b:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 24 18:22:53 2024 by rpki-client on console-ams.rpki-client.org