Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/9ECD926E1E0211E9862ECE3FC4F9AE02.roa
File:                     9ECD926E1E0211E9862ECE3FC4F9AE02.roa (raw, json)
Hash identifier:          b1+dgf59UEccR8IDWz1USJbStr/JyInr62IlvG7GHpc=
Subject key identifier:   4D:C2:23:AF:29:0B:CA:B8:6B:53:DB:0E:A5:9F:DF:5E:FA:1D:4C:45
Certificate issuer:       /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Certificate serial:       387B
Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/9ECD926E1E0211E9862ECE3FC4F9AE02.roa
Signing time:             Tue 16 Jul 2024 14:30:23 +0000
ROA not before:           Tue 16 Jul 2024 14:30:23 +0000
ROA not after:            Tue 30 Sep 2025 00:00:00 +0000
asID:                     133063
IP address blocks:        110.170.127.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
                          rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Dec 2024 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14459 (0x387b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
        Validity
            Not Before: Jul 16 14:30:23 2024 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=669683ff-ad45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a3:e3:17:28:fa:c3:f6:f1:35:b9:1e:bc:4a:
                    8b:d0:98:1a:21:ea:96:ab:14:06:9a:7e:ab:83:c9:
                    50:31:29:36:60:ac:9d:c4:64:fa:56:6b:ef:e4:f4:
                    33:f6:67:5c:4f:cf:13:b4:2c:22:ad:6a:ef:18:ba:
                    a7:dc:9a:a1:69:97:34:fd:5b:77:1f:76:2c:e4:fa:
                    ef:d8:f0:9d:53:ad:8f:b1:d7:ac:3d:69:3a:b5:08:
                    fc:cb:ca:39:29:dc:97:70:08:c6:e9:32:d3:75:bf:
                    51:85:ce:0e:70:eb:d2:53:a4:26:e7:f0:53:a2:33:
                    54:05:2e:06:78:13:1c:05:24:40:e0:85:83:79:2e:
                    d3:1f:b4:32:18:19:3f:8f:55:d4:9d:b0:46:61:eb:
                    60:69:48:54:de:58:0d:de:98:6a:4b:6e:6a:28:1c:
                    3a:55:58:ae:1f:b3:8b:24:ca:6a:2a:36:5a:09:ec:
                    35:7b:d9:fe:1d:61:9c:c8:d6:a7:0a:1a:00:0e:c7:
                    ab:1b:cc:09:40:57:11:fe:d9:97:d2:41:b3:27:b3:
                    11:f3:a0:5e:12:ca:9b:8b:26:54:7d:0d:19:0f:bb:
                    7d:7b:3e:da:d8:14:b3:a2:d8:5d:50:a7:28:e8:00:
                    7b:4f:87:a9:da:25:d0:89:fc:a8:4e:80:c5:c1:87:
                    2a:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:C2:23:AF:29:0B:CA:B8:6B:53:DB:0E:A5:9F:DF:5E:FA:1D:4C:45
            X509v3 Authority Key Identifier:
                keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/9ECD926E1E0211E9862ECE3FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.170.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:6e:5f:7b:9f:bc:8c:83:f2:19:44:1f:60:be:ae:6d:7d:24:
         e9:6b:36:55:c7:04:ef:61:b7:68:91:0d:49:59:45:e3:a8:a0:
         1c:b9:e2:36:6d:bb:d4:05:b6:c4:e3:a4:e5:93:cb:d7:ee:52:
         49:88:29:62:b0:66:29:2c:93:cb:7c:93:ff:b9:c2:61:6b:18:
         de:54:d3:08:0f:1b:52:6f:a1:14:06:b6:29:7b:dc:1e:c6:6c:
         d6:ee:27:4b:a8:d3:6d:86:8c:a2:87:e5:e7:e0:27:c9:2b:5d:
         63:2c:dd:c7:0e:6d:de:ea:19:00:fd:b8:58:ba:66:10:33:1f:
         55:4b:9d:a5:04:b9:ec:1d:84:04:9b:f8:4c:e7:08:06:74:45:
         0e:61:36:36:7e:4e:9a:1a:91:13:43:62:dc:d4:82:d9:b7:4e:
         42:5d:a6:79:36:3e:f1:4d:01:fd:e5:58:40:cd:20:77:db:78:
         e4:b7:ee:d1:10:da:b1:0b:61:e2:6d:e5:02:42:23:ca:2d:50:
         a1:62:68:17:fb:f7:7f:6d:2b:02:9b:54:a1:c3:4f:9d:37:c9:
         55:a9:e0:b0:ed:9f:2d:c2:79:d0:a2:bb:ac:a3:2b:cb:4f:8b:
         1c:41:c9:5e:a8:4f:e9:89:ed:48:1a:c8:77:d8:dc:5c:2c:fc:
         03:d2:76:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 15:31:14 2024 by rpki-client on console-ams.rpki-client.org