Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/A1541BFC1E0211E9862ECE3FC4F9AE02.roa
File:                     A1541BFC1E0211E9862ECE3FC4F9AE02.roa (raw, json)
Hash identifier:          OG1GUycvqkbj9PlOoHVkYIfC1590uKY6w8/Oq+7OxbY=
Subject key identifier:   32:C4:6B:90:35:FE:2B:83:41:B7:BC:B5:76:DA:D5:90:BB:82:E4:5C
Certificate issuer:       /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Certificate serial:       387F
Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/A1541BFC1E0211E9862ECE3FC4F9AE02.roa
Signing time:             Tue 16 Jul 2024 14:30:26 +0000
ROA not before:           Tue 16 Jul 2024 14:30:26 +0000
ROA not after:            Tue 30 Sep 2025 00:00:00 +0000
asID:                     133529
IP address blocks:        110.170.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
                          rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14463 (0x387f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137ABC
        Validity
            Not Before: Jul 16 14:30:26 2024 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=66968402-a54d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:35:54:30:3b:d1:b0:bf:1f:e2:e2:60:dc:fd:
                    d4:4a:dd:69:59:07:8d:04:25:72:2d:df:5f:85:ad:
                    71:de:39:8a:57:66:4b:49:f6:ee:f5:b5:e0:b3:13:
                    27:58:16:d9:fa:9d:e4:c8:9c:76:60:99:8e:0e:4b:
                    f8:e3:46:6d:b5:ca:dd:c6:52:19:44:da:10:f7:e8:
                    a7:6a:d6:e3:0d:19:90:1c:8f:d9:db:0f:03:ab:9d:
                    2c:be:bd:56:df:5d:89:08:82:a9:c2:bb:3c:ca:2a:
                    7f:02:f3:1a:4b:68:36:a7:ae:90:5f:52:34:3a:8d:
                    7e:87:85:f1:48:98:51:a0:b0:e0:e6:35:ae:84:6c:
                    7c:c6:39:90:fb:6d:de:42:8b:a5:e5:f1:e2:79:8e:
                    72:45:da:e1:2b:d4:48:6d:65:5b:b5:4b:fb:71:4e:
                    69:cc:12:5c:c8:db:59:50:d8:92:14:c0:11:0c:cf:
                    30:1b:02:93:4f:5b:e3:a9:55:e5:50:9a:e0:4c:eb:
                    98:ba:ce:72:48:c5:7a:f9:ef:23:2c:6e:e6:f4:99:
                    3b:1d:0e:d1:37:b1:c9:19:7a:2c:ff:aa:1a:d2:dc:
                    2e:fc:d1:b0:94:a2:60:e6:52:19:4d:76:75:66:73:
                    db:71:ba:bf:fb:bd:5d:7e:b1:d8:6f:c6:e4:1a:ce:
                    f7:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:C4:6B:90:35:FE:2B:83:41:B7:BC:B5:76:DA:D5:90:BB:82:E4:5C
            X509v3 Authority Key Identifier:
                keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/A1541BFC1E0211E9862ECE3FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.170.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:c6:3c:a3:a5:0d:48:79:0f:0a:b6:66:b4:f3:f7:a2:ee:2d:
         d6:bc:4a:01:ed:45:c8:af:9f:9e:79:57:20:76:eb:bd:a0:2a:
         77:cd:17:40:e2:2e:71:4d:bd:7a:60:fc:2f:1b:91:5c:e8:0c:
         98:57:bd:3b:61:52:0f:8f:16:50:81:77:25:d4:26:15:e5:de:
         96:91:ff:51:40:5a:08:58:fa:3f:2c:16:42:6a:c2:dc:7d:b8:
         98:0f:91:f5:f3:02:b9:bb:fb:ae:55:1d:89:be:83:cb:11:85:
         94:6b:0d:df:9c:7d:b5:6f:55:98:54:e3:b8:ec:75:27:3d:ae:
         4c:bd:9c:fd:6e:0d:97:99:3b:37:4d:86:eb:32:77:66:d1:1f:
         64:2a:3b:1a:41:0a:a7:cd:08:c7:4a:70:7a:24:a5:28:4f:a0:
         eb:20:33:d8:21:f3:54:0b:d4:bc:8b:d3:21:87:8a:fb:b9:c4:
         f5:26:2a:0c:fa:88:af:79:ca:1d:c4:98:a4:2f:c7:0b:2a:1f:
         74:01:8c:7a:3f:74:f6:ae:6f:29:1e:84:34:07:1c:88:e6:34:
         12:94:fe:f2:0e:98:4b:10:90:57:00:c2:21:d7:d6:1f:9c:49:
         14:b2:90:ab:62:a8:33:14:69:b8:de:64:e5:06:2a:67:a6:cb:
         42:7c:d5:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:45:41 2025 by rpki-client