Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/A3906CD61E0211E9862ECE3FC4F9AE02.roa
File:                     A3906CD61E0211E9862ECE3FC4F9AE02.roa (raw, json)
Hash identifier:          qX//gFrsrFixyIqBgqkPo5KvWO+q8WGsBD2mtqBz89k=
Subject key identifier:   44:3F:4B:30:F6:91:8B:C0:ED:68:31:09:82:C1:5E:F8:1C:00:F1:46
Certificate issuer:       /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Certificate serial:       3883
Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/A3906CD61E0211E9862ECE3FC4F9AE02.roa
Signing time:             Tue 16 Jul 2024 14:30:31 +0000
ROA not before:           Tue 16 Jul 2024 14:30:31 +0000
ROA not after:            Tue 30 Sep 2025 00:00:00 +0000
asID:                     133956
IP address blocks:        110.170.153.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
                          rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 14:20:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14467 (0x3883)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
        Validity
            Not Before: Jul 16 14:30:31 2024 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=66968406-e756
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a9:40:5b:e8:44:b2:04:c1:74:6d:ad:c7:ed:
                    cd:3f:f4:e2:df:8b:6e:69:6a:e0:20:76:64:f1:86:
                    0d:1b:48:c4:ee:e8:38:47:64:bc:95:5b:e6:46:2d:
                    3a:7a:f3:0d:1d:12:0f:69:ae:3a:88:b5:af:bd:bf:
                    8c:d1:bb:5b:ae:9f:f1:b1:cb:0f:e7:dc:5d:20:09:
                    a7:fc:46:b8:34:b7:ac:5b:28:2e:5e:7b:53:ad:66:
                    cf:d3:b6:6f:35:d9:82:da:97:b4:a0:d8:b8:e6:26:
                    40:63:7a:69:f3:ef:2d:03:1b:2d:d7:22:75:e4:26:
                    7f:9b:4e:fe:4b:b1:c8:13:65:e0:e5:8a:ce:2d:60:
                    b6:dd:a3:48:fd:bc:c1:43:bf:8a:ae:60:7a:00:33:
                    7c:43:35:a7:6c:ce:c0:46:bc:8d:0d:65:ef:48:5b:
                    b1:0f:2c:55:4c:fd:6e:e6:37:b0:61:25:a7:49:be:
                    5e:dd:d6:5c:36:b3:c9:da:91:82:92:1e:5c:b7:7e:
                    eb:c1:ca:4b:26:c5:8d:2c:07:17:7d:b7:49:92:d7:
                    dc:a5:28:3e:3a:19:98:5e:ba:c1:9b:dd:df:e8:c0:
                    b6:4f:dc:b8:b9:50:af:89:93:22:c0:b6:f5:9f:c3:
                    a4:f5:78:a5:11:2d:22:80:7c:91:ef:15:9b:67:45:
                    29:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:3F:4B:30:F6:91:8B:C0:ED:68:31:09:82:C1:5E:F8:1C:00:F1:46
            X509v3 Authority Key Identifier:
                keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/A3906CD61E0211E9862ECE3FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.170.153.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:df:b3:81:0f:40:a8:64:14:cb:40:c2:30:40:c1:db:c8:1a:
         e8:fe:de:fb:ca:d6:e2:19:4c:99:8b:0f:b8:7c:9c:69:0a:68:
         03:58:32:31:68:c4:1c:57:e9:a2:e7:f9:5a:93:e7:79:45:f8:
         32:3c:22:6e:b1:dd:66:40:41:52:77:8f:43:48:86:ef:c3:ec:
         97:d3:eb:27:95:8b:b6:f7:e0:15:79:ae:e4:f9:32:b6:70:1f:
         2e:dd:45:40:53:6a:59:23:d2:5f:2c:d3:48:02:5e:cc:02:49:
         86:ad:72:d3:ec:07:1d:8d:0f:0c:4f:58:bc:a8:22:53:2f:91:
         9a:0c:f6:52:a7:a2:ed:8a:76:4b:21:f0:c1:01:2e:a1:6e:34:
         60:22:d6:27:ac:56:3b:12:2b:4f:56:c0:95:c1:e9:22:ac:dd:
         39:6e:cd:b5:ec:12:d9:99:72:37:c4:c2:ea:99:d2:d1:dc:f2:
         54:36:8c:9b:5a:8d:6f:c7:ad:10:96:40:8a:a1:2c:1d:e8:1b:
         98:f1:99:4f:47:01:c6:e4:6b:67:53:b0:ec:00:67:61:ec:ed:
         73:68:51:6e:6d:e0:5c:26:ea:4c:3f:8a:ea:39:c2:99:5f:91:
         d3:11:93:b2:1d:10:e1:68:8b:eb:03:c5:67:91:84:e2:2f:94:
         61:4a:34:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 16:00:07 2024 by rpki-client on console-ams.rpki-client.org