Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/A9CFE2CA1E0211E9862ECE3FC4F9AE02.roa
File:                     A9CFE2CA1E0211E9862ECE3FC4F9AE02.roa (raw, json)
Hash identifier:          l6WMZ02W8z8wcH65ZFObPOnerY7BmFJ+OsM6MhS/EmM=
Subject key identifier:   29:EE:DC:1E:EF:6B:0B:69:23:14:E1:85:DF:E7:2A:6D:E8:01:33:13
Certificate issuer:       /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Certificate serial:       376E
Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/A9CFE2CA1E0211E9862ECE3FC4F9AE02.roa
Signing time:             Fri 11 Aug 2023 06:49:27 +0000
ROA not before:           Fri 11 Aug 2023 06:49:27 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     38002
IP address blocks:        61.91.255.0/24 maxlen: 24
                          171.102.36.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
                          rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 31 May 2024 14:21:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14190 (0x376e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
        Validity
            Not Before: Aug 11 06:49:27 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=64d5d9f7-a512
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a7:26:48:7c:da:6c:c4:16:9b:92:2a:a5:94:
                    37:5b:58:8d:3c:52:ef:77:a3:81:fb:fb:48:51:f5:
                    ee:3f:94:2a:22:76:14:9b:93:37:9a:3d:bd:90:5a:
                    1e:60:39:1b:55:8a:30:c5:62:7e:bf:e4:16:6e:2a:
                    57:af:4c:e1:47:38:0f:ab:5c:cb:44:87:e6:35:b2:
                    4c:34:09:d5:a3:b9:71:40:16:f0:d2:f1:a9:0d:b8:
                    34:be:91:ad:91:39:58:26:06:5a:a0:02:43:25:66:
                    19:b2:2e:02:ee:a8:07:85:98:a3:f1:5f:50:4f:37:
                    6c:c0:f9:f4:b0:0b:45:38:74:07:28:d0:f4:07:ee:
                    33:78:53:34:f6:8b:f5:c6:d7:32:9c:08:d5:91:df:
                    e0:3f:67:46:37:11:51:6a:e2:46:78:76:b7:97:93:
                    13:d9:48:f0:99:3a:e4:5c:a7:8c:a8:cf:d2:5e:76:
                    61:a9:6a:f4:47:e1:5f:be:aa:0c:84:e4:ba:46:35:
                    0a:33:e3:e3:3b:25:7f:10:5c:fd:17:ca:d0:6d:81:
                    02:a1:e9:10:36:74:00:14:d8:6b:36:56:3a:db:43:
                    c8:76:d5:c9:e7:ef:5d:14:a3:4e:fb:a7:5b:90:4b:
                    bf:a7:84:8e:f8:40:7c:7b:ae:ea:f7:7b:8a:0a:b5:
                    52:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:EE:DC:1E:EF:6B:0B:69:23:14:E1:85:DF:E7:2A:6D:E8:01:33:13
            X509v3 Authority Key Identifier:
                keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/A9CFE2CA1E0211E9862ECE3FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.91.255.0/24
                  171.102.36.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b8:af:a6:b3:07:d8:34:a6:63:2d:73:cc:c0:9b:8c:a8:21:ed:
         5f:fe:b4:df:2a:6a:02:b1:98:e1:a7:65:c7:b3:d6:9f:8e:7c:
         71:b1:0c:c6:38:53:2a:9b:19:24:c3:79:82:98:17:17:23:4e:
         3a:56:64:53:ff:76:1c:27:40:fa:54:75:61:73:a5:01:4e:84:
         80:22:af:5c:17:47:fd:55:3e:19:78:de:24:e2:eb:75:2d:97:
         ca:f7:80:64:63:e5:d2:6c:3e:35:39:55:2f:b3:b7:b2:80:3b:
         e2:56:52:92:4f:89:f4:c2:30:c0:9a:75:91:4e:2d:e3:32:74:
         6f:6e:b0:b7:43:98:af:52:83:a7:58:44:73:e4:99:ff:b2:59:
         a9:e7:67:28:88:04:13:5c:92:b3:e3:dd:1c:80:ba:22:79:16:
         43:f9:1b:14:90:56:32:62:51:a0:7b:e3:cf:89:6c:df:b6:27:
         45:07:69:f0:16:69:de:c4:c7:a1:bc:dd:a3:a3:25:b0:84:c0:
         20:74:f1:4b:c8:44:f7:42:bf:5e:91:d5:35:78:a3:09:64:68:
         3c:df:66:ae:2d:6b:ef:7a:c4:e2:45:0d:b3:4f:b4:74:c8:b2:
         2b:32:26:cb:04:3c:54:48:25:02:58:3b:fd:d2:3b:0e:4b:8c:
         60:7d:eb:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 24 15:43:20 2024 by rpki-client on console-fra.rpki-client.org