Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/AD10DD5E1E0211E9862ECE3FC4F9AE02.roa
File:                     AD10DD5E1E0211E9862ECE3FC4F9AE02.roa (raw, json)
Hash identifier:          Z67k4hKrYa6qvMgGduiQnGi+rjwEZQbfivB0D85CC2o=
Subject key identifier:   25:4B:22:EE:EB:CC:E1:CC:78:75:E8:A7:90:97:02:78:82:75:82:D6
Certificate issuer:       /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Certificate serial:       36D8
Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/AD10DD5E1E0211E9862ECE3FC4F9AE02.roa
Signing time:             Sat 08 Jul 2023 14:31:36 +0000
ROA not before:           Sat 08 Jul 2023 14:31:36 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     58806
IP address blocks:        171.102.40.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
                          rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 31 May 2024 14:21:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14040 (0x36d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
        Validity
            Not Before: Jul  8 14:31:36 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=64a97348-127a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:71:77:2e:a7:bc:e8:bd:65:7b:19:ce:28:21:
                    b7:e1:01:8a:a7:90:b4:a9:cb:12:cd:d9:9a:de:d3:
                    84:21:f2:52:60:09:f9:7b:4b:1b:ec:e7:08:61:83:
                    9a:f2:c9:1d:66:bc:3f:f8:c6:86:7f:be:7f:99:ed:
                    af:75:13:35:97:ac:21:8c:26:78:aa:6f:96:38:8d:
                    be:1e:14:ce:9e:0c:d6:b5:b6:77:22:b6:a2:2c:25:
                    49:52:bf:88:ff:81:0c:f8:c2:25:c5:36:e8:fb:dc:
                    91:a0:34:62:a7:5e:34:0d:21:b5:13:bb:a5:db:ad:
                    04:07:a5:c1:68:4f:9d:2d:48:9e:b8:2e:fc:08:bc:
                    2f:52:4f:f7:35:54:e2:c6:32:0f:d1:42:07:5e:9b:
                    6a:cc:bd:8d:4f:8d:d9:0c:6e:59:33:6d:38:45:03:
                    d9:80:81:8f:0e:ff:e3:8d:6f:fb:7e:a6:0c:b4:f8:
                    db:2f:04:86:87:e3:52:88:36:78:36:75:b3:34:97:
                    c7:6b:a1:32:a3:58:f3:aa:09:a3:97:db:2e:29:8f:
                    9a:ad:5d:ad:f0:49:d6:7a:0c:20:40:9b:18:44:0a:
                    fd:76:3f:da:be:42:c0:c9:d8:91:6e:43:f1:40:68:
                    27:43:cf:a2:0e:6e:d7:54:90:5d:f9:40:de:a9:71:
                    94:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:4B:22:EE:EB:CC:E1:CC:78:75:E8:A7:90:97:02:78:82:75:82:D6
            X509v3 Authority Key Identifier:
                keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/AD10DD5E1E0211E9862ECE3FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  171.102.40.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:e3:a0:fa:9e:83:43:82:79:db:25:c4:cb:36:a5:d4:ed:b8:
         e0:b1:25:37:da:f8:3c:09:a6:fa:04:96:19:f8:b2:3f:56:3f:
         29:f4:b6:42:e7:b3:0a:6c:cb:5d:b6:de:80:75:83:2d:fa:aa:
         42:25:95:14:80:ce:20:35:a3:2e:96:48:3c:52:ee:d6:c5:f7:
         70:df:84:f8:16:da:2d:01:77:62:60:e5:17:f9:c8:c7:fb:88:
         bf:0b:07:66:37:af:ec:d2:ab:4b:a5:7f:06:51:e7:2f:26:be:
         2b:50:7b:ea:2e:e5:3b:18:a8:8d:99:2b:fc:26:1b:6c:99:3f:
         c9:d1:a1:56:61:bc:68:41:86:ed:de:a4:e2:a1:3c:58:11:dd:
         5b:c4:c3:b7:5e:49:e9:5e:4d:d3:51:dd:9e:b9:25:f9:0d:2d:
         f0:1b:55:9b:56:4d:c9:55:f0:0b:4b:d1:12:e1:39:a3:f7:42:
         8f:59:6a:ec:26:ed:fc:26:a0:bd:31:ce:54:15:a2:b6:9a:0f:
         95:38:82:c5:03:20:78:18:d8:8c:07:ae:cd:17:4b:73:ae:dc:
         c4:e0:47:04:e1:90:18:54:13:54:2b:4b:66:e2:87:11:b7:7b:
         30:8b:50:20:4b:e3:a3:f3:b9:2c:b1:82:33:1c:93:21:a9:8f:
         52:b0:a7:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 24 15:43:20 2024 by rpki-client on console-fra.rpki-client.org