Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/FC968EB81E0311E991EB9A44C4F9AE02.roa
File:                     FC968EB81E0311E991EB9A44C4F9AE02.roa (raw, json)
Hash identifier:          Ay/pdwhNNGhbSwLEPex3pfbbx3SXXS7t313nIvAbxHk=
Subject key identifier:   34:8A:1E:85:BE:37:DA:A3:84:86:2A:5B:8C:8C:0D:F6:BD:52:A3:E9
Certificate issuer:       /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Certificate serial:       36DB
Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/FC968EB81E0311E991EB9A44C4F9AE02.roa
Signing time:             Sat 08 Jul 2023 14:31:39 +0000
ROA not before:           Sat 08 Jul 2023 14:31:39 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     7630
IP address blocks:        110.170.223.0/24 maxlen: 24
                          210.86.192.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
                          rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 31 May 2024 14:21:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14043 (0x36db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
        Validity
            Not Before: Jul  8 14:31:39 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=64a9734b-3830
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:d7:cc:34:c8:86:01:47:d8:59:a0:67:aa:61:
                    a2:a2:13:c5:f3:3f:c0:ba:e7:cc:cc:5f:78:4d:b3:
                    39:0e:8c:14:60:65:11:a6:73:19:2e:5a:31:45:0b:
                    b2:d9:a2:96:94:4e:5a:8c:ff:5b:b7:f9:0e:fd:be:
                    94:8a:bf:e8:5e:4c:b1:4b:16:4c:fe:55:d0:fb:cb:
                    a0:5f:2c:bc:44:7d:e6:ef:1a:1b:a4:02:a5:da:bd:
                    26:36:c1:41:dc:05:89:e1:15:0b:69:8e:86:60:e7:
                    ca:a0:c4:58:be:7b:cb:cf:08:3e:59:2b:7e:34:f7:
                    86:a7:fd:59:47:7a:56:1d:f2:e2:a7:63:ab:c7:74:
                    e2:cc:a4:6b:fa:6f:37:1d:80:2e:be:17:ce:95:ae:
                    7e:4c:c3:d9:25:72:07:42:1a:9a:25:da:9f:e9:3f:
                    8c:df:37:74:c7:70:70:f7:24:ad:c4:07:81:be:a1:
                    40:2e:bc:14:d4:f4:ba:98:36:34:89:42:9e:c5:03:
                    ab:bf:13:cd:8d:8f:64:67:2e:82:0b:ff:21:e3:7f:
                    86:0d:59:1f:d3:73:6e:c6:6b:a3:57:71:4c:fb:0b:
                    55:82:9f:e3:d7:3d:11:ae:b0:3f:da:9e:cc:4b:93:
                    d3:59:fd:1c:84:df:ae:51:d2:0a:a8:95:21:c0:76:
                    f9:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:8A:1E:85:BE:37:DA:A3:84:86:2A:5B:8C:8C:0D:F6:BD:52:A3:E9
            X509v3 Authority Key Identifier:
                keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/FC968EB81E0311E991EB9A44C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.170.223.0/24
                  210.86.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:53:90:c0:f4:a9:57:5d:70:c8:e8:93:b1:2d:31:6c:67:56:
         f8:a9:33:b5:f8:fc:e8:eb:35:cd:62:25:48:7a:0a:09:41:65:
         27:69:57:7d:ee:fd:b2:48:19:fd:8b:af:01:c1:da:42:40:f3:
         67:66:e9:08:1a:f9:e2:bc:53:46:14:6d:19:46:c3:6a:10:c4:
         99:d2:70:c1:ef:e7:d8:20:f5:04:a7:ec:c4:6e:d0:36:32:b8:
         fd:8c:3c:e8:97:2e:d7:dd:7c:7f:5e:24:29:30:8d:44:f8:a2:
         df:4a:98:5b:06:a6:c2:4e:64:05:58:51:ad:08:ee:fc:66:f6:
         27:47:36:be:6a:ed:8e:e6:6c:84:fb:7a:0e:a3:62:a8:95:cf:
         c6:b7:fc:a6:a0:3c:52:b3:26:c2:19:c1:d7:de:0d:e3:b8:8b:
         1a:3d:cf:bb:7e:07:e9:00:b4:bb:46:30:d0:3a:28:ad:2f:7d:
         de:11:bf:69:52:2a:04:52:09:09:f9:bb:39:4b:d7:44:d0:b6:
         0d:3f:81:f0:5d:29:3b:22:d6:91:d2:7f:0c:69:f1:25:4d:02:
         83:85:9b:f2:c4:cf:7a:19:21:6a:1a:cb:0b:2a:52:2c:0c:20:
         70:cf:fc:3d:1d:fb:d5:a3:5c:81:9a:e8:ca:30:04:a3:6d:ca:
         a6:7f:23:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 24 15:43:20 2024 by rpki-client on console-fra.rpki-client.org