Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/FD37BBDA1E0311E991EB9A44C4F9AE02.roa
File:                     FD37BBDA1E0311E991EB9A44C4F9AE02.roa (raw, json)
Hash identifier:          2imVoias7REJT9G1WovxGd3VLsYmMlvhU3AuYenSBII=
Subject key identifier:   84:A8:E6:36:C7:F6:1D:D8:AF:5E:B9:92:73:4B:8F:F2:8D:83:D0:76
Certificate issuer:       /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Certificate serial:       38D7
Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/FD37BBDA1E0311E991EB9A44C4F9AE02.roa
Signing time:             Tue 16 Jul 2024 14:31:44 +0000
ROA not before:           Tue 16 Jul 2024 14:31:44 +0000
ROA not after:            Tue 30 Sep 2025 00:00:00 +0000
asID:                     9339
IP address blocks:        110.170.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
                          rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14551 (0x38d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137ABC
        Validity
            Not Before: Jul 16 14:31:44 2024 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=66968450-95ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:8c:ea:c6:bc:4e:32:67:46:de:53:a9:85:f5:
                    6c:78:a4:68:9a:7c:7f:a4:b3:77:c8:1d:99:57:72:
                    d1:10:c8:c4:b1:24:23:ba:ee:9b:1c:e4:5b:b7:c3:
                    8e:21:91:1f:0c:92:df:3e:3d:17:b5:d9:f8:f9:bb:
                    6b:86:fb:99:bc:9b:54:6c:da:23:bf:20:db:e5:fd:
                    3e:6e:b8:bc:72:a1:bb:b8:1c:21:f1:ab:32:3b:bd:
                    9f:f4:83:ec:ef:1d:05:2f:9b:84:c4:c7:07:cd:6e:
                    f2:34:4a:36:a6:32:ee:75:07:37:7e:0d:9e:58:8f:
                    6f:d1:21:91:ee:10:f1:47:6b:5d:c2:6c:39:68:4e:
                    64:b7:d8:70:1c:dd:c0:55:5d:a6:7e:5d:c8:cc:f5:
                    af:b4:45:14:14:fe:9a:ae:40:9e:d9:2b:3c:28:93:
                    7e:63:9b:c2:f3:6f:d7:b1:9a:f0:23:9d:a6:57:c5:
                    ac:77:10:52:d7:4a:2f:10:cc:fb:87:97:84:79:d0:
                    39:9c:db:c6:1d:e2:d8:34:b2:5d:be:15:17:75:d4:
                    86:9c:9e:f7:82:b6:74:df:bc:c0:08:41:b3:9f:15:
                    c6:d3:61:ee:97:d2:16:6c:06:2d:55:df:02:b7:ce:
                    6f:d5:64:28:c1:90:a9:8b:6f:31:ae:8c:90:e0:00:
                    ae:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:A8:E6:36:C7:F6:1D:D8:AF:5E:B9:92:73:4B:8F:F2:8D:83:D0:76
            X509v3 Authority Key Identifier:
                keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/FD37BBDA1E0311E991EB9A44C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.170.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:74:fa:b9:1f:8f:98:e9:2f:ee:15:35:ad:ce:e3:33:f9:a1:
         15:9a:82:27:11:11:39:b6:c1:76:92:78:a9:6f:8f:ce:ac:78:
         6b:73:68:87:1c:68:0b:7a:37:b2:6b:cd:f8:e6:ed:71:6a:60:
         00:e3:19:07:9a:da:5c:d4:aa:f6:46:62:b8:0b:a3:70:c4:cd:
         25:2c:1c:39:f0:eb:1a:3c:ad:04:76:fa:e0:10:21:9c:10:3e:
         4d:b6:f5:7b:cc:53:c7:29:70:94:9e:63:32:ca:c5:64:fc:19:
         91:e1:7e:18:8b:19:6f:25:69:07:89:c3:9a:2f:1a:24:d7:20:
         ff:9f:5d:76:7c:1a:f0:e5:cd:83:69:3c:b7:e9:36:58:e0:67:
         7b:ae:f8:63:00:9e:e1:f0:5a:dc:83:c8:8e:9f:e9:10:65:33:
         e1:45:b8:74:36:5b:99:3e:7e:42:f9:47:13:df:11:03:46:1a:
         03:48:0a:89:6e:ed:83:06:5b:7e:5c:db:6e:33:17:ba:bd:0e:
         74:9a:6d:ef:a7:b6:df:41:57:5f:3e:09:ba:42:5f:e0:0b:e1:
         4e:6f:4b:91:9f:1e:b1:99:ee:3d:99:dc:b6:59:8e:5b:ac:85:
         9d:fb:a2:a1:9b:24:bd:4f:06:40:a1:19:f5:ab:b9:76:f9:38:
         57:a0:41:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:54:22 2025 by rpki-client