Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/347735B4C00511EE82324069C4F9AE02.roa
File:                     347735B4C00511EE82324069C4F9AE02.roa (raw, json)
Hash identifier:          fNvMfFA8SZsS2jWyHTOpKkLQBUAi5cx79SftmeTD8YM=
Subject key identifier:   8F:1C:3E:28:29:3B:A6:37:83:10:16:D3:80:DC:6F:3A:F0:53:6E:80
Certificate issuer:       /CN=A91AABB1/serialNumber=EB7FE9892DF000255FCF3AC0B2B4D12AEA6FF806
Certificate serial:       34E8
Authority key identifier: EB:7F:E9:89:2D:F0:00:25:5F:CF:3A:C0:B2:B4:D1:2A:EA:6F:F8:06
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/63_piS3wACVfzzrAsrTRKupv-AY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/347735B4C00511EE82324069C4F9AE02.roa
Signing time:             Thu 06 Jun 2024 15:11:11 +0000
ROA not before:           Thu 06 Jun 2024 15:11:11 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     150718
IP address blocks:        114.130.94.0/24 maxlen: 24
                          114.130.95.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.crl
                          rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/63_piS3wACVfzzrAsrTRKupv-AY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:54:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13544 (0x34e8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AABB1/serialNumber=EB7FE9892DF000255FCF3AC0B2B4D12AEA6FF806
        Validity
            Not Before: Jun  6 15:11:11 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=6661d18f-8ff8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:fb:4f:40:82:7c:4f:f7:66:ab:95:51:ac:79:
                    72:5d:ab:c4:0c:4e:4b:8c:41:48:7c:c2:65:5f:a6:
                    56:05:6d:37:d3:26:72:f9:69:cf:d7:46:7d:69:38:
                    56:de:af:60:81:e8:f4:0a:37:f7:03:10:fc:28:5e:
                    78:31:63:2d:ba:1b:01:9c:72:b9:92:32:df:b1:3b:
                    31:2f:fd:9f:9f:cb:03:1d:b6:2e:7a:20:57:3d:b3:
                    b9:ce:a4:9d:dd:4e:c9:9e:4d:c1:57:a1:b5:cd:00:
                    21:56:c8:da:08:95:08:e0:53:56:a2:aa:e0:85:e0:
                    c7:b2:9b:fa:d8:a5:78:36:13:be:09:40:30:7c:50:
                    38:cd:bf:70:2d:b9:79:85:a9:d2:fe:1f:d0:58:00:
                    4f:70:55:54:b9:98:94:93:e4:54:61:4f:53:ce:8c:
                    78:7a:a6:5b:c3:e6:4c:14:14:bf:62:ea:a6:85:18:
                    98:35:d8:8b:0e:25:48:19:17:3a:0f:f7:43:14:db:
                    32:2b:06:43:05:5e:07:4e:fa:4c:d2:e4:6f:bc:13:
                    80:bf:89:79:49:99:8e:91:0e:aa:0f:9b:1e:25:31:
                    2c:66:d6:0b:43:b3:87:d2:4a:f5:9b:fe:2f:94:c7:
                    a1:3c:fe:01:7e:7e:b1:a7:c5:fe:2c:f2:88:ca:9d:
                    1b:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:1C:3E:28:29:3B:A6:37:83:10:16:D3:80:DC:6F:3A:F0:53:6E:80
            X509v3 Authority Key Identifier:
                keyid:EB:7F:E9:89:2D:F0:00:25:5F:CF:3A:C0:B2:B4:D1:2A:EA:6F:F8:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/63_piS3wACVfzzrAsrTRKupv-AY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/347735B4C00511EE82324069C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.130.94.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a5:f6:95:a3:ed:9f:e1:ed:c8:12:15:02:1f:8a:c6:a3:db:2b:
         d4:d8:57:04:b4:9e:c0:ee:e6:02:fc:06:88:76:05:9a:65:42:
         67:60:d9:53:63:d6:2b:60:2e:69:2c:14:8e:59:cd:eb:d5:b3:
         9d:85:b3:3f:11:b9:d1:d4:57:5a:62:c7:9e:85:62:7d:9b:65:
         17:ed:d4:f1:f8:39:11:5a:51:54:fa:83:a9:18:88:64:e5:7c:
         d1:89:d6:6e:ff:ef:e4:50:8b:02:51:33:1e:6e:65:4f:83:7b:
         0b:e6:27:12:f2:84:22:22:9e:03:41:7c:a8:6c:f4:77:1a:09:
         c8:b9:41:a1:a2:33:57:94:fe:2e:00:c5:89:44:d5:57:87:c7:
         55:4e:b0:67:dd:20:35:22:da:be:a1:6f:4c:3c:25:e5:55:25:
         7b:00:12:f1:77:73:b1:c6:0f:7b:0d:a3:8b:48:5a:e3:32:96:
         f2:c4:ce:9a:4c:15:7b:66:ee:ac:73:19:5c:27:ee:ff:f1:de:
         d3:e1:5f:39:4a:ac:ef:95:a8:26:73:e8:79:69:3c:03:ae:46:
         8e:24:06:75:88:0b:ab:7c:46:14:ad:90:ee:d0:bb:87:54:dc:
         12:f2:d5:78:f3:8b:4c:40:b6:df:35:d8:85:61:1b:fc:28:19:
         72:1c:ac:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:50:02 2024 by rpki-client on console-ams.rpki-client.org