Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/B3501A3838BB11EB9F5B573BC4F9AE02.roa
File:                     B3501A3838BB11EB9F5B573BC4F9AE02.roa (raw, json)
Hash identifier:          L/jYt5xxPCKBnIXxZUdgTrcg+twE9nZDfu0Pnb+WIaQ=
Subject key identifier:   2A:3B:F8:42:DC:EB:91:51:17:B1:30:38:67:81:E0:07:89:75:27:7B
Certificate issuer:       /CN=A91AABB1/serialNumber=EB7FE9892DF000255FCF3AC0B2B4D12AEA6FF806
Certificate serial:       34E5
Authority key identifier: EB:7F:E9:89:2D:F0:00:25:5F:CF:3A:C0:B2:B4:D1:2A:EA:6F:F8:06
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/63_piS3wACVfzzrAsrTRKupv-AY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/B3501A3838BB11EB9F5B573BC4F9AE02.roa
Signing time:             Thu 06 Jun 2024 15:11:08 +0000
ROA not before:           Thu 06 Jun 2024 15:11:08 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     137029
IP address blocks:        114.130.72.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.crl
                          rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/63_piS3wACVfzzrAsrTRKupv-AY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:54:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13541 (0x34e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AABB1/serialNumber=EB7FE9892DF000255FCF3AC0B2B4D12AEA6FF806
        Validity
            Not Before: Jun  6 15:11:08 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=6661d18c-35ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e0:fa:ee:10:04:a3:ca:50:e4:5a:2d:08:ac:
                    5b:e4:82:f8:93:76:e4:86:45:5f:40:91:57:c6:20:
                    7d:b2:8f:fc:20:b9:03:29:e4:ea:65:83:c8:3d:09:
                    c6:cb:2c:fa:f3:41:d8:82:d7:6b:01:c6:19:04:b5:
                    ad:5d:02:c2:ce:8c:7c:74:89:27:f7:b0:18:7c:1c:
                    81:3a:bc:7a:59:b2:04:da:30:8f:97:82:ff:34:d5:
                    17:43:7a:64:52:ea:6a:1a:4c:1e:0a:f6:5e:e2:b9:
                    29:42:63:2e:12:52:09:6c:56:01:c2:65:50:9d:ec:
                    09:78:9c:7c:14:c4:39:be:9f:e5:43:8d:01:e8:d5:
                    22:ed:b4:f3:ff:50:73:6b:b6:34:ee:2c:6a:b3:d8:
                    31:73:62:20:48:61:0e:3b:7a:08:f5:b6:6f:dd:ae:
                    02:29:36:90:2f:46:c0:de:75:db:ab:7a:88:85:27:
                    9f:da:17:41:7b:8d:91:de:91:e5:f4:b0:8c:c0:9b:
                    60:5a:d1:d9:f0:75:91:83:c6:b4:fd:d9:53:4e:d6:
                    6f:cf:fa:b5:e6:6c:dd:f2:3d:28:3c:da:77:71:33:
                    ef:f1:c2:50:ec:10:32:33:34:8a:4b:17:5c:97:8c:
                    dd:a7:53:40:53:d3:a5:bc:ab:ec:8d:5d:05:e0:4a:
                    23:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:3B:F8:42:DC:EB:91:51:17:B1:30:38:67:81:E0:07:89:75:27:7B
            X509v3 Authority Key Identifier:
                keyid:EB:7F:E9:89:2D:F0:00:25:5F:CF:3A:C0:B2:B4:D1:2A:EA:6F:F8:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/63_piS3wACVfzzrAsrTRKupv-AY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/B3501A3838BB11EB9F5B573BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.130.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:c7:3b:b9:5b:e7:a5:f2:ea:65:22:ca:ed:31:f2:d9:f6:bc:
         63:c7:c9:0e:f9:3d:67:d5:77:bf:8a:da:5d:26:08:29:59:70:
         e9:28:60:d8:37:00:c6:65:65:ee:4c:ed:26:8a:a1:49:8b:73:
         0e:4e:9a:78:f9:3b:52:b3:49:5d:e0:4f:b9:9f:27:43:b1:d8:
         67:aa:13:c5:df:56:e8:79:71:40:f2:28:5b:74:8f:8c:b6:64:
         2c:b8:b8:3d:89:0a:4b:b0:d3:a6:bb:8c:2b:69:39:0c:a7:b7:
         ff:13:ab:cd:97:67:b0:b9:92:0a:da:e7:c7:dd:6b:de:0c:bc:
         15:b9:02:42:15:cc:1e:62:74:27:33:61:02:dc:92:be:7e:5f:
         cd:52:d4:2d:a4:1e:b9:d9:73:dc:17:c6:9c:b9:81:c3:3d:cd:
         de:53:2b:61:85:40:75:31:9f:02:6e:0f:0b:75:02:c6:68:07:
         c1:cc:9e:9e:9e:26:41:25:be:ba:c4:b4:0a:ed:1d:1f:64:2d:
         15:00:7a:b2:07:64:aa:23:c0:a4:aa:98:80:db:eb:0c:35:46:
         ee:e6:e8:5f:30:38:36:14:92:1a:19:ee:94:2b:d7:09:7d:bd:
         59:46:5a:87:95:f9:73:0b:cc:55:31:ee:f9:5a:e9:cf:0d:9a:
         2c:53:2a:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:50:02 2024 by rpki-client on console-ams.rpki-client.org