Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/A7470BFC33A711EBA4313B36C4F9AE02.roa
File:                     A7470BFC33A711EBA4313B36C4F9AE02.roa (raw, json)
Hash identifier:          Z21inXGgFSeaHgz7iITM/kziF7zP/P4QOKxWDnYdlJ8=
Subject key identifier:   BB:79:F8:FF:00:17:85:89:B4:BF:85:4B:BF:D5:CE:C6:8B:08:A3:35
Certificate issuer:       /CN=A91CE558/serialNumber=B36B971724A3BABD890B754598933720F972FEAF
Certificate serial:       0A70
Authority key identifier: B3:6B:97:17:24:A3:BA:BD:89:0B:75:45:98:93:37:20:F9:72:FE:AF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2uXFySjur2JC3VFmJM3IPly_q8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/A7470BFC33A711EBA4313B36C4F9AE02.roa
Signing time:             Fri 12 Jul 2024 20:50:26 +0000
ROA not before:           Fri 12 Jul 2024 20:50:26 +0000
ROA not after:            Tue 30 Sep 2025 00:00:00 +0000
asID:                     139006
IP address blocks:        101.97.36.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/s2uXFySjur2JC3VFmJM3IPly_q8.crl
                          rsync://rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/s2uXFySjur2JC3VFmJM3IPly_q8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2uXFySjur2JC3VFmJM3IPly_q8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 19:26:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2672 (0xa70)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CE558/serialNumber=B36B971724A3BABD890B754598933720F972FEAF
        Validity
            Not Before: Jul 12 20:50:26 2024 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=66919711-3691
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:81:4d:ac:30:9c:b9:9a:f9:1c:ee:44:66:98:
                    32:44:1f:a0:5b:b1:a4:fa:a6:9a:94:fa:6a:0f:b9:
                    e7:c8:7a:16:fe:73:62:df:6f:a6:99:7c:6b:f4:9b:
                    38:ea:83:89:81:95:ed:f5:6c:6a:0a:26:88:11:d4:
                    d7:78:f2:35:25:81:a9:dc:d1:bf:10:0b:26:15:2f:
                    a8:56:eb:9a:10:3e:32:c2:4a:3c:b9:1f:a8:ae:bf:
                    de:71:3a:0a:90:1e:b5:6d:51:fc:ca:dc:7b:13:81:
                    47:b2:2d:c9:0f:62:fa:8e:76:26:53:72:10:37:91:
                    46:80:c8:1f:bd:c7:21:71:7a:e6:6d:2a:5d:68:81:
                    bc:1c:b9:e0:c3:2a:d2:2a:39:92:3c:0e:f0:a3:ed:
                    4a:70:4f:8c:5c:16:47:8a:2f:83:d8:04:93:6e:fd:
                    a1:54:73:95:87:9b:ed:d3:be:9b:4c:cd:51:47:95:
                    32:4d:58:fa:28:04:99:f1:6d:8d:27:82:7a:ce:35:
                    99:e8:88:4e:b8:d7:4c:9a:18:55:af:e0:56:79:f4:
                    ed:30:9e:53:ad:c8:f4:95:4c:7d:60:dd:40:95:ae:
                    4e:4c:6e:af:67:f0:24:36:d0:af:a2:9e:ef:61:5a:
                    bd:8b:78:99:b6:63:8a:f1:a8:9f:cc:ec:c2:64:a0:
                    5d:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:79:F8:FF:00:17:85:89:B4:BF:85:4B:BF:D5:CE:C6:8B:08:A3:35
            X509v3 Authority Key Identifier:
                keyid:B3:6B:97:17:24:A3:BA:BD:89:0B:75:45:98:93:37:20:F9:72:FE:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/s2uXFySjur2JC3VFmJM3IPly_q8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2uXFySjur2JC3VFmJM3IPly_q8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/A7470BFC33A711EBA4313B36C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.97.36.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cb:55:0e:84:91:d9:3b:5b:53:be:90:6d:15:e8:a6:89:ca:5c:
         bb:04:dc:96:ab:31:99:d2:29:85:f3:12:4d:15:ff:41:af:a3:
         4c:34:6d:3b:9b:8f:04:b9:ee:e0:8c:e4:e5:6f:1f:57:9b:c7:
         ef:46:d5:b3:81:b7:28:fc:44:69:12:ee:e5:b3:69:b5:a1:36:
         ea:9d:7e:ef:37:d3:5d:d7:da:6b:d2:99:09:80:b1:9a:91:60:
         83:4f:e6:74:93:78:a4:53:ce:1f:04:8a:2e:5d:5c:02:ff:4c:
         71:43:aa:c1:27:e7:c8:38:41:83:0e:0c:f0:47:26:8e:47:57:
         93:46:8b:a9:6e:ee:5b:47:3e:9c:48:d0:33:2a:4c:d0:04:49:
         f1:98:7d:e7:e6:b6:b5:ed:4f:80:ad:91:38:c5:39:6c:40:2e:
         7f:e7:fc:05:1a:94:18:61:8f:e4:ee:9b:29:1d:9d:bf:92:26:
         bd:82:eb:0c:4b:69:2d:0c:45:ed:95:e2:0e:20:7e:7d:85:03:
         52:ab:08:ac:fc:d8:41:99:53:ee:f3:2b:a6:d4:69:9d:42:5d:
         25:4e:f8:4d:df:80:57:56:90:6f:f9:1c:a8:10:66:25:c4:c8:
         32:b0:fa:d2:8a:13:48:be:8d:86:f9:c3:05:13:ee:d6:d6:22:
         cc:b3:6e:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:52:46 2024 by rpki-client on console-fra.rpki-client.org