Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/80F371780E9711EB9A6C2B3CC4F9AE02.roa
File:                     80F371780E9711EB9A6C2B3CC4F9AE02.roa (raw, json)
Hash identifier:          kMtbUAPtvocZysI+IcmGjdQ27wvG+yqC0xgvM+0lCzk=
Subject key identifier:   19:36:ED:21:A0:66:EE:5C:1B:D7:A6:8D:D0:58:BA:52:91:43:BF:DA
Certificate issuer:       /CN=A9110718/serialNumber=76174625E81632D38DF62A83B57B03BA2887E6F5
Certificate serial:       070B
Authority key identifier: 76:17:46:25:E8:16:32:D3:8D:F6:2A:83:B5:7B:03:BA:28:87:E6:F5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dhdGJegWMtON9iqDtXsDuiiH5vU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/80F371780E9711EB9A6C2B3CC4F9AE02.roa
Signing time:             Sat 15 Jun 2024 00:02:18 +0000
ROA not before:           Sat 15 Jun 2024 00:02:18 +0000
ROA not after:            Sun 31 Aug 2025 00:00:00 +0000
asID:                     131281
IP address blocks:        202.92.153.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/dhdGJegWMtON9iqDtXsDuiiH5vU.crl
                          rsync://rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/dhdGJegWMtON9iqDtXsDuiiH5vU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dhdGJegWMtON9iqDtXsDuiiH5vU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1803 (0x70b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9110718/serialNumber=76174625E81632D38DF62A83B57B03BA2887E6F5
        Validity
            Not Before: Jun 15 00:02:18 2024 GMT
            Not After : Aug 31 00:00:00 2025 GMT
        Subject: CN=666cda0a-df3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:68:b9:60:f4:d2:4a:3d:a9:9e:50:86:ec:16:
                    c0:53:ef:8f:58:4b:c2:a3:fc:ec:ad:0b:85:c5:a2:
                    a9:a0:c4:7e:55:41:41:72:46:e2:37:fb:d6:58:f8:
                    60:18:e4:73:ee:83:9f:30:c3:f3:b9:36:25:71:3b:
                    54:3d:f1:12:c0:e1:62:e5:31:17:8f:67:6e:b8:37:
                    d6:36:b8:2e:f5:b5:94:07:62:9f:be:6e:08:dd:d9:
                    f9:50:10:08:46:1e:bc:ef:86:4a:6e:a2:90:3c:b2:
                    e9:59:eb:e4:d9:de:b5:d2:10:bf:4d:fb:a0:79:ad:
                    62:96:7a:e7:96:fb:05:87:f0:24:33:61:c7:ff:32:
                    14:cb:9f:a1:bc:80:a5:99:ae:59:60:de:69:ca:11:
                    d7:f1:52:fc:da:c4:4d:85:94:d4:37:ef:64:68:21:
                    99:c7:7a:2c:02:30:26:dd:16:0e:97:77:3d:72:30:
                    b6:f6:62:d6:87:1c:fd:dd:49:d2:10:59:dc:51:50:
                    8f:f6:22:73:16:d5:f5:f6:df:ab:87:af:1c:af:7b:
                    08:00:6c:44:aa:2e:d7:eb:fe:bf:69:6d:1d:f0:60:
                    27:bf:6c:b3:8d:b3:cd:f6:dd:ef:3c:62:0b:4a:35:
                    80:a8:e8:0d:02:3a:be:7d:06:c6:3f:60:4d:e8:f6:
                    64:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:36:ED:21:A0:66:EE:5C:1B:D7:A6:8D:D0:58:BA:52:91:43:BF:DA
            X509v3 Authority Key Identifier:
                keyid:76:17:46:25:E8:16:32:D3:8D:F6:2A:83:B5:7B:03:BA:28:87:E6:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/dhdGJegWMtON9iqDtXsDuiiH5vU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dhdGJegWMtON9iqDtXsDuiiH5vU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/80F371780E9711EB9A6C2B3CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.92.153.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:5f:58:57:b4:91:76:ef:53:ca:8e:e1:e2:2f:66:85:53:7b:
         6b:23:b0:b1:90:11:ec:d0:c9:df:37:ca:d7:08:8a:7b:62:e4:
         b5:c5:2b:c8:fa:48:6f:25:19:69:37:98:4f:3e:3a:a5:28:dc:
         cb:75:d1:50:b3:8d:e2:85:15:f4:b1:10:3c:50:86:9b:ed:15:
         9b:a2:e2:ba:86:7d:d6:39:4a:34:0a:8d:af:0b:69:2e:85:3a:
         7c:ef:66:53:b7:9f:61:cb:96:76:6d:46:4e:f1:b5:3b:e0:23:
         13:d5:0d:42:42:88:1f:77:03:a3:59:6f:a0:40:59:aa:06:b1:
         93:4e:d2:d0:1b:6d:a5:28:88:36:76:72:da:86:fc:3c:01:3d:
         fd:f4:96:b9:50:95:ab:ab:c5:bc:8a:07:b0:df:0c:70:7c:05:
         95:87:39:ee:7b:5b:a6:15:61:1e:9a:21:c3:d7:e2:41:07:ec:
         61:14:51:7e:e2:a1:d9:d5:02:37:b1:1d:c5:93:a7:c3:66:2f:
         53:73:d0:d9:49:8a:ad:39:4b:a0:72:f4:2f:f2:d3:b0:0b:77:
         93:08:ef:ba:6b:3c:ae:a5:25:e2:8e:b9:7c:02:6d:4f:b0:cf:
         d5:1c:fc:7b:83:f0:92:48:8a:ed:67:a4:3e:26:6b:91:6b:ed:
         3d:71:9f:a2
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBwswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTA3MTgxMTAvBgNVBAUTKDc2MTc0NjI1RTgxNjMyRDM4REY2MkE4M0I1N0IwM0JB
Mjg4N0U2RjUwHhcNMjQwNjE1MDAwMjE4WhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NjZjZGEwYS1kZjNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3mi5YPTSSj2pnlCG7BbAU++PWEvCo/zsrQuFxaKpoMR+VUFBckbiN/vWWPhg
GORz7oOfMMPzuTYlcTtUPfESwOFi5TEXj2duuDfWNrgu9bWUB2Kfvm4I3dn5UBAI
Rh6874ZKbqKQPLLpWevk2d610hC/Tfugea1ilnrnlvsFh/AkM2HH/zIUy5+hvICl
ma5ZYN5pyhHX8VL82sRNhZTUN+9kaCGZx3osAjAm3RYOl3c9cjC29mLWhxz93UnS
EFncUVCP9iJzFtX19t+rh68cr3sIAGxEqi7X6/6/aW0d8GAnv2yzjbPN9t3vPGIL
SjWAqOgNAjq+fQbGP2BN6PZkqwIDAQABo4IClTCCApEwHQYDVR0OBBYEFBk27SGg
Zu5cG9emjdBYulKRQ7/aMB8GA1UdIwQYMBaAFHYXRiXoFjLTjfYqg7V7A7ooh+b1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDcxOC85MjgzRURFRTBF
OTQxMUVCOTY2OUUxMzNDNEY5QUUwMi9kaGRHSmVnV010T045aXFEdFhzRHVpaUg1
dlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2RoZEdKZWdXTXRPTjlpcUR0WHNEdWlpSDV2VS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MTA3MTgvOTI4M0VERUUwRTk0MTFFQjk2NjlFMTMzQzRGOUFFMDIvODBGMzcxNzgw
RTk3MTFFQjlBNkMyQjNDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADKXJkwDQYJKoZIhvcNAQELBQADggEBAJtfWFe0kXbvU8qO
4eIvZoVTe2sjsLGQEezQyd83ytcIinti5LXFK8j6SG8lGWk3mE8+OqUo3Mt10VCz
jeKFFfSxEDxQhpvtFZui4rqGfdY5SjQKja8LaS6FOnzvZlO3n2HLlnZtRk7xtTvg
IxPVDUJCiB93A6NZb6BAWaoGsZNO0tAbbaUoiDZ2ctqG/DwBPf30lrlQlaurxbyK
B7DfDHB8BZWHOe57W6YVYR6aIcPX4kEH7GEUUX7iodnVAjexHcWTp8NmL1Nz0NlJ
iq05S6By9C/y07ALd5MI77prPK6lJeKOuXwCbU+wz9Uc/HuD8JJIiu1npD4ma5Fr
7T1xn6I=
-----END CERTIFICATE-----
Generated at Fri Nov 22 22:14:20 2024 by rpki-client on console-ams.rpki-client.org