Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/9D8E6D02C2A511EBB2025B36C4F9AE02.roa
File:                     9D8E6D02C2A511EBB2025B36C4F9AE02.roa (raw, json)
Hash identifier:          cx0K0bJRQz5Nmb2d76mnGIN2Xr+QPD7Bio7ZlcQXgU0=
Subject key identifier:   1F:AE:15:FD:F6:E5:E4:2A:19:90:DA:BE:5D:11:3F:4B:EC:FC:13:3E
Certificate issuer:       /CN=A9149F3E/serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
Certificate serial:       35F2
Authority key identifier: EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/9D8E6D02C2A511EBB2025B36C4F9AE02.roa
Signing time:             Fri 16 Aug 2024 14:40:25 +0000
ROA not before:           Fri 16 Aug 2024 14:40:25 +0000
ROA not after:            Sun 31 Aug 2025 00:00:00 +0000
asID:                     17860
IP address blocks:        139.5.226.0/24 maxlen: 24
                          139.5.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl
                          rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13810 (0x35f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9149F3E
        Validity
            Not Before: Aug 16 14:40:25 2024 GMT
            Not After : Aug 31 00:00:00 2025 GMT
        Subject: CN=66bf64d9-bc20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:67:b7:a8:f2:74:af:b0:43:14:d5:5b:32:45:
                    a0:15:65:f0:80:26:c8:e7:83:19:6f:03:16:1c:58:
                    36:e7:3d:38:6f:7f:ad:e5:68:84:3e:ad:9e:09:dd:
                    96:51:59:d5:56:5d:73:4b:e4:be:66:a5:3d:7e:ef:
                    d3:a6:9e:00:12:56:78:4b:79:5a:bb:65:bd:f0:83:
                    f1:48:1d:71:fa:8a:60:67:87:67:9c:f2:8e:b3:91:
                    35:bb:37:61:6d:34:ac:ac:7a:72:46:4f:9e:db:4a:
                    80:8a:8b:3a:5e:a9:bd:4f:90:ce:50:da:59:02:7d:
                    c9:d8:f0:c6:c7:31:3c:78:39:3b:e1:d7:17:8b:40:
                    eb:49:db:73:cb:a6:4e:6f:3d:b7:45:b7:d1:f5:cd:
                    e6:32:58:95:23:c9:47:7c:29:e5:7a:b6:0f:a9:a3:
                    d7:23:d9:a5:60:4c:80:8b:55:d7:81:dc:1c:77:2f:
                    ff:16:1f:a2:db:5c:64:52:8a:5e:32:be:7b:bc:42:
                    02:9b:8d:9d:ac:3b:4b:40:c9:7e:84:a3:28:cd:72:
                    8b:ad:d4:59:47:39:d3:a4:c6:35:18:3f:2d:d9:97:
                    6c:de:0d:03:b5:53:e3:cc:7f:28:a6:b6:76:33:6c:
                    9e:ed:f6:88:83:17:e9:6e:a0:97:1e:2f:2d:03:ea:
                    77:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:AE:15:FD:F6:E5:E4:2A:19:90:DA:BE:5D:11:3F:4B:EC:FC:13:3E
            X509v3 Authority Key Identifier:
                keyid:EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/9D8E6D02C2A511EBB2025B36C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.5.226.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a8:40:f8:32:dc:75:c6:a8:dd:97:0a:b7:f2:2c:1a:6e:5e:77:
         73:2f:63:8d:36:39:6d:2f:ef:99:de:9a:06:07:2a:d7:00:b3:
         72:e8:2f:62:91:03:50:b2:b8:20:ef:2a:11:ec:1d:11:e7:ca:
         3f:4f:8c:e3:51:04:1d:f6:bc:58:38:46:52:02:fa:b0:b0:36:
         cf:93:e6:07:bf:bd:b7:a0:ad:63:d1:c0:b8:8a:df:f4:2b:e3:
         5f:a0:ff:dc:42:91:2a:84:b8:ad:e1:13:31:cb:69:0d:e5:ee:
         eb:d6:e7:1d:0a:27:fe:1a:f5:59:48:ea:69:d1:44:aa:cd:e9:
         08:8f:4d:94:5e:8f:b0:e5:d1:4f:d4:36:2e:4a:0a:17:df:dc:
         9d:f2:2f:77:8b:59:4c:2e:b4:77:37:81:68:30:c9:b3:77:c0:
         ab:e3:f6:99:ce:7b:4d:55:a4:c7:7e:fc:08:81:db:fb:47:6d:
         a4:04:87:0c:d7:ce:eb:e9:14:6e:5d:51:52:1e:a2:21:78:90:
         57:41:83:01:22:1f:cb:39:8e:c0:7e:6e:0a:28:07:b9:38:47:
         35:cd:8b:7d:e6:05:33:5a:10:1c:c9:fd:f8:09:f5:77:12:c2:
         14:9d:8d:85:fa:1b:5c:6e:04:99:2a:65:05:c4:c4:d4:aa:b6:
         8f:19:cf:a0
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICNfIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDlGM0UxMTAvBgNVBAUTKEVCMzg5RkIzMzlCMzkwOEQ1NDlBNjUzOTBDOTJFMTVG
OURGN0M1NEIwHhcNMjQwODE2MTQ0MDI1WhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmJmNjRkOS1iYzIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzGe3qPJ0r7BDFNVbMkWgFWXwgCbI54MZbwMWHFg25z04b3+t5WiEPq2eCd2W
UVnVVl1zS+S+ZqU9fu/Tpp4AElZ4S3lau2W98IPxSB1x+opgZ4dnnPKOs5E1uzdh
bTSsrHpyRk+e20qAios6Xqm9T5DOUNpZAn3J2PDGxzE8eDk74dcXi0DrSdtzy6ZO
bz23RbfR9c3mMliVI8lHfCnlerYPqaPXI9mlYEyAi1XXgdwcdy//Fh+i21xkUope
Mr57vEICm42drDtLQMl+hKMozXKLrdRZRznTpMY1GD8t2Zds3g0DtVPjzH8oprZ2
M2ye7faIgxfpbqCXHi8tA+p3UQIDAQABo4IClTCCApEwHQYDVR0OBBYEFB+uFf32
5eQqGZDavl0RP0vs/BM+MB8GA1UdIwQYMBaAFOs4n7M5s5CNVJplOQyS4V+d98VL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUYzRS9BQzUyQjc0ODFE
ODIxMUUyQkM2NDE3RDcwOEIwMkNEMi82emlmc3ptemtJMVVtbVU1REpMaFg1MzN4
VXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzZ6aWZzem16a0kxVW1tVTVESkxoWDUzM3hVcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDlGM0UvQUM1MkI3NDgxRDgyMTFFMkJDNjQxN0Q3MDhCMDJDRDIvOUQ4RTZEMDJD
MkE1MTFFQkIyMDI1QjM2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAGLBeIwDQYJKoZIhvcNAQELBQADggEBAKhA+DLcdcao3ZcK
t/IsGm5ed3MvY402OW0v75nemgYHKtcAs3LoL2KRA1CyuCDvKhHsHRHnyj9PjONR
BB32vFg4RlIC+rCwNs+T5ge/vbegrWPRwLiK3/Qr41+g/9xCkSqEuK3hEzHLaQ3l
7uvW5x0KJ/4a9VlI6mnRRKrN6QiPTZRej7Dl0U/UNi5KChff3J3yL3eLWUwutHc3
gWgwybN3wKvj9pnOe01VpMd+/AiB2/tHbaQEhwzXzuvpFG5dUVIeoiF4kFdBgwEi
H8s5jsB+bgooB7k4RzXNi33mBTNaEBzJ/fgJ9XcSwhSdjYX6G1xuBJkqZQXExNSq
to8Zz6A=
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:43:43 2025 by rpki-client