Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/A310F2FC8AB811EA9F89B54EC4F9AE02.roa
File:                     A310F2FC8AB811EA9F89B54EC4F9AE02.roa (raw, json)
Hash identifier:          3STasabjcRMl5sCRIraeb7Jdqbu/6EJSWvLncXV//AY=
Subject key identifier:   87:47:E3:82:F4:CC:D1:CC:45:C8:CE:2D:1D:0C:DB:EE:1B:D6:99:5E
Certificate issuer:       /CN=A9165568/serialNumber=67097E492F73D6DBD31FA016A2D5B5B86A9B3FD8
Certificate serial:       1B83
Authority key identifier: 67:09:7E:49:2F:73:D6:DB:D3:1F:A0:16:A2:D5:B5:B8:6A:9B:3F:D8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/A310F2FC8AB811EA9F89B54EC4F9AE02.roa
Signing time:             Fri 20 Oct 2023 14:40:30 +0000
ROA not before:           Fri 20 Oct 2023 14:40:30 +0000
ROA not after:            Fri 31 Jan 2025 00:00:00 +0000
asID:                     132788
IP address blocks:        119.30.80.0/20 maxlen: 20
                          119.30.89.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.crl
                          rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Jun 2024 14:33:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7043 (0x1b83)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9165568/serialNumber=67097E492F73D6DBD31FA016A2D5B5B86A9B3FD8
        Validity
            Not Before: Oct 20 14:40:30 2023 GMT
            Not After : Jan 31 00:00:00 2025 GMT
        Subject: CN=6532915e-168a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:00:b0:4a:d1:c3:c9:46:0e:56:c6:16:6a:0d:
                    29:13:d9:05:ab:23:a4:0d:f8:7f:23:46:e0:43:b0:
                    87:19:ce:61:a6:70:8a:e8:dd:03:ea:c9:0e:01:a6:
                    12:71:8f:63:ac:9c:77:74:67:76:51:c5:44:ba:44:
                    3f:5e:ce:08:37:95:b0:8b:eb:fc:cd:c8:60:78:64:
                    2a:18:1e:d3:33:3f:3b:9d:e5:44:71:e2:be:78:fb:
                    7b:2d:aa:f7:56:48:2d:65:a3:1e:25:36:6a:2a:ab:
                    d4:af:66:c5:0a:2c:de:ea:f8:bd:81:3c:32:11:80:
                    05:79:3a:74:8e:87:8d:d0:12:6c:94:c9:fb:88:bc:
                    43:94:dd:80:e9:f7:a5:9d:49:7b:4f:89:6d:9c:81:
                    28:a5:d9:78:da:2a:78:6f:0d:0d:f7:59:c6:8d:30:
                    ba:83:bd:66:91:5d:ae:15:98:d4:d2:01:68:48:fb:
                    e4:b0:4c:f6:c4:ba:11:4f:0b:85:a7:bb:92:4e:fb:
                    ad:53:b0:86:60:e3:df:69:19:cf:7e:a9:be:62:e3:
                    74:5a:81:5a:ff:a4:a4:0f:0f:ab:ac:3e:3e:2d:19:
                    1a:0b:fd:54:d6:89:df:e3:bd:0c:be:30:07:ea:d2:
                    65:e6:9d:b6:1f:0b:85:6d:35:3a:5d:62:bd:d7:4f:
                    39:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:47:E3:82:F4:CC:D1:CC:45:C8:CE:2D:1D:0C:DB:EE:1B:D6:99:5E
            X509v3 Authority Key Identifier:
                keyid:67:09:7E:49:2F:73:D6:DB:D3:1F:A0:16:A2:D5:B5:B8:6A:9B:3F:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/A310F2FC8AB811EA9F89B54EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.30.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         76:c9:47:39:29:db:a7:6f:c2:cd:b3:7f:a2:ee:9b:37:55:ee:
         d5:2e:d4:8b:62:d5:12:21:20:c9:fb:82:8b:c7:fb:d3:b2:19:
         5f:fd:45:5e:77:64:bb:c0:42:36:09:04:ed:85:91:0a:a4:e1:
         98:e3:c2:9e:14:64:21:cc:4a:2b:97:71:d6:3d:38:3d:ab:bd:
         fc:d9:db:c3:f2:b5:b4:50:46:ac:17:9a:a5:6a:b0:4b:4b:8a:
         af:e4:6c:34:32:78:94:dc:e8:01:d0:87:c3:6f:51:38:b3:00:
         a0:4d:89:96:69:3e:d7:7a:61:12:7f:24:34:b5:44:d1:52:46:
         55:fa:d4:66:28:aa:56:f7:18:db:bb:49:f2:c1:9c:84:65:c9:
         d3:69:67:de:64:f5:3e:4c:31:77:66:ee:4b:c5:77:f0:4e:af:
         04:d2:b9:c6:1a:cb:87:60:1c:8b:9a:98:f8:ce:1d:ca:b6:e6:
         58:95:89:7e:34:b1:0b:ee:18:a0:e8:d8:4d:56:e2:a6:9b:8f:
         5e:d1:db:d6:f9:8c:94:d8:c5:a2:d6:b1:c7:98:e2:7d:8b:4b:
         e5:5d:c7:61:c0:7c:d3:13:81:a1:c3:e9:c0:30:ab:25:93:3b:
         2e:36:f5:f8:e0:c1:d4:be:e6:ca:57:4e:dc:b9:28:74:13:a2:
         22:ea:97:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 16:37:16 2024 by rpki-client on console-fra.rpki-client.org