Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/0044F6405A4211EBA729CB56C4F9AE02.roa
File:                     0044F6405A4211EBA729CB56C4F9AE02.roa (raw, json)
Hash identifier:          vRZLwVAMVN7eHTrm80N9IbU9MLfnHedC9U2pQSU1+qI=
Subject key identifier:   8C:8A:FB:1A:2E:37:4A:DA:9A:6D:64:75:52:00:CE:F6:18:9B:B7:6E
Certificate issuer:       /CN=A9182502/serialNumber=8C3CCB4FFB89189C6EF5B34DFDAABE1806A5218A
Certificate serial:       0920
Authority key identifier: 8C:3C:CB:4F:FB:89:18:9C:6E:F5:B3:4D:FD:AA:BE:18:06:A5:21:8A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDzLT_uJGJxu9bNN_aq-GAalIYo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/0044F6405A4211EBA729CB56C4F9AE02.roa
Signing time:             Wed 02 Aug 2023 20:37:59 +0000
ROA not before:           Wed 02 Aug 2023 20:37:59 +0000
ROA not after:            Thu 31 Oct 2024 00:00:00 +0000
asID:                     132585
IP address blocks:        39.109.66.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/jDzLT_uJGJxu9bNN_aq-GAalIYo.crl
                          rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/jDzLT_uJGJxu9bNN_aq-GAalIYo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDzLT_uJGJxu9bNN_aq-GAalIYo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 21:25:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2336 (0x920)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9182502/serialNumber=8C3CCB4FFB89189C6EF5B34DFDAABE1806A5218A
        Validity
            Not Before: Aug  2 20:37:59 2023 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=64cabea6-18d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:e3:84:62:33:69:81:5d:3a:6d:de:51:00:b3:
                    8c:45:bd:48:51:67:de:65:0c:82:58:12:21:a9:10:
                    53:dc:1b:dd:39:0b:7b:59:bc:b8:f7:0e:05:40:08:
                    41:2a:e4:d1:77:f3:cb:b7:8b:ea:84:a8:62:d3:26:
                    eb:c3:e9:4c:79:c7:ae:65:76:f9:40:d1:ce:fb:03:
                    19:30:7e:38:93:61:36:3a:8e:e1:f2:db:bf:d8:d3:
                    34:39:28:0a:70:e6:15:52:d4:0b:53:ff:f0:d9:51:
                    1d:25:cd:45:51:42:86:9f:cb:d7:77:38:b8:c6:22:
                    10:cf:f9:8a:37:de:b0:5a:49:5f:79:e8:e4:d4:4e:
                    28:34:3a:4c:92:c5:e4:62:d5:98:f4:81:bf:75:ae:
                    1a:fa:83:84:4b:69:e9:2e:76:57:d6:5e:bf:e5:68:
                    5e:87:d4:a3:ba:3a:a4:05:2c:f2:7c:d3:5d:61:c0:
                    e7:dc:7d:a9:59:9d:42:49:70:f6:5b:fe:57:d1:f9:
                    32:bf:7d:d6:20:84:47:a5:05:85:90:c6:21:6a:43:
                    23:58:de:7e:44:96:f4:b8:16:cf:d5:97:df:44:5f:
                    40:4e:81:b0:2f:11:0e:c6:6e:a0:e4:45:27:20:86:
                    84:8b:15:fd:6c:3e:d2:65:9f:39:8e:5f:0b:6b:04:
                    81:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:8A:FB:1A:2E:37:4A:DA:9A:6D:64:75:52:00:CE:F6:18:9B:B7:6E
            X509v3 Authority Key Identifier:
                keyid:8C:3C:CB:4F:FB:89:18:9C:6E:F5:B3:4D:FD:AA:BE:18:06:A5:21:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/jDzLT_uJGJxu9bNN_aq-GAalIYo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDzLT_uJGJxu9bNN_aq-GAalIYo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/0044F6405A4211EBA729CB56C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  39.109.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:7c:d5:1c:0a:f9:f5:e8:33:be:1d:38:e2:2d:be:95:59:75:
         02:ff:b6:12:19:d2:0a:9a:66:74:5c:3b:9c:61:3b:6d:c5:9b:
         25:f0:cd:42:c5:5d:e0:ad:82:2c:9f:e9:60:56:62:2f:0e:4a:
         4a:f1:f9:05:e2:ef:4d:b2:de:58:f3:d5:a7:8d:77:e5:50:9c:
         6f:13:59:df:60:e5:19:18:61:55:2f:1c:0a:a2:9e:f0:5b:55:
         94:7a:2c:e5:f5:88:f3:22:37:f7:5d:ab:a6:e8:cd:b8:c0:56:
         f5:fa:eb:8f:6e:9b:1c:03:5a:90:0c:0b:f2:d6:e8:8c:e5:cd:
         db:f1:79:80:87:d9:63:cd:14:c6:34:f1:b2:f3:8b:9f:92:0a:
         44:a1:82:83:a0:5c:7b:66:41:ff:6c:07:51:d0:e8:9c:e9:17:
         fe:71:be:1d:e4:59:af:5c:90:63:ed:ef:34:02:ae:19:da:6f:
         d6:0e:63:d3:c9:c8:6b:00:fe:de:56:86:48:3f:da:a0:39:b8:
         80:3f:a3:4b:18:37:b5:ed:d6:d0:e5:66:ad:fc:8d:6d:c7:0c:
         5d:43:44:4a:49:d3:61:cb:c9:ae:86:74:03:8e:ae:48:43:f7:
         5f:d6:b2:2d:5a:aa:8b:63:5a:d7:e7:ee:c8:7a:c1:57:83:f6:
         af:d3:ac:cd
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICCSAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODI1MDIxMTAvBgNVBAUTKDhDM0NDQjRGRkI4OTE4OUM2RUY1QjM0REZEQUFCRTE4
MDZBNTIxOEEwHhcNMjMwODAyMjAzNzU5WhcNMjQxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NGNhYmVhNi0xOGQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAp+OEYjNpgV06bd5RALOMRb1IUWfeZQyCWBIhqRBT3BvdOQt7Wby49w4FQAhB
KuTRd/PLt4vqhKhi0ybrw+lMeceuZXb5QNHO+wMZMH44k2E2Oo7h8tu/2NM0OSgK
cOYVUtQLU//w2VEdJc1FUUKGn8vXdzi4xiIQz/mKN96wWklfeejk1E4oNDpMksXk
YtWY9IG/da4a+oOES2npLnZX1l6/5Wheh9SjujqkBSzyfNNdYcDn3H2pWZ1CSXD2
W/5X0fkyv33WIIRHpQWFkMYhakMjWN5+RJb0uBbP1ZffRF9AToGwLxEOxm6g5EUn
IIaEixX9bD7SZZ85jl8LawSBHQIDAQABo4IClTCCApEwHQYDVR0OBBYEFIyK+xou
N0ramm1kdVIAzvYYm7duMB8GA1UdIwQYMBaAFIw8y0/7iRicbvWzTf2qvhgGpSGK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjUwMi9EQTE2QzYzQTcz
Q0MxMUVBQTM5OTUzMjZDNEY5QUUwMi9qRHpMVF91SkdKeHU5Yk5OX2FxLUdBYWxJ
WW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2pEekxUX3VKR0p4dTliTk5fYXEtR0FhbElZby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODI1MDIvREExNkM2M0E3M0NDMTFFQUEzOTk1MzI2QzRGOUFFMDIvMDA0NEY2NDA1
QTQyMTFFQkE3MjlDQjU2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAAnbUIwDQYJKoZIhvcNAQELBQADggEBADt81RwK+fXoM74d
OOItvpVZdQL/thIZ0gqaZnRcO5xhO23FmyXwzULFXeCtgiyf6WBWYi8OSkrx+QXi
702y3ljz1aeNd+VQnG8TWd9g5RkYYVUvHAqinvBbVZR6LOX1iPMiN/ddq6bozbjA
VvX6649umxwDWpAMC/LW6IzlzdvxeYCH2WPNFMY08bLzi5+SCkShgoOgXHtmQf9s
B1HQ6JzpF/5xvh3kWa9ckGPt7zQCrhnab9YOY9PJyGsA/t5Whkg/2qA5uIA/o0sY
N7Xt1tDlZq38jW3HDF1DREpJ02HLya6GdAOOrkhD91/Wsi1aqotjWtfn7sh6wVeD
9q/TrM0=
-----END CERTIFICATE-----
Generated at Fri Jun 7 00:12:08 2024 by rpki-client on console-ams.rpki-client.org