Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A29A1/F8F0EC961E5011EB82078626C4F9AE02/FD33BACA1E5211EBA055EE2BC4F9AE02.roa
File:                     FD33BACA1E5211EBA055EE2BC4F9AE02.roa (raw, json)
Hash identifier:          FQDFy0tQfHAgApRrYeExkAFxMKUqFuFUUqOZ0HKAuto=
Subject key identifier:   BB:D0:46:C6:CD:D5:82:46:B9:D3:AC:89:DB:CA:1F:BF:59:B5:66:D1
Certificate issuer:       /CN=A91A29A1/serialNumber=F1BB79E56D2B098692CC7D1F226F756C7961E19B
Certificate serial:       060F
Authority key identifier: F1:BB:79:E5:6D:2B:09:86:92:CC:7D:1F:22:6F:75:6C:79:61:E1:9B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bt55W0rCYaSzH0fIm91bHlh4Zs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A29A1/F8F0EC961E5011EB82078626C4F9AE02/FD33BACA1E5211EBA055EE2BC4F9AE02.roa
Signing time:             Mon 31 Jul 2023 23:20:25 +0000
ROA not before:           Mon 31 Jul 2023 23:20:25 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     9268
IP address blocks:        119.18.40.0/21 maxlen: 21
                          2407:600::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A29A1/F8F0EC961E5011EB82078626C4F9AE02/8bt55W0rCYaSzH0fIm91bHlh4Zs.crl
                          rsync://rpki.apnic.net/member_repository/A91A29A1/F8F0EC961E5011EB82078626C4F9AE02/8bt55W0rCYaSzH0fIm91bHlh4Zs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bt55W0rCYaSzH0fIm91bHlh4Zs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 23:25:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1551 (0x60f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A29A1/serialNumber=F1BB79E56D2B098692CC7D1F226F756C7961E19B
        Validity
            Not Before: Jul 31 23:20:25 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=64c841b9-7933
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:05:53:4e:28:b2:b1:d5:23:e5:17:df:a8:a6:
                    ba:95:1f:1b:29:7f:d7:05:db:c9:18:16:31:a1:42:
                    18:9b:c0:c9:f8:d0:39:5d:6e:fc:9f:19:02:f8:ed:
                    b9:30:b6:84:a7:a4:34:0c:61:7f:79:8b:67:ca:42:
                    b0:5c:23:56:de:bf:bd:1e:18:10:0f:f1:30:7a:6e:
                    98:5e:50:b3:f7:84:41:91:9a:a0:38:09:8a:ae:e4:
                    60:ca:77:c7:ca:c2:f7:2c:34:00:42:15:08:15:f9:
                    77:d2:9a:37:6b:32:6b:ff:da:bf:5b:ec:5d:56:20:
                    35:4e:b0:90:04:51:b2:2b:70:4c:74:44:a8:3a:f5:
                    56:0e:21:7d:87:80:0d:2d:ca:aa:4b:15:aa:3a:2b:
                    1f:26:a9:74:7b:ac:eb:e9:ae:3d:fc:a8:01:f4:db:
                    0f:d2:f4:0c:51:22:9e:52:b5:f7:83:99:cd:1d:6f:
                    38:62:ea:28:47:64:6d:b3:31:00:63:90:07:48:56:
                    88:94:5b:7b:cf:32:fe:a8:c2:96:41:43:d9:d3:47:
                    94:6d:ca:86:3f:d7:58:67:a3:3a:29:55:0c:a2:5d:
                    5c:9c:30:f3:9a:63:c2:49:3c:6c:9a:9c:5b:99:85:
                    ea:e2:19:8a:8b:bc:eb:4f:03:93:3f:c5:6b:15:64:
                    07:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:D0:46:C6:CD:D5:82:46:B9:D3:AC:89:DB:CA:1F:BF:59:B5:66:D1
            X509v3 Authority Key Identifier:
                keyid:F1:BB:79:E5:6D:2B:09:86:92:CC:7D:1F:22:6F:75:6C:79:61:E1:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A29A1/F8F0EC961E5011EB82078626C4F9AE02/8bt55W0rCYaSzH0fIm91bHlh4Zs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bt55W0rCYaSzH0fIm91bHlh4Zs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A29A1/F8F0EC961E5011EB82078626C4F9AE02/FD33BACA1E5211EBA055EE2BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.18.40.0/21
                IPv6:
                  2407:600::/32

    Signature Algorithm: sha256WithRSAEncryption
         c9:38:e7:75:5e:22:e5:21:a6:22:23:b8:e1:fa:0c:5e:51:a5:
         cd:d9:cd:f9:82:93:c0:a6:b0:b0:51:7e:80:e2:45:10:c3:dd:
         96:dd:5e:be:0d:c0:6d:7d:13:40:2e:14:b3:7c:03:8d:9d:d9:
         d3:7b:ce:52:da:1d:19:b8:52:29:e9:ba:a1:36:79:89:c5:8f:
         13:73:d7:19:d8:fc:78:f5:17:db:2a:c4:50:c6:e3:bf:9f:0d:
         79:4a:50:0c:91:2a:a8:2f:e2:80:b7:4c:8c:0f:0e:03:cd:b7:
         6b:f2:31:e6:10:2a:a4:4f:e4:f3:6d:9d:d5:40:ca:4f:86:af:
         4f:05:83:01:51:e9:ff:78:96:d8:a4:55:2a:1e:40:15:6d:75:
         a2:97:bc:b0:ba:fa:99:44:59:13:2a:72:3b:28:95:f5:64:0d:
         e7:22:46:71:ea:aa:18:0a:e5:5c:4d:eb:d5:ed:b5:53:28:6a:
         b5:fd:a3:a9:d8:9f:99:4e:71:af:4a:4e:22:6c:da:d7:28:12:
         8d:22:c7:e7:35:5d:8f:77:5d:00:31:dc:47:39:e5:3e:4a:6a:
         92:ad:f1:19:a7:82:12:2b:e6:00:48:38:09:de:ba:dd:ee:a4:
         59:80:07:23:49:32:e5:da:63:9d:0c:d1:db:67:c7:63:b3:c3:
         16:f8:ea:39
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICBg8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTI5QTExMTAvBgNVBAUTKEYxQkI3OUU1NkQyQjA5ODY5MkNDN0QxRjIyNkY3NTZD
Nzk2MUUxOUIwHhcNMjMwNzMxMjMyMDI1WhcNMjQwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NGM4NDFiOS03OTMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3AVTTiiysdUj5RffqKa6lR8bKX/XBdvJGBYxoUIYm8DJ+NA5XW78nxkC+O25
MLaEp6Q0DGF/eYtnykKwXCNW3r+9HhgQD/Ewem6YXlCz94RBkZqgOAmKruRgynfH
ysL3LDQAQhUIFfl30po3azJr/9q/W+xdViA1TrCQBFGyK3BMdESoOvVWDiF9h4AN
LcqqSxWqOisfJql0e6zr6a49/KgB9NsP0vQMUSKeUrX3g5nNHW84YuooR2RtszEA
Y5AHSFaIlFt7zzL+qMKWQUPZ00eUbcqGP9dYZ6M6KVUMol1cnDDzmmPCSTxsmpxb
mYXq4hmKi7zrTwOTP8VrFWQHMwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFLvQRsbN
1YJGudOsidvKH79ZtWbRMB8GA1UdIwQYMBaAFPG7eeVtKwmGksx9HyJvdWx5YeGb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMjlBMS9GOEYwRUM5NjFF
NTAxMUVCODIwNzg2MjZDNEY5QUUwMi84YnQ1NVcwckNZYVN6SDBmSW05MWJIbGg0
WnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzhidDU1VzByQ1lhU3pIMGZJbTkxYkhsaDRacy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTI5QTEvRjhGMEVDOTYxRTUwMTFFQjgyMDc4NjI2QzRGOUFFMDIvRkQzM0JBQ0Ex
RTUyMTFFQkEwNTVFRTJCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E
HzAdMAwEAgABMAYDBAN3EigwDQQCAAIwBwMFACQHBgAwDQYJKoZIhvcNAQELBQAD
ggEBAMk453VeIuUhpiIjuOH6DF5Rpc3ZzfmCk8CmsLBRfoDiRRDD3ZbdXr4NwG19
E0AuFLN8A42d2dN7zlLaHRm4UinpuqE2eYnFjxNz1xnY/Hj1F9sqxFDG47+fDXlK
UAyRKqgv4oC3TIwPDgPNt2vyMeYQKqRP5PNtndVAyk+Gr08FgwFR6f94ltikVSoe
QBVtdaKXvLC6+plEWRMqcjsolfVkDeciRnHqqhgK5VxN69XttVMoarX9o6nYn5lO
ca9KTiJs2tcoEo0ix+c1XY93XQAx3Ec55T5KapKt8RmnghIr5gBIOAneut3upFmA
ByNJMuXaY50M0dtnx2Ozwxb46jk=
-----END CERTIFICATE-----
Generated at Fri Jun 7 00:09:15 2024 by rpki-client on console-fra.rpki-client.org