Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/7539EF341CC611EEAD8F6969C4F9AE02.roa
File:                     7539EF341CC611EEAD8F6969C4F9AE02.roa (raw, json)
Hash identifier:          5RGHnPNwDuEKkzUwe7+qNRSbyR45vI4500DTTpaH5vk=
Subject key identifier:   51:3E:9A:F1:9B:65:09:3C:AF:0D:55:83:C8:2E:F5:E6:74:EE:62:0B
Certificate issuer:       /CN=A912FC73/serialNumber=CEE41601EEA9F51B3525DA55DD4AC95CEFAF5ABC
Certificate serial:       02AF
Authority key identifier: CE:E4:16:01:EE:A9:F5:1B:35:25:DA:55:DD:4A:C9:5C:EF:AF:5A:BC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/7539EF341CC611EEAD8F6969C4F9AE02.roa
Signing time:             Wed 01 Nov 2023 03:34:25 +0000
ROA not before:           Wed 01 Nov 2023 03:34:25 +0000
ROA not after:            Mon 30 Dec 2024 00:00:00 +0000
asID:                     174
IP address blocks:        113.20.40.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.crl
                          rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 04 May 2024 03:22:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 687 (0x2af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912FC73/serialNumber=CEE41601EEA9F51B3525DA55DD4AC95CEFAF5ABC
        Validity
            Not Before: Nov  1 03:34:25 2023 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=6541c741-1e23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:20:cf:56:1a:6c:f0:8c:f1:a5:8f:0a:e2:04:
                    37:cb:59:ea:ca:cd:3e:20:2d:fb:fe:00:b6:3b:b2:
                    71:dc:28:2b:83:7a:f0:55:37:cd:ab:13:69:cf:06:
                    dd:93:bb:bb:33:2f:b2:df:12:6e:37:9b:1a:ab:41:
                    46:76:36:fd:2d:70:6b:b4:93:f1:9b:13:e5:e2:b0:
                    bc:b7:5b:96:0e:ff:52:3d:b6:eb:d5:98:9e:03:9e:
                    64:93:50:46:91:6d:9e:fa:ab:ed:0d:2a:fc:7e:c1:
                    e8:be:2d:c6:eb:15:1c:3f:36:1d:03:97:ca:af:ad:
                    22:83:ac:2f:00:6a:08:83:0b:8e:cb:7b:50:6d:1f:
                    52:2e:ef:02:97:e5:1b:9b:80:b6:c6:4f:d1:84:32:
                    7b:a9:ac:4e:0c:b5:59:27:70:61:28:6f:9d:b8:4f:
                    06:a1:81:35:26:83:e9:19:c1:5f:d4:42:55:2e:4b:
                    70:24:33:ed:46:6e:61:39:18:10:b0:88:83:ad:30:
                    13:63:ce:26:a9:9c:f4:8b:3d:35:ef:c2:8a:f5:fd:
                    56:9d:92:63:86:32:a3:8f:c5:cf:dd:66:18:f6:24:
                    5f:bb:f9:94:03:a0:97:af:91:b8:28:0b:0c:ae:f1:
                    3d:70:cd:52:1f:67:19:41:a5:b0:e6:23:8a:32:7b:
                    c9:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:3E:9A:F1:9B:65:09:3C:AF:0D:55:83:C8:2E:F5:E6:74:EE:62:0B
            X509v3 Authority Key Identifier:
                keyid:CE:E4:16:01:EE:A9:F5:1B:35:25:DA:55:DD:4A:C9:5C:EF:AF:5A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/7539EF341CC611EEAD8F6969C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.20.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2d:f6:e9:95:f0:4e:e7:ea:bd:51:9e:f9:59:06:3c:e8:d7:82:
         63:45:01:de:3f:35:57:e0:73:85:70:93:4d:b8:1a:87:ba:65:
         4e:88:71:e9:2c:db:7c:88:47:cf:d8:a6:b1:ec:12:29:a7:de:
         72:1a:ef:59:8d:65:15:16:82:70:5d:7b:96:86:4a:9a:2c:8d:
         b8:77:23:9a:57:21:bf:5a:bf:87:31:41:4e:fa:41:03:25:3e:
         22:30:62:08:f1:97:df:b2:41:ff:f2:22:73:d8:29:88:97:8d:
         fe:9c:96:df:23:52:b3:16:34:c7:03:43:a5:e6:5d:68:6b:44:
         89:7d:a2:6f:17:e3:d6:57:bd:1e:e1:63:85:48:41:52:aa:af:
         4f:30:37:d3:6b:64:78:9c:8b:c8:20:97:29:15:0f:3b:3f:1f:
         dd:a1:be:98:8d:1b:85:5a:d0:28:84:07:d3:6f:56:ad:4a:7c:
         b3:53:ec:0e:ab:bf:1c:6f:7a:01:e9:de:c2:2d:da:ed:c7:1d:
         e6:48:4a:12:7f:ed:6e:e9:9c:3e:42:8b:80:46:61:7a:4e:b1:
         f8:91:cb:2e:ca:e1:b3:44:72:d8:a1:dd:24:a3:65:2d:13:61:
         00:ec:f6:74:d5:e1:a5:d7:ac:85:ee:c8:c1:be:e1:ed:b1:68:
         9d:3f:aa:03
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAq8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkZDNzMxMTAvBgNVBAUTKENFRTQxNjAxRUVBOUY1MUIzNTI1REE1NURENEFDOTVD
RUZBRjVBQkMwHhcNMjMxMTAxMDMzNDI1WhcNMjQxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NTQxYzc0MS0xZTIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmiDPVhps8IzxpY8K4gQ3y1nqys0+IC37/gC2O7Jx3Cgrg3rwVTfNqxNpzwbd
k7u7My+y3xJuN5saq0FGdjb9LXBrtJPxmxPl4rC8t1uWDv9SPbbr1ZieA55kk1BG
kW2e+qvtDSr8fsHovi3G6xUcPzYdA5fKr60ig6wvAGoIgwuOy3tQbR9SLu8Cl+Ub
m4C2xk/RhDJ7qaxODLVZJ3BhKG+duE8GoYE1JoPpGcFf1EJVLktwJDPtRm5hORgQ
sIiDrTATY84mqZz0iz0178KK9f1WnZJjhjKjj8XP3WYY9iRfu/mUA6CXr5G4KAsM
rvE9cM1SH2cZQaWw5iOKMnvJewIDAQABo4IClTCCApEwHQYDVR0OBBYEFFE+mvGb
ZQk8rw1Vg8gu9eZ07mILMB8GA1UdIwQYMBaAFM7kFgHuqfUbNSXaVd1KyVzvr1q8
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkM3My8wMTQ0Q0RGODlG
MzQxMUVDOUNFQkM2NzBDNEY5QUUwMi96dVFXQWU2cDlSczFKZHBWM1VySlhPLXZX
cncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3p1UVdBZTZwOVJzMUpkcFYzVXJKWE8tdldydy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MkZDNzMvMDE0NENERjg5RjM0MTFFQzlDRUJDNjcwQzRGOUFFMDIvNzUzOUVGMzQx
Q0M2MTFFRUFEOEY2OTY5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAJxFCgwDQYJKoZIhvcNAQELBQADggEBAC326ZXwTufqvVGe
+VkGPOjXgmNFAd4/NVfgc4Vwk024Goe6ZU6Iceks23yIR8/YprHsEimn3nIa71mN
ZRUWgnBde5aGSposjbh3I5pXIb9av4cxQU76QQMlPiIwYgjxl9+yQf/yInPYKYiX
jf6clt8jUrMWNMcDQ6XmXWhrRIl9om8X49ZXvR7hY4VIQVKqr08wN9NrZHici8gg
lykVDzs/H92hvpiNG4Va0CiEB9NvVq1KfLNT7A6rvxxvegHp3sIt2u3HHeZIShJ/
7W7pnD5Ci4BGYXpOsfiRyy7K4bNEctih3SSjZS0TYQDs9nTV4aXXrIXuyMG+4e2x
aJ0/qgM=
-----END CERTIFICATE-----
Generated at Sat Apr 27 10:18:37 2024 by rpki-client on console-ams.rpki-client.org