Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/52B02EA61E0111E9A590C837C4F9AE02.roa
File:                     52B02EA61E0111E9A590C837C4F9AE02.roa (raw, json)
Hash identifier:          TzYccy+28fdivar+vOZ+h7Chk5+w67iq9xLMBvqUtIo=
Subject key identifier:   9A:80:FC:B7:B0:84:AC:CE:22:83:DF:AB:99:B4:96:03:E9:14:A4:27
Certificate issuer:       /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Certificate serial:       36C8
Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/52B02EA61E0111E9A590C837C4F9AE02.roa
Signing time:             Sat 08 Jul 2023 14:31:22 +0000
ROA not before:           Sat 08 Jul 2023 14:31:22 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     55498
IP address blocks:        119.46.151.0/24 maxlen: 24
                          2001:fb0:1075::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
                          rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 31 May 2024 14:21:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14024 (0x36c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
        Validity
            Not Before: Jul  8 14:31:22 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=64a97339-bcf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b5:f9:e1:c2:a9:cf:32:d9:d8:f5:8b:b3:6b:
                    de:bb:07:f0:39:2e:42:d3:15:06:07:0a:92:08:f3:
                    2d:5f:b4:2c:63:b1:98:7f:6b:ea:36:3c:bd:c2:08:
                    42:54:b3:4e:85:5f:2f:33:bf:69:9b:fd:27:66:f5:
                    b8:cc:36:ef:46:fd:a1:36:85:33:b0:b9:c9:c4:ca:
                    97:19:87:a9:39:18:13:6f:f7:2d:c4:e4:bd:92:78:
                    6e:e2:3c:25:b4:3a:a5:18:b6:5a:d1:b1:20:b4:80:
                    0d:cc:e4:17:17:3d:81:4b:13:22:f9:68:6a:c2:69:
                    cb:0b:33:32:c5:4b:08:cf:ec:12:25:53:36:14:39:
                    7a:4e:8d:ef:d7:97:19:09:5b:37:e6:18:81:5b:ea:
                    69:3f:f1:63:5e:9f:ae:fb:75:bd:14:03:58:05:a4:
                    3e:e4:e2:89:92:a6:17:15:37:79:56:c3:5e:08:9f:
                    fd:87:be:b7:44:de:5c:59:c7:b7:42:42:f9:6a:3e:
                    50:d1:65:77:6c:96:4e:20:90:1f:8c:94:db:be:9f:
                    c9:73:68:66:00:0d:1c:66:9f:4f:1c:61:57:d5:15:
                    ae:39:03:bb:16:26:77:b2:10:8e:1c:ae:85:82:f7:
                    57:97:e7:50:d4:e3:63:9a:59:39:f0:22:e2:e6:df:
                    35:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:80:FC:B7:B0:84:AC:CE:22:83:DF:AB:99:B4:96:03:E9:14:A4:27
            X509v3 Authority Key Identifier:
                keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/52B02EA61E0111E9A590C837C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.46.151.0/24
                IPv6:
                  2001:fb0:1075::/48

    Signature Algorithm: sha256WithRSAEncryption
         50:66:5d:62:e5:33:c1:89:eb:ec:8b:0a:73:4c:0f:d9:0b:e4:
         07:7f:d8:a1:99:47:2c:d3:94:cb:a0:a7:12:66:51:18:1f:c9:
         2f:71:3c:cb:b3:86:28:57:8b:46:4d:74:66:d2:8f:ac:01:a1:
         14:6f:51:4a:9b:bd:4e:26:28:7b:74:c6:16:1f:7b:47:3b:d6:
         ff:c9:3f:c5:4a:f8:54:fe:51:5e:cd:d6:0a:45:97:8c:5e:02:
         62:60:fd:f3:d0:ac:4c:65:79:a7:4f:dc:9e:df:cd:2d:19:78:
         25:1f:bc:4f:b4:d2:7d:f6:e1:52:b7:78:47:86:fd:bf:6b:ed:
         76:95:05:8b:8a:c5:b5:6b:05:02:4b:6b:6b:c3:25:82:af:b7:
         ff:3f:40:c0:1d:ca:dc:38:30:c6:ed:3e:b1:eb:72:21:ac:e0:
         37:bd:61:95:82:39:55:d8:02:21:09:ac:32:84:9d:14:9a:06:
         ac:f1:33:28:8b:e3:eb:aa:29:ec:ba:c8:23:a3:c3:08:82:cd:
         01:01:7b:6c:12:ba:a7:61:20:40:85:12:31:47:91:93:fe:6c:
         7b:f0:47:08:9d:e5:af:c4:7a:87:6d:0d:02:b8:d7:4a:44:23:
         dd:9d:15:2e:df:04:f1:d2:8d:5c:2c:74:f8:db:d6:d2:7c:fb:
         35:a2:48:3b
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgICNsgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzdBQkMxMTAvBgNVBAUTKDYxQkYzRUQ0QzNCRkJDMDkxNkVGOTQ4MEFBRkYyMjJB
NDM3QUYwMkMwHhcNMjMwNzA4MTQzMTIyWhcNMjQwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NGE5NzMzOS1iY2YxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtrX54cKpzzLZ2PWLs2veuwfwOS5C0xUGBwqSCPMtX7QsY7GYf2vqNjy9wghC
VLNOhV8vM79pm/0nZvW4zDbvRv2hNoUzsLnJxMqXGYepORgTb/ctxOS9knhu4jwl
tDqlGLZa0bEgtIANzOQXFz2BSxMi+WhqwmnLCzMyxUsIz+wSJVM2FDl6To3v15cZ
CVs35hiBW+ppP/FjXp+u+3W9FANYBaQ+5OKJkqYXFTd5VsNeCJ/9h763RN5cWce3
QkL5aj5Q0WV3bJZOIJAfjJTbvp/Jc2hmAA0cZp9PHGFX1RWuOQO7FiZ3shCOHK6F
gvdXl+dQ1ONjmlk58CLi5t811wIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFJqA/Lew
hKzOIoPfq5m0lgPpFKQnMB8GA1UdIwQYMBaAFGG/PtTDv7wJFu+UgKr/IipDevAs
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzN0FCQy83MTNEOUZCMDFE
NzgxMUUyODI4NjhEQzQwOEIwMkNEMi9ZYjgtMU1PX3ZBa1c3NVNBcXY4aUtrTjY4
Q3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1liOC0xTU9fdkFrVzc1U0FxdjhpS2tONjhDdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzdBQkMvNzEzRDlGQjAxRDc4MTFFMjgyODY4REM0MDhCMDJDRDIvNTJCMDJFQTYx
RTAxMTFFOUE1OTBDODM3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E
ITAfMAwEAgABMAYDBAB3LpcwDwQCAAIwCQMHACABD7AQdTANBgkqhkiG9w0BAQsF
AAOCAQEAUGZdYuUzwYnr7IsKc0wP2QvkB3/YoZlHLNOUy6CnEmZRGB/JL3E8y7OG
KFeLRk10ZtKPrAGhFG9RSpu9TiYoe3TGFh97RzvW/8k/xUr4VP5RXs3WCkWXjF4C
YmD989CsTGV5p0/cnt/NLRl4JR+8T7TSffbhUrd4R4b9v2vtdpUFi4rFtWsFAktr
a8Mlgq+3/z9AwB3K3Dgwxu0+setyIazgN71hlYI5VdgCIQmsMoSdFJoGrPEzKIvj
66op7LrII6PDCILNAQF7bBK6p2EgQIUSMUeRk/5se/BHCJ3lr8R6h20NArjXSkQj
3Z0VLt8E8dKNXCx0+NvW0nz7NaJIOw==
-----END CERTIFICATE-----
Generated at Fri May 24 18:22:53 2024 by rpki-client on console-ams.rpki-client.org