Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/8D0B94E6729F11EC85AE6D45C4F9AE02.roa
File:                     8D0B94E6729F11EC85AE6D45C4F9AE02.roa (raw, json)
Hash identifier:          Mz2Zs5R5Kbd2rpXTVfzyHENUEvWWFUnUsBMk9D/k0k0=
Subject key identifier:   6B:A8:B2:FD:7C:98:D9:87:5C:77:AF:8A:41:E7:9A:86:B8:8F:CF:EB
Certificate issuer:       /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Certificate serial:       36D7
Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/8D0B94E6729F11EC85AE6D45C4F9AE02.roa
Signing time:             Sat 08 Jul 2023 14:31:35 +0000
ROA not before:           Sat 08 Jul 2023 14:31:35 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     58692
IP address blocks:        119.46.126.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
                          rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 31 May 2024 14:21:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14039 (0x36d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
        Validity
            Not Before: Jul  8 14:31:35 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=64a97347-a892
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:2c:a2:25:3d:d3:8a:d6:31:24:6e:e7:cd:ad:
                    d0:5d:12:d2:9b:e4:bc:e9:1f:79:07:f3:38:04:62:
                    ef:61:4c:41:a5:ed:66:9d:b7:52:c6:33:8b:89:2e:
                    b8:86:c3:3c:f6:c5:75:a3:97:48:92:e9:43:17:38:
                    da:e1:46:f1:d8:dd:73:d1:e2:6f:82:89:8b:0c:e4:
                    65:f8:07:22:52:d1:50:30:a8:94:30:d9:2a:00:6a:
                    cb:5a:07:5f:c5:e2:3f:a5:9f:dc:dc:21:a1:05:9c:
                    c1:04:86:cf:fd:7d:a5:f5:58:a0:34:4c:04:1b:61:
                    5e:54:35:4d:18:26:2b:f1:da:6f:5b:a7:10:b4:37:
                    d6:f0:14:38:f4:21:1e:77:fa:c3:80:2f:24:06:94:
                    de:69:a6:2c:1e:5c:2a:00:ed:68:e6:45:ef:3b:53:
                    2d:c4:b9:1e:4f:84:34:08:0d:d4:ea:26:69:c4:1f:
                    5e:2f:2d:1c:5f:17:a3:ca:95:bf:9e:7b:24:76:a4:
                    98:16:51:0e:e0:18:3d:bb:08:26:bb:f4:1d:5b:69:
                    10:35:69:a2:4c:61:ac:8c:2a:42:c1:89:3c:68:1a:
                    0b:01:2f:c9:76:cf:ff:c2:c2:f9:44:12:de:c4:18:
                    b1:42:53:20:63:f4:f4:82:ad:ae:e5:be:e1:60:ea:
                    80:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:A8:B2:FD:7C:98:D9:87:5C:77:AF:8A:41:E7:9A:86:B8:8F:CF:EB
            X509v3 Authority Key Identifier:
                keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/8D0B94E6729F11EC85AE6D45C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.46.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:9c:e0:97:dd:e5:d7:00:35:58:f9:26:af:cc:d3:0b:bc:32:
         83:5a:0c:0d:70:38:08:ab:86:34:19:d0:c1:c2:7d:a0:7a:c4:
         77:fa:0c:68:13:d6:25:6c:b8:e8:82:c0:06:45:d4:ad:d2:de:
         c1:d5:dd:53:72:45:48:46:f0:4e:68:59:98:2a:14:fc:69:ee:
         1c:e7:6f:8c:37:5d:88:b9:5a:19:ba:c7:8c:3b:c9:a2:76:a7:
         e4:58:4a:f6:b3:e2:cc:1f:69:c5:d9:34:25:a9:43:8e:7f:7c:
         55:2e:6f:55:f0:e3:af:b5:55:cf:f1:a5:09:9a:f3:4a:4d:97:
         71:24:73:08:b6:c7:39:3d:75:01:fc:00:d5:f0:ad:7e:9a:47:
         79:63:1d:aa:cc:f6:c7:e3:dc:ae:63:88:56:97:17:2a:c4:81:
         8e:62:28:84:1b:4f:32:2e:17:6a:52:b5:9e:7f:00:1a:d6:0f:
         4e:e5:c7:d4:24:3d:a3:e2:60:a6:ef:93:22:6a:c7:17:79:82:
         55:78:6e:fe:fe:ef:17:e4:f5:31:26:47:b6:93:bd:e8:77:85:
         42:de:3c:7c:05:40:92:24:8f:04:34:d2:eb:e6:aa:6b:da:92:
         f2:b8:41:08:75:6e:07:7b:cc:a3:9a:67:42:a9:77:70:78:62:
         4b:dc:0d:df
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICNtcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzdBQkMxMTAvBgNVBAUTKDYxQkYzRUQ0QzNCRkJDMDkxNkVGOTQ4MEFBRkYyMjJB
NDM3QUYwMkMwHhcNMjMwNzA4MTQzMTM1WhcNMjQwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NGE5NzM0Ny1hODkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuiyiJT3TitYxJG7nza3QXRLSm+S86R95B/M4BGLvYUxBpe1mnbdSxjOLiS64
hsM89sV1o5dIkulDFzja4Ubx2N1z0eJvgomLDORl+AciUtFQMKiUMNkqAGrLWgdf
xeI/pZ/c3CGhBZzBBIbP/X2l9VigNEwEG2FeVDVNGCYr8dpvW6cQtDfW8BQ49CEe
d/rDgC8kBpTeaaYsHlwqAO1o5kXvO1MtxLkeT4Q0CA3U6iZpxB9eLy0cXxejypW/
nnskdqSYFlEO4Bg9uwgmu/QdW2kQNWmiTGGsjCpCwYk8aBoLAS/Jds//wsL5RBLe
xBixQlMgY/T0gq2u5b7hYOqAeQIDAQABo4IClTCCApEwHQYDVR0OBBYEFGuosv18
mNmHXHevikHnmoa4j8/rMB8GA1UdIwQYMBaAFGG/PtTDv7wJFu+UgKr/IipDevAs
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzN0FCQy83MTNEOUZCMDFE
NzgxMUUyODI4NjhEQzQwOEIwMkNEMi9ZYjgtMU1PX3ZBa1c3NVNBcXY4aUtrTjY4
Q3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1liOC0xTU9fdkFrVzc1U0FxdjhpS2tONjhDdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzdBQkMvNzEzRDlGQjAxRDc4MTFFMjgyODY4REM0MDhCMDJDRDIvOEQwQjk0RTY3
MjlGMTFFQzg1QUU2RDQ1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAB3Ln4wDQYJKoZIhvcNAQELBQADggEBAK2c4Jfd5dcANVj5
Jq/M0wu8MoNaDA1wOAirhjQZ0MHCfaB6xHf6DGgT1iVsuOiCwAZF1K3S3sHV3VNy
RUhG8E5oWZgqFPxp7hznb4w3XYi5Whm6x4w7yaJ2p+RYSvaz4swfacXZNCWpQ45/
fFUub1Xw46+1Vc/xpQma80pNl3Ekcwi2xzk9dQH8ANXwrX6aR3ljHarM9sfj3K5j
iFaXFyrEgY5iKIQbTzIuF2pStZ5/ABrWD07lx9QkPaPiYKbvkyJqxxd5glV4bv7+
7xfk9TEmR7aTveh3hULePHwFQJIkjwQ00uvmqmvakvK4QQh1bgd7zKOaZ0Kpd3B4
YkvcDd8=
-----END CERTIFICATE-----
Generated at Fri May 24 18:22:53 2024 by rpki-client on console-ams.rpki-client.org