Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/A7BEFDE01E0211E9862ECE3FC4F9AE02.roa
File:                     A7BEFDE01E0211E9862ECE3FC4F9AE02.roa (raw, json)
Hash identifier:          qAitVFRD2TcAm8cgXBL3PhBX3tGeRHrD5w9oFgsQF9s=
Subject key identifier:   B5:9A:AF:1E:41:AD:62:18:68:09:44:78:8F:3E:3A:7F:42:F4:29:C9
Certificate issuer:       /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Certificate serial:       369B
Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/A7BEFDE01E0211E9862ECE3FC4F9AE02.roa
Signing time:             Sat 08 Jul 2023 14:30:43 +0000
ROA not before:           Sat 08 Jul 2023 14:30:43 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     17468
IP address blocks:        61.90.180.0/24 maxlen: 24
                          171.102.32.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
                          rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 31 May 2024 14:21:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13979 (0x369b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
        Validity
            Not Before: Jul  8 14:30:43 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=64a97312-5e13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:f6:da:23:03:e2:d8:7e:26:bc:0a:83:a9:f7:
                    56:29:d5:c0:86:b5:1d:1d:8c:4e:37:db:90:88:e7:
                    42:a1:ec:f9:a5:76:ce:e6:25:ec:8c:88:11:0f:b9:
                    90:d9:98:33:a2:55:9b:a7:c3:2b:fe:7d:a9:9c:17:
                    4d:8a:72:48:c4:fa:32:69:56:6d:fb:cf:a4:5b:93:
                    fd:36:e6:30:a8:35:67:d7:15:9a:38:e0:67:0c:63:
                    c9:d4:ba:ca:b0:5a:00:b9:65:16:8f:44:9c:31:be:
                    83:81:26:3c:41:42:9a:ad:b7:0d:98:c6:83:3e:3a:
                    50:9c:39:3b:0f:5f:cb:37:71:00:39:8d:b2:84:99:
                    11:de:03:65:12:62:a2:37:35:79:96:1f:9a:4d:60:
                    f1:df:3c:70:59:a3:41:a8:0d:18:10:f9:81:05:cb:
                    a0:16:e5:0d:93:1e:00:5c:1c:7a:25:34:4c:b6:05:
                    aa:c5:10:4e:22:97:c7:25:12:3a:0b:1f:98:69:8d:
                    96:32:e6:18:e4:bc:eb:9c:5c:57:a2:0d:9d:e4:23:
                    d5:25:f5:0c:56:b3:84:a6:1f:79:1f:4a:93:b8:a0:
                    c5:4f:58:42:ae:86:1d:cf:e8:ef:00:40:4a:f1:84:
                    23:2b:7e:58:7a:1d:b8:33:75:9c:45:b2:a3:5a:84:
                    c1:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:9A:AF:1E:41:AD:62:18:68:09:44:78:8F:3E:3A:7F:42:F4:29:C9
            X509v3 Authority Key Identifier:
                keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/A7BEFDE01E0211E9862ECE3FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.90.180.0/24
                  171.102.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:a6:5b:67:ef:0f:ff:22:26:16:ac:79:7c:e6:c8:7e:21:e1:
         ce:c7:b5:a2:dd:ba:43:4a:4f:78:29:02:71:aa:86:11:2d:29:
         ef:b0:50:c8:42:c5:42:a7:06:f7:d6:9b:b1:a4:c8:b6:e4:e0:
         55:54:e5:39:61:e8:f0:ce:f1:d0:2b:6f:34:5e:c5:3a:6d:91:
         9b:b4:e3:53:04:a8:5d:d8:7c:6f:da:d3:c0:91:3e:22:5c:4f:
         7a:1c:ab:e0:ef:45:85:ca:9b:c2:9f:34:12:e8:29:08:f6:74:
         0a:10:42:4e:36:fa:1b:ec:1d:a5:4d:6b:e6:a5:ba:55:5c:8c:
         80:f5:e7:aa:55:1a:66:cb:9b:fc:04:6d:c2:e7:89:85:a3:2c:
         2a:fd:f4:a3:5e:9c:5b:7a:64:5d:54:2e:47:d2:f7:8a:e3:4e:
         7a:da:bd:19:3c:a3:03:2f:09:c1:4d:ac:9e:67:fc:0a:08:07:
         c6:46:8e:f2:f4:a2:81:77:48:01:7e:02:d6:73:a9:10:a9:84:
         f4:6b:d1:1e:21:f2:35:77:6b:ba:6d:c5:79:a2:52:0d:94:93:
         27:65:65:a9:06:32:26:1d:6a:13:f7:97:89:08:9d:0d:7f:75:
         b7:3b:61:5d:30:5d:32:34:0f:c7:97:3a:17:9c:29:3e:70:22:
         a8:7f:be:b9
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICNpswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzdBQkMxMTAvBgNVBAUTKDYxQkYzRUQ0QzNCRkJDMDkxNkVGOTQ4MEFBRkYyMjJB
NDM3QUYwMkMwHhcNMjMwNzA4MTQzMDQzWhcNMjQwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NGE5NzMxMi01ZTEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzfbaIwPi2H4mvAqDqfdWKdXAhrUdHYxON9uQiOdCoez5pXbO5iXsjIgRD7mQ
2ZgzolWbp8Mr/n2pnBdNinJIxPoyaVZt+8+kW5P9NuYwqDVn1xWaOOBnDGPJ1LrK
sFoAuWUWj0ScMb6DgSY8QUKarbcNmMaDPjpQnDk7D1/LN3EAOY2yhJkR3gNlEmKi
NzV5lh+aTWDx3zxwWaNBqA0YEPmBBcugFuUNkx4AXBx6JTRMtgWqxRBOIpfHJRI6
Cx+YaY2WMuYY5LzrnFxXog2d5CPVJfUMVrOEph95H0qTuKDFT1hCroYdz+jvAEBK
8YQjK35Yeh24M3WcRbKjWoTBeQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFLWarx5B
rWIYaAlEeI8+On9C9CnJMB8GA1UdIwQYMBaAFGG/PtTDv7wJFu+UgKr/IipDevAs
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzN0FCQy83MTNEOUZCMDFE
NzgxMUUyODI4NjhEQzQwOEIwMkNEMi9ZYjgtMU1PX3ZBa1c3NVNBcXY4aUtrTjY4
Q3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1liOC0xTU9fdkFrVzc1U0FxdjhpS2tONjhDdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzdBQkMvNzEzRDlGQjAxRDc4MTFFMjgyODY4REM0MDhCMDJDRDIvQTdCRUZERTAx
RTAyMTFFOTg2MkVDRTNGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBAA9WrQDBACrZiAwDQYJKoZIhvcNAQELBQADggEBAKimW2fv
D/8iJhaseXzmyH4h4c7HtaLdukNKT3gpAnGqhhEtKe+wUMhCxUKnBvfWm7GkyLbk
4FVU5Tlh6PDO8dArbzRexTptkZu041MEqF3YfG/a08CRPiJcT3ocq+DvRYXKm8Kf
NBLoKQj2dAoQQk42+hvsHaVNa+alulVcjID156pVGmbLm/wEbcLniYWjLCr99KNe
nFt6ZF1ULkfS94rjTnravRk8owMvCcFNrJ5n/AoIB8ZGjvL0ooF3SAF+AtZzqRCp
hPRr0R4h8jV3a7ptxXmiUg2UkydlZakGMiYdahP3l4kInQ1/dbc7YV0wXTI0D8eX
OhecKT5wIqh/vrk=
-----END CERTIFICATE-----
Generated at Fri May 24 15:43:20 2024 by rpki-client on console-fra.rpki-client.org