Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/19270196406311ECB405CB27C4F9AE02.roa
File:                     19270196406311ECB405CB27C4F9AE02.roa (raw, json)
Hash identifier:          Rxz3YNja8eJhNPjW7naf/EqV61xDq0txB+95xdVztFs=
Subject key identifier:   A5:C3:33:E0:12:6A:D5:4B:EB:A5:0F:B6:4B:22:71:D6:35:A2:EF:81
Certificate issuer:       /CN=A9145EFF/serialNumber=8E8C268F104709A66C8D6F620A5B9D93C19AF050
Certificate serial:       03B3
Authority key identifier: 8E:8C:26:8F:10:47:09:A6:6C:8D:6F:62:0A:5B:9D:93:C1:9A:F0:50
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jowmjxBHCaZsjW9iCludk8Ga8FA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/19270196406311ECB405CB27C4F9AE02.roa
Signing time:             Thu 11 Jan 2024 02:03:51 +0000
ROA not before:           Thu 11 Jan 2024 02:03:51 +0000
ROA not after:            Sun 02 Mar 2025 00:00:00 +0000
asID:                     45753
IP address blocks:        175.41.16.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/jowmjxBHCaZsjW9iCludk8Ga8FA.crl
                          rsync://rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/jowmjxBHCaZsjW9iCludk8Ga8FA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jowmjxBHCaZsjW9iCludk8Ga8FA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 20:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 947 (0x3b3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9145EFF/serialNumber=8E8C268F104709A66C8D6F620A5B9D93C19AF050
        Validity
            Not Before: Jan 11 02:03:51 2024 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=659f4c86-eab4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:cd:ea:b3:92:cc:0c:db:15:44:e7:ef:e7:d2:
                    a1:5b:13:19:9e:68:eb:a2:e1:ce:c5:52:4c:90:76:
                    35:ae:05:cc:8c:2a:ba:70:30:f3:8d:f4:83:48:4d:
                    73:e8:24:6e:99:65:c4:f4:fe:83:20:11:57:4b:f3:
                    6e:1c:f5:bc:9e:bf:47:0c:22:8b:a9:05:75:6c:23:
                    73:c6:08:10:c7:b9:85:9b:f8:d5:e3:ac:49:92:55:
                    63:cc:3a:1c:a6:23:6f:7f:5f:08:78:e4:2a:75:07:
                    ac:b5:42:d6:ec:31:78:9e:75:11:4f:5f:fa:e7:d1:
                    f8:2c:fb:ca:27:08:9b:62:7a:26:94:1a:97:08:e1:
                    0e:58:12:d9:e6:7f:4f:33:76:2d:30:b9:53:91:42:
                    39:9b:9e:0a:75:58:86:ce:93:2b:97:15:29:78:1d:
                    d4:34:b0:68:6f:fe:af:bd:ce:9f:d2:ff:22:9e:4b:
                    cc:83:0d:ed:89:cf:50:41:67:1a:fa:76:5a:c7:ff:
                    d2:67:b8:02:5a:42:1e:7d:00:cd:db:ae:0d:44:b4:
                    c7:f1:a9:26:6e:4d:33:e5:cc:74:54:ea:fd:c0:a6:
                    10:4b:7e:32:7d:be:32:0d:fa:4a:8b:d3:43:11:92:
                    73:b8:7e:4d:9b:41:ce:bb:f4:47:a2:49:e5:db:2b:
                    c3:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:C3:33:E0:12:6A:D5:4B:EB:A5:0F:B6:4B:22:71:D6:35:A2:EF:81
            X509v3 Authority Key Identifier:
                keyid:8E:8C:26:8F:10:47:09:A6:6C:8D:6F:62:0A:5B:9D:93:C1:9A:F0:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/jowmjxBHCaZsjW9iCludk8Ga8FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jowmjxBHCaZsjW9iCludk8Ga8FA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/19270196406311ECB405CB27C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.41.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         9f:5c:35:9b:d0:cb:12:ea:0e:ef:49:3b:43:11:4c:8b:85:09:
         07:26:99:74:3c:40:5e:63:88:44:2b:8e:04:34:68:38:52:ce:
         93:61:4f:62:1a:7f:00:66:ff:77:5d:4c:12:33:91:d7:83:9a:
         d8:59:2d:25:1f:1b:8a:9c:19:20:9c:0d:9e:b0:94:a0:61:35:
         7f:2c:bf:c9:3e:e8:8f:1d:f6:58:05:fd:6e:5c:62:c3:94:3f:
         18:58:fe:ce:03:e8:0b:56:05:00:24:3a:1d:2c:4c:55:fd:e9:
         9d:1b:85:94:01:06:d6:f0:ed:88:82:07:eb:bd:58:d0:d0:c0:
         93:90:58:0c:9e:cb:08:95:2f:a2:14:f2:10:45:d4:e4:03:d6:
         d0:3e:2c:31:cd:f6:6c:ee:02:96:12:f7:65:40:ae:6d:77:83:
         80:98:aa:b2:af:61:01:a6:2f:08:6b:26:45:15:f2:c6:a5:01:
         11:4b:84:33:0a:e7:36:5a:c8:15:86:94:b2:b8:45:26:d6:be:
         7b:f5:43:61:8d:d2:32:9d:c8:66:8c:3c:c3:9a:4b:7c:b7:df:
         8e:5a:b1:d0:99:71:d4:33:f9:93:0d:ed:bb:18:34:f8:a8:f2:
         e5:ad:1f:fe:64:45:e8:da:6e:59:9e:df:5c:45:2e:e9:d9:7e:
         db:95:d6:66
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICA7MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDVFRkYxMTAvBgNVBAUTKDhFOEMyNjhGMTA0NzA5QTY2QzhENkY2MjBBNUI5RDkz
QzE5QUYwNTAwHhcNMjQwMTExMDIwMzUxWhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02NTlmNGM4Ni1lYWI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAts3qs5LMDNsVROfv59KhWxMZnmjrouHOxVJMkHY1rgXMjCq6cDDzjfSDSE1z
6CRumWXE9P6DIBFXS/NuHPW8nr9HDCKLqQV1bCNzxggQx7mFm/jV46xJklVjzDoc
piNvf18IeOQqdQestULW7DF4nnURT1/659H4LPvKJwibYnomlBqXCOEOWBLZ5n9P
M3YtMLlTkUI5m54KdViGzpMrlxUpeB3UNLBob/6vvc6f0v8inkvMgw3tic9QQWca
+nZax//SZ7gCWkIefQDN264NRLTH8akmbk0z5cx0VOr9wKYQS34yfb4yDfpKi9ND
EZJzuH5Nm0HOu/RHoknl2yvD5wIDAQABo4IClTCCApEwHQYDVR0OBBYEFKXDM+AS
atVL66UPtksicdY1ou+BMB8GA1UdIwQYMBaAFI6MJo8QRwmmbI1vYgpbnZPBmvBQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NUVGRi80NTE3RUNFODMw
QUExMUVDODQ1RERENTBDNEY5QUUwMi9qb3dtanhCSENhWnNqVzlpQ2x1ZGs4R2E4
RkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2pvd21qeEJIQ2Fac2pXOWlDbHVkazhHYThGQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDVFRkYvNDUxN0VDRTgzMEFBMTFFQzg0NURERDUwQzRGOUFFMDIvMTkyNzAxOTY0
MDYzMTFFQ0I0MDVDQjI3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBASvKRAwDQYJKoZIhvcNAQELBQADggEBAJ9cNZvQyxLqDu9J
O0MRTIuFCQcmmXQ8QF5jiEQrjgQ0aDhSzpNhT2IafwBm/3ddTBIzkdeDmthZLSUf
G4qcGSCcDZ6wlKBhNX8sv8k+6I8d9lgF/W5cYsOUPxhY/s4D6AtWBQAkOh0sTFX9
6Z0bhZQBBtbw7YiCB+u9WNDQwJOQWAyeywiVL6IU8hBF1OQD1tA+LDHN9mzuApYS
92VArm13g4CYqrKvYQGmLwhrJkUV8salARFLhDMK5zZayBWGlLK4RSbWvnv1Q2GN
0jKdyGaMPMOaS3y3345asdCZcdQz+ZMN7bsYNPio8uWtH/5kRejablme31xFLunZ
ftuV1mY=
-----END CERTIFICATE-----
Generated at Thu Nov 21 01:25:57 2024 by rpki-client on console-ams.rpki-client.org