Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/5E6AFDFC855A11ECA39EB244C4F9AE02.roa
File:                     5E6AFDFC855A11ECA39EB244C4F9AE02.roa (raw, json)
Hash identifier:          adNJYD8ddR86Y2y0YjrK71PiHKfM9/CpER0jXjblQGI=
Subject key identifier:   C9:56:4F:9B:8E:E6:82:FE:4C:9F:55:17:F0:C9:A8:A3:E8:D9:78:93
Certificate issuer:       /CN=A9148B19/serialNumber=70D2D06919957C6AA6771CF55DB96FC7EFE789A0
Certificate serial:       0367
Authority key identifier: 70:D2:D0:69:19:95:7C:6A:A6:77:1C:F5:5D:B9:6F:C7:EF:E7:89:A0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNLQaRmVfGqmdxz1Xblvx-_niaA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/5E6AFDFC855A11ECA39EB244C4F9AE02.roa
Signing time:             Fri 11 Oct 2024 01:04:47 +0000
ROA not before:           Fri 11 Oct 2024 01:04:47 +0000
ROA not after:            Mon 01 Dec 2025 00:00:00 +0000
asID:                     396982
IP address blocks:        202.14.19.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.crl
                          rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNLQaRmVfGqmdxz1Xblvx-_niaA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Dec 2024 23:39:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 871 (0x367)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9148B19/serialNumber=70D2D06919957C6AA6771CF55DB96FC7EFE789A0
        Validity
            Not Before: Oct 11 01:04:47 2024 GMT
            Not After : Dec  1 00:00:00 2025 GMT
        Subject: CN=670879af-3f8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:44:10:76:3d:db:eb:6f:b4:10:87:57:ae:4d:
                    33:76:54:64:b5:07:e5:06:ab:87:98:89:59:68:18:
                    b1:58:af:b5:e8:77:c9:f8:03:7f:c7:7a:4d:01:04:
                    58:e3:ce:b1:f8:3d:53:8f:93:16:3a:8d:91:9d:3c:
                    12:db:bc:8e:2b:33:9c:06:17:b5:09:74:cd:09:61:
                    ed:77:ee:46:3f:0f:67:25:db:7b:d6:ca:e0:4c:90:
                    22:ef:03:c4:94:b3:51:19:4a:e5:13:b9:eb:f2:a4:
                    e7:e3:fb:34:3a:03:fd:b8:9d:ce:4c:2d:ef:7e:45:
                    e6:42:7c:61:f3:ad:42:51:04:8a:99:ce:11:63:c1:
                    34:79:28:68:c2:42:1d:5c:67:46:a1:00:20:77:9f:
                    a4:f4:78:5f:80:7f:23:87:f9:d4:a4:92:5f:ee:82:
                    34:c2:a8:29:47:f4:0e:1b:2d:db:15:15:47:98:90:
                    12:fb:90:16:c8:78:31:ae:f8:73:04:2e:ee:17:0b:
                    97:34:86:7e:9a:7f:09:45:b3:4d:ab:cf:d3:e3:2e:
                    11:3e:5a:a5:4e:4b:36:c4:db:d1:01:a8:ad:c9:6c:
                    51:81:ac:f2:2e:9a:8c:e0:b7:22:b9:5a:bc:1b:ed:
                    24:c6:43:c5:d3:1d:45:d3:28:bf:08:58:8b:08:85:
                    7d:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:56:4F:9B:8E:E6:82:FE:4C:9F:55:17:F0:C9:A8:A3:E8:D9:78:93
            X509v3 Authority Key Identifier:
                keyid:70:D2:D0:69:19:95:7C:6A:A6:77:1C:F5:5D:B9:6F:C7:EF:E7:89:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNLQaRmVfGqmdxz1Xblvx-_niaA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/5E6AFDFC855A11ECA39EB244C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.14.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:67:d1:8b:3a:30:4b:b3:09:52:1e:89:25:69:8f:48:a9:f8:
         b6:bf:30:91:ab:df:8b:61:d4:0d:89:2e:9b:ec:12:b2:37:9e:
         0e:be:54:4e:95:cd:49:c2:99:fe:63:a9:6d:ce:27:15:64:67:
         c4:ae:7d:de:33:51:f9:a9:4b:db:02:f7:85:e0:aa:c9:9a:e2:
         ec:64:d0:f3:09:18:c6:54:91:fd:39:7c:a5:08:b0:cf:f7:8b:
         e8:4f:c0:86:d6:c8:a7:e6:e5:58:07:bd:93:7d:a6:d6:b6:04:
         91:ec:ef:1b:4a:83:31:0c:86:89:28:e2:21:58:30:25:70:fe:
         13:70:7c:01:1c:ea:fe:24:5a:ae:f0:7d:6e:d2:e0:c4:fb:79:
         53:80:c5:ec:a4:d2:42:7e:2d:d3:6e:e7:29:eb:d4:05:c3:dd:
         7f:71:4c:f7:a1:fa:34:c5:1f:f7:db:15:27:14:fe:9a:a4:fe:
         6c:21:05:88:dc:45:43:f2:94:e6:0a:f1:4b:dc:40:d5:38:01:
         97:44:72:8a:99:90:5b:76:0a:2c:f6:6a:ef:60:4e:d5:63:b6:
         32:00:82:73:40:48:27:0f:17:90:2c:5c:06:fc:8e:a3:d3:1b:
         ff:39:4f:ef:07:cc:6e:86:d9:75:d5:e5:e1:df:17:a6:94:7d:
         4d:71:48:76
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICA2cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDhCMTkxMTAvBgNVBAUTKDcwRDJEMDY5MTk5NTdDNkFBNjc3MUNGNTVEQjk2RkM3
RUZFNzg5QTAwHhcNMjQxMDExMDEwNDQ3WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzA4NzlhZi0zZjhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4EQQdj3b62+0EIdXrk0zdlRktQflBquHmIlZaBixWK+16HfJ+AN/x3pNAQRY
486x+D1Tj5MWOo2RnTwS27yOKzOcBhe1CXTNCWHtd+5GPw9nJdt71srgTJAi7wPE
lLNRGUrlE7nr8qTn4/s0OgP9uJ3OTC3vfkXmQnxh861CUQSKmc4RY8E0eShowkId
XGdGoQAgd5+k9HhfgH8jh/nUpJJf7oI0wqgpR/QOGy3bFRVHmJAS+5AWyHgxrvhz
BC7uFwuXNIZ+mn8JRbNNq8/T4y4RPlqlTks2xNvRAaityWxRgazyLpqM4LciuVq8
G+0kxkPF0x1F0yi/CFiLCIV90wIDAQABo4IClTCCApEwHQYDVR0OBBYEFMlWT5uO
5oL+TJ9VF/DJqKPo2XiTMB8GA1UdIwQYMBaAFHDS0GkZlXxqpncc9V25b8fv54mg
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEIxOS8xMTAzMEFGNDg1
NTYxMUVDOUFCODJFMjFDNEY5QUUwMi9jTkxRYVJtVmZHcW1keHoxWGJsdngtX25p
YUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2NOTFFhUm1WZkdxbWR4ejFYYmx2eC1fbmlhQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDhCMTkvMTEwMzBBRjQ4NTU2MTFFQzlBQjgyRTIxQzRGOUFFMDIvNUU2QUZERkM4
NTVBMTFFQ0EzOUVCMjQ0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADKDhMwDQYJKoZIhvcNAQELBQADggEBAJ5n0Ys6MEuzCVIe
iSVpj0ip+La/MJGr34th1A2JLpvsErI3ng6+VE6VzUnCmf5jqW3OJxVkZ8Sufd4z
UfmpS9sC94Xgqsma4uxk0PMJGMZUkf05fKUIsM/3i+hPwIbWyKfm5VgHvZN9pta2
BJHs7xtKgzEMhoko4iFYMCVw/hNwfAEc6v4kWq7wfW7S4MT7eVOAxeyk0kJ+LdNu
5ynr1AXD3X9xTPeh+jTFH/fbFScU/pqk/mwhBYjcRUPylOYK8UvcQNU4AZdEcoqZ
kFt2Ciz2au9gTtVjtjIAgnNASCcPF5AsXAb8jqPTG/85T+8HzG6G2XXV5eHfF6aU
fU1xSHY=
-----END CERTIFICATE-----
Generated at Mon Nov 25 01:15:27 2024 by rpki-client on console-fra.rpki-client.org