Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/4BB76870066011EEA5F59657C4F9AE02.roa
File:                     4BB76870066011EEA5F59657C4F9AE02.roa (raw, json)
Hash identifier:          BlkP1LYtm3vROhN/faPTD29Zg2+t0xJ6pwNyD9TEZQg=
Subject key identifier:   0B:32:8C:D3:23:44:BE:83:BE:29:41:55:14:BF:F8:ED:63:9D:E8:F5
Certificate issuer:       /CN=A914EAE4/serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA
Certificate serial:       1E18
Authority key identifier: AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/4BB76870066011EEA5F59657C4F9AE02.roa
Signing time:             Fri 20 Sep 2024 16:34:43 +0000
ROA not before:           Fri 20 Sep 2024 16:34:43 +0000
ROA not after:            Mon 01 Dec 2025 00:00:00 +0000
asID:                     140330
IP address blocks:        110.87.0.0/19 maxlen: 19
                          110.87.64.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.crl
                          rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 06:14:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7704 (0x1e18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914EAE4/serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA
        Validity
            Not Before: Sep 20 16:34:43 2024 GMT
            Not After : Dec  1 00:00:00 2025 GMT
        Subject: CN=66eda422-0c4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:c6:c8:2a:75:b7:23:1b:b5:a9:4c:63:21:00:
                    98:16:d0:02:4d:47:e3:d0:3b:08:17:ec:82:e3:46:
                    de:11:81:8c:d6:2a:37:05:a7:23:8c:70:e9:e7:71:
                    90:5f:c0:9e:55:eb:ca:00:cb:46:8d:54:2b:1d:24:
                    e9:9d:c0:d2:da:b7:d3:27:90:97:a3:0b:5d:f5:cc:
                    23:a7:0b:ba:a0:6d:c7:da:a0:c2:54:f6:24:e0:08:
                    4f:73:0d:7f:53:ca:e5:1b:10:ad:40:9e:cc:02:ea:
                    ba:ea:05:35:ae:64:96:2a:77:32:de:c4:f9:8a:46:
                    e1:5f:d9:92:00:5e:19:4b:8d:a3:41:39:01:fb:4f:
                    f7:5e:40:81:40:6a:6c:78:1a:0e:c7:b1:83:ef:38:
                    c8:52:c1:8c:44:46:5d:1d:32:ce:74:3e:dc:a4:5c:
                    83:00:2b:9b:57:d1:6a:a9:64:56:50:92:4f:88:ab:
                    03:ac:92:09:b1:dc:b4:8b:36:57:20:e9:26:ff:00:
                    44:48:dd:f7:01:e4:bc:d6:4d:71:04:40:e9:c9:b3:
                    7a:09:56:9b:1e:7d:c0:61:e3:09:75:28:47:be:34:
                    b7:58:e5:55:6f:09:70:b1:2d:79:3a:ce:2c:ec:84:
                    e8:1b:f4:cd:08:91:e5:71:ec:57:6d:54:aa:0c:94:
                    72:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:32:8C:D3:23:44:BE:83:BE:29:41:55:14:BF:F8:ED:63:9D:E8:F5
            X509v3 Authority Key Identifier:
                keyid:AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/4BB76870066011EEA5F59657C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.87.0.0/19
                  110.87.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         00:c3:93:1e:39:a5:48:46:5d:30:de:f2:b6:bc:98:74:98:36:
         92:3b:6e:3e:85:04:ae:a6:56:33:41:da:27:cd:8f:6f:9c:4f:
         24:3a:a8:96:ad:14:bd:3e:bd:aa:47:11:47:a6:9d:ed:79:40:
         81:4a:06:2f:d3:ec:26:b0:6f:4a:1e:bd:90:53:06:55:69:e8:
         44:f5:ca:28:bf:2f:c1:07:59:0c:9a:02:3e:e8:bc:90:5b:c6:
         86:25:20:2b:b0:cd:34:a8:e0:e7:e9:03:6e:a0:d7:31:c4:2d:
         b7:18:69:66:0c:4d:0a:35:a3:26:51:31:13:16:37:33:9a:91:
         05:ad:2d:65:56:18:93:b2:c1:0b:5c:03:2a:cd:ef:bb:71:b3:
         ca:1c:f9:ee:0e:ab:ba:f4:fe:b3:59:08:14:4b:26:75:ff:d3:
         96:49:ae:1e:53:ae:df:f3:ea:0d:3d:26:e1:c5:b4:91:06:d0:
         5e:46:41:b4:84:2a:39:db:68:6d:a0:4e:94:34:1b:15:50:45:
         a5:8e:4b:82:86:88:23:ad:f1:05:ac:f5:e5:1f:91:55:a5:14:
         eb:86:5a:ae:a4:2b:17:76:9d:77:34:f3:ae:5b:ff:d0:ac:42:
         3e:9b:6b:85:ed:8d:0f:ef:b7:30:12:4b:3e:e8:00:5d:49:90:
         5c:b0:1a:fa
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICHhgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEVBRTQxMTAvBgNVBAUTKEFENTZCNjcxODdBOThCQTMxNDA4NDQwNTc5N0JEOTY1
NkU4QUM4QkEwHhcNMjQwOTIwMTYzNDQzWhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmVkYTQyMi0wYzRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA78bIKnW3Ixu1qUxjIQCYFtACTUfj0DsIF+yC40beEYGM1io3BacjjHDp53GQ
X8CeVevKAMtGjVQrHSTpncDS2rfTJ5CXowtd9cwjpwu6oG3H2qDCVPYk4AhPcw1/
U8rlGxCtQJ7MAuq66gU1rmSWKncy3sT5ikbhX9mSAF4ZS42jQTkB+0/3XkCBQGps
eBoOx7GD7zjIUsGMREZdHTLOdD7cpFyDACubV9FqqWRWUJJPiKsDrJIJsdy0izZX
IOkm/wBESN33AeS81k1xBEDpybN6CVabHn3AYeMJdShHvjS3WOVVbwlwsS15Os4s
7IToG/TNCJHlcexXbVSqDJRySwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFAsyjNMj
RL6DvilBVRS/+O1jnej1MB8GA1UdIwQYMBaAFK1WtnGHqYujFAhEBXl72WVuisi6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUFFNC82NzUzQjhBRTI1
NzUxMUU3QUMwRDE3MkFDNEY5QUUwMi9yVmEyY1llcGk2TVVDRVFGZVh2WlpXNkt5
TG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3JWYTJjWWVwaTZNVUNFUUZlWHZaWlc2S3lMby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NEVBRTQvNjc1M0I4QUUyNTc1MTFFN0FDMEQxNzJBQzRGOUFFMDIvNEJCNzY4NzAw
NjYwMTFFRUE1RjU5NjU3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBAVuVwADBAVuV0AwDQYJKoZIhvcNAQELBQADggEBAADDkx45
pUhGXTDe8ra8mHSYNpI7bj6FBK6mVjNB2ifNj2+cTyQ6qJatFL0+vapHEUemne15
QIFKBi/T7Cawb0oevZBTBlVp6ET1yii/L8EHWQyaAj7ovJBbxoYlICuwzTSo4Ofp
A26g1zHELbcYaWYMTQo1oyZRMRMWNzOakQWtLWVWGJOywQtcAyrN77txs8oc+e4O
q7r0/rNZCBRLJnX/05ZJrh5Trt/z6g09JuHFtJEG0F5GQbSEKjnbaG2gTpQ0GxVQ
RaWOS4KGiCOt8QWs9eUfkVWlFOuGWq6kKxd2nXc0865b/9CsQj6ba4XtjQ/vtzAS
Sz7oAF1JkFywGvo=
-----END CERTIFICATE-----
Generated at Fri Nov 22 09:31:42 2024 by rpki-client on console-fra.rpki-client.org