Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/83A8C51804CF11E9BA917C34C4F9AE02.roa
File:                     83A8C51804CF11E9BA917C34C4F9AE02.roa (raw, json)
Hash identifier:          DV7PD4/7Wtnd/tSEN4HZ/kGp4ubXwwMGnJBzbqr6XGA=
Subject key identifier:   6E:F8:34:30:04:8D:B9:9E:79:4B:AC:0D:DC:C2:49:B5:48:DF:1E:62
Certificate issuer:       /CN=A914EAE4/serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA
Certificate serial:       1D1D
Authority key identifier: AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/83A8C51804CF11E9BA917C34C4F9AE02.roa
Signing time:             Tue 02 Jan 2024 16:54:13 +0000
ROA not before:           Tue 02 Jan 2024 16:54:13 +0000
ROA not after:            Sun 01 Dec 2024 00:00:00 +0000
asID:                     133776
IP address blocks:        125.77.128.0/19 maxlen: 19
                          125.77.160.0/20 maxlen: 20
                          125.77.176.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.crl
                          rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 14:50:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7453 (0x1d1d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914EAE4/serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA
        Validity
            Not Before: Jan  2 16:54:13 2024 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=65943fb5-c218
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:0c:2e:13:42:4e:bb:47:80:e9:17:98:6f:37:
                    21:f7:de:c8:1b:4b:42:ea:13:ec:d6:6c:05:c0:13:
                    c5:cf:af:eb:92:6e:6e:98:5e:52:28:3c:bc:1f:87:
                    7c:db:97:d7:aa:d0:9b:f4:91:c4:7e:c9:ae:b1:65:
                    7b:07:fa:8d:6b:9f:bd:2d:f8:69:24:f7:6e:f8:1c:
                    8f:df:eb:37:46:01:6c:4b:27:06:d9:d7:fb:40:af:
                    a1:e7:e2:9a:56:54:ee:ea:41:7f:55:76:7f:a0:ae:
                    64:f2:08:03:7f:5d:c9:cc:24:8c:2a:5c:2c:6b:d3:
                    12:5e:40:17:b6:90:ae:cb:a8:48:f0:77:b6:d1:5d:
                    2e:f0:bf:65:cb:ca:39:25:c6:f7:e9:98:12:0e:5c:
                    78:d5:6f:d9:6f:8c:e2:46:65:f6:0e:3c:67:a7:b3:
                    9b:31:e3:c5:b4:5a:a6:7e:14:56:fb:d3:3d:6d:54:
                    30:4d:23:77:19:c7:24:e9:05:dc:e9:a3:80:4f:45:
                    7c:6c:19:78:4b:87:99:92:9f:ec:7c:8e:3a:17:c4:
                    43:df:c0:2b:4f:18:e2:4d:3f:4c:e4:aa:55:e1:97:
                    de:3a:3e:90:d2:a7:51:c3:49:0c:37:db:0a:2c:42:
                    41:a8:9f:45:42:9b:f0:90:5b:1a:54:41:8a:c0:26:
                    70:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:F8:34:30:04:8D:B9:9E:79:4B:AC:0D:DC:C2:49:B5:48:DF:1E:62
            X509v3 Authority Key Identifier:
                keyid:AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/83A8C51804CF11E9BA917C34C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  125.77.128.0-125.77.177.255

    Signature Algorithm: sha256WithRSAEncryption
         42:7c:f6:be:27:c9:83:08:27:f9:6d:cb:a1:ca:bd:56:c9:d7:
         0b:8d:df:2a:fa:7b:4e:fe:65:76:74:ec:4b:0a:65:51:9a:0b:
         eb:aa:0e:bc:a2:3b:be:a1:7f:bb:e3:e2:66:dd:6e:22:1e:43:
         2b:56:38:36:db:c9:3d:00:c2:af:8f:0a:0e:f7:5e:a4:be:99:
         e4:e5:3b:2e:37:a5:5d:d5:b5:9a:72:44:7d:a3:10:56:60:86:
         45:bb:c4:58:96:b1:21:89:d5:9e:46:89:54:a1:86:00:1c:8f:
         cd:41:a6:53:e6:82:ea:c4:b3:c5:72:e6:f6:1f:a3:d0:06:8a:
         52:d7:47:14:a6:52:09:9d:5d:f4:e7:68:97:83:99:68:dc:eb:
         39:05:a6:71:32:fe:37:a7:53:f8:15:f8:4b:ac:81:a4:cb:17:
         8a:d6:c6:a9:72:b1:e8:5f:0a:33:9c:97:9a:93:ff:02:21:2b:
         3a:40:76:11:c2:3e:ea:1d:ea:d6:d0:7e:fb:49:5d:27:d3:98:
         3d:7f:ca:ba:0c:78:ed:81:68:94:05:d6:6d:5c:d9:b1:c9:bb:
         aa:97:c3:19:82:fa:78:92:94:d0:f9:bd:0c:5d:ac:1b:3a:4d:
         03:8a:e6:3d:7c:e0:9e:cc:f1:e5:60:ee:39:4a:e3:ef:90:3b:
         7b:a0:6d:88
-----BEGIN CERTIFICATE-----
MIIFeTCCBGGgAwIBAgICHR0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEVBRTQxMTAvBgNVBAUTKEFENTZCNjcxODdBOThCQTMxNDA4NDQwNTc5N0JEOTY1
NkU4QUM4QkEwHhcNMjQwMTAyMTY1NDEzWhcNMjQxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NTk0M2ZiNS1jMjE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2wwuE0JOu0eA6ReYbzch997IG0tC6hPs1mwFwBPFz6/rkm5umF5SKDy8H4d8
25fXqtCb9JHEfsmusWV7B/qNa5+9LfhpJPdu+ByP3+s3RgFsSycG2df7QK+h5+Ka
VlTu6kF/VXZ/oK5k8ggDf13JzCSMKlwsa9MSXkAXtpCuy6hI8He20V0u8L9ly8o5
Jcb36ZgSDlx41W/Zb4ziRmX2Djxnp7ObMePFtFqmfhRW+9M9bVQwTSN3Gcck6QXc
6aOAT0V8bBl4S4eZkp/sfI46F8RD38ArTxjiTT9M5KpV4ZfeOj6Q0qdRw0kMN9sK
LEJBqJ9FQpvwkFsaVEGKwCZwywIDAQABo4ICnTCCApkwHQYDVR0OBBYEFG74NDAE
jbmeeUusDdzCSbVI3x5iMB8GA1UdIwQYMBaAFK1WtnGHqYujFAhEBXl72WVuisi6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUFFNC82NzUzQjhBRTI1
NzUxMUU3QUMwRDE3MkFDNEY5QUUwMi9yVmEyY1llcGk2TVVDRVFGZVh2WlpXNkt5
TG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3JWYTJjWWVwaTZNVUNFUUZlWHZaWlc2S3lMby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NEVBRTQvNjc1M0I4QUUyNTc1MTFFN0FDMEQxNzJBQzRGOUFFMDIvODNBOEM1MTgw
NENGMTFFOUJBOTE3QzM0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJwYIKwYBBQUHAQcBAf8E
GDAWMBQEAgABMA4wDAMEB31NgAMEAX1NsDANBgkqhkiG9w0BAQsFAAOCAQEAQnz2
vifJgwgn+W3Locq9VsnXC43fKvp7Tv5ldnTsSwplUZoL66oOvKI7vqF/u+PiZt1u
Ih5DK1Y4NtvJPQDCr48KDvdepL6Z5OU7LjelXdW1mnJEfaMQVmCGRbvEWJaxIYnV
nkaJVKGGAByPzUGmU+aC6sSzxXLm9h+j0AaKUtdHFKZSCZ1d9Odol4OZaNzrOQWm
cTL+N6dT+BX4S6yBpMsXitbGqXKx6F8KM5yXmpP/AiErOkB2EcI+6h3q1tB++0ld
J9OYPX/Kugx47YFolAXWbVzZscm7qpfDGYL6eJKU0Pm9DF2sGzpNA4rmPXzgnszx
5WDuOUrj75A7e6BtiA==
-----END CERTIFICATE-----
Generated at Sat May 18 17:37:32 2024 by rpki-client on console-fra.rpki-client.org