Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9161613/30992668E53911EB8A5B9271C4F9AE02/81618D88E53E11EB9E429C44C4F9AE02.roa
File:                     81618D88E53E11EB9E429C44C4F9AE02.roa (raw, json)
Hash identifier:          SUXVs1ZzAYU5i/L/yB6yAn4TLIXGBesTJdljmT2IXNw=
Subject key identifier:   E4:52:44:16:C6:5F:33:E9:60:98:7C:FA:33:65:D0:84:EC:5E:BC:9D
Certificate issuer:       /CN=A9161613/serialNumber=09FC077F33E3AD67BF147755167A3AD4EACB1E7C
Certificate serial:       04DA
Authority key identifier: 09:FC:07:7F:33:E3:AD:67:BF:14:77:55:16:7A:3A:D4:EA:CB:1E:7C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CfwHfzPjrWe_FHdVFno61OrLHnw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9161613/30992668E53911EB8A5B9271C4F9AE02/81618D88E53E11EB9E429C44C4F9AE02.roa
Signing time:             Sat 27 Jan 2024 01:03:36 +0000
ROA not before:           Sat 27 Jan 2024 01:03:36 +0000
ROA not after:            Wed 28 May 2025 00:00:00 +0000
asID:                     18115
IP address blocks:        116.50.147.0/24 maxlen: 24
                          116.50.148.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9161613/30992668E53911EB8A5B9271C4F9AE02/CfwHfzPjrWe_FHdVFno61OrLHnw.crl
                          rsync://rpki.apnic.net/member_repository/A9161613/30992668E53911EB8A5B9271C4F9AE02/CfwHfzPjrWe_FHdVFno61OrLHnw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CfwHfzPjrWe_FHdVFno61OrLHnw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 May 2024 00:51:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1242 (0x4da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9161613/serialNumber=09FC077F33E3AD67BF147755167A3AD4EACB1E7C
        Validity
            Not Before: Jan 27 01:03:36 2024 GMT
            Not After : May 28 00:00:00 2025 GMT
        Subject: CN=65b45668-be68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ce:a1:39:ef:6e:fe:d9:9a:51:b0:1f:36:21:
                    b5:0b:b1:0f:c3:4e:0b:e9:03:b2:31:c8:2a:45:d7:
                    0e:c3:12:a2:d2:be:12:1c:f0:05:ae:2c:cb:b2:6d:
                    03:b3:40:30:15:2a:52:da:35:63:ba:d7:37:38:94:
                    dc:ea:72:3d:bf:fb:2f:bd:15:5b:89:ba:bb:d6:ed:
                    c6:c8:ba:6b:dd:d6:36:04:ff:08:ae:37:f6:eb:7a:
                    bb:72:3b:fe:f4:bf:cd:4b:a8:3b:04:ff:5b:f4:5a:
                    2d:5f:69:2b:3e:11:82:bd:6d:78:0d:d0:f1:f4:27:
                    9a:52:36:95:88:06:1a:a8:7e:bc:db:f6:f0:f4:d3:
                    70:43:7e:73:e7:01:8c:84:06:e1:9e:d0:9e:34:18:
                    33:67:de:a9:14:14:4b:fa:42:f5:73:4e:8c:33:41:
                    7c:cd:5a:91:0a:60:59:97:21:5c:68:c9:9f:56:63:
                    d2:06:1c:62:f3:73:ea:32:67:16:e7:d8:30:b6:7f:
                    6d:88:76:66:d1:d1:83:c1:ce:92:d6:f4:0f:d6:10:
                    2d:e4:79:ff:df:10:e3:15:26:57:f9:47:e7:2a:c7:
                    22:49:2d:aa:68:07:8d:88:63:da:71:74:96:3f:55:
                    bb:40:19:d4:44:49:4c:70:76:d3:d3:09:b6:dc:62:
                    ce:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:52:44:16:C6:5F:33:E9:60:98:7C:FA:33:65:D0:84:EC:5E:BC:9D
            X509v3 Authority Key Identifier:
                keyid:09:FC:07:7F:33:E3:AD:67:BF:14:77:55:16:7A:3A:D4:EA:CB:1E:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9161613/30992668E53911EB8A5B9271C4F9AE02/CfwHfzPjrWe_FHdVFno61OrLHnw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CfwHfzPjrWe_FHdVFno61OrLHnw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161613/30992668E53911EB8A5B9271C4F9AE02/81618D88E53E11EB9E429C44C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.50.147.0-116.50.148.255

    Signature Algorithm: sha256WithRSAEncryption
         ba:59:92:d0:ec:7d:16:58:52:ea:8f:a9:dc:44:d3:50:cc:02:
         59:fd:1a:4b:02:a3:a5:0f:07:4b:9e:88:b9:15:47:3f:96:bf:
         f1:a7:fe:52:bf:7d:63:07:15:96:c8:d9:02:29:3c:29:fe:15:
         06:95:b5:f1:b6:34:12:09:69:e7:28:59:4b:de:56:0b:6e:11:
         38:89:3d:df:d1:a9:3b:5d:ce:36:1c:96:58:2f:2d:5c:b0:68:
         6a:d9:41:47:ef:2e:0c:36:21:fa:63:20:a8:4b:9e:d7:f9:a2:
         01:a8:d1:77:0b:69:6f:db:3a:a2:6c:7e:e4:0b:7f:50:71:51:
         48:0c:f6:a7:a0:28:bf:c1:fd:fb:03:b2:f7:20:98:93:f7:14:
         59:66:c9:50:e6:3c:e9:48:6a:0c:91:52:96:b3:3f:bc:e0:7e:
         65:11:b2:6f:46:de:58:e6:3a:5d:d5:fd:37:2f:8c:04:35:7d:
         5a:f7:93:5a:94:ac:f4:2b:81:20:cc:ae:81:ca:fc:f9:e3:f8:
         8d:cb:11:ab:8d:d8:36:27:89:e3:ad:dc:19:2b:4b:d5:4d:90:
         05:e0:c8:65:c4:a9:f2:2c:cb:e2:5e:35:3f:76:b7:07:ff:89:
         90:9a:1b:03:ce:b8:c7:7a:e4:b1:54:f5:a2:83:20:bc:6e:8b:
         fe:c8:18:a9
-----BEGIN CERTIFICATE-----
MIIFeTCCBGGgAwIBAgICBNowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjE2MTMxMTAvBgNVBAUTKDA5RkMwNzdGMzNFM0FENjdCRjE0Nzc1NTE2N0EzQUQ0
RUFDQjFFN0MwHhcNMjQwMTI3MDEwMzM2WhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02NWI0NTY2OC1iZTY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwc6hOe9u/tmaUbAfNiG1C7EPw04L6QOyMcgqRdcOwxKi0r4SHPAFrizLsm0D
s0AwFSpS2jVjutc3OJTc6nI9v/svvRVbibq71u3GyLpr3dY2BP8Irjf263q7cjv+
9L/NS6g7BP9b9FotX2krPhGCvW14DdDx9CeaUjaViAYaqH682/bw9NNwQ35z5wGM
hAbhntCeNBgzZ96pFBRL+kL1c06MM0F8zVqRCmBZlyFcaMmfVmPSBhxi83PqMmcW
59gwtn9tiHZm0dGDwc6S1vQP1hAt5Hn/3xDjFSZX+UfnKsciSS2qaAeNiGPacXSW
P1W7QBnURElMcHbT0wm23GLOpwIDAQABo4ICnTCCApkwHQYDVR0OBBYEFORSRBbG
XzPpYJh8+jNl0ITsXrydMB8GA1UdIwQYMBaAFAn8B38z461nvxR3VRZ6OtTqyx58
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MTYxMy8zMDk5MjY2OEU1
MzkxMUVCOEE1QjkyNzFDNEY5QUUwMi9DZndIZnpQanJXZV9GSGRWRm5vNjFPckxI
bncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0Nmd0hmelBqcldlX0ZIZFZGbm82MU9yTEhudy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NjE2MTMvMzA5OTI2NjhFNTM5MTFFQjhBNUI5MjcxQzRGOUFFMDIvODE2MThEODhF
NTNFMTFFQjlFNDI5QzQ0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJwYIKwYBBQUHAQcBAf8E
GDAWMBQEAgABMA4wDAMEAHQykwMEAHQylDANBgkqhkiG9w0BAQsFAAOCAQEAulmS
0Ox9FlhS6o+p3ETTUMwCWf0aSwKjpQ8HS56IuRVHP5a/8af+Ur99YwcVlsjZAik8
Kf4VBpW18bY0Eglp5yhZS95WC24ROIk939GpO13ONhyWWC8tXLBoatlBR+8uDDYh
+mMgqEue1/miAajRdwtpb9s6omx+5At/UHFRSAz2p6Aov8H9+wOy9yCYk/cUWWbJ
UOY86UhqDJFSlrM/vOB+ZRGyb0beWOY6XdX9Ny+MBDV9WveTWpSs9CuBIMyugcr8
+eP4jcsRq43YNieJ463cGStL1U2QBeDIZcSp8izL4l41P3a3B/+JkJobA864x3rk
sVT1ooMgvG6L/sgYqQ==
-----END CERTIFICATE-----
Generated at Fri May 17 02:38:39 2024 by rpki-client on console-fra.rpki-client.org