Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9164D60/9E0DE392B45F11EBB61B760CC4F9AE02/5D81DB7C51B611ECA674F080C4F9AE02.roa
File:                     5D81DB7C51B611ECA674F080C4F9AE02.roa (raw, json)
Hash identifier:          WQzxaQ3kywDSJ6U4w76PI5Nxq8SCREWk2pYuqNkI1BA=
Subject key identifier:   D9:51:65:BC:26:99:B3:8D:D0:D9:6F:A2:55:D4:AF:97:94:F1:BC:10
Certificate issuer:       /CN=A9164D60/serialNumber=E0BA228EAF9812F067D2FF3BF806895698C93977
Certificate serial:       04D8
Authority key identifier: E0:BA:22:8E:AF:98:12:F0:67:D2:FF:3B:F8:06:89:56:98:C9:39:77
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Loijq-YEvBn0v87-AaJVpjJOXc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9164D60/9E0DE392B45F11EBB61B760CC4F9AE02/5D81DB7C51B611ECA674F080C4F9AE02.roa
Signing time:             Fri 07 Jul 2023 00:20:17 +0000
ROA not before:           Fri 07 Jul 2023 00:20:17 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     55331
IP address blocks:        115.126.23.0/24 maxlen: 24
                          118.99.12.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9164D60/9E0DE392B45F11EBB61B760CC4F9AE02/4Loijq-YEvBn0v87-AaJVpjJOXc.crl
                          rsync://rpki.apnic.net/member_repository/A9164D60/9E0DE392B45F11EBB61B760CC4F9AE02/4Loijq-YEvBn0v87-AaJVpjJOXc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Loijq-YEvBn0v87-AaJVpjJOXc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 May 2024 00:51:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1240 (0x4d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9164D60/serialNumber=E0BA228EAF9812F067D2FF3BF806895698C93977
        Validity
            Not Before: Jul  7 00:20:17 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=64a75a41-5aa9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:37:54:64:00:21:b5:5f:79:a3:7a:ef:bb:db:
                    ae:dd:77:84:fc:79:5d:62:b3:64:b2:d5:af:99:50:
                    9a:2a:fe:24:67:4b:c2:33:de:84:8d:84:b0:b9:4d:
                    6b:c0:9c:dc:86:8d:32:d4:be:14:4e:08:02:02:19:
                    b8:a6:54:b8:d2:27:15:7e:85:ca:a5:d9:0b:ec:2b:
                    50:bb:db:c3:ad:2c:c5:2f:d7:55:74:c2:a5:a9:ee:
                    9f:ca:a3:e8:a4:94:da:9b:80:9e:a4:65:fd:29:96:
                    ea:02:ee:1d:82:a2:34:c1:bf:cf:02:2d:c5:66:86:
                    55:7b:a8:5c:59:4c:45:37:19:e0:73:0b:b4:2e:5c:
                    52:f3:c3:30:3f:5d:b4:e7:e8:18:4f:ad:ea:0e:ba:
                    a1:5d:94:9f:e7:a6:25:11:a0:47:61:a7:e4:a4:97:
                    fc:25:b6:6d:0f:41:50:2c:a2:86:f8:4a:0a:05:99:
                    31:33:61:16:fc:c6:0c:13:e4:6f:37:51:8a:10:07:
                    3a:29:12:8f:4e:1d:fd:2a:c2:28:88:a8:b6:fc:db:
                    54:34:b5:8c:34:3e:e5:16:19:7b:ea:3e:e7:4f:c3:
                    59:dd:a6:8d:db:98:65:c0:ca:1c:00:60:89:ae:3f:
                    98:14:10:03:11:a0:a3:48:b2:41:5f:fa:3f:7c:df:
                    75:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:51:65:BC:26:99:B3:8D:D0:D9:6F:A2:55:D4:AF:97:94:F1:BC:10
            X509v3 Authority Key Identifier:
                keyid:E0:BA:22:8E:AF:98:12:F0:67:D2:FF:3B:F8:06:89:56:98:C9:39:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9164D60/9E0DE392B45F11EBB61B760CC4F9AE02/4Loijq-YEvBn0v87-AaJVpjJOXc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Loijq-YEvBn0v87-AaJVpjJOXc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164D60/9E0DE392B45F11EBB61B760CC4F9AE02/5D81DB7C51B611ECA674F080C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.126.23.0/24
                  118.99.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:ce:88:d2:8e:ad:82:27:cc:09:1d:15:35:14:51:b1:e4:bd:
         6b:a9:24:0e:80:96:75:8f:ff:9e:32:ea:83:38:a0:fc:bd:be:
         05:37:b9:56:99:5c:e8:72:97:63:a9:5c:83:e2:28:c5:9e:fa:
         bb:7d:3a:75:95:50:62:2c:2d:54:2e:b2:95:1b:d5:49:cc:46:
         c1:ea:0a:58:2a:c1:51:f1:fb:36:b0:0b:bf:5a:ef:41:66:e3:
         a0:09:fd:be:db:f8:e4:f1:e2:5e:6f:5c:31:83:da:05:06:1c:
         80:34:99:a1:e3:00:c4:00:0b:ec:e8:33:d7:d3:ab:54:90:1c:
         09:4c:6b:8b:62:e8:d2:a2:61:5f:cf:13:e1:3c:22:82:64:a9:
         7e:9d:09:80:1a:8e:14:b0:17:7b:8f:b7:1e:31:7e:97:43:8b:
         24:e0:8e:b5:f1:ac:94:ef:68:47:11:64:3e:f5:18:ce:ee:b4:
         3d:cf:83:d9:f4:82:c2:b0:f5:7e:4b:73:1c:bb:89:5e:9d:5c:
         8e:72:6d:7f:48:1b:5d:60:a4:72:fb:e1:b6:02:63:ab:85:ea:
         02:d2:30:e0:9f:e8:fb:bf:08:0c:23:b0:d4:02:e0:9d:c2:d3:
         1b:fd:90:84:e8:16:b3:12:f4:1b:56:c0:c2:2b:87:a4:a9:87:
         6a:d9:47:63
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICBNgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjRENjAxMTAvBgNVBAUTKEUwQkEyMjhFQUY5ODEyRjA2N0QyRkYzQkY4MDY4OTU2
OThDOTM5NzcwHhcNMjMwNzA3MDAyMDE3WhcNMjQwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NGE3NWE0MS01YWE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxTdUZAAhtV95o3rvu9uu3XeE/HldYrNkstWvmVCaKv4kZ0vCM96EjYSwuU1r
wJzcho0y1L4UTggCAhm4plS40icVfoXKpdkL7CtQu9vDrSzFL9dVdMKlqe6fyqPo
pJTam4CepGX9KZbqAu4dgqI0wb/PAi3FZoZVe6hcWUxFNxngcwu0LlxS88MwP120
5+gYT63qDrqhXZSf56YlEaBHYafkpJf8JbZtD0FQLKKG+EoKBZkxM2EW/MYME+Rv
N1GKEAc6KRKPTh39KsIoiKi2/NtUNLWMND7lFhl76j7nT8NZ3aaN25hlwMocAGCJ
rj+YFBADEaCjSLJBX/o/fN91MQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFNlRZbwm
mbON0NlvolXUr5eU8bwQMB8GA1UdIwQYMBaAFOC6Io6vmBLwZ9L/O/gGiVaYyTl3
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NEQ2MC85RTBERTM5MkI0
NUYxMUVCQjYxQjc2MENDNEY5QUUwMi80TG9panEtWUV2Qm4wdjg3LUFhSlZwakpP
WGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzRMb2lqcS1ZRXZCbjB2ODctQWFKVnBqSk9YYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NjRENjAvOUUwREUzOTJCNDVGMTFFQkI2MUI3NjBDQzRGOUFFMDIvNUQ4MURCN0M1
MUI2MTFFQ0E2NzRGMDgwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBABzfhcDBAB2YwwwDQYJKoZIhvcNAQELBQADggEBACXOiNKO
rYInzAkdFTUUUbHkvWupJA6AlnWP/54y6oM4oPy9vgU3uVaZXOhyl2OpXIPiKMWe
+rt9OnWVUGIsLVQuspUb1UnMRsHqClgqwVHx+zawC79a70Fm46AJ/b7b+OTx4l5v
XDGD2gUGHIA0maHjAMQAC+zoM9fTq1SQHAlMa4ti6NKiYV/PE+E8IoJkqX6dCYAa
jhSwF3uPtx4xfpdDiyTgjrXxrJTvaEcRZD71GM7utD3Pg9n0gsKw9X5Lcxy7iV6d
XI5ybX9IG11gpHL74bYCY6uF6gLSMOCf6Pu/CAwjsNQC4J3C0xv9kIToFrMS9BtW
wMIrh6Sph2rZR2M=
-----END CERTIFICATE-----
Generated at Fri May 17 01:47:18 2024 by rpki-client on console-fra.rpki-client.org