Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/671FF9F6943011EA8988B883C4F9AE02.roa
File:                     671FF9F6943011EA8988B883C4F9AE02.roa (raw, json)
Hash identifier:          KyoKzrfAU3BX3yBXxWgeIjgt0hT8g5IZj1NXfChymq4=
Subject key identifier:   9B:96:67:80:04:3D:2F:78:B1:F7:ED:16:E8:4A:A0:A3:D2:1F:4F:A5
Certificate issuer:       /CN=A9165568/serialNumber=67097E492F73D6DBD31FA016A2D5B5B86A9B3FD8
Certificate serial:       1BD4
Authority key identifier: 67:09:7E:49:2F:73:D6:DB:D3:1F:A0:16:A2:D5:B5:B8:6A:9B:3F:D8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/671FF9F6943011EA8988B883C4F9AE02.roa
Signing time:             Thu 29 Feb 2024 13:15:13 +0000
ROA not before:           Thu 29 Feb 2024 13:15:13 +0000
ROA not after:            Fri 31 Jan 2025 00:00:00 +0000
asID:                     45669
IP address blocks:        119.30.116.0/22 maxlen: 24
                          119.73.65.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.crl
                          rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 13:40:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7124 (0x1bd4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9165568/serialNumber=67097E492F73D6DBD31FA016A2D5B5B86A9B3FD8
        Validity
            Not Before: Feb 29 13:15:13 2024 GMT
            Not After : Jan 31 00:00:00 2025 GMT
        Subject: CN=65e08361-a0ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:3c:79:f1:5e:7f:d3:47:0b:1b:23:21:b1:43:
                    a6:36:96:b0:4a:c5:0c:5a:70:c9:70:34:1f:6b:a6:
                    52:f4:a9:ac:5a:63:b0:42:79:2f:47:1d:84:4f:27:
                    1a:dc:81:11:99:08:cd:56:6a:73:6b:e0:ad:49:20:
                    58:dc:ef:d2:53:c0:f9:c8:7e:6f:4f:db:57:65:59:
                    6d:b6:6f:13:d3:e0:c5:b2:50:e4:39:4d:72:5f:61:
                    61:17:2c:df:62:2d:85:81:2d:45:d5:e4:b4:60:3f:
                    75:ca:0f:12:51:3d:b6:f6:5e:cf:92:e9:eb:0f:ee:
                    12:03:a5:31:ec:f7:85:78:33:3a:9a:6d:80:9c:bf:
                    04:29:45:60:f3:70:63:3c:4e:ca:8e:03:0a:83:18:
                    fc:ff:92:8b:0e:1c:43:e1:7b:82:44:24:25:37:e0:
                    3b:22:b3:c6:e2:30:95:ee:be:4f:a3:0b:ab:18:10:
                    54:7f:8c:60:68:52:1c:a3:98:14:93:26:4c:e5:0b:
                    c5:78:1c:56:bf:77:8a:2a:f8:1f:d9:55:6c:50:f9:
                    83:b5:a5:5b:5d:08:77:29:01:8d:a1:20:27:a3:ca:
                    b7:d6:21:5f:22:f7:06:8f:fe:78:72:36:00:2f:9e:
                    aa:6c:ba:3c:db:dc:fc:98:20:af:1a:2d:67:24:a3:
                    b4:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:96:67:80:04:3D:2F:78:B1:F7:ED:16:E8:4A:A0:A3:D2:1F:4F:A5
            X509v3 Authority Key Identifier:
                keyid:67:09:7E:49:2F:73:D6:DB:D3:1F:A0:16:A2:D5:B5:B8:6A:9B:3F:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/671FF9F6943011EA8988B883C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.30.116.0/22
                  119.73.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:d4:25:8f:cf:55:53:ca:b7:39:2e:e5:a1:53:ab:a3:e1:99:
         2d:9a:7d:eb:4a:cb:34:1f:ce:05:d4:e8:2d:a5:fb:94:ca:2d:
         17:15:25:51:d4:db:52:f2:fe:94:f3:ea:3b:5e:02:de:ad:64:
         1c:9e:d6:0f:db:88:c7:08:a7:48:de:c5:41:79:95:13:fb:50:
         8b:5a:9f:f2:0f:66:c4:be:4a:61:ec:3e:89:43:78:0d:3b:2c:
         8e:7b:61:ab:0c:13:ef:21:ae:6a:ca:6e:89:02:12:0f:b2:1c:
         44:5a:16:e1:c1:7e:d9:c8:ac:01:ba:58:ce:c8:3c:1b:df:f8:
         81:51:69:7f:8d:93:61:63:35:d1:70:f9:15:1d:70:26:f4:12:
         c0:dc:ec:12:65:64:95:79:7b:ca:9b:f7:c8:d8:0d:cf:fb:29:
         ed:f5:a8:48:d3:61:a9:ae:2b:33:f1:1f:19:25:d5:49:65:fe:
         a1:83:dc:f7:93:e0:b2:28:68:7b:06:47:6f:65:78:78:4f:69:
         64:04:f0:f2:3a:7d:d3:9b:26:08:bc:9e:cf:da:f7:cd:7f:7c:
         52:b1:f1:63:ce:39:0e:6e:0f:97:66:c4:54:19:43:38:54:68:
         f3:41:7f:cf:16:c2:3d:e5:b6:52:fa:e3:e3:46:75:31:70:fd:
         f4:da:af:12
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICG9QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjU1NjgxMTAvBgNVBAUTKDY3MDk3RTQ5MkY3M0Q2REJEMzFGQTAxNkEyRDVCNUI4
NkE5QjNGRDgwHhcNMjQwMjI5MTMxNTEzWhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NWUwODM2MS1hMGFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxjx58V5/00cLGyMhsUOmNpawSsUMWnDJcDQfa6ZS9KmsWmOwQnkvRx2ETyca
3IERmQjNVmpza+CtSSBY3O/SU8D5yH5vT9tXZVlttm8T0+DFslDkOU1yX2FhFyzf
Yi2FgS1F1eS0YD91yg8SUT229l7PkunrD+4SA6Ux7PeFeDM6mm2AnL8EKUVg83Bj
PE7KjgMKgxj8/5KLDhxD4XuCRCQlN+A7IrPG4jCV7r5PowurGBBUf4xgaFIco5gU
kyZM5QvFeBxWv3eKKvgf2VVsUPmDtaVbXQh3KQGNoSAno8q31iFfIvcGj/54cjYA
L56qbLo829z8mCCvGi1nJKO0qQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFJuWZ4AE
PS94sfftFuhKoKPSH0+lMB8GA1UdIwQYMBaAFGcJfkkvc9bb0x+gFqLVtbhqmz/Y
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTU2OC9CRDFBOTVEMjFE
ODcxMUUyOUJFM0U2REYwOEIwMkNEMi9ad2wtU1M5ejF0dlRINkFXb3RXMXVHcWJQ
OWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1p3bC1TUzl6MXR2VEg2QVdvdFcxdUdxYlA5Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NjU1NjgvQkQxQTk1RDIxRDg3MTFFMjlCRTNFNkRGMDhCMDJDRDIvNjcxRkY5RjY5
NDMwMTFFQTg5ODhCODgzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBAJ3HnQDBAB3SUEwDQYJKoZIhvcNAQELBQADggEBAHzUJY/P
VVPKtzku5aFTq6PhmS2afetKyzQfzgXU6C2l+5TKLRcVJVHU21Ly/pTz6jteAt6t
ZBye1g/biMcIp0jexUF5lRP7UItan/IPZsS+SmHsPolDeA07LI57YasME+8hrmrK
bokCEg+yHERaFuHBftnIrAG6WM7IPBvf+IFRaX+Nk2FjNdFw+RUdcCb0EsDc7BJl
ZJV5e8qb98jYDc/7Ke31qEjTYamuKzPxHxkl1Ull/qGD3PeT4LIoaHsGR29leHhP
aWQE8PI6fdObJgi8ns/a981/fFKx8WPOOQ5uD5dmxFQZQzhUaPNBf88Wwj3ltlL6
4+NGdTFw/fTarxI=
-----END CERTIFICATE-----
Generated at Tue May 28 15:19:43 2024 by rpki-client on console-ams.rpki-client.org