Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9183898/2091B01AB83811EB9D7EA24FC4F9AE02/76C5842CC3DD11EDAAED714EC4F9AE02.roa
File:                     76C5842CC3DD11EDAAED714EC4F9AE02.roa (raw, json)
Hash identifier:          lIjcqd286hVmP0gmWFuL30xCtnneoUBSKf5zlGyFpHM=
Subject key identifier:   0A:3F:70:43:51:29:4C:46:D9:78:45:05:01:31:6B:35:83:1E:E8:0B
Certificate issuer:       /CN=A9183898/serialNumber=B47674313B943EC6CBEF7562BD1970D5C733EA5B
Certificate serial:       054E
Authority key identifier: B4:76:74:31:3B:94:3E:C6:CB:EF:75:62:BD:19:70:D5:C7:33:EA:5B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tHZ0MTuUPsbL73VivRlw1ccz6ls.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9183898/2091B01AB83811EB9D7EA24FC4F9AE02/76C5842CC3DD11EDAAED714EC4F9AE02.roa
Signing time:             Wed 31 Jul 2024 00:22:25 +0000
ROA not before:           Wed 31 Jul 2024 00:22:25 +0000
ROA not after:            Tue 30 Sep 2025 00:00:00 +0000
asID:                     38829
IP address blocks:        118.127.168.0/21 maxlen: 24
                          118.127.176.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9183898/2091B01AB83811EB9D7EA24FC4F9AE02/tHZ0MTuUPsbL73VivRlw1ccz6ls.crl
                          rsync://rpki.apnic.net/member_repository/A9183898/2091B01AB83811EB9D7EA24FC4F9AE02/tHZ0MTuUPsbL73VivRlw1ccz6ls.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tHZ0MTuUPsbL73VivRlw1ccz6ls.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1358 (0x54e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9183898/serialNumber=B47674313B943EC6CBEF7562BD1970D5C733EA5B
        Validity
            Not Before: Jul 31 00:22:25 2024 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=66a983c1-006c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:39:0d:cb:71:7f:83:21:39:10:b1:f3:50:8c:
                    d6:29:a4:a3:a8:6d:24:ff:11:60:fd:77:16:0f:de:
                    3b:c1:88:cc:e2:27:d9:b2:95:7e:b5:f1:b7:29:9b:
                    4a:dc:ae:6d:f1:a7:a9:a2:85:91:0d:7a:c5:ab:d6:
                    56:77:ce:e0:30:6c:6e:79:bc:95:f6:14:b2:2e:0b:
                    09:53:2f:f2:3b:d0:55:92:fe:3f:ab:04:4f:f9:7e:
                    07:48:ca:07:05:d1:89:c7:6c:48:55:93:b9:c2:40:
                    31:85:1d:51:b5:4a:ad:22:81:c8:ba:05:29:8f:7b:
                    37:48:53:57:f4:35:8c:cf:52:16:ef:fd:44:4d:2c:
                    e9:f2:52:bc:b0:99:8a:3a:93:da:41:a7:d1:df:bb:
                    11:f9:6f:0a:b7:31:4e:cb:bc:fc:78:14:4a:83:9b:
                    49:da:26:e0:4d:0b:d4:b7:f9:54:2e:11:bc:38:a9:
                    cd:fe:62:a6:ba:f8:2f:d4:98:b7:ea:6c:e4:45:56:
                    63:a6:51:c3:e3:49:f8:ea:a0:30:fc:c7:03:d8:cd:
                    43:68:06:6f:dd:d5:d0:f2:b2:96:ca:b5:8c:a8:d1:
                    50:96:52:bc:b3:5b:9c:05:49:e1:68:1a:9a:e9:11:
                    0d:a4:3e:76:94:2f:c1:ba:32:43:a1:0b:88:5d:d3:
                    0d:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:3F:70:43:51:29:4C:46:D9:78:45:05:01:31:6B:35:83:1E:E8:0B
            X509v3 Authority Key Identifier:
                keyid:B4:76:74:31:3B:94:3E:C6:CB:EF:75:62:BD:19:70:D5:C7:33:EA:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9183898/2091B01AB83811EB9D7EA24FC4F9AE02/tHZ0MTuUPsbL73VivRlw1ccz6ls.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tHZ0MTuUPsbL73VivRlw1ccz6ls.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183898/2091B01AB83811EB9D7EA24FC4F9AE02/76C5842CC3DD11EDAAED714EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.127.168.0-118.127.191.255

    Signature Algorithm: sha256WithRSAEncryption
         07:a0:16:8c:67:67:e1:95:64:02:c2:73:8d:5d:35:10:6c:5c:
         5d:73:0e:86:28:3a:5a:43:df:33:c9:32:54:86:51:34:b0:5f:
         b8:95:65:61:72:43:7d:e8:cb:a9:88:af:a4:a0:14:af:42:88:
         4e:a1:1a:e6:4d:b9:a7:f3:16:2d:f3:fd:e5:cb:8f:ec:22:a2:
         88:a2:47:e8:a6:39:87:d1:be:38:1b:77:14:72:58:22:7a:ac:
         49:34:27:09:d5:18:44:46:f9:95:fb:cd:96:3e:16:f1:8e:8f:
         67:36:1a:29:93:9c:11:03:cc:46:0b:9d:75:ee:70:68:5e:1c:
         30:c9:bf:c4:6a:86:ee:99:81:97:9d:79:bf:2b:8e:4c:d7:8a:
         66:0f:c4:c2:9d:24:2a:e7:38:28:ec:84:74:5e:bf:cc:24:00:
         5f:d3:ff:4e:08:29:60:a0:2b:aa:4d:3e:df:3a:c0:87:12:13:
         87:15:60:14:bf:49:12:89:43:c2:0a:6a:62:ad:1b:55:b0:8f:
         91:37:b1:39:fa:f1:45:99:fb:1f:c8:93:de:d8:b5:93:52:92:
         eb:96:82:00:01:33:2e:11:93:d8:ec:17:7d:8f:29:3b:29:ef:
         74:6e:0c:10:c7:a7:19:b7:44:69:da:4d:06:23:7d:20:a7:f4:
         61:a6:63:c5
-----BEGIN CERTIFICATE-----
MIIFeTCCBGGgAwIBAgICBU4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODM4OTgxMTAvBgNVBAUTKEI0NzY3NDMxM0I5NDNFQzZDQkVGNzU2MkJEMTk3MEQ1
QzczM0VBNUIwHhcNMjQwNzMxMDAyMjI1WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmE5ODNjMS0wMDZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxjkNy3F/gyE5ELHzUIzWKaSjqG0k/xFg/XcWD947wYjM4ifZspV+tfG3KZtK
3K5t8aepooWRDXrFq9ZWd87gMGxuebyV9hSyLgsJUy/yO9BVkv4/qwRP+X4HSMoH
BdGJx2xIVZO5wkAxhR1RtUqtIoHIugUpj3s3SFNX9DWMz1IW7/1ETSzp8lK8sJmK
OpPaQafR37sR+W8KtzFOy7z8eBRKg5tJ2ibgTQvUt/lULhG8OKnN/mKmuvgv1Ji3
6mzkRVZjplHD40n46qAw/McD2M1DaAZv3dXQ8rKWyrWMqNFQllK8s1ucBUnhaBqa
6RENpD52lC/BujJDoQuIXdMNoQIDAQABo4ICnTCCApkwHQYDVR0OBBYEFAo/cENR
KUxG2XhFBQExazWDHugLMB8GA1UdIwQYMBaAFLR2dDE7lD7Gy+91Yr0ZcNXHM+pb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Mzg5OC8yMDkxQjAxQUI4
MzgxMUVCOUQ3RUEyNEZDNEY5QUUwMi90SFowTVR1VVBzYkw3M1ZpdlJsdzFjY3o2
bHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3RIWjBNVHVVUHNiTDczVml2Umx3MWNjejZscy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODM4OTgvMjA5MUIwMUFCODM4MTFFQjlEN0VBMjRGQzRGOUFFMDIvNzZDNTg0MkND
M0REMTFFREFBRUQ3MTRFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJwYIKwYBBQUHAQcBAf8E
GDAWMBQEAgABMA4wDAMEA3Z/qAMEBnZ/gDANBgkqhkiG9w0BAQsFAAOCAQEAB6AW
jGdn4ZVkAsJzjV01EGxcXXMOhig6WkPfM8kyVIZRNLBfuJVlYXJDfejLqYivpKAU
r0KITqEa5k25p/MWLfP95cuP7CKiiKJH6KY5h9G+OBt3FHJYInqsSTQnCdUYREb5
lfvNlj4W8Y6PZzYaKZOcEQPMRgudde5waF4cMMm/xGqG7pmBl515vyuOTNeKZg/E
wp0kKuc4KOyEdF6/zCQAX9P/TggpYKArqk0+3zrAhxIThxVgFL9JEolDwgpqYq0b
VbCPkTexOfrxRZn7H8iT3ti1k1KS65aCAAEzLhGT2OwXfY8pOynvdG4MEMenGbdE
adpNBiN9IKf0YaZjxQ==
-----END CERTIFICATE-----
Generated at Fri Nov 22 23:39:30 2024 by rpki-client on console-fra.rpki-client.org