Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/9E189DF2C4F411E9829EC138C4F9AE02.roa
File:                     9E189DF2C4F411E9829EC138C4F9AE02.roa (raw, json)
Hash identifier:          UzYyhsQyhxx/LXJ73f8+axAlmCZjG58VCgB5sNPkiPo=
Subject key identifier:   6B:4C:88:8A:2E:E5:DD:D9:02:55:E3:D0:14:0A:29:BA:9E:59:40:62
Certificate issuer:       /CN=A9186214/serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
Certificate serial:       341F
Authority key identifier: F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/9E189DF2C4F411E9829EC138C4F9AE02.roa
Signing time:             Tue 30 Jul 2024 16:02:49 +0000
ROA not before:           Tue 30 Jul 2024 16:02:49 +0000
ROA not after:            Sun 02 Mar 2025 00:00:00 +0000
asID:                     45705
IP address blocks:        175.111.88.0/22 maxlen: 24
                          202.43.92.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl
                          rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 20:13:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13343 (0x341f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186214/serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
        Validity
            Not Before: Jul 30 16:02:49 2024 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=66a90ea9-c6e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:72:01:60:e3:d3:b1:43:fd:f1:91:33:67:11:
                    a6:12:57:44:6d:71:48:a4:ab:5d:1d:6f:e5:d6:ea:
                    4e:b4:be:ec:c5:10:17:4e:48:f6:bc:42:ba:1f:91:
                    94:f7:f1:c8:4b:06:08:4b:dc:73:cb:b7:10:2e:fc:
                    fc:fd:2d:fd:0e:4f:da:19:9f:a4:b7:c7:e8:21:50:
                    70:8a:27:5d:6b:87:a6:c2:a3:fc:e5:ea:05:3b:4d:
                    6a:0c:1a:35:99:9e:73:3d:64:4b:e2:f9:48:97:a7:
                    0d:8f:76:3f:12:d4:92:b6:ac:14:53:16:d0:74:45:
                    a5:3f:58:6b:5d:9a:e6:7f:7c:ed:d6:38:af:4a:01:
                    b9:10:bd:95:a8:1a:cf:e3:0d:aa:3d:2d:68:a7:4f:
                    94:4d:35:65:fd:91:79:dc:8a:ee:f6:26:14:ef:58:
                    6e:33:24:33:d1:92:83:18:d3:ae:1b:ac:74:a5:5e:
                    ef:2f:a3:8f:89:67:79:b0:da:1d:3c:1e:e2:d6:43:
                    57:5b:d4:b8:44:5a:50:03:fa:b4:d6:30:30:07:c3:
                    f9:bc:dd:8a:05:98:6b:5c:bd:dc:1c:0d:94:3d:ae:
                    57:3c:b1:d0:e2:8c:2e:97:8f:d1:32:2c:3c:12:b7:
                    72:2c:5f:b0:a0:39:47:e5:2e:83:c5:3f:e4:23:fc:
                    49:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:4C:88:8A:2E:E5:DD:D9:02:55:E3:D0:14:0A:29:BA:9E:59:40:62
            X509v3 Authority Key Identifier:
                keyid:F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/9E189DF2C4F411E9829EC138C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.111.88.0/22
                  202.43.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9e:a2:6d:47:2f:e7:66:58:8a:28:2b:18:39:72:e8:cb:b2:de:
         9e:13:99:12:5b:7b:44:b9:6e:e9:e1:b4:dc:ab:0c:24:cb:05:
         d2:9d:56:7e:f7:be:35:3d:8d:81:75:6d:72:b0:79:45:0c:0f:
         1e:fb:17:ea:63:48:01:49:50:d1:f5:ca:29:a5:cf:f6:08:a2:
         e6:36:17:72:7a:eb:b8:8e:0c:aa:42:ba:75:bd:95:20:13:ae:
         3e:1d:91:a7:a9:e1:a1:0b:2a:82:e3:12:fb:e1:37:f7:03:22:
         9c:be:6e:7a:27:62:7f:4e:e9:5b:3e:8b:b9:69:4f:90:34:d6:
         82:04:2a:10:3a:a9:ee:59:a4:7d:82:0c:4c:4e:12:ca:86:3b:
         cd:e9:27:e7:8f:8b:bf:11:73:12:5d:49:0b:6b:53:de:3c:69:
         bc:8e:58:98:14:94:c0:aa:04:b1:66:a1:22:99:ed:6d:98:c7:
         33:e2:bb:35:c0:03:87:36:f2:12:9b:a8:74:b1:03:44:35:66:
         4f:0d:09:81:a7:29:22:e5:ed:94:c7:9f:1c:09:d4:d8:61:bf:
         0c:a9:9f:a6:ec:ca:f1:29:0b:ae:76:89:5b:68:c8:3a:16:70:
         26:cc:61:f4:ff:d7:89:72:db:58:42:b6:cd:89:13:8c:de:96:
         1f:b1:db:12
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICNB8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODYyMTQxMTAvBgNVBAUTKEYzREI5RjE2MjAwOEJENjY2Q0JGOEM5OTYwNzgxNENG
QUIyNEQ3RTcwHhcNMjQwNzMwMTYwMjQ5WhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmE5MGVhOS1jNmU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAz3IBYOPTsUP98ZEzZxGmEldEbXFIpKtdHW/l1upOtL7sxRAXTkj2vEK6H5GU
9/HISwYIS9xzy7cQLvz8/S39Dk/aGZ+kt8foIVBwiidda4emwqP85eoFO01qDBo1
mZ5zPWRL4vlIl6cNj3Y/EtSStqwUUxbQdEWlP1hrXZrmf3zt1jivSgG5EL2VqBrP
4w2qPS1op0+UTTVl/ZF53Iru9iYU71huMyQz0ZKDGNOuG6x0pV7vL6OPiWd5sNod
PB7i1kNXW9S4RFpQA/q01jAwB8P5vN2KBZhrXL3cHA2UPa5XPLHQ4owul4/RMiw8
ErdyLF+woDlH5S6DxT/kI/xJLwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFGtMiIou
5d3ZAlXj0BQKKbqeWUBiMB8GA1UdIwQYMBaAFPPbnxYgCL1mbL+MmWB4FM+rJNfn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjIxNC9DNjVENTM2NDMz
MUExMUU0QUYyQUIzN0NDNEY5QUUwMi84OXVmRmlBSXZXWnN2NHlaWUhnVXo2c2sx
LWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzg5dWZGaUFJdldac3Y0eVpZSGdVejZzazEtYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODYyMTQvQzY1RDUzNjQzMzFBMTFFNEFGMkFCMzdDQzRGOUFFMDIvOUUxODlERjJD
NEY0MTFFOTgyOUVDMTM4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBAKvb1gDBALKK1wwDQYJKoZIhvcNAQELBQADggEBAJ6ibUcv
52ZYiigrGDly6Muy3p4TmRJbe0S5bunhtNyrDCTLBdKdVn73vjU9jYF1bXKweUUM
Dx77F+pjSAFJUNH1yimlz/YIouY2F3J667iODKpCunW9lSATrj4dkaep4aELKoLj
EvvhN/cDIpy+bnonYn9O6Vs+i7lpT5A01oIEKhA6qe5ZpH2CDExOEsqGO83pJ+eP
i78RcxJdSQtrU948abyOWJgUlMCqBLFmoSKZ7W2YxzPiuzXAA4c28hKbqHSxA0Q1
Zk8NCYGnKSLl7ZTHnxwJ1Nhhvwypn6bsyvEpC652iVtoyDoWcCbMYfT/14ly21hC
ts2JE4zelh+x2xI=
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:10:21 2024 by rpki-client on console-fra.rpki-client.org