Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9189BB3/A4478674DFCE11EB959B501FC4F9AE02/AB532852B38911ED825BDC70C4F9AE02.roa
File:                     AB532852B38911ED825BDC70C4F9AE02.roa (raw, json)
Hash identifier:          lI89gGOdI2wC7bAgpTLQT93m/SNfGU9hrbeNWg8jfRI=
Subject key identifier:   9A:0B:52:BF:9F:FC:EA:03:42:61:C7:CF:A8:0E:86:10:44:5E:F9:53
Certificate issuer:       /CN=A9189BB3/serialNumber=1528F63D28F3E1366902C6B64AF5866CCBA8DAC4
Certificate serial:       0449
Authority key identifier: 15:28:F6:3D:28:F3:E1:36:69:02:C6:B6:4A:F5:86:6C:CB:A8:DA:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9189BB3/A4478674DFCE11EB959B501FC4F9AE02/AB532852B38911ED825BDC70C4F9AE02.roa
Signing time:             Fri 01 Sep 2023 00:51:27 +0000
ROA not before:           Fri 01 Sep 2023 00:51:27 +0000
ROA not after:            Thu 31 Oct 2024 00:00:00 +0000
asID:                     7387
IP address blocks:        202.79.176.0/21 maxlen: 24
                          2401:7800::/32 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9189BB3/A4478674DFCE11EB959B501FC4F9AE02/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.crl
                          rsync://rpki.apnic.net/member_repository/A9189BB3/A4478674DFCE11EB959B501FC4F9AE02/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 May 2024 01:39:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1097 (0x449)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9189BB3/serialNumber=1528F63D28F3E1366902C6B64AF5866CCBA8DAC4
        Validity
            Not Before: Sep  1 00:51:27 2023 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=64f1358f-bebf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a1:18:7f:17:6a:89:0c:e6:0f:13:52:1c:8a:
                    57:7b:53:7a:74:56:ea:bd:a1:06:cb:05:82:80:fd:
                    bd:6d:1e:25:8f:3c:0d:88:7c:53:5a:ee:62:73:41:
                    e1:9e:bc:28:5a:32:44:5a:f0:f3:b3:40:46:35:4e:
                    55:0f:f9:61:4f:e7:4e:f8:bb:86:50:bf:03:c1:67:
                    86:9c:0f:91:3e:9c:59:10:33:1b:c0:fe:ae:a6:cc:
                    2f:e5:fe:8c:82:db:f6:b7:d9:9a:45:14:6d:bb:03:
                    b7:37:9f:e5:7e:8f:79:4d:fd:46:fa:d8:98:19:d1:
                    10:bf:f7:f6:0d:a8:51:6a:eb:8b:3a:d7:23:ae:36:
                    a2:9a:8b:ea:25:38:eb:1d:99:c4:9e:3f:9e:09:1b:
                    09:ee:22:24:5b:12:af:b3:93:2c:2e:37:ed:f5:88:
                    3b:e5:6a:1f:fe:08:56:bc:56:84:56:13:0c:96:20:
                    a0:bb:66:b6:9c:9b:56:47:65:14:96:94:9a:63:2a:
                    e1:f5:17:52:a6:46:bb:80:de:52:f6:67:b4:58:e9:
                    70:3a:3b:0c:3e:27:8e:25:90:f8:48:74:3d:0c:45:
                    9f:e4:d4:4f:5b:dc:3b:57:d8:1c:6d:c9:86:32:21:
                    01:82:62:4d:a3:14:24:bf:dd:17:4c:3f:cb:b2:a5:
                    62:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:0B:52:BF:9F:FC:EA:03:42:61:C7:CF:A8:0E:86:10:44:5E:F9:53
            X509v3 Authority Key Identifier:
                keyid:15:28:F6:3D:28:F3:E1:36:69:02:C6:B6:4A:F5:86:6C:CB:A8:DA:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9189BB3/A4478674DFCE11EB959B501FC4F9AE02/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189BB3/A4478674DFCE11EB959B501FC4F9AE02/AB532852B38911ED825BDC70C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.79.176.0/21
                IPv6:
                  2401:7800::/32

    Signature Algorithm: sha256WithRSAEncryption
         77:79:46:fd:45:72:a1:2c:db:83:9a:b0:77:63:4c:97:36:8b:
         19:f6:d1:28:a8:c6:bd:d2:74:32:c7:76:57:e8:9f:85:ee:f0:
         eb:39:a1:06:55:85:cd:a8:7c:dd:71:00:ab:15:c6:52:0b:14:
         cb:dc:ea:95:a6:5e:a1:31:4a:58:54:d8:0d:1b:b9:7f:4e:57:
         67:77:dc:a4:e5:ae:38:eb:0d:cb:f5:8b:9d:f9:a7:1b:cc:67:
         fb:ee:be:9f:8e:ea:a2:b1:7d:48:bb:cf:66:be:96:92:87:28:
         b5:17:7e:75:cb:ac:b2:76:a8:fc:d2:2b:19:f4:5b:c6:e7:9e:
         b2:0c:ab:0b:42:a1:4f:5d:d4:aa:07:08:e1:84:61:c8:a4:e4:
         c7:9b:47:a5:85:e2:be:71:af:59:f8:01:57:1f:b7:62:47:7a:
         69:32:0d:73:91:f9:17:af:1c:04:c8:b6:06:78:f2:4e:81:2b:
         5a:55:c7:35:92:9c:a9:93:44:2a:75:a1:18:cd:3f:d9:85:8c:
         7f:0f:fd:5e:5f:54:f5:23:37:01:40:48:c3:97:a3:94:1a:8e:
         95:47:6e:90:5f:2a:f8:8a:04:28:17:31:20:45:6f:9c:e3:da:
         a7:f0:27:63:6d:aa:3a:ca:b6:73:93:3e:fd:e1:02:71:57:78:
         d6:cf:79:c9
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICBEkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODlCQjMxMTAvBgNVBAUTKDE1MjhGNjNEMjhGM0UxMzY2OTAyQzZCNjRBRjU4NjZD
Q0JBOERBQzQwHhcNMjMwOTAxMDA1MTI3WhcNMjQxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NGYxMzU4Zi1iZWJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvaEYfxdqiQzmDxNSHIpXe1N6dFbqvaEGywWCgP29bR4ljzwNiHxTWu5ic0Hh
nrwoWjJEWvDzs0BGNU5VD/lhT+dO+LuGUL8DwWeGnA+RPpxZEDMbwP6upswv5f6M
gtv2t9maRRRtuwO3N5/lfo95Tf1G+tiYGdEQv/f2DahRauuLOtcjrjaimovqJTjr
HZnEnj+eCRsJ7iIkWxKvs5MsLjft9Yg75Wof/ghWvFaEVhMMliCgu2a2nJtWR2UU
lpSaYyrh9RdSpka7gN5S9me0WOlwOjsMPieOJZD4SHQ9DEWf5NRPW9w7V9gcbcmG
MiEBgmJNoxQkv90XTD/LsqVikQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFJoLUr+f
/OoDQmHHz6gOhhBEXvlTMB8GA1UdIwQYMBaAFBUo9j0o8+E2aQLGtkr1hmzLqNrE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OUJCMy9BNDQ3ODY3NERG
Q0UxMUVCOTU5QjUwMUZDNEY5QUUwMi9GU2oyUFNqejRUWnBBc2EyU3ZXR2JNdW8y
c1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZTajJQU2p6NFRacEFzYTJTdldHYk11bzJzUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODlCQjMvQTQ0Nzg2NzRERkNFMTFFQjk1OUI1MDFGQzRGOUFFMDIvQUI1MzI4NTJC
Mzg5MTFFRDgyNUJEQzcwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E
HzAdMAwEAgABMAYDBAPKT7AwDQQCAAIwBwMFACQBeAAwDQYJKoZIhvcNAQELBQAD
ggEBAHd5Rv1FcqEs24OasHdjTJc2ixn20Sioxr3SdDLHdlfon4Xu8Os5oQZVhc2o
fN1xAKsVxlILFMvc6pWmXqExSlhU2A0buX9OV2d33KTlrjjrDcv1i535pxvMZ/vu
vp+O6qKxfUi7z2a+lpKHKLUXfnXLrLJ2qPzSKxn0W8bnnrIMqwtCoU9d1KoHCOGE
Ycik5MebR6WF4r5xr1n4AVcft2JHemkyDXOR+RevHATItgZ48k6BK1pVxzWSnKmT
RCp1oRjNP9mFjH8P/V5fVPUjNwFASMOXo5QajpVHbpBfKviKBCgXMSBFb5zj2qfw
J2NtqjrKtnOTPv3hAnFXeNbPeck=
-----END CERTIFICATE-----
Generated at Fri May 17 03:06:32 2024 by rpki-client on console-ams.rpki-client.org