Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/C19496A61E6711EFAF014F65C4F9AE02.roa
File:                     C19496A61E6711EFAF014F65C4F9AE02.roa (raw, json)
Hash identifier:          kKRUin9toL3FhdRop1EBVx+NPxGfcxspeQJwH5oUrOc=
Subject key identifier:   0A:DD:75:3A:EC:31:AE:75:F3:D0:49:B3:E2:8B:F0:E2:0E:11:DE:AE
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       19FA
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/C19496A61E6711EFAF014F65C4F9AE02.roa
Signing time:             Thu 30 May 2024 15:52:45 +0000
ROA not before:           Thu 30 May 2024 15:52:45 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     150593
IP address blocks:        160.19.35.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 05:23:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6650 (0x19fa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: May 30 15:52:45 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=6658a0cd-f95e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:e0:1e:02:9c:10:49:94:ec:af:e5:3a:55:f4:
                    87:20:81:7f:d0:d0:d8:c8:f2:66:77:b6:fb:f7:d3:
                    4f:ba:ee:ac:71:ec:ad:88:10:51:1e:88:72:a7:ae:
                    be:bc:6d:54:05:76:10:f2:12:32:02:ca:b8:17:5e:
                    e2:72:e6:ca:dc:9f:17:49:e6:ac:bc:eb:7d:f4:66:
                    30:30:d1:ad:f2:98:a0:df:13:4a:5c:a9:54:c9:2e:
                    5f:c0:9a:e3:bc:51:c0:10:66:ce:40:90:07:c7:1d:
                    b0:8d:99:89:39:a5:89:f9:4a:c4:af:09:ef:87:4b:
                    a2:40:13:91:44:d5:0c:95:19:23:75:d1:8f:77:2c:
                    c5:09:c2:e3:09:e1:18:fe:cc:1b:11:c8:f5:c2:9b:
                    a7:8d:d1:24:cc:a6:b6:65:ac:55:c4:70:fa:a2:16:
                    91:82:19:c8:05:ee:84:ef:d7:c1:8c:fd:3e:0c:84:
                    6c:5d:c7:ce:54:47:e1:98:6c:1d:8b:8c:3e:1f:d4:
                    43:8c:b4:17:b8:ea:65:84:c7:44:80:22:59:49:7b:
                    ac:9a:3e:3e:a2:13:c7:78:80:c9:81:2a:f3:10:35:
                    41:d2:59:5b:7b:66:98:58:7c:93:b9:21:8d:a3:38:
                    3a:fb:7f:76:99:a9:31:ac:f6:d4:37:d7:83:41:2e:
                    d5:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:DD:75:3A:EC:31:AE:75:F3:D0:49:B3:E2:8B:F0:E2:0E:11:DE:AE
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/C19496A61E6711EFAF014F65C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.19.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:64:c4:93:4d:0e:87:6d:39:ec:95:82:f3:12:26:4c:31:6d:
         03:ad:a6:06:f6:09:53:5b:2d:53:9f:74:80:e1:e4:69:7f:c2:
         72:c6:4b:c5:ff:f4:f7:94:ac:79:77:64:30:39:48:6f:b7:77:
         97:83:43:e6:da:3d:49:57:51:3b:52:19:77:e2:be:35:ab:72:
         b6:64:d2:78:62:50:cb:f8:3c:0a:b1:7f:34:3d:b7:9b:9a:b6:
         9b:22:2a:e6:34:a0:a9:f0:85:5d:f3:33:84:96:65:ba:62:c8:
         6b:50:c4:b1:03:ce:f8:e3:4d:1e:ac:4c:27:a8:38:4c:b8:d0:
         2d:83:e2:94:24:2b:a1:f5:ee:13:08:b3:e3:fb:91:08:88:f0:
         78:97:a9:ec:de:b3:e8:3c:6c:05:40:d7:dd:ec:b4:2e:56:e0:
         b3:7b:8c:0a:03:19:37:b4:f1:c2:93:8f:b4:77:95:79:a6:2a:
         83:0e:bb:53:b0:27:82:cb:fa:6b:d2:b5:d4:b9:28:f6:b9:c6:
         28:16:c1:14:a3:a9:2a:46:94:05:e5:d9:f9:27:6d:89:d3:b7:
         e7:ee:8a:81:9d:bf:ac:09:fe:8d:f9:5e:8c:02:9d:83:d9:7f:
         67:f2:b0:f2:fc:1d:aa:71:6d:6c:70:5e:21:62:af:cd:69:96:
         3f:8b:0c:0b
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICGfowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF
QkU2OTczRjkwHhcNMjQwNTMwMTU1MjQ1WhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NjU4YTBjZC1mOTVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAy+AeApwQSZTsr+U6VfSHIIF/0NDYyPJmd7b799NPuu6sceytiBBRHohyp66+
vG1UBXYQ8hIyAsq4F17icubK3J8XSeasvOt99GYwMNGt8pig3xNKXKlUyS5fwJrj
vFHAEGbOQJAHxx2wjZmJOaWJ+UrErwnvh0uiQBORRNUMlRkjddGPdyzFCcLjCeEY
/swbEcj1wpunjdEkzKa2ZaxVxHD6ohaRghnIBe6E79fBjP0+DIRsXcfOVEfhmGwd
i4w+H9RDjLQXuOplhMdEgCJZSXusmj4+ohPHeIDJgSrzEDVB0llbe2aYWHyTuSGN
ozg6+392makxrPbUN9eDQS7VZQIDAQABo4IClTCCApEwHQYDVR0OBBYEFArddTrs
Ma5189BJs+KL8OIOEd6uMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj
X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvQzE5NDk2QTYx
RTY3MTFFRkFGMDE0RjY1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBACgEyMwDQYJKoZIhvcNAQELBQADggEBAKBkxJNNDodtOeyV
gvMSJkwxbQOtpgb2CVNbLVOfdIDh5Gl/wnLGS8X/9PeUrHl3ZDA5SG+3d5eDQ+ba
PUlXUTtSGXfivjWrcrZk0nhiUMv4PAqxfzQ9t5uatpsiKuY0oKnwhV3zM4SWZbpi
yGtQxLEDzvjjTR6sTCeoOEy40C2D4pQkK6H17hMIs+P7kQiI8HiXqezes+g8bAVA
193stC5W4LN7jAoDGTe08cKTj7R3lXmmKoMOu1OwJ4LL+mvStdS5KPa5xigWwRSj
qSpGlAXl2fknbYnTt+fuioGdv6wJ/o35XowCnYPZf2fysPL8HapxbWxwXiFir81p
lj+LDAs=
-----END CERTIFICATE-----
Generated at Fri Nov 22 06:57:53 2024 by rpki-client on console-fra.rpki-client.org