Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91912DD/DB4A6CFC10D311EA9BD1A55DC4F9AE02/05BE20062C5811EAA90F4B0EC4F9AE02.roa
File:                     05BE20062C5811EAA90F4B0EC4F9AE02.roa (raw, json)
Hash identifier:          twaSTL512/Vc7JQABHPHi8T2tQ0EWjwmGAEgs0fpQUM=
Subject key identifier:   B9:66:0B:9B:E9:54:AD:08:4A:7C:44:93:99:26:D5:7A:0B:A8:56:82
Certificate issuer:       /CN=A91912DD/serialNumber=0519DE7B486603B7BA5B66DAB989203FDF2DB494
Certificate serial:       0B1A
Authority key identifier: 05:19:DE:7B:48:66:03:B7:BA:5B:66:DA:B9:89:20:3F:DF:2D:B4:94
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BRnee0hmA7e6W2bauYkgP98ttJQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91912DD/DB4A6CFC10D311EA9BD1A55DC4F9AE02/05BE20062C5811EAA90F4B0EC4F9AE02.roa
Signing time:             Sat 10 Feb 2024 17:14:54 +0000
ROA not before:           Sat 10 Feb 2024 17:14:54 +0000
ROA not after:            Mon 31 Mar 2025 00:00:00 +0000
asID:                     17804
IP address blocks:        185.19.104.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91912DD/DB4A6CFC10D311EA9BD1A55DC4F9AE02/BRnee0hmA7e6W2bauYkgP98ttJQ.crl
                          rsync://rpki.apnic.net/member_repository/A91912DD/DB4A6CFC10D311EA9BD1A55DC4F9AE02/BRnee0hmA7e6W2bauYkgP98ttJQ.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BRnee0hmA7e6W2bauYkgP98ttJQ.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:50:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2842 (0xb1a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91912DD/serialNumber=0519DE7B486603B7BA5B66DAB989203FDF2DB494
        Validity
            Not Before: Feb 10 17:14:54 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=65c7af0e-d880
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:1d:ba:44:53:a4:f6:a8:40:90:d8:cc:d4:b0:
                    3b:f6:b1:c3:d2:65:04:39:9d:72:ad:7b:fc:42:ed:
                    9a:56:4c:6a:3d:6e:d3:de:b3:2f:62:bd:39:90:b5:
                    72:68:92:89:96:8f:f1:81:46:3a:a0:be:34:3a:38:
                    bb:e0:54:68:56:07:de:9e:1d:1c:7e:c2:1a:65:e6:
                    d7:a8:bc:1c:64:f5:19:23:05:50:04:16:5c:89:c6:
                    2b:af:75:d2:7a:9e:93:9f:bf:c1:b4:a7:fd:a3:d3:
                    6f:af:11:eb:d5:c8:3a:06:04:82:3a:ea:4f:bb:98:
                    69:a7:ed:66:c2:d4:18:4b:28:8e:8c:a0:ff:d0:bc:
                    ca:0d:4d:d4:30:19:88:57:c1:35:60:21:a9:9b:43:
                    ef:9c:d0:c1:15:cd:69:ea:40:15:d6:17:cd:3f:09:
                    97:fb:2a:f2:43:66:71:fa:36:39:c5:2f:63:d7:63:
                    50:e8:e0:bd:52:e5:0c:c7:35:9b:87:45:87:51:1e:
                    2b:92:77:4f:40:98:b9:97:0a:0e:2f:17:d4:76:f8:
                    a3:db:f6:4d:85:43:42:84:3b:d7:37:d9:f3:b2:4b:
                    b5:cf:41:02:4e:e2:db:d2:26:4d:2f:68:94:ff:a0:
                    5b:32:4c:d2:18:ce:90:fe:95:06:82:5b:5c:69:61:
                    22:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:66:0B:9B:E9:54:AD:08:4A:7C:44:93:99:26:D5:7A:0B:A8:56:82
            X509v3 Authority Key Identifier:
                keyid:05:19:DE:7B:48:66:03:B7:BA:5B:66:DA:B9:89:20:3F:DF:2D:B4:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91912DD/DB4A6CFC10D311EA9BD1A55DC4F9AE02/BRnee0hmA7e6W2bauYkgP98ttJQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BRnee0hmA7e6W2bauYkgP98ttJQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91912DD/DB4A6CFC10D311EA9BD1A55DC4F9AE02/05BE20062C5811EAA90F4B0EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.19.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         40:d1:08:e9:0e:f0:fb:45:d7:ec:e1:ea:bc:d1:e9:36:bf:3c:
         1c:dc:08:7c:bf:fd:5d:45:05:e3:30:6a:e1:b6:9c:f4:2e:4b:
         6c:07:b3:c4:ad:71:bb:39:e5:bc:d4:0e:0a:7c:20:35:37:bc:
         ea:06:6b:f6:5e:d1:74:89:48:01:56:0e:82:b2:12:f3:27:e1:
         b8:41:4f:33:c6:56:fa:e2:01:82:e5:ea:f5:d8:83:ad:6f:81:
         60:42:81:94:ac:67:bf:bc:94:e6:95:50:b5:8e:16:5c:b8:2b:
         20:d9:6c:37:41:9b:f4:ac:5c:ad:43:c1:8f:b5:20:f1:9d:a9:
         be:19:5b:76:75:42:00:96:38:f2:81:05:71:7f:7a:3e:0d:1c:
         ab:18:d0:c1:6b:c7:16:26:94:50:c2:63:26:41:90:b6:81:4b:
         8d:d7:15:f6:5e:be:f3:66:db:15:73:5d:61:ad:ec:91:cd:f6:
         2c:3d:5f:88:59:13:f4:59:99:6f:b6:07:df:55:9f:3f:ee:da:
         80:74:b9:f0:4e:7b:12:52:8e:63:2a:0d:da:a1:5a:3b:27:49:
         16:b7:bb:00:e6:c9:2b:51:a2:41:61:8a:d1:a8:13:04:eb:a7:
         88:4b:e7:29:5f:f5:c2:f0:1c:5d:68:7a:1f:06:8f:29:03:6f:
         27:12:fb:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:50:07 2024 by rpki-client on console-ams.rpki-client.org