Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9193045/BFADC6109F2911EC9C2D6785C4F9AE02/1F26C9129F3811ECBB84BD76C4F9AE02.roa
File:                     1F26C9129F3811ECBB84BD76C4F9AE02.roa (raw, json)
Hash identifier:          MGQuIf7b8pEJs0FKmZr0E0D/ZU/TElOpmNPZAx/GWO8=
Subject key identifier:   3D:7A:2A:DF:65:50:02:08:84:B0:55:22:F4:23:A6:BF:11:A7:A7:CD
Certificate issuer:       /CN=A9193045/serialNumber=66E85461BB352A498DB55703646305CA37E74FB4
Certificate serial:       031E
Authority key identifier: 66:E8:54:61:BB:35:2A:49:8D:B5:57:03:64:63:05:CA:37:E7:4F:B4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZuhUYbs1KkmNtVcDZGMFyjfnT7Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9193045/BFADC6109F2911EC9C2D6785C4F9AE02/1F26C9129F3811ECBB84BD76C4F9AE02.roa
Signing time:             Sat 07 Sep 2024 02:35:06 +0000
ROA not before:           Sat 07 Sep 2024 02:35:05 +0000
ROA not after:            Mon 01 Dec 2025 00:00:00 +0000
asID:                     45345
IP address blocks:        43.245.212.0/23 maxlen: 24
                          103.29.152.0/24 maxlen: 24
                          2401:af00::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9193045/BFADC6109F2911EC9C2D6785C4F9AE02/ZuhUYbs1KkmNtVcDZGMFyjfnT7Q.crl
                          rsync://rpki.apnic.net/member_repository/A9193045/BFADC6109F2911EC9C2D6785C4F9AE02/ZuhUYbs1KkmNtVcDZGMFyjfnT7Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZuhUYbs1KkmNtVcDZGMFyjfnT7Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 798 (0x31e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9193045/serialNumber=66E85461BB352A498DB55703646305CA37E74FB4
        Validity
            Not Before: Sep  7 02:35:05 2024 GMT
            Not After : Dec  1 00:00:00 2025 GMT
        Subject: CN=66dbbbd9-55e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:2a:32:e0:c0:70:81:7b:ff:bc:44:5d:7a:d1:
                    e9:bf:45:37:c1:6c:59:3e:5f:70:0c:f0:9b:85:9e:
                    96:b1:17:7b:d7:13:08:ae:fc:1b:3a:e3:99:05:74:
                    ab:b9:cd:01:8f:5b:4e:5f:8b:71:ea:2c:36:51:02:
                    7a:10:66:ed:37:ff:7d:ad:82:ab:b6:8a:69:51:14:
                    ad:be:80:03:0a:a9:39:2c:6b:8f:27:68:8d:de:18:
                    bf:5a:87:82:4f:b1:3d:6b:58:39:3e:2f:b0:60:ea:
                    89:e2:72:64:b3:16:bc:e6:a4:df:56:a2:a9:ae:66:
                    9a:0a:27:64:7e:33:ab:2c:50:61:1f:1f:fa:b7:dd:
                    d6:b7:35:63:c7:a6:2f:ba:06:3b:2f:2d:19:36:2c:
                    3e:4b:7a:18:87:b0:db:74:31:9f:7f:e0:d8:04:e5:
                    80:af:2d:a8:cb:ad:31:f4:e9:13:23:7e:03:53:dd:
                    a9:65:0a:af:de:27:34:98:be:3b:4b:94:e3:cc:d3:
                    de:a1:7a:3c:89:d4:05:9f:51:d8:11:40:dc:76:d9:
                    d1:9e:b7:7f:93:01:28:73:59:8a:e3:45:d8:98:bf:
                    12:ba:8c:e6:90:e7:a4:67:ff:b2:4c:4c:af:0a:19:
                    24:18:6b:3b:96:2f:45:8a:7a:e7:b5:ff:3b:91:e0:
                    84:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:7A:2A:DF:65:50:02:08:84:B0:55:22:F4:23:A6:BF:11:A7:A7:CD
            X509v3 Authority Key Identifier:
                keyid:66:E8:54:61:BB:35:2A:49:8D:B5:57:03:64:63:05:CA:37:E7:4F:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9193045/BFADC6109F2911EC9C2D6785C4F9AE02/ZuhUYbs1KkmNtVcDZGMFyjfnT7Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZuhUYbs1KkmNtVcDZGMFyjfnT7Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193045/BFADC6109F2911EC9C2D6785C4F9AE02/1F26C9129F3811ECBB84BD76C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.245.212.0/23
                  103.29.152.0/24
                IPv6:
                  2401:af00::/32

    Signature Algorithm: sha256WithRSAEncryption
         a1:7e:d0:a5:98:7c:9b:a1:33:8a:0b:89:51:4a:ad:0e:e3:fd:
         c3:a5:40:ea:9a:cc:c0:92:84:f1:75:47:4a:01:d5:7d:45:b3:
         fe:21:49:31:93:ca:7a:6a:36:24:3b:29:94:c9:7d:2f:36:ca:
         0f:35:58:3e:98:ab:28:28:38:4e:26:86:5a:b4:1a:ac:e9:05:
         19:39:8b:de:3b:e5:c6:d6:74:c4:d3:29:c8:ff:25:c4:1b:6e:
         52:85:5d:48:53:73:92:69:b4:af:0a:e8:60:ba:e5:db:11:28:
         d3:4c:16:48:0e:3c:64:bb:56:77:5b:68:58:18:b8:4f:b5:d9:
         94:2a:9a:ed:63:66:d1:ff:1d:36:f9:83:82:df:6a:db:2b:ba:
         12:50:c2:32:a1:2b:f5:f8:24:8a:2f:a5:08:d7:55:d0:f7:d4:
         f8:12:5e:b4:4e:6d:ee:ed:4e:c9:a4:bc:9b:fc:e9:fc:7a:82:
         d5:b4:78:5e:3c:32:e2:31:6b:d9:38:c0:34:41:13:d1:b2:e9:
         6c:61:18:6b:e8:4c:35:7b:07:5b:42:75:1d:e0:7d:ea:47:7c:
         ec:fd:b8:8f:48:2e:6e:49:f8:08:5e:88:d4:20:69:d8:9a:cb:
         27:7d:e1:bc:86:b2:d8:6e:59:a8:d4:fe:80:a7:3d:ae:85:a8:
         2d:40:af:b1
-----BEGIN CERTIFICATE-----
MIIFhjCCBG6gAwIBAgICAx4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTMwNDUxMTAvBgNVBAUTKDY2RTg1NDYxQkIzNTJBNDk4REI1NTcwMzY0NjMwNUNB
MzdFNzRGQjQwHhcNMjQwOTA3MDIzNTA1WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmRiYmJkOS01NWUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzCoy4MBwgXv/vERdetHpv0U3wWxZPl9wDPCbhZ6WsRd71xMIrvwbOuOZBXSr
uc0Bj1tOX4tx6iw2UQJ6EGbtN/99rYKrtoppURStvoADCqk5LGuPJ2iN3hi/WoeC
T7E9a1g5Pi+wYOqJ4nJksxa85qTfVqKprmaaCidkfjOrLFBhHx/6t93WtzVjx6Yv
ugY7Ly0ZNiw+S3oYh7DbdDGff+DYBOWAry2oy60x9OkTI34DU92pZQqv3ic0mL47
S5TjzNPeoXo8idQFn1HYEUDcdtnRnrd/kwEoc1mK40XYmL8SuozmkOekZ/+yTEyv
ChkkGGs7li9Finrntf87keCEjQIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFD16Kt9l
UAIIhLBVIvQjpr8Rp6fNMB8GA1UdIwQYMBaAFGboVGG7NSpJjbVXA2RjBco350+0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzA0NS9CRkFEQzYxMDlG
MjkxMUVDOUMyRDY3ODVDNEY5QUUwMi9adWhVWWJzMUtrbU50VmNEWkdNRnlqZm5U
N1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1p1aFVZYnMxS2ttTnRWY0RaR01GeWpmblQ3US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTMwNDUvQkZBREM2MTA5RjI5MTFFQzlDMkQ2Nzg1QzRGOUFFMDIvMUYyNkM5MTI5
RjM4MTFFQ0JCODRCRDc2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E
JTAjMBIEAgABMAwDBAEr9dQDBABnHZgwDQQCAAIwBwMFACQBrwAwDQYJKoZIhvcN
AQELBQADggEBAKF+0KWYfJuhM4oLiVFKrQ7j/cOlQOqazMCShPF1R0oB1X1Fs/4h
STGTynpqNiQ7KZTJfS82yg81WD6YqygoOE4mhlq0GqzpBRk5i9475cbWdMTTKcj/
JcQbblKFXUhTc5JptK8K6GC65dsRKNNMFkgOPGS7VndbaFgYuE+12ZQqmu1jZtH/
HTb5g4LfatsruhJQwjKhK/X4JIovpQjXVdD31PgSXrRObe7tTsmkvJv86fx6gtW0
eF48MuIxa9k4wDRBE9Gy6WxhGGvoTDV7B1tCdR3gfepHfOz9uI9ILm5J+AheiNQg
adiayyd94byGsthuWajU/oCnPa6FqC1Ar7E=
-----END CERTIFICATE-----
Generated at Sat Nov 23 01:27:26 2024 by rpki-client on console-ams.rpki-client.org