Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9193267/8966D6FE6EE111EDB45FF360C4F9AE02/F29D0E026EE311ED94338E61C4F9AE02.roa
File:                     F29D0E026EE311ED94338E61C4F9AE02.roa (raw, json)
Hash identifier:          hZSxXZVfZSsmj8u7ow4R04+VcNOuennA8/ZnNIfiPmI=
Subject key identifier:   53:4B:E8:46:42:A3:55:C6:25:D8:AC:A0:39:B3:A7:B1:1D:00:3F:18
Certificate issuer:       /CN=A9193267/serialNumber=16080F5F1AF4AA56124FF7195D13E85B93A59521
Certificate serial:       0108
Authority key identifier: 16:08:0F:5F:1A:F4:AA:56:12:4F:F7:19:5D:13:E8:5B:93:A5:95:21
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FggPXxr0qlYST_cZXRPoW5OllSE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9193267/8966D6FE6EE111EDB45FF360C4F9AE02/F29D0E026EE311ED94338E61C4F9AE02.roa
Signing time:             Wed 17 Apr 2024 05:38:30 +0000
ROA not before:           Wed 17 Apr 2024 05:38:30 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     142422
IP address blocks:        203.16.4.0/23 maxlen: 24
                          203.16.6.0/24 maxlen: 24
                          203.16.7.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9193267/8966D6FE6EE111EDB45FF360C4F9AE02/FggPXxr0qlYST_cZXRPoW5OllSE.crl
                          rsync://rpki.apnic.net/member_repository/A9193267/8966D6FE6EE111EDB45FF360C4F9AE02/FggPXxr0qlYST_cZXRPoW5OllSE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FggPXxr0qlYST_cZXRPoW5OllSE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:09:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 264 (0x108)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9193267/serialNumber=16080F5F1AF4AA56124FF7195D13E85B93A59521
        Validity
            Not Before: Apr 17 05:38:30 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=661f6056-7ec3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:eb:6e:c2:ac:76:40:b3:e3:1b:87:04:4e:9e:
                    e9:ab:f3:e3:72:9a:43:ac:63:19:32:83:5e:2c:80:
                    57:03:ce:c5:e1:7f:08:19:07:49:9e:47:5a:61:fb:
                    24:a5:e1:c9:20:ac:10:a0:e7:c5:00:5c:48:66:0a:
                    0a:86:be:05:03:96:5e:8f:05:98:52:8d:04:93:cf:
                    5c:5a:ac:8e:6e:67:79:d8:dc:98:d7:5a:df:15:0c:
                    d7:b7:79:76:e4:b7:ba:c1:50:71:d3:8a:98:5a:8e:
                    29:b2:81:3d:6d:8c:75:63:13:89:da:a0:e2:24:df:
                    c6:e5:47:7b:2e:af:8b:cb:44:2f:a5:dd:16:61:f6:
                    4a:8c:24:26:b9:f9:51:dd:65:49:1f:04:fb:2a:24:
                    01:29:23:fe:80:4d:e9:52:0b:cf:e6:98:4c:6d:13:
                    87:51:35:ba:65:1d:0c:9c:bb:3e:dc:4e:e2:d6:26:
                    0d:ed:35:67:c9:5d:35:9c:ce:bb:63:c8:7d:58:c1:
                    88:3d:98:ba:33:96:9b:05:73:e5:ad:b0:7c:ac:96:
                    aa:ed:22:3b:6a:c6:1c:0f:05:cf:d4:8d:93:3b:17:
                    73:16:15:5d:7b:22:2c:7d:97:6f:a8:7a:58:51:40:
                    55:2e:27:1d:92:77:0d:e6:4a:00:ba:e1:3a:59:bd:
                    c2:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:4B:E8:46:42:A3:55:C6:25:D8:AC:A0:39:B3:A7:B1:1D:00:3F:18
            X509v3 Authority Key Identifier:
                keyid:16:08:0F:5F:1A:F4:AA:56:12:4F:F7:19:5D:13:E8:5B:93:A5:95:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9193267/8966D6FE6EE111EDB45FF360C4F9AE02/FggPXxr0qlYST_cZXRPoW5OllSE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FggPXxr0qlYST_cZXRPoW5OllSE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193267/8966D6FE6EE111EDB45FF360C4F9AE02/F29D0E026EE311ED94338E61C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.16.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         31:2a:c9:26:f6:57:2a:3a:c2:98:7d:61:92:6b:41:93:62:b4:
         83:53:ee:83:41:38:53:e7:6e:d9:08:ea:dd:85:3f:f9:04:1c:
         11:d8:72:1a:0b:af:55:5b:cb:bf:d9:7d:c1:50:f0:fd:73:67:
         0d:99:fb:d8:e3:ca:c4:df:a8:0e:42:8f:01:29:4b:ca:f6:7d:
         9c:6c:9b:96:c2:6c:ff:3a:f5:6d:3f:e1:2f:e0:f5:02:9e:4e:
         c5:56:a8:7e:90:6a:7d:e2:0a:7b:66:92:1c:78:56:1f:48:92:
         b8:ff:68:04:74:b2:1b:44:42:02:81:84:69:36:da:ab:8d:7c:
         88:f1:cc:ca:90:43:ae:0c:84:54:72:f9:ce:e6:0a:79:fd:91:
         c6:d2:38:28:52:97:77:75:96:0b:0f:c5:3a:ca:e2:21:dd:c9:
         55:e3:47:24:90:a8:98:d9:f5:2d:6b:6a:8f:5f:ef:8c:18:9e:
         a9:f3:21:fc:ab:e2:48:56:30:a3:21:a7:2b:12:8e:d0:17:5e:
         af:d8:16:c6:27:8e:3f:24:8c:d2:80:86:e1:f5:2b:52:64:6f:
         44:30:ac:5e:43:d9:78:3b:ec:d5:2c:05:9a:03:de:e6:c5:db:
         6c:42:28:42:ea:fd:c6:10:27:69:66:db:48:cf:7e:20:22:e0:
         fc:31:18:6d
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAQgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTMyNjcxMTAvBgNVBAUTKDE2MDgwRjVGMUFGNEFBNTYxMjRGRjcxOTVEMTNFODVC
OTNBNTk1MjEwHhcNMjQwNDE3MDUzODMwWhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NjFmNjA1Ni03ZWMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6etuwqx2QLPjG4cETp7pq/PjcppDrGMZMoNeLIBXA87F4X8IGQdJnkdaYfsk
peHJIKwQoOfFAFxIZgoKhr4FA5ZejwWYUo0Ek89cWqyObmd52NyY11rfFQzXt3l2
5Le6wVBx04qYWo4psoE9bYx1YxOJ2qDiJN/G5Ud7Lq+Ly0Qvpd0WYfZKjCQmuflR
3WVJHwT7KiQBKSP+gE3pUgvP5phMbROHUTW6ZR0MnLs+3E7i1iYN7TVnyV01nM67
Y8h9WMGIPZi6M5abBXPlrbB8rJaq7SI7asYcDwXP1I2TOxdzFhVdeyIsfZdvqHpY
UUBVLicdkncN5koAuuE6Wb3C6wIDAQABo4IClTCCApEwHQYDVR0OBBYEFFNL6EZC
o1XGJdisoDmzp7EdAD8YMB8GA1UdIwQYMBaAFBYID18a9KpWEk/3GV0T6FuTpZUh
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzI2Ny84OTY2RDZGRTZF
RTExMUVEQjQ1RkYzNjBDNEY5QUUwMi9GZ2dQWHhyMHFsWVNUX2NaWFJQb1c1T2xs
U0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZnZ1BYeHIwcWxZU1RfY1pYUlBvVzVPbGxTRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTMyNjcvODk2NkQ2RkU2RUUxMTFFREI0NUZGMzYwQzRGOUFFMDIvRjI5RDBFMDI2
RUUzMTFFRDk0MzM4RTYxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBALLEAQwDQYJKoZIhvcNAQELBQADggEBADEqySb2Vyo6wph9
YZJrQZNitINT7oNBOFPnbtkI6t2FP/kEHBHYchoLr1Vby7/ZfcFQ8P1zZw2Z+9jj
ysTfqA5CjwEpS8r2fZxsm5bCbP869W0/4S/g9QKeTsVWqH6Qan3iCntmkhx4Vh9I
krj/aAR0shtEQgKBhGk22quNfIjxzMqQQ64MhFRy+c7mCnn9kcbSOChSl3d1lgsP
xTrK4iHdyVXjRySQqJjZ9S1rao9f74wYnqnzIfyr4khWMKMhpysSjtAXXq/YFsYn
jj8kjNKAhuH1K1Jkb0QwrF5D2Xg77NUsBZoD3ubF22xCKELq/cYQJ2lm20jPfiAi
4PwxGG0=
-----END CERTIFICATE-----
Generated at Sat Nov 23 03:58:45 2024 by rpki-client on console-ams.rpki-client.org