Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/122F83AAC4AD11EA9E35F20AC4F9AE02.roa
File:                     122F83AAC4AD11EA9E35F20AC4F9AE02.roa (raw, json)
Hash identifier:          kIiy4QiyJyPgWVLPLnRBBrwouU+Qwtr5K3JL2gFahLQ=
Subject key identifier:   B0:28:BA:73:80:7F:4C:FD:7D:6A:A5:41:9C:03:F7:38:07:21:56:23
Certificate issuer:       /CN=A9194335/serialNumber=91BC79AE15CCAEA44E4FE7845FBFCA63E7FAEB9E
Certificate serial:       0EBA
Authority key identifier: 91:BC:79:AE:15:CC:AE:A4:4E:4F:E7:84:5F:BF:CA:63:E7:FA:EB:9E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kbx5rhXMrqROT-eEX7_KY-f6654.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/122F83AAC4AD11EA9E35F20AC4F9AE02.roa
Signing time:             Sat 30 Sep 2023 17:55:42 +0000
ROA not before:           Sat 30 Sep 2023 17:55:42 +0000
ROA not after:            Sun 01 Dec 2024 00:00:00 +0000
asID:                     4764
IP address blocks:        202.87.4.0/22 maxlen: 24
                          203.57.38.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/kbx5rhXMrqROT-eEX7_KY-f6654.crl
                          rsync://rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/kbx5rhXMrqROT-eEX7_KY-f6654.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kbx5rhXMrqROT-eEX7_KY-f6654.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 May 2024 18:22:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3770 (0xeba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9194335/serialNumber=91BC79AE15CCAEA44E4FE7845FBFCA63E7FAEB9E
        Validity
            Not Before: Sep 30 17:55:42 2023 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=6518611e-f700
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:4a:c1:11:53:ad:4d:ab:0e:3c:af:a3:ff:e2:
                    e9:62:41:ce:07:21:18:66:51:72:5f:d2:03:0a:ff:
                    88:c6:a7:7f:95:3f:db:bb:67:ae:b2:36:43:f0:e8:
                    37:75:45:1d:1f:6c:01:bc:5a:51:13:6b:9c:83:64:
                    44:c5:48:a9:9b:ae:e6:42:e5:8c:94:83:e8:09:21:
                    8c:af:f7:c4:55:df:45:1c:92:bf:66:55:0b:22:20:
                    3d:c1:fb:36:78:a1:6a:08:3d:86:73:4e:f6:4d:22:
                    36:9a:0c:9a:80:06:38:30:a9:3c:59:03:61:eb:05:
                    bd:4e:7c:1f:ad:60:21:96:56:ca:f3:52:6f:45:38:
                    d9:e0:92:7d:e4:12:f1:e3:7c:d4:7c:9c:45:87:9c:
                    6e:19:3b:32:54:08:88:fd:ca:d4:5a:22:a5:5f:af:
                    1b:06:b0:d8:cb:d2:5e:50:35:4a:fd:32:dd:ba:5d:
                    bd:77:da:8e:78:bb:0a:c2:0c:21:d4:b3:4e:20:fa:
                    3b:9b:82:dd:07:7e:29:ff:58:9a:44:a3:93:d5:90:
                    4b:11:0e:c9:c8:0f:4a:58:51:d1:c7:f4:58:98:9f:
                    76:39:b5:19:35:f2:55:72:31:0c:66:9f:6f:01:37:
                    6d:18:20:8b:9f:13:98:65:67:43:65:de:ff:b3:18:
                    bc:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:28:BA:73:80:7F:4C:FD:7D:6A:A5:41:9C:03:F7:38:07:21:56:23
            X509v3 Authority Key Identifier:
                keyid:91:BC:79:AE:15:CC:AE:A4:4E:4F:E7:84:5F:BF:CA:63:E7:FA:EB:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/kbx5rhXMrqROT-eEX7_KY-f6654.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kbx5rhXMrqROT-eEX7_KY-f6654.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/122F83AAC4AD11EA9E35F20AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.87.4.0/22
                  203.57.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:f0:0e:3c:6f:96:41:79:77:93:77:71:e7:ef:bb:22:d7:fa:
         c8:a8:f6:43:6f:c8:65:bb:ab:9c:82:60:95:d0:ce:a4:ae:65:
         98:69:35:cf:22:a4:bf:16:c7:9b:a5:df:d7:c3:6a:25:a0:b3:
         da:50:01:e3:75:46:d2:8e:36:ce:f8:d3:21:11:67:f1:d6:9c:
         b6:7e:3b:b4:d3:c6:58:48:5b:6d:8b:80:48:41:53:55:7b:04:
         0c:32:d9:b8:5e:3e:0b:df:fd:96:3f:fe:8a:5a:08:cc:60:26:
         57:df:52:65:1d:49:ee:17:78:9f:04:aa:1d:4e:64:8b:95:5c:
         48:3c:e5:85:7a:02:7d:51:ff:b9:14:02:3b:30:da:8e:ed:ce:
         4c:90:4b:88:b8:69:45:03:5f:ef:fa:a7:ae:91:38:3b:d6:eb:
         50:9f:6e:f4:b5:44:e2:29:60:c3:9e:e0:c8:c3:fe:6a:a8:3b:
         07:b7:cd:22:bf:6c:2b:2f:e4:0e:0f:43:f3:57:a6:f3:fd:53:
         01:c5:df:e9:f9:b4:9b:9f:2d:8b:0b:5e:5e:06:29:20:4d:ed:
         b4:aa:0c:d6:54:86:3d:96:b1:6e:45:ab:1f:3f:9b:7d:ba:a5:
         03:26:f3:e1:be:ca:bd:6a:99:26:85:3d:47:60:8f:f9:f7:dc:
         22:c0:a3:33
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICDrowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTQzMzUxMTAvBgNVBAUTKDkxQkM3OUFFMTVDQ0FFQTQ0RTRGRTc4NDVGQkZDQTYz
RTdGQUVCOUUwHhcNMjMwOTMwMTc1NTQyWhcNMjQxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NTE4NjExZS1mNzAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyErBEVOtTasOPK+j/+LpYkHOByEYZlFyX9IDCv+Ixqd/lT/bu2eusjZD8Og3
dUUdH2wBvFpRE2ucg2RExUipm67mQuWMlIPoCSGMr/fEVd9FHJK/ZlULIiA9wfs2
eKFqCD2Gc072TSI2mgyagAY4MKk8WQNh6wW9TnwfrWAhllbK81JvRTjZ4JJ95BLx
43zUfJxFh5xuGTsyVAiI/crUWiKlX68bBrDYy9JeUDVK/TLdul29d9qOeLsKwgwh
1LNOIPo7m4LdB34p/1iaRKOT1ZBLEQ7JyA9KWFHRx/RYmJ92ObUZNfJVcjEMZp9v
ATdtGCCLnxOYZWdDZd7/sxi8/wIDAQABo4ICmzCCApcwHQYDVR0OBBYEFLAounOA
f0z9fWqlQZwD9zgHIVYjMB8GA1UdIwQYMBaAFJG8ea4VzK6kTk/nhF+/ymPn+uue
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDMzNS8zNDJEMjIyODUx
RDExMUU5QUYxRkY3M0NDNEY5QUUwMi9rYng1cmhYTXJxUk9ULWVFWDdfS1ktZjY2
NTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2tieDVyaFhNcnFST1QtZUVYN19LWS1mNjY1NC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTQzMzUvMzQyRDIyMjg1MUQxMTFFOUFGMUZGNzNDQzRGOUFFMDIvMTIyRjgzQUFD
NEFEMTFFQTlFMzVGMjBBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBALKVwQDBADLOSYwDQYJKoZIhvcNAQELBQADggEBAKTwDjxv
lkF5d5N3cefvuyLX+sio9kNvyGW7q5yCYJXQzqSuZZhpNc8ipL8Wx5ul39fDaiWg
s9pQAeN1RtKONs740yERZ/HWnLZ+O7TTxlhIW22LgEhBU1V7BAwy2bhePgvf/ZY/
/opaCMxgJlffUmUdSe4XeJ8Eqh1OZIuVXEg85YV6An1R/7kUAjsw2o7tzkyQS4i4
aUUDX+/6p66RODvW61CfbvS1ROIpYMOe4MjD/mqoOwe3zSK/bCsv5A4PQ/NXpvP9
UwHF3+n5tJufLYsLXl4GKSBN7bSqDNZUhj2WsW5Fqx8/m326pQMm8+G+yr1qmSaF
PUdgj/n33CLAozM=
-----END CERTIFICATE-----
Generated at Thu May 16 20:25:48 2024 by rpki-client on console-ams.rpki-client.org