Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/9D563A7A366311EEB376DC3AC4F9AE02.roa
File:                     9D563A7A366311EEB376DC3AC4F9AE02.roa (raw, json)
Hash identifier:          jf5vNKMEs/HYJC+ZfLIR6MHcZqRlwRNx9C1pqFQO2oU=
Subject key identifier:   F1:7A:E4:BC:92:B0:C3:AD:07:29:DA:50:97:D3:81:6F:A7:F8:D2:79
Certificate issuer:       /CN=A919536C/serialNumber=A090E520BF9D51F2FDCEED413AF27AC758F6AE1D
Certificate serial:       C6
Authority key identifier: A0:90:E5:20:BF:9D:51:F2:FD:CE:ED:41:3A:F2:7A:C7:58:F6:AE:1D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/9D563A7A366311EEB376DC3AC4F9AE02.roa
Signing time:             Tue 25 Jun 2024 06:21:55 +0000
ROA not before:           Tue 25 Jun 2024 06:21:55 +0000
ROA not after:            Sun 31 Aug 2025 00:00:00 +0000
asID:                     132876
IP address blocks:        96.30.112.0/24 maxlen: 24
                          96.30.122.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.crl
                          rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 02:50:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 198 (0xc6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919536C/serialNumber=A090E520BF9D51F2FDCEED413AF27AC758F6AE1D
        Validity
            Not Before: Jun 25 06:21:55 2024 GMT
            Not After : Aug 31 00:00:00 2025 GMT
        Subject: CN=667a6203-76fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:92:db:06:9b:3b:14:b2:bb:cd:a1:1f:48:93:
                    0b:e5:37:86:e9:30:d0:cc:a3:43:37:05:3a:f4:92:
                    fd:f4:db:cd:ab:db:87:03:23:9e:a6:94:f1:d0:af:
                    db:05:43:48:be:82:75:3b:85:c9:ab:14:49:54:bb:
                    6a:4c:dd:5f:19:88:63:18:33:d6:50:95:61:aa:47:
                    41:cf:8d:b4:a8:ad:e8:3f:e6:a4:65:6b:cc:4f:a1:
                    61:40:e6:b7:cc:58:a3:0b:d9:f5:e9:ec:c5:7d:fa:
                    a5:17:0b:ff:b9:91:0c:15:a4:70:bc:c3:99:b8:36:
                    3b:f4:7e:92:c6:fd:6f:e0:c0:8d:3f:95:d8:f5:51:
                    8c:6a:85:b6:4f:93:f0:8b:2a:0c:b1:62:84:02:2c:
                    c4:4e:45:25:0c:db:d4:f5:29:76:f2:05:1b:46:88:
                    e2:30:47:8f:09:00:94:1d:32:0d:a3:0e:a7:53:dd:
                    fc:16:5d:b4:2d:dc:13:7b:cb:91:6b:84:dc:ac:66:
                    e1:19:18:f1:1f:92:ce:0e:c6:45:fe:02:f7:8c:30:
                    2f:f2:28:76:13:3c:82:32:ca:9c:3d:e4:c8:b3:dd:
                    f3:4b:da:9e:f6:f7:a5:0d:9a:74:29:3b:85:34:bb:
                    e7:91:ad:fe:ad:f2:f9:d3:59:ce:1f:3e:2a:61:b2:
                    a3:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:7A:E4:BC:92:B0:C3:AD:07:29:DA:50:97:D3:81:6F:A7:F8:D2:79
            X509v3 Authority Key Identifier:
                keyid:A0:90:E5:20:BF:9D:51:F2:FD:CE:ED:41:3A:F2:7A:C7:58:F6:AE:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/9D563A7A366311EEB376DC3AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.30.112.0/24
                  96.30.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:a9:47:be:ea:3a:2b:f7:ed:08:13:c2:37:42:62:13:d6:19:
         bb:bc:af:fc:d8:e3:a7:f9:32:19:97:d8:6f:9d:61:44:d9:7e:
         b5:33:aa:9c:ea:19:ca:7c:99:26:06:de:24:ef:7e:5f:8b:9c:
         f8:bf:d2:ff:91:eb:47:81:0a:2f:64:fa:39:26:f7:84:3e:9b:
         e6:e4:71:3b:dc:b4:0e:0a:c1:8b:3b:28:df:92:91:14:89:3b:
         95:9b:23:81:d9:c9:31:68:7d:a5:49:4b:b7:05:e6:71:89:82:
         94:41:9f:4e:62:54:63:a8:07:44:1a:9f:43:53:d0:93:b1:b3:
         d7:1c:b6:c4:27:3f:21:88:3c:0e:f1:44:3e:ea:ee:07:1a:d5:
         37:99:45:fb:89:75:23:79:a8:be:ab:90:75:e0:9d:9c:2b:00:
         5c:85:15:4a:98:08:92:df:56:a9:c6:e1:6d:35:d1:a1:19:18:
         93:75:a6:bb:bb:ef:31:40:c7:08:65:9a:dd:31:80:16:0a:5d:
         5e:26:b7:de:3c:10:e4:d5:99:aa:45:2b:4d:93:ea:4f:ca:c8:
         8b:a2:ef:61:23:a0:71:db:15:32:fd:b5:66:92:83:5e:41:41:
         1c:bb:83:9e:f5:8f:22:37:f9:48:b6:f8:01:1e:67:1d:ef:a6:
         2a:67:92:ef
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICAMYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTUzNkMxMTAvBgNVBAUTKEEwOTBFNTIwQkY5RDUxRjJGRENFRUQ0MTNBRjI3QUM3
NThGNkFFMUQwHhcNMjQwNjI1MDYyMTU1WhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NjdhNjIwMy03NmZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxpLbBps7FLK7zaEfSJML5TeG6TDQzKNDNwU69JL99NvNq9uHAyOeppTx0K/b
BUNIvoJ1O4XJqxRJVLtqTN1fGYhjGDPWUJVhqkdBz420qK3oP+akZWvMT6FhQOa3
zFijC9n16ezFffqlFwv/uZEMFaRwvMOZuDY79H6Sxv1v4MCNP5XY9VGMaoW2T5Pw
iyoMsWKEAizETkUlDNvU9Sl28gUbRojiMEePCQCUHTINow6nU938Fl20LdwTe8uR
a4TcrGbhGRjxH5LODsZF/gL3jDAv8ih2EzyCMsqcPeTIs93zS9qe9velDZp0KTuF
NLvnka3+rfL501nOHz4qYbKjEwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFPF65LyS
sMOtBynaUJfTgW+n+NJ5MB8GA1UdIwQYMBaAFKCQ5SC/nVHy/c7tQTryesdY9q4d
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTM2Qy83NUI5OEJGMDM2
NjAxMUVFODhFMEY1MzBDNEY5QUUwMi9vSkRsSUwtZFVmTDl6dTFCT3ZKNngxajJy
aDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL29KRGxJTC1kVWZMOXp1MUJPdko2eDFqMnJoMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTUzNkMvNzVCOThCRjAzNjYwMTFFRTg4RTBGNTMwQzRGOUFFMDIvOUQ1NjNBN0Ez
NjYzMTFFRUIzNzZEQzNBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBABgHnADBABgHnowDQYJKoZIhvcNAQELBQADggEBABupR77q
Oiv37QgTwjdCYhPWGbu8r/zY46f5MhmX2G+dYUTZfrUzqpzqGcp8mSYG3iTvfl+L
nPi/0v+R60eBCi9k+jkm94Q+m+bkcTvctA4KwYs7KN+SkRSJO5WbI4HZyTFofaVJ
S7cF5nGJgpRBn05iVGOoB0Qan0NT0JOxs9cctsQnPyGIPA7xRD7q7gca1TeZRfuJ
dSN5qL6rkHXgnZwrAFyFFUqYCJLfVqnG4W010aEZGJN1pru77zFAxwhlmt0xgBYK
XV4mt948EOTVmapFK02T6k/KyIui72EjoHHbFTL9tWaSg15BQRy7g571jyI3+Ui2
+AEeZx3vpipnku8=
-----END CERTIFICATE-----
Generated at Thu Nov 21 05:37:13 2024 by rpki-client on console-ams.rpki-client.org