Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/19DE7DB0FA3011E9BF5A291EC4F9AE02.roa
File:                     19DE7DB0FA3011E9BF5A291EC4F9AE02.roa (raw, json)
Hash identifier:          fNjSL8CG5TWS/PviRMUud5QxtmkoOiCNSoqXXgesJHA=
Subject key identifier:   7A:1C:FC:56:D5:7C:5D:6D:78:16:A8:18:D9:93:83:9F:2C:79:94:77
Certificate issuer:       /CN=A919EFDE/serialNumber=9669CD5B3D8735815A65D659F2741B43E64732B2
Certificate serial:       34A0
Authority key identifier: 96:69:CD:5B:3D:87:35:81:5A:65:D6:59:F2:74:1B:43:E6:47:32:B2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/19DE7DB0FA3011E9BF5A291EC4F9AE02.roa
Signing time:             Thu 24 Oct 2024 14:30:34 +0000
ROA not before:           Thu 24 Oct 2024 14:30:34 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     132801
IP address blocks:        118.179.140.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.crl
                          rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:24:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13472 (0x34a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919EFDE/serialNumber=9669CD5B3D8735815A65D659F2741B43E64732B2
        Validity
            Not Before: Oct 24 14:30:34 2024 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=671a5a09-d5b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:b3:5a:99:b1:ce:2b:83:eb:fb:3f:d6:9d:eb:
                    04:7f:e4:30:a9:0f:6b:eb:b7:c2:43:21:59:e9:31:
                    46:d2:57:06:49:78:d8:61:de:24:cc:8a:6e:3a:b2:
                    23:65:6d:33:bc:94:15:83:d8:72:11:35:fa:96:26:
                    49:ad:07:b5:a0:c7:72:4e:ba:22:15:f7:4b:80:2a:
                    67:e1:14:62:eb:fe:fd:07:95:54:30:fd:d9:79:ec:
                    f8:93:3c:9b:2b:78:f1:6a:3e:4e:79:ab:06:fd:d4:
                    8e:32:28:b1:2e:50:59:07:69:c1:a8:5b:7d:12:44:
                    d1:4c:a6:04:03:e4:c3:15:16:43:07:b3:86:98:e6:
                    f2:f4:7b:97:a0:8e:7e:7c:34:40:82:de:89:61:10:
                    9e:da:ee:dc:36:c8:6f:5c:a3:ff:2b:a8:e5:be:6d:
                    17:3b:17:b1:07:35:0f:22:b3:d3:7e:9a:26:2b:c8:
                    89:d2:50:1e:23:8c:2d:23:e7:e3:a0:db:ff:af:f0:
                    e5:8d:2f:8f:51:7f:26:d6:f6:99:db:da:22:0c:89:
                    90:d4:23:44:f5:75:ee:d7:eb:49:4c:fc:ec:35:68:
                    1d:9d:02:52:67:b6:2a:ac:6f:b1:c6:bf:47:64:a0:
                    ae:56:43:f5:a4:af:a7:4b:cc:45:15:ec:c4:ad:bc:
                    c6:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:1C:FC:56:D5:7C:5D:6D:78:16:A8:18:D9:93:83:9F:2C:79:94:77
            X509v3 Authority Key Identifier:
                keyid:96:69:CD:5B:3D:87:35:81:5A:65:D6:59:F2:74:1B:43:E6:47:32:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/19DE7DB0FA3011E9BF5A291EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.179.140.0/23

    Signature Algorithm: sha256WithRSAEncryption
         50:53:87:d7:ad:0d:37:37:cb:95:6e:9b:c3:2e:6a:04:81:78:
         5b:c4:6b:cb:f9:66:0f:27:7f:28:03:c0:fd:c7:11:e5:f3:34:
         34:3f:27:eb:6f:78:a0:a7:b4:f7:52:ce:2d:26:fe:50:db:94:
         4c:59:fa:f9:eb:4a:5c:28:09:32:92:53:ea:fe:56:f0:7f:94:
         34:78:88:19:34:f8:34:ab:b8:9b:fe:d9:54:63:e8:7b:dc:db:
         cb:40:88:a0:88:bc:c6:5c:63:19:d1:fe:26:23:79:5e:8c:03:
         14:73:b7:7d:e4:1f:aa:49:00:1b:50:24:c2:11:ce:13:10:3d:
         a3:81:36:d7:cb:ce:23:f6:b2:ee:0c:24:7c:53:c4:e8:fb:9a:
         a9:9c:31:8b:e6:18:ca:fd:b6:98:d7:13:d9:da:62:ac:6c:12:
         1a:36:df:7f:81:a2:61:24:8d:b0:01:85:e6:98:2e:2d:f2:ad:
         fb:cb:c8:6c:9f:02:29:9f:8b:6f:66:a6:f0:96:a3:d1:b4:25:
         3f:af:f1:5e:db:85:49:41:0b:f1:22:65:8d:a3:27:2c:19:70:
         d7:93:17:12:e4:1d:e0:f0:56:7f:21:27:02:7c:a0:63:72:6f:
         45:92:9c:31:85:ef:76:87:6f:71:b8:90:3e:b1:4d:95:42:54:
         14:d6:f0:5f
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICNKAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUVGREUxMTAvBgNVBAUTKDk2NjlDRDVCM0Q4NzM1ODE1QTY1RDY1OUYyNzQxQjQz
RTY0NzMyQjIwHhcNMjQxMDI0MTQzMDM0WhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzFhNWEwOS1kNWI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnLNambHOK4Pr+z/WnesEf+QwqQ9r67fCQyFZ6TFG0lcGSXjYYd4kzIpuOrIj
ZW0zvJQVg9hyETX6liZJrQe1oMdyTroiFfdLgCpn4RRi6/79B5VUMP3Zeez4kzyb
K3jxaj5OeasG/dSOMiixLlBZB2nBqFt9EkTRTKYEA+TDFRZDB7OGmOby9HuXoI5+
fDRAgt6JYRCe2u7cNshvXKP/K6jlvm0XOxexBzUPIrPTfpomK8iJ0lAeI4wtI+fj
oNv/r/DljS+PUX8m1vaZ29oiDImQ1CNE9XXu1+tJTPzsNWgdnQJSZ7YqrG+xxr9H
ZKCuVkP1pK+nS8xFFezErbzGzwIDAQABo4IClTCCApEwHQYDVR0OBBYEFHoc/FbV
fF1teBaoGNmTg58seZR3MB8GA1UdIwQYMBaAFJZpzVs9hzWBWmXWWfJ0G0PmRzKy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUZERS9DQzQ1RUNBODFE
ODQxMUUyOTU2RDAzREIwOEIwMkNEMi9sbW5OV3oySE5ZRmFaZFpaOG5RYlEtWkhN
ckkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2xtbk5XejJITllGYVpkWlo4blFiUS1aSE1ySS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OUVGREUvQ0M0NUVDQTgxRDg0MTFFMjk1NkQwM0RCMDhCMDJDRDIvMTlERTdEQjBG
QTMwMTFFOUJGNUEyOTFFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAF2s4wwDQYJKoZIhvcNAQELBQADggEBAFBTh9etDTc3y5Vu
m8MuagSBeFvEa8v5Zg8nfygDwP3HEeXzNDQ/J+tveKCntPdSzi0m/lDblExZ+vnr
SlwoCTKSU+r+VvB/lDR4iBk0+DSruJv+2VRj6Hvc28tAiKCIvMZcYxnR/iYjeV6M
AxRzt33kH6pJABtQJMIRzhMQPaOBNtfLziP2su4MJHxTxOj7mqmcMYvmGMr9tpjX
E9naYqxsEho233+BomEkjbABheaYLi3yrfvLyGyfAimfi29mpvCWo9G0JT+v8V7b
hUlBC/EiZY2jJywZcNeTFxLkHeDwVn8hJwJ8oGNyb0WSnDGF73aHb3G4kD6xTZVC
VBTW8F8=
-----END CERTIFICATE-----
Generated at Fri Nov 22 16:49:58 2024 by rpki-client on console-ams.rpki-client.org