Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919F06A/F1A9BABC33A411EBAC54852EC4F9AE02/7ABF29BC33A611EB8B013530C4F9AE02.roa
File:                     7ABF29BC33A611EB8B013530C4F9AE02.roa (raw, json)
Hash identifier:          HqXe8N/C5jj3y5tBr3SCVwwiAPhgt5p/B7/4jbBCVVw=
Subject key identifier:   AE:11:A4:33:A4:69:24:E6:6A:95:DD:97:D7:F5:08:5D:31:94:52:15
Certificate issuer:       /CN=A919F06A/serialNumber=BCB80DE44705CFC4F83978590C9F3FC2E2C2F852
Certificate serial:       05D3
Authority key identifier: BC:B8:0D:E4:47:05:CF:C4:F8:39:78:59:0C:9F:3F:C2:E2:C2:F8:52
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vLgN5EcFz8T4OXhZDJ8_wuLC-FI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919F06A/F1A9BABC33A411EBAC54852EC4F9AE02/7ABF29BC33A611EB8B013530C4F9AE02.roa
Signing time:             Tue 04 Jul 2023 22:49:38 +0000
ROA not before:           Tue 04 Jul 2023 22:49:37 +0000
ROA not after:            Sat 31 Aug 2024 00:00:00 +0000
asID:                     141364
IP address blocks:        149.234.190.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919F06A/F1A9BABC33A411EBAC54852EC4F9AE02/vLgN5EcFz8T4OXhZDJ8_wuLC-FI.crl
                          rsync://rpki.apnic.net/member_repository/A919F06A/F1A9BABC33A411EBAC54852EC4F9AE02/vLgN5EcFz8T4OXhZDJ8_wuLC-FI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vLgN5EcFz8T4OXhZDJ8_wuLC-FI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 May 2024 21:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1491 (0x5d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919F06A/serialNumber=BCB80DE44705CFC4F83978590C9F3FC2E2C2F852
        Validity
            Not Before: Jul  4 22:49:37 2023 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=64a4a201-3643
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:87:5a:bb:8a:ae:59:68:3b:88:0e:ce:99:a9:
                    ba:98:34:67:bc:7b:f1:fe:1c:d6:6c:89:ce:d9:7c:
                    13:e8:2b:b9:aa:a4:cb:51:bd:41:70:3d:ed:d8:75:
                    35:62:bf:14:14:80:46:ff:84:2d:24:51:97:f1:6b:
                    b6:93:aa:6c:d7:74:19:9d:9d:74:4c:60:7b:53:c7:
                    af:98:89:ff:d5:44:58:9c:68:8d:c8:97:20:74:70:
                    74:14:87:fb:8a:f9:de:12:3e:82:0b:65:46:6e:b0:
                    02:dc:67:e1:49:5b:3d:33:43:4b:b9:25:ba:31:c1:
                    ed:e6:d1:fd:c3:77:83:7d:48:d1:32:d3:c0:2c:86:
                    a9:c2:41:25:a1:c8:54:1a:5d:be:87:e3:7a:5e:c7:
                    3e:f1:11:88:ee:c3:6f:89:73:c6:f4:f6:b7:88:9c:
                    7b:ec:64:3c:d2:79:bb:08:77:2d:f4:6f:b9:5c:04:
                    9c:5d:90:11:18:cb:b9:49:30:38:11:8c:f6:3c:3d:
                    ff:ea:b9:91:14:b1:e4:cb:1a:d1:fd:f4:e9:97:b5:
                    d2:43:33:2f:f1:e2:be:2e:3b:1e:02:11:43:d3:8d:
                    78:93:c4:49:3e:d4:ac:83:95:ad:c5:e6:12:cc:f0:
                    25:7f:ee:5f:ca:34:5b:e4:78:95:3c:c6:80:d1:ae:
                    5a:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:11:A4:33:A4:69:24:E6:6A:95:DD:97:D7:F5:08:5D:31:94:52:15
            X509v3 Authority Key Identifier:
                keyid:BC:B8:0D:E4:47:05:CF:C4:F8:39:78:59:0C:9F:3F:C2:E2:C2:F8:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919F06A/F1A9BABC33A411EBAC54852EC4F9AE02/vLgN5EcFz8T4OXhZDJ8_wuLC-FI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vLgN5EcFz8T4OXhZDJ8_wuLC-FI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F06A/F1A9BABC33A411EBAC54852EC4F9AE02/7ABF29BC33A611EB8B013530C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.234.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:8f:4e:44:2a:93:70:55:50:af:63:1f:8f:a1:6c:5e:96:c5:
         e5:dc:4a:88:bd:ad:76:85:15:bf:6c:06:fd:79:b8:e2:a5:c4:
         27:1b:6f:82:5f:3a:68:1c:66:c4:6d:ac:df:26:4a:cf:dc:81:
         46:86:0b:9b:f4:99:a7:a6:87:db:19:d1:32:31:da:65:65:6f:
         c6:a3:32:59:75:5c:8f:25:54:d8:2c:8c:11:22:0d:4d:7c:9c:
         f0:b2:ca:08:b2:00:21:64:c2:b0:f8:4d:37:71:dd:f0:77:3d:
         fe:ff:6e:1d:b8:0b:ca:d0:4f:80:ea:7f:9d:f7:1b:aa:2a:85:
         dd:f0:0c:67:52:3b:e0:bb:7e:2d:85:3e:a5:84:82:5a:b9:c9:
         8a:d4:cc:80:d5:4c:ea:20:b4:0d:7b:5d:5f:0f:6f:17:a2:ce:
         b0:7b:4b:0e:f2:ff:c8:dc:99:ed:d3:ba:ed:cf:9a:dc:ee:8e:
         7a:33:b4:c8:24:1e:20:20:65:2e:a7:24:ea:0f:12:9e:e5:d3:
         19:10:b4:a1:c2:b7:50:a5:67:c7:aa:4e:fb:9b:87:c4:95:d3:
         1b:7a:1f:93:d2:bd:c3:c4:38:b0:2e:39:3d:7d:6e:b3:e4:6f:
         f2:1d:fb:7d:32:27:1d:8f:3b:7e:b4:0b:7a:d2:02:b2:7c:63:
         1f:07:be:f6
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBdMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUYwNkExMTAvBgNVBAUTKEJDQjgwREU0NDcwNUNGQzRGODM5Nzg1OTBDOUYzRkMy
RTJDMkY4NTIwHhcNMjMwNzA0MjI0OTM3WhcNMjQwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NGE0YTIwMS0zNjQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArodau4quWWg7iA7Omam6mDRnvHvx/hzWbInO2XwT6Cu5qqTLUb1BcD3t2HU1
Yr8UFIBG/4QtJFGX8Wu2k6ps13QZnZ10TGB7U8evmIn/1URYnGiNyJcgdHB0FIf7
ivneEj6CC2VGbrAC3GfhSVs9M0NLuSW6McHt5tH9w3eDfUjRMtPALIapwkElochU
Gl2+h+N6Xsc+8RGI7sNviXPG9Pa3iJx77GQ80nm7CHct9G+5XAScXZARGMu5STA4
EYz2PD3/6rmRFLHkyxrR/fTpl7XSQzMv8eK+LjseAhFD0414k8RJPtSsg5WtxeYS
zPAlf+5fyjRb5HiVPMaA0a5aAwIDAQABo4IClTCCApEwHQYDVR0OBBYEFK4RpDOk
aSTmapXdl9f1CF0xlFIVMB8GA1UdIwQYMBaAFLy4DeRHBc/E+Dl4WQyfP8LiwvhS
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjA2QS9GMUE5QkFCQzMz
QTQxMUVCQUM1NDg1MkVDNEY5QUUwMi92TGdONUVjRno4VDRPWGhaREo4X3d1TEMt
RkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3ZMZ041RWNGejhUNE9YaFpESjhfd3VMQy1GSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OUYwNkEvRjFBOUJBQkMzM0E0MTFFQkFDNTQ4NTJFQzRGOUFFMDIvN0FCRjI5QkMz
M0E2MTFFQjhCMDEzNTMwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBACV6r4wDQYJKoZIhvcNAQELBQADggEBAEqPTkQqk3BVUK9j
H4+hbF6WxeXcSoi9rXaFFb9sBv15uOKlxCcbb4JfOmgcZsRtrN8mSs/cgUaGC5v0
maemh9sZ0TIx2mVlb8ajMll1XI8lVNgsjBEiDU18nPCyygiyACFkwrD4TTdx3fB3
Pf7/bh24C8rQT4Dqf533G6oqhd3wDGdSO+C7fi2FPqWEglq5yYrUzIDVTOogtA17
XV8PbxeizrB7Sw7y/8jcme3Tuu3PmtzujnoztMgkHiAgZS6nJOoPEp7l0xkQtKHC
t1ClZ8eqTvubh8SV0xt6H5PSvcPEOLAuOT19brPkb/Id+30yJx2PO360C3rSArJ8
Yx8HvvY=
-----END CERTIFICATE-----
Generated at Thu May 23 02:40:29 2024 by rpki-client on console-ams.rpki-client.org