Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919FE07/A16A88DA306A11EA998C8F30C4F9AE02/CF834404B27511EFA614D07EC4F9AE02.roa
File:                     CF834404B27511EFA614D07EC4F9AE02.roa (raw, json)
Hash identifier:          25yQyo1UNKg5eSyiIIMMirEfRLria39lDAViqcBQ5E4=
Subject key identifier:   41:7E:3F:C6:AA:BD:60:89:68:8A:A3:FF:76:BB:99:75:DB:98:F6:22
Certificate issuer:       /CN=A919FE07/serialNumber=7BD4D5C5A8EF5CDFC74C59A09364594E5EF9FAE7
Certificate serial:       02
Authority key identifier: 7B:D4:D5:C5:A8:EF:5C:DF:C7:4C:59:A0:93:64:59:4E:5E:F9:FA:E7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e9TVxajvXN_HTFmgk2RZTl75-uc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919FE07/A16A88DA306A11EA998C8F30C4F9AE02/CF834404B27511EFA614D07EC4F9AE02.roa
Signing time:             Wed 04 Dec 2024 19:27:33 +0000
ROA not before:           Wed 04 Dec 2024 19:27:33 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     17995
IP address blocks:        123.253.76.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919FE07/A16A88DA306A11EA998C8F30C4F9AE02/e9TVxajvXN_HTFmgk2RZTl75-uc.crl
                          rsync://rpki.apnic.net/member_repository/A919FE07/A16A88DA306A11EA998C8F30C4F9AE02/e9TVxajvXN_HTFmgk2RZTl75-uc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e9TVxajvXN_HTFmgk2RZTl75-uc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Jan 2025 18:56:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919FE07/serialNumber=7BD4D5C5A8EF5CDFC74C59A09364594E5EF9FAE7
        Validity
            Not Before: Dec  4 19:27:33 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=6750ad25-b29c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:e6:27:1c:ff:1f:28:18:62:b7:b7:90:9b:53:
                    ed:bc:1d:01:1a:74:bd:ef:5a:eb:44:c1:0b:dc:f3:
                    5e:c0:65:e9:85:3d:cd:65:e7:a4:a7:7b:4e:cd:39:
                    97:87:fe:e3:12:6f:3b:53:16:f1:a5:da:20:f4:46:
                    f7:43:ea:99:36:96:0a:2c:ee:82:6d:fe:18:fd:59:
                    74:a4:ab:ea:0d:7c:56:fb:23:c3:3a:9d:1d:7b:70:
                    76:3a:21:84:ab:f6:98:94:f7:d1:09:32:a3:b7:c3:
                    f2:0c:f9:7d:cd:59:85:48:12:35:b4:b1:69:c0:4b:
                    03:36:b7:df:2f:5f:07:1b:7d:d2:9c:16:7a:19:03:
                    b9:2f:90:c0:73:65:a5:64:aa:78:04:98:7c:3b:99:
                    37:bd:35:19:1b:75:82:bd:3b:53:75:7b:b1:bc:f5:
                    03:52:39:01:5c:9a:20:da:f4:28:cd:dc:31:b3:80:
                    eb:ff:de:79:94:2e:0c:41:7e:9d:52:68:af:2a:f6:
                    34:ab:3e:68:b0:27:c6:1c:9f:7f:b2:fd:4d:8b:00:
                    11:dc:81:bc:28:d6:28:81:1d:5e:23:68:fb:4c:f5:
                    6d:1c:00:53:18:cc:5d:0e:78:72:45:5c:6a:1d:a8:
                    e0:c5:35:4e:f7:28:aa:bb:12:0b:39:54:4f:18:01:
                    26:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:7E:3F:C6:AA:BD:60:89:68:8A:A3:FF:76:BB:99:75:DB:98:F6:22
            X509v3 Authority Key Identifier:
                keyid:7B:D4:D5:C5:A8:EF:5C:DF:C7:4C:59:A0:93:64:59:4E:5E:F9:FA:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919FE07/A16A88DA306A11EA998C8F30C4F9AE02/e9TVxajvXN_HTFmgk2RZTl75-uc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e9TVxajvXN_HTFmgk2RZTl75-uc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FE07/A16A88DA306A11EA998C8F30C4F9AE02/CF834404B27511EFA614D07EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.253.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         36:b4:e1:b3:b5:0c:1d:29:56:38:50:db:59:85:df:cb:9b:7b:
         68:9e:38:d5:15:45:26:9a:be:1c:a6:8b:9d:bf:68:dd:e7:94:
         bb:55:7c:9a:04:87:bd:bd:23:79:df:62:2b:d3:4a:36:b4:f7:
         84:db:ab:6d:48:52:07:a7:9f:e5:1e:3c:47:a5:ac:74:c5:70:
         3a:79:3e:d9:87:15:94:22:71:e8:c3:f8:44:ba:ea:1a:5a:22:
         63:bb:01:b3:99:bb:8d:5e:fd:c7:36:aa:e9:34:b4:ea:89:5d:
         4e:8d:e4:c9:3e:f4:dd:6b:a3:94:4e:66:fd:88:f0:14:74:28:
         c9:70:9f:d9:95:2b:88:50:f9:4c:73:84:8b:b7:e0:de:bd:2b:
         b6:01:da:5b:36:1d:0f:c1:58:66:af:93:46:72:dd:fd:a4:8f:
         ea:1f:0b:54:0b:dc:f5:87:d9:2a:81:86:28:02:30:2a:d7:58:
         57:e0:51:d7:9d:fd:04:98:f4:c5:cc:4c:aa:3f:69:64:46:e6:
         9c:9f:30:ed:56:8d:83:57:4b:cf:3e:7e:b5:a2:0d:71:71:dd:
         51:55:15:bc:46:2d:f6:5d:b5:6c:3b:29:35:25:01:bd:3e:1b:
         56:fb:1b:c8:c4:1f:2c:55:e9:32:4e:1f:56:9f:10:08:50:f3:
         d0:0d:08:15
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5
RkUwNzExMC8GA1UEBRMoN0JENEQ1QzVBOEVGNUNERkM3NEM1OUEwOTM2NDU5NEU1
RUY5RkFFNzAeFw0yNDEyMDQxOTI3MzNaFw0yNTA3MzAwMDAwMDBaMBgxFjAUBgNV
BAMTDTY3NTBhZDI1LWIyOWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDX5icc/x8oGGK3t5CbU+28HQEadL3vWutEwQvc817AZemFPc1l56Sne07NOZeH
/uMSbztTFvGl2iD0RvdD6pk2lgos7oJt/hj9WXSkq+oNfFb7I8M6nR17cHY6IYSr
9piU99EJMqO3w/IM+X3NWYVIEjW0sWnASwM2t98vXwcbfdKcFnoZA7kvkMBzZaVk
qngEmHw7mTe9NRkbdYK9O1N1e7G89QNSOQFcmiDa9CjN3DGzgOv/3nmULgxBfp1S
aK8q9jSrPmiwJ8Ycn3+y/U2LABHcgbwo1iiBHV4jaPtM9W0cAFMYzF0OeHJFXGod
qODFNU73KKq7Egs5VE8YASZtAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUQX4/xqq9
YIloiqP/druZdduY9iIwHwYDVR0jBBgwFoAUe9TVxajvXN/HTFmgk2RZTl75+ucw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlGRTA3L0ExNkE4OERBMzA2
QTExRUE5OThDOEYzMEM0RjlBRTAyL2U5VFZ4YWp2WE5fSFRGbWdrMlJaVGw3NS11
Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvZTlUVnhhanZYTl9IVEZtZ2syUlpUbDc1LXVjLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
RkUwNy9BMTZBODhEQTMwNkExMUVBOTk4QzhGMzBDNEY5QUUwMi9DRjgzNDQwNEIy
NzUxMUVGQTYxNEQwN0VDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAnv9TDANBgkqhkiG9w0BAQsFAAOCAQEANrThs7UMHSlWOFDb
WYXfy5t7aJ441RVFJpq+HKaLnb9o3eeUu1V8mgSHvb0jed9iK9NKNrT3hNurbUhS
B6ef5R48R6WsdMVwOnk+2YcVlCJx6MP4RLrqGloiY7sBs5m7jV79xzaq6TS06old
To3kyT703WujlE5m/YjwFHQoyXCf2ZUriFD5THOEi7fg3r0rtgHaWzYdD8FYZq+T
RnLd/aSP6h8LVAvc9YfZKoGGKAIwKtdYV+BR1539BJj0xcxMqj9pZEbmnJ8w7VaN
g1dLzz5+taINcXHdUVUVvEYt9l21bDspNSUBvT4bVvsbyMQfLFXpMk4fVp8QCFDz
0A0IFQ==
-----END CERTIFICATE-----
Generated at Thu Dec 26 22:30:59 2024 by rpki-client on console-fra.rpki-client.org