Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/9F79846406E911EE88450147C4F9AE02.roa
File:                     9F79846406E911EE88450147C4F9AE02.roa (raw, json)
Hash identifier:          VUMq+AnQ5vAh9348tyFEWeU9Ep6U+LrIKC3PKZ58L3M=
Subject key identifier:   04:7D:DD:7F:AA:20:DD:8E:89:2F:9A:84:F2:FF:D4:1C:94:29:AF:55
Certificate issuer:       /CN=A91A1818/serialNumber=92D456E99B60DCED148C93D594B6F431270A24C4
Certificate serial:       010A
Authority key identifier: 92:D4:56:E9:9B:60:DC:ED:14:8C:93:D5:94:B6:F4:31:27:0A:24:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/9F79846406E911EE88450147C4F9AE02.roa
Signing time:             Thu 05 Sep 2024 05:18:20 +0000
ROA not before:           Thu 05 Sep 2024 05:18:20 +0000
ROA not after:            Mon 01 Dec 2025 00:00:00 +0000
asID:                     16509
IP address blocks:        139.180.12.0/24 maxlen: 24
                          139.180.13.0/24 maxlen: 24
                          139.180.14.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.crl
                          rsync://rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 03:07:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 266 (0x10a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A1818/serialNumber=92D456E99B60DCED148C93D594B6F431270A24C4
        Validity
            Not Before: Sep  5 05:18:20 2024 GMT
            Not After : Dec  1 00:00:00 2025 GMT
        Subject: CN=66d93f1c-d7ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:47:08:20:5b:ee:59:5e:1d:48:61:7b:49:c4:
                    58:02:8b:d2:14:66:62:dc:9c:83:bc:78:d0:c7:86:
                    1c:db:4a:a5:56:a3:97:11:a3:63:8f:08:0b:ee:cb:
                    f0:11:6d:8e:bd:81:f3:23:a2:d6:a7:24:c8:2e:aa:
                    85:5a:8b:98:c3:90:61:c6:43:88:e4:b9:8c:a2:d0:
                    71:b2:03:1a:57:71:de:d3:84:05:1e:59:6c:6c:91:
                    75:ad:88:ea:ef:1c:59:46:19:b1:b2:01:1f:4c:bc:
                    3d:29:9e:4b:d0:4f:65:d3:2c:fb:4a:19:fc:53:56:
                    8b:d1:d6:c6:f1:c0:09:34:e1:22:14:d2:91:36:4d:
                    bb:b4:2f:b8:62:86:6f:72:2c:af:31:77:43:c6:63:
                    68:07:cd:c2:ee:a2:f5:de:03:99:8a:ae:54:d1:da:
                    03:6c:aa:73:46:dd:25:fe:e5:f6:fc:4f:dd:c6:49:
                    51:a1:4f:2e:ef:bb:0f:37:b6:e6:e9:78:37:0a:4c:
                    e2:cd:4e:be:69:9a:77:e5:36:12:a1:e2:7d:d3:cb:
                    71:78:7e:5b:75:89:c4:b6:de:a7:13:ef:13:f3:4c:
                    a7:ec:84:a6:1e:6d:1b:41:ea:02:e0:f8:22:05:5f:
                    19:4c:0b:32:eb:40:d2:85:11:d9:a3:ed:01:a1:51:
                    5e:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:7D:DD:7F:AA:20:DD:8E:89:2F:9A:84:F2:FF:D4:1C:94:29:AF:55
            X509v3 Authority Key Identifier:
                keyid:92:D4:56:E9:9B:60:DC:ED:14:8C:93:D5:94:B6:F4:31:27:0A:24:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/9F79846406E911EE88450147C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.180.12.0-139.180.14.255

    Signature Algorithm: sha256WithRSAEncryption
         b3:e1:4b:a2:c3:86:a0:96:58:cd:8e:07:53:0a:ff:c5:22:fe:
         a3:f1:10:7c:48:11:35:5e:a5:c2:a7:0b:f1:8f:6f:99:2d:85:
         e8:29:4f:a6:94:d4:6f:2d:86:f2:90:ca:58:e7:7c:8b:db:90:
         b3:85:23:32:31:5f:33:ff:21:c9:d9:85:d0:c0:f4:04:9b:61:
         ed:9b:b3:7a:75:c6:64:b7:30:13:fe:74:c2:86:2b:c3:37:b8:
         a7:62:62:ef:88:4c:38:58:ee:12:a8:2e:d2:1c:7c:cf:90:3a:
         e2:54:0e:8c:3a:b6:61:03:c8:d3:f0:bd:6b:dd:f3:e0:02:29:
         cb:b4:d0:0b:30:7f:a1:4b:ca:3d:8a:ab:c7:12:be:12:19:26:
         74:3e:7d:a5:67:c2:fb:25:fa:e0:26:a0:f5:ce:c8:87:2a:36:
         09:eb:e5:84:89:93:dd:ea:79:27:af:bb:df:d3:7f:cb:ec:c6:
         ab:e3:c0:3c:f4:4f:ef:d6:c5:f6:b6:5c:5a:19:e0:bf:83:22:
         36:a0:a2:c7:c6:59:4d:2b:cc:8e:9c:a7:7e:12:3a:d9:5e:92:
         3d:cb:75:e5:57:98:a2:0b:40:8c:76:6b:aa:8b:b2:6c:37:15:
         42:d5:0f:56:43:d9:c2:e5:52:02:a9:18:ce:11:59:1e:29:e8:
         dc:51:ae:d9
-----BEGIN CERTIFICATE-----
MIIFeTCCBGGgAwIBAgICAQowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTE4MTgxMTAvBgNVBAUTKDkyRDQ1NkU5OUI2MERDRUQxNDhDOTNENTk0QjZGNDMx
MjcwQTI0QzQwHhcNMjQwOTA1MDUxODIwWhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmQ5M2YxYy1kN2FjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvEcIIFvuWV4dSGF7ScRYAovSFGZi3JyDvHjQx4Yc20qlVqOXEaNjjwgL7svw
EW2OvYHzI6LWpyTILqqFWouYw5BhxkOI5LmMotBxsgMaV3He04QFHllsbJF1rYjq
7xxZRhmxsgEfTLw9KZ5L0E9l0yz7Shn8U1aL0dbG8cAJNOEiFNKRNk27tC+4YoZv
ciyvMXdDxmNoB83C7qL13gOZiq5U0doDbKpzRt0l/uX2/E/dxklRoU8u77sPN7bm
6Xg3CkzizU6+aZp35TYSoeJ908txeH5bdYnEtt6nE+8T80yn7ISmHm0bQeoC4Pgi
BV8ZTAsy60DShRHZo+0BoVFeiwIDAQABo4ICnTCCApkwHQYDVR0OBBYEFAR93X+q
IN2OiS+ahPL/1ByUKa9VMB8GA1UdIwQYMBaAFJLUVumbYNztFIyT1ZS29DEnCiTE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMTgxOC82OEVBNzNFQzA2
OUMxMUVFOEM2Njc4MTJDNEY5QUUwMi9rdFJXNlp0ZzNPMFVqSlBWbExiME1TY0tK
TVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2t0Ulc2WnRnM08wVWpKUFZsTGIwTVNjS0pNUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTE4MTgvNjhFQTczRUMwNjlDMTFFRThDNjY3ODEyQzRGOUFFMDIvOUY3OTg0NjQw
NkU5MTFFRTg4NDUwMTQ3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJwYIKwYBBQUHAQcBAf8E
GDAWMBQEAgABMA4wDAMEAou0DAMEAIu0DjANBgkqhkiG9w0BAQsFAAOCAQEAs+FL
osOGoJZYzY4HUwr/xSL+o/EQfEgRNV6lwqcL8Y9vmS2F6ClPppTUby2G8pDKWOd8
i9uQs4UjMjFfM/8hydmF0MD0BJth7ZuzenXGZLcwE/50woYrwze4p2Ji74hMOFju
Eqgu0hx8z5A64lQOjDq2YQPI0/C9a93z4AIpy7TQCzB/oUvKPYqrxxK+EhkmdD59
pWfC+yX64Cag9c7Ihyo2CevlhImT3ep5J6+739N/y+zGq+PAPPRP79bF9rZcWhng
v4MiNqCix8ZZTSvMjpynfhI62V6SPct15VeYogtAjHZrqouybDcVQtUPVkPZwuVS
AqkYzhFZHino3FGu2Q==
-----END CERTIFICATE-----
Generated at Thu Nov 21 05:06:02 2024 by rpki-client on console-fra.rpki-client.org