Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/9F79846406E911EE88450147C4F9AE02.roa
File:                     9F79846406E911EE88450147C4F9AE02.roa (raw, json)
Hash identifier:          +vq8vofoET5bBJDWanUe3KSHmg1KyghUUIJtgNyARZ8=
Subject key identifier:   CA:52:31:66:F2:E5:2C:D2:06:4A:52:B4:15:63:38:24:99:96:6C:D3
Certificate issuer:       /CN=A91A1818/serialNumber=92D456E99B60DCED148C93D594B6F431270A24C4
Certificate serial:       A9
Authority key identifier: 92:D4:56:E9:9B:60:DC:ED:14:8C:93:D5:94:B6:F4:31:27:0A:24:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/9F79846406E911EE88450147C4F9AE02.roa
Signing time:             Thu 14 Mar 2024 17:08:42 +0000
ROA not before:           Thu 14 Mar 2024 17:08:42 +0000
ROA not after:            Sun 01 Dec 2024 00:00:00 +0000
asID:                     16509
IP address blocks:        139.180.12.0/24 maxlen: 24
                          139.180.13.0/24 maxlen: 24
                          139.180.14.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.crl
                          rsync://rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 08 May 2024 06:37:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 169 (0xa9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A1818/serialNumber=92D456E99B60DCED148C93D594B6F431270A24C4
        Validity
            Not Before: Mar 14 17:08:42 2024 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=65f32f1a-4d74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:cb:cc:a0:d2:34:ce:16:52:d1:b6:4f:e5:0f:
                    38:a3:7f:93:6f:72:5f:6f:4c:a7:e3:3d:c2:88:ba:
                    7d:62:48:5e:15:f9:b0:04:21:36:72:0c:bd:94:a5:
                    a1:19:83:0e:e2:f4:ba:dd:e1:19:23:01:97:e5:38:
                    67:a1:ff:2d:3c:6c:c1:6d:bf:ff:94:8e:e1:aa:32:
                    bd:56:20:f9:79:ef:ed:93:77:cd:c1:d0:13:89:db:
                    22:70:5e:5a:fc:61:3d:70:4b:2f:99:8f:b1:79:1c:
                    d9:e2:e7:05:30:88:e4:2b:2b:df:3b:cd:34:a5:14:
                    0a:5f:dc:1f:c3:dc:8a:f3:14:d4:32:0d:d0:ed:90:
                    ad:5b:6e:b9:a9:51:47:79:92:cf:15:99:ea:f6:6f:
                    04:4c:33:02:ae:c9:d3:3e:2f:4d:8f:96:ad:27:3e:
                    87:a0:55:78:5f:5f:e6:2e:1a:fe:42:90:ed:f7:aa:
                    d5:1f:07:24:5b:6d:00:d5:7f:5e:3e:c3:a4:99:c6:
                    a5:e3:70:3b:dc:8e:33:f6:f5:b8:1b:73:25:19:b7:
                    3d:c3:e4:48:35:7c:15:53:64:c2:f2:ae:fa:5e:da:
                    8b:70:53:cd:35:d4:5d:26:e8:b3:16:6c:39:3a:2f:
                    68:5a:97:77:95:0c:9b:1a:7d:2e:4f:91:9b:dc:49:
                    e9:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:52:31:66:F2:E5:2C:D2:06:4A:52:B4:15:63:38:24:99:96:6C:D3
            X509v3 Authority Key Identifier:
                keyid:92:D4:56:E9:9B:60:DC:ED:14:8C:93:D5:94:B6:F4:31:27:0A:24:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/9F79846406E911EE88450147C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.180.12.0-139.180.14.255

    Signature Algorithm: sha256WithRSAEncryption
         45:2f:5f:c0:91:68:2d:75:b2:dc:3d:7a:7c:6e:dc:bb:5f:74:
         3b:13:b9:c3:44:de:d4:4a:a6:ac:60:57:01:f8:94:36:d8:0e:
         bb:3a:e9:76:61:55:c2:17:be:cf:53:78:b3:30:b7:ab:59:d0:
         3c:19:86:d5:b8:0d:cb:33:12:87:d9:ab:4b:a5:c5:0b:30:96:
         2c:05:d7:37:e2:07:9f:78:a2:3d:6e:1a:f2:18:42:82:48:72:
         d2:7b:f4:46:12:c1:bf:a6:3d:f4:31:ac:da:92:00:02:96:7a:
         e8:2e:2a:42:76:6e:59:74:24:83:68:39:9d:27:7a:39:ed:98:
         ea:0f:19:dd:95:fd:ca:19:f8:e0:5e:94:a8:c1:25:90:b0:e8:
         7d:69:63:05:25:87:fe:93:99:c7:52:3b:87:72:82:fc:c8:09:
         ce:9c:89:95:f3:5a:48:78:89:97:26:66:93:22:7a:4d:55:b1:
         fa:9b:21:8c:ae:e6:bf:ab:be:e6:2a:a8:25:d6:a5:22:01:3d:
         76:d7:3f:46:34:b4:07:c6:5e:9e:b8:0f:fd:fd:6d:02:42:72:
         7d:c0:2d:e0:13:34:02:56:d3:af:89:c3:88:7a:29:8e:30:21:
         30:24:1b:08:63:43:9d:90:4a:d3:4a:bd:76:76:ed:19:ac:58:
         9a:24:0a:f5
-----BEGIN CERTIFICATE-----
MIIFeTCCBGGgAwIBAgICAKkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTE4MTgxMTAvBgNVBAUTKDkyRDQ1NkU5OUI2MERDRUQxNDhDOTNENTk0QjZGNDMx
MjcwQTI0QzQwHhcNMjQwMzE0MTcwODQyWhcNMjQxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NWYzMmYxYS00ZDc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA9MvMoNI0zhZS0bZP5Q84o3+Tb3Jfb0yn4z3CiLp9YkheFfmwBCE2cgy9lKWh
GYMO4vS63eEZIwGX5Thnof8tPGzBbb//lI7hqjK9ViD5ee/tk3fNwdATidsicF5a
/GE9cEsvmY+xeRzZ4ucFMIjkKyvfO800pRQKX9wfw9yK8xTUMg3Q7ZCtW265qVFH
eZLPFZnq9m8ETDMCrsnTPi9Nj5atJz6HoFV4X1/mLhr+QpDt96rVHwckW20A1X9e
PsOkmcal43A73I4z9vW4G3MlGbc9w+RINXwVU2TC8q76XtqLcFPNNdRdJuizFmw5
Oi9oWpd3lQybGn0uT5Gb3EnpLQIDAQABo4ICnTCCApkwHQYDVR0OBBYEFMpSMWby
5SzSBkpStBVjOCSZlmzTMB8GA1UdIwQYMBaAFJLUVumbYNztFIyT1ZS29DEnCiTE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMTgxOC82OEVBNzNFQzA2
OUMxMUVFOEM2Njc4MTJDNEY5QUUwMi9rdFJXNlp0ZzNPMFVqSlBWbExiME1TY0tK
TVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2t0Ulc2WnRnM08wVWpKUFZsTGIwTVNjS0pNUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTE4MTgvNjhFQTczRUMwNjlDMTFFRThDNjY3ODEyQzRGOUFFMDIvOUY3OTg0NjQw
NkU5MTFFRTg4NDUwMTQ3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJwYIKwYBBQUHAQcBAf8E
GDAWMBQEAgABMA4wDAMEAou0DAMEAIu0DjANBgkqhkiG9w0BAQsFAAOCAQEARS9f
wJFoLXWy3D16fG7cu190OxO5w0Te1EqmrGBXAfiUNtgOuzrpdmFVwhe+z1N4szC3
q1nQPBmG1bgNyzMSh9mrS6XFCzCWLAXXN+IHn3iiPW4a8hhCgkhy0nv0RhLBv6Y9
9DGs2pIAApZ66C4qQnZuWXQkg2g5nSd6Oe2Y6g8Z3ZX9yhn44F6UqMElkLDofWlj
BSWH/pOZx1I7h3KC/MgJzpyJlfNaSHiJlyZmkyJ6TVWx+pshjK7mv6u+5iqoJdal
IgE9dtc/RjS0B8ZenrgP/f1tAkJyfcAt4BM0AlbTr4nDiHopjjAhMCQbCGNDnZBK
00q9dnbtGaxYmiQK9Q==
-----END CERTIFICATE-----
Generated at Wed May 1 07:55:40 2024 by rpki-client on console-fra.rpki-client.org