Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB193/93D4E490F63111EE9ACBE221C4F9AE02/0E3462143D2D11EFA4B90A1EC4F9AE02.roa
File:                     0E3462143D2D11EFA4B90A1EC4F9AE02.roa (raw, json)
Hash identifier:          WuVOWMIZsWaqgCf62FxXtIQArid3aP/swI50L4Fc9Qs=
Subject key identifier:   80:FF:74:56:18:21:C6:8F:1D:A3:72:9A:90:7B:F2:FB:05:1D:D8:7D
Certificate issuer:       /CN=A91AB193/serialNumber=7B1AE27D3CF51499C5056E7DA873665E4E415179
Certificate serial:       3B
Authority key identifier: 7B:1A:E2:7D:3C:F5:14:99:C5:05:6E:7D:A8:73:66:5E:4E:41:51:79
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exrifTz1FJnFBW59qHNmXk5BUXk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AB193/93D4E490F63111EE9ACBE221C4F9AE02/0E3462143D2D11EFA4B90A1EC4F9AE02.roa
Signing time:             Mon 08 Jul 2024 13:21:59 +0000
ROA not before:           Mon 08 Jul 2024 13:21:59 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     137453
IP address blocks:        203.223.89.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AB193/93D4E490F63111EE9ACBE221C4F9AE02/exrifTz1FJnFBW59qHNmXk5BUXk.crl
                          rsync://rpki.apnic.net/member_repository/A91AB193/93D4E490F63111EE9ACBE221C4F9AE02/exrifTz1FJnFBW59qHNmXk5BUXk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exrifTz1FJnFBW59qHNmXk5BUXk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59 (0x3b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AB193/serialNumber=7B1AE27D3CF51499C5056E7DA873665E4E415179
        Validity
            Not Before: Jul  8 13:21:59 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=668be7f7-d121
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f7:19:1d:f9:15:c8:39:55:aa:e6:76:d9:5f:
                    32:b2:71:05:c8:63:3b:52:e3:90:3c:e0:2b:56:d6:
                    e3:35:15:94:32:18:16:cf:12:76:14:64:38:89:6a:
                    9d:c4:1d:3c:ce:9a:11:29:9c:34:7c:ab:5e:9a:77:
                    20:74:47:84:60:f4:14:26:e9:e1:95:40:ef:ef:7e:
                    a4:99:15:54:11:57:92:0e:3b:9f:76:d3:fa:d3:be:
                    de:6a:3b:96:bb:6b:13:17:f7:ca:da:71:f5:8c:64:
                    58:8e:46:71:a2:e3:e7:e3:62:1f:ff:c1:bf:47:b5:
                    0a:28:85:0d:31:69:38:99:57:1c:5b:c5:b6:1d:77:
                    65:35:d0:09:f0:e9:ec:69:b9:c0:02:2d:29:84:5f:
                    b4:8c:40:a9:e6:f3:5d:5b:b0:dd:dc:34:a8:a3:55:
                    4c:a6:7d:3a:76:ab:ef:0f:61:25:e0:6a:67:c4:05:
                    6f:8f:c8:e6:2f:31:02:0d:f4:e7:63:22:69:55:dc:
                    3f:bb:40:8f:f8:74:be:07:ce:13:ec:ba:b9:9a:06:
                    db:ce:10:39:b4:cf:3a:db:da:b4:89:a3:c8:92:98:
                    70:0f:c2:41:f9:42:c4:9e:3a:a1:a5:08:ea:46:9b:
                    e1:5e:9a:42:02:1f:6f:b8:a9:76:3f:5e:4c:47:72:
                    1e:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:FF:74:56:18:21:C6:8F:1D:A3:72:9A:90:7B:F2:FB:05:1D:D8:7D
            X509v3 Authority Key Identifier:
                keyid:7B:1A:E2:7D:3C:F5:14:99:C5:05:6E:7D:A8:73:66:5E:4E:41:51:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AB193/93D4E490F63111EE9ACBE221C4F9AE02/exrifTz1FJnFBW59qHNmXk5BUXk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exrifTz1FJnFBW59qHNmXk5BUXk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB193/93D4E490F63111EE9ACBE221C4F9AE02/0E3462143D2D11EFA4B90A1EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.223.89.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:30:2c:46:92:9b:d2:f8:c4:44:a9:f9:db:63:08:ed:dd:ce:
         cd:b7:d8:df:6d:09:8a:e1:c1:fb:d9:5a:2b:10:0a:0b:17:6a:
         98:9e:01:ee:00:48:ef:69:62:a6:bd:4d:fa:e9:91:1e:ef:7c:
         b7:06:f2:4a:a6:7c:dc:eb:9a:5e:4e:e9:a5:4e:d4:32:53:8e:
         e3:7b:56:21:a0:72:fc:78:6d:19:f3:1d:81:a7:56:91:50:a4:
         9b:aa:f9:b5:81:ff:6c:30:10:84:58:11:62:9c:cd:e5:06:8e:
         82:52:98:5b:ef:a9:07:1f:b5:ea:66:f7:80:88:5a:29:42:4f:
         48:6a:b0:7d:3f:70:f8:66:94:87:84:17:ec:85:c5:9b:e6:7d:
         60:3c:bd:5e:df:d7:9e:b0:45:46:77:40:42:51:9e:cc:68:7b:
         13:ab:8c:b0:dc:79:88:ef:17:9d:08:86:4e:07:00:0c:3e:3d:
         29:94:c9:48:6b:8d:34:1e:00:f2:42:5c:e1:ba:c1:de:b4:5e:
         99:05:f4:52:d2:28:df:1b:f0:ed:2f:20:69:58:91:ee:2c:26:
         b2:e2:36:24:d6:88:d3:e0:3a:05:4d:f0:75:eb:88:0f:cf:80:
         f7:68:7a:1b:58:66:21:6f:a9:04:bf:50:9d:68:94:24:99:07:
         57:dc:e0:bc
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBOzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB
QjE5MzExMC8GA1UEBRMoN0IxQUUyN0QzQ0Y1MTQ5OUM1MDU2RTdEQTg3MzY2NUU0
RTQxNTE3OTAeFw0yNDA3MDgxMzIxNTlaFw0yNTA3MDEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY2OGJlN2Y3LWQxMjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCw9xkd+RXIOVWq5nbZXzKycQXIYztS45A84CtW1uM1FZQyGBbPEnYUZDiJap3E
HTzOmhEpnDR8q16adyB0R4Rg9BQm6eGVQO/vfqSZFVQRV5IOO5920/rTvt5qO5a7
axMX98racfWMZFiORnGi4+fjYh//wb9HtQoohQ0xaTiZVxxbxbYdd2U10Anw6exp
ucACLSmEX7SMQKnm811bsN3cNKijVUymfTp2q+8PYSXgamfEBW+PyOYvMQIN9Odj
ImlV3D+7QI/4dL4HzhPsurmaBtvOEDm0zzrb2rSJo8iSmHAPwkH5QsSeOqGlCOpG
m+FemkICH2+4qXY/XkxHch47AgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUgP90Vhgh
xo8do3KakHvy+wUd2H0wHwYDVR0jBBgwFoAUexrifTz1FJnFBW59qHNmXk5BUXkw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFCMTkzLzkzRDRFNDkwRjYz
MTExRUU5QUNCRTIyMUM0RjlBRTAyL2V4cmlmVHoxRkpuRkJXNTlxSE5tWGs1QlVY
ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvZXhyaWZUejFGSm5GQlc1OXFITm1YazVCVVhrLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
QjE5My85M0Q0RTQ5MEY2MzExMUVFOUFDQkUyMjFDNEY5QUUwMi8wRTM0NjIxNDNE
MkQxMUVGQTRCOTBBMUVDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMvfWTANBgkqhkiG9w0BAQsFAAOCAQEALTAsRpKb0vjERKn5
22MI7d3OzbfY320JiuHB+9laKxAKCxdqmJ4B7gBI72lipr1N+umRHu98twbySqZ8
3OuaXk7ppU7UMlOO43tWIaBy/HhtGfMdgadWkVCkm6r5tYH/bDAQhFgRYpzN5QaO
glKYW++pBx+16mb3gIhaKUJPSGqwfT9w+GaUh4QX7IXFm+Z9YDy9Xt/XnrBFRndA
QlGezGh7E6uMsNx5iO8XnQiGTgcADD49KZTJSGuNNB4A8kJc4brB3rRemQX0UtIo
3xvw7S8gaViR7iwmsuI2JNaI0+A6BU3wdeuID8+A92h6G1hmIW+pBL9QnWiUJJkH
V9zgvA==
-----END CERTIFICATE-----
Generated at Sat Nov 23 06:13:19 2024 by rpki-client on console-ams.rpki-client.org