Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FBE279DAA3ED11E99F59303AC4F9AE02.roa
File:                     FBE279DAA3ED11E99F59303AC4F9AE02.roa (raw, json)
Hash identifier:          12jNFwIOSxFt4Q26sLiqGPF6xM8mbtcS0r5VdmPlKzg=
Subject key identifier:   9D:D1:B7:8A:69:A5:EF:68:00:46:2F:70:00:5D:FB:B0:15:24:E8:BD
Certificate issuer:       /CN=A91CF4FE/serialNumber=16B564B758DFCD52C5CE891192E31B715B1CBFE8
Certificate serial:       33BD
Authority key identifier: 16:B5:64:B7:58:DF:CD:52:C5:CE:89:11:92:E3:1B:71:5B:1C:BF:E8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrVkt1jfzVLFzokRkuMbcVscv-g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FBE279DAA3ED11E99F59303AC4F9AE02.roa
Signing time:             Thu 31 Aug 2023 14:40:25 +0000
ROA not before:           Thu 31 Aug 2023 14:40:25 +0000
ROA not after:            Thu 31 Oct 2024 00:00:00 +0000
asID:                     131293
IP address blocks:        118.174.9.0/24 maxlen: 24
                          203.113.124.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.crl
                          rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrVkt1jfzVLFzokRkuMbcVscv-g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 14:28:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13245 (0x33bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CF4FE/serialNumber=16B564B758DFCD52C5CE891192E31B715B1CBFE8
        Validity
            Not Before: Aug 31 14:40:25 2023 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=64f0a658-b040
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:08:23:30:67:b9:9c:35:f2:2b:b1:a9:f5:25:
                    ae:12:47:ec:3d:ec:79:d1:a5:a9:15:8f:ae:fb:87:
                    33:3c:9f:b4:3a:3e:69:5f:0d:5b:d4:94:cd:36:67:
                    9b:ff:e3:9c:86:fa:42:c1:34:72:85:cb:f8:26:93:
                    f9:6a:86:e9:73:b7:d5:f9:1a:20:5d:55:c5:63:36:
                    53:8d:a0:d9:8b:e7:13:dc:76:a9:79:51:80:49:1e:
                    c9:c3:84:8a:a7:c4:50:47:b0:3f:62:11:ab:70:8a:
                    0c:4f:44:9b:c0:31:f8:8e:4a:4b:39:a9:0d:b6:c8:
                    c0:ab:25:b7:ff:97:cb:67:80:88:46:22:6e:ab:99:
                    3d:13:76:05:61:ff:64:74:3a:9c:f0:20:9c:7a:ed:
                    a8:1f:c3:b3:57:a3:ea:f1:9d:7e:2c:ca:11:36:95:
                    71:5b:8f:6a:84:c9:92:b6:b0:7a:62:5f:61:d3:9f:
                    9f:b0:dd:56:0a:de:74:13:48:ec:7e:b2:d0:cf:b2:
                    a4:54:a7:7b:a1:9c:10:a1:c8:75:4f:f2:a4:8b:1f:
                    5f:52:25:f3:d2:30:87:cb:13:ab:24:63:e6:a7:1c:
                    b1:6f:50:35:b1:dd:34:28:45:84:d2:f3:d9:ff:7e:
                    7d:0f:96:b4:a9:69:e3:c4:c9:f2:a5:56:78:bb:5b:
                    f7:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:D1:B7:8A:69:A5:EF:68:00:46:2F:70:00:5D:FB:B0:15:24:E8:BD
            X509v3 Authority Key Identifier:
                keyid:16:B5:64:B7:58:DF:CD:52:C5:CE:89:11:92:E3:1B:71:5B:1C:BF:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrVkt1jfzVLFzokRkuMbcVscv-g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FBE279DAA3ED11E99F59303AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.174.9.0/24
                  203.113.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:81:61:9a:52:70:c3:07:32:e0:ce:0a:6f:c0:c3:e7:c7:0e:
         20:0d:90:d4:0a:f0:aa:43:26:9e:b3:bb:b6:2f:19:11:47:63:
         7f:ae:ba:57:4e:97:47:81:9f:d6:89:6b:3f:8f:93:6e:5e:80:
         b0:e3:0d:e6:6d:2a:19:17:6b:4a:ab:15:6d:2d:96:cd:dd:69:
         97:e6:94:8a:9a:78:4c:94:b8:9f:e3:b8:d5:5d:5e:0e:58:d1:
         d7:d4:23:55:eb:f0:bf:bd:84:6b:75:5e:c6:db:09:8b:d7:4c:
         68:9e:2a:47:5d:81:09:c0:d7:65:6f:25:99:63:30:74:f8:71:
         4e:2a:78:a0:1e:8a:e6:2f:06:71:c0:d5:ff:6b:20:78:a1:b5:
         5d:79:17:c1:c5:1d:77:2b:1f:4f:0b:13:a2:e4:30:76:f9:06:
         d4:b5:8d:bf:0b:02:cf:7b:f7:bb:10:9b:37:8b:e2:db:ed:22:
         bc:e1:8c:3d:fe:cd:d2:3b:d9:46:bd:57:b4:84:a4:4e:03:a4:
         1a:f9:59:63:aa:90:98:a4:af:70:f9:2f:9c:51:e5:97:5a:14:
         c1:96:6f:aa:f6:24:0f:07:26:0a:22:4c:be:d5:e1:25:a1:ba:
         7f:25:74:a8:04:8e:b5:61:fe:a9:8f:fc:a4:04:fe:45:68:d5:
         fb:4d:a5:f3
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICM70wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0Y0RkUxMTAvBgNVBAUTKDE2QjU2NEI3NThERkNENTJDNUNFODkxMTkyRTMxQjcx
NUIxQ0JGRTgwHhcNMjMwODMxMTQ0MDI1WhcNMjQxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NGYwYTY1OC1iMDQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwQgjMGe5nDXyK7Gp9SWuEkfsPex50aWpFY+u+4czPJ+0Oj5pXw1b1JTNNmeb
/+OchvpCwTRyhcv4JpP5aobpc7fV+RogXVXFYzZTjaDZi+cT3HapeVGASR7Jw4SK
p8RQR7A/YhGrcIoMT0SbwDH4jkpLOakNtsjAqyW3/5fLZ4CIRiJuq5k9E3YFYf9k
dDqc8CCceu2oH8OzV6Pq8Z1+LMoRNpVxW49qhMmStrB6Yl9h05+fsN1WCt50E0js
frLQz7KkVKd7oZwQoch1T/Kkix9fUiXz0jCHyxOrJGPmpxyxb1A1sd00KEWE0vPZ
/359D5a0qWnjxMnypVZ4u1v3QwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFJ3Rt4pp
pe9oAEYvcABd+7AVJOi9MB8GA1UdIwQYMBaAFBa1ZLdY381Sxc6JEZLjG3FbHL/o
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjRGRS9CQTEzMTI0RTFE
ODUxMUUyQTc3OTk5REMwOEIwMkNEMi9GclZrdDFqZnpWTEZ6b2tSa3VNYmNWc2N2
LWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZyVmt0MWpmelZMRnpva1JrdU1iY1ZzY3YtZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Q0Y0RkUvQkExMzEyNEUxRDg1MTFFMkE3Nzk5OURDMDhCMDJDRDIvRkJFMjc5REFB
M0VEMTFFOTlGNTkzMDNBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBAB2rgkDBADLcXwwDQYJKoZIhvcNAQELBQADggEBAHiBYZpS
cMMHMuDOCm/Aw+fHDiANkNQK8KpDJp6zu7YvGRFHY3+uuldOl0eBn9aJaz+Pk25e
gLDjDeZtKhkXa0qrFW0tls3daZfmlIqaeEyUuJ/juNVdXg5Y0dfUI1Xr8L+9hGt1
XsbbCYvXTGieKkddgQnA12VvJZljMHT4cU4qeKAeiuYvBnHA1f9rIHihtV15F8HF
HXcrH08LE6LkMHb5BtS1jb8LAs9797sQmzeL4tvtIrzhjD3+zdI72Ua9V7SEpE4D
pBr5WWOqkJikr3D5L5xR5ZdaFMGWb6r2JA8HJgoiTL7V4SWhun8ldKgEjrVh/qmP
/KQE/kVo1ftNpfM=
-----END CERTIFICATE-----
Generated at Sat May 18 15:26:07 2024 by rpki-client on console-fra.rpki-client.org