Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FECDA/9BA971A26F9C11E9A5074B2FC4F9AE02/E56FCF286F9E11E9B98EF633C4F9AE02.roa
File:                     E56FCF286F9E11E9B98EF633C4F9AE02.roa (raw, json)
Hash identifier:          HrD8wloe3iue1rkCggoa0BL5sTfzVaZdzTzTDbT0lGk=
Subject key identifier:   E8:22:F7:7B:4A:EB:6B:B5:F3:89:A3:7F:30:D6:93:32:85:85:BD:67
Certificate issuer:       /CN=A91FECDA/serialNumber=CCCE54EEAFBF93213CD992BCA1E5267D5052B3C7
Certificate serial:       0E1C
Authority key identifier: CC:CE:54:EE:AF:BF:93:21:3C:D9:92:BC:A1:E5:26:7D:50:52:B3:C7
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/zM5U7q-_kyE82ZK8oeUmfVBSs8c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FECDA/9BA971A26F9C11E9A5074B2FC4F9AE02/E56FCF286F9E11E9B98EF633C4F9AE02.roa
Signing time:             Fri 20 Oct 2023 18:06:38 +0000
ROA not before:           Fri 20 Oct 2023 18:06:38 +0000
ROA not after:            Mon 30 Dec 2024 00:00:00 +0000
asID:                     134684
IP address blocks:        193.119.0.0/24 maxlen: 24
                          193.119.1.0/24 maxlen: 24
                          193.119.2.0/24 maxlen: 24
                          193.119.3.0/24 maxlen: 24
                          193.119.4.0/24 maxlen: 24
                          193.119.5.0/24 maxlen: 24
                          193.119.6.0/24 maxlen: 24
                          193.119.7.0/24 maxlen: 24
                          193.119.8.0/24 maxlen: 24
                          193.119.9.0/24 maxlen: 24
                          193.119.10.0/24 maxlen: 24
                          193.119.11.0/24 maxlen: 24
                          193.119.12.0/24 maxlen: 24
                          193.119.13.0/24 maxlen: 24
                          193.119.14.0/24 maxlen: 24
                          193.119.15.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FECDA/9BA971A26F9C11E9A5074B2FC4F9AE02/zM5U7q-_kyE82ZK8oeUmfVBSs8c.crl
                          rsync://rpki.apnic.net/member_repository/A91FECDA/9BA971A26F9C11E9A5074B2FC4F9AE02/zM5U7q-_kyE82ZK8oeUmfVBSs8c.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/zM5U7q-_kyE82ZK8oeUmfVBSs8c.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 02 Apr 2024 14:50:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3612 (0xe1c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FECDA/serialNumber=CCCE54EEAFBF93213CD992BCA1E5267D5052B3C7
        Validity
            Not Before: Oct 20 18:06:38 2023 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=6532c1ae-8af9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b7:55:13:5f:30:24:2d:60:b4:5d:57:a0:1e:
                    ea:a2:58:1e:df:90:11:46:c0:2e:33:2c:9f:b1:a9:
                    ee:d2:79:32:ff:fe:c6:7f:15:f4:6e:75:86:11:b1:
                    1b:45:d0:58:16:10:4e:49:cd:eb:32:30:a2:3d:90:
                    99:ce:fa:50:cc:5c:fc:a8:3e:c3:7f:69:59:41:9b:
                    5d:ed:5b:01:b5:60:42:66:c9:ab:73:67:9b:be:63:
                    f0:f1:cb:5b:2e:4c:ac:91:40:cd:a5:09:15:52:30:
                    d7:bd:b4:a3:ac:ba:c0:6f:ca:75:35:63:a0:05:b0:
                    a5:38:13:b8:fa:19:19:c9:2b:b4:6c:7c:24:d9:99:
                    c1:7f:ee:84:36:04:57:db:97:2b:8a:2e:5b:c5:7e:
                    79:4c:f7:b8:a6:f6:e7:c2:97:41:44:13:21:0c:63:
                    02:de:91:b2:e9:16:cf:da:03:a3:00:df:7c:e3:43:
                    73:52:42:cf:e8:9f:c3:d9:bc:5e:8b:e9:0a:7a:2e:
                    2a:db:e2:a3:10:36:b2:a1:02:97:89:10:60:70:cd:
                    96:1e:41:c1:b6:41:f4:85:1b:05:39:b4:39:b2:54:
                    db:b9:14:42:d7:c6:d4:79:3c:01:56:4d:1f:b1:72:
                    97:37:dd:37:97:ae:af:38:e5:86:17:7e:e3:2c:f1:
                    99:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:22:F7:7B:4A:EB:6B:B5:F3:89:A3:7F:30:D6:93:32:85:85:BD:67
            X509v3 Authority Key Identifier:
                keyid:CC:CE:54:EE:AF:BF:93:21:3C:D9:92:BC:A1:E5:26:7D:50:52:B3:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FECDA/9BA971A26F9C11E9A5074B2FC4F9AE02/zM5U7q-_kyE82ZK8oeUmfVBSs8c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/zM5U7q-_kyE82ZK8oeUmfVBSs8c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FECDA/9BA971A26F9C11E9A5074B2FC4F9AE02/E56FCF286F9E11E9B98EF633C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.119.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         8e:7e:f9:80:e2:8a:b2:5c:47:31:f5:d8:e0:bd:4d:d6:fc:60:
         44:f2:a5:c5:31:9c:f4:a1:f1:a0:c4:20:54:4c:ec:7d:4f:8e:
         85:34:31:42:0f:f1:00:5a:e5:c1:b5:71:c4:2e:c7:6c:61:8b:
         3e:46:8d:ba:83:cd:ee:bc:0e:a1:57:3b:c1:be:6c:fe:98:a5:
         ec:7f:9c:2a:10:cc:40:66:15:63:5e:2d:2b:c8:1c:b4:29:b6:
         a6:3a:73:f8:5a:9d:e6:36:9a:d4:5d:43:0b:54:15:e4:b9:f2:
         f8:ca:df:68:00:04:74:3a:12:06:32:21:3e:18:bc:47:b8:f2:
         e7:26:a9:22:ca:30:cc:6c:2a:93:c6:f8:ea:43:9e:ca:d3:77:
         f0:7f:aa:8f:99:da:ba:53:03:fe:3c:c2:fb:94:eb:c4:bd:8e:
         d7:58:31:02:15:43:a9:67:5c:a2:1f:65:85:49:00:02:68:e6:
         3a:23:86:bf:33:e6:ef:c7:f3:ba:a0:7c:65:ef:be:56:8c:02:
         e8:47:f0:5b:a7:d5:47:ef:91:ae:ce:94:a7:6a:f7:a7:45:bc:
         68:43:56:37:f1:fc:e4:db:04:9d:56:f7:a2:f4:0e:ea:c0:2d:
         6c:b7:50:ce:03:ac:e6:8b:1e:d4:78:f3:1a:36:8e:e0:45:8c:
         21:b4:69:87
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICDhwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkVDREExMTAvBgNVBAUTKENDQ0U1NEVFQUZCRjkzMjEzQ0Q5OTJCQ0ExRTUyNjdE
NTA1MkIzQzcwHhcNMjMxMDIwMTgwNjM4WhcNMjQxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NTMyYzFhZS04YWY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAu7dVE18wJC1gtF1XoB7qolge35ARRsAuMyyfsanu0nky//7GfxX0bnWGEbEb
RdBYFhBOSc3rMjCiPZCZzvpQzFz8qD7Df2lZQZtd7VsBtWBCZsmrc2ebvmPw8ctb
LkyskUDNpQkVUjDXvbSjrLrAb8p1NWOgBbClOBO4+hkZySu0bHwk2ZnBf+6ENgRX
25crii5bxX55TPe4pvbnwpdBRBMhDGMC3pGy6RbP2gOjAN9840NzUkLP6J/D2bxe
i+kKei4q2+KjEDayoQKXiRBgcM2WHkHBtkH0hRsFObQ5slTbuRRC18bUeTwBVk0f
sXKXN903l66vOOWGF37jLPGZmQIDAQABo4IClTCCApEwHQYDVR0OBBYEFOgi93tK
62u184mjfzDWkzKFhb1nMB8GA1UdIwQYMBaAFMzOVO6vv5MhPNmSvKHlJn1QUrPH
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRUNEQS85QkE5NzFBMjZG
OUMxMUU5QTUwNzRCMkZDNEY5QUUwMi96TTVVN3EtX2t5RTgyWks4b2VVbWZWQlNz
OGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL3pNNVU3cS1fa3lFODJaSzhvZVVtZlZCU3M4Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RkVDREEvOUJBOTcxQTI2RjlDMTFFOUE1MDc0QjJGQzRGOUFFMDIvRTU2RkNGMjg2
RjlFMTFFOUI5OEVGNjMzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBATBdwAwDQYJKoZIhvcNAQELBQADggEBAI5++YDiirJcRzH1
2OC9Tdb8YETypcUxnPSh8aDEIFRM7H1PjoU0MUIP8QBa5cG1ccQux2xhiz5GjbqD
ze68DqFXO8G+bP6Ypex/nCoQzEBmFWNeLSvIHLQptqY6c/haneY2mtRdQwtUFeS5
8vjK32gABHQ6EgYyIT4YvEe48ucmqSLKMMxsKpPG+OpDnsrTd/B/qo+Z2rpTA/48
wvuU68S9jtdYMQIVQ6lnXKIfZYVJAAJo5jojhr8z5u/H87qgfGXvvlaMAuhH8Fun
1Ufvka7OlKdq96dFvGhDVjfx/OTbBJ1W96L0DurALWy3UM4DrOaLHtR48xo2juBF
jCG0aYc=
-----END CERTIFICATE-----
Generated at Tue Mar 26 21:07:08 2024 by rpki-client on console-fra.rpki-client.org