Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91106C7/77B69434320E11EFB6E0DA76C4F9AE02/8862654086CF11EF901ED838C4F9AE02.roa
File:                     8862654086CF11EF901ED838C4F9AE02.roa (raw, json)
Hash identifier:          FfPgO3eeUl8IdKgqCPYYQsbKqty7XuG6xdX4tJjDBxw=
Subject key identifier:   C8:B1:CD:39:41:EF:A8:BF:81:7E:00:D8:E0:1F:5D:5C:A7:7C:AD:9B
Certificate issuer:       /CN=A91106C7/serialNumber=78FBFCD8D532BFBBAB7D79C51A7738EA494C26B7
Certificate serial:       39
Authority key identifier: 78:FB:FC:D8:D5:32:BF:BB:AB:7D:79:C5:1A:77:38:EA:49:4C:26:B7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ePv82NUyv7urfXnFGnc46klMJrc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91106C7/77B69434320E11EFB6E0DA76C4F9AE02/8862654086CF11EF901ED838C4F9AE02.roa
Signing time:             Thu 10 Oct 2024 06:18:58 +0000
ROA not before:           Thu 10 Oct 2024 06:18:58 +0000
ROA not after:            Sun 31 Aug 2025 00:00:00 +0000
asID:                     152928
IP address blocks:        2001:df3:f640::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91106C7/77B69434320E11EFB6E0DA76C4F9AE02/ePv82NUyv7urfXnFGnc46klMJrc.crl
                          rsync://rpki.apnic.net/member_repository/A91106C7/77B69434320E11EFB6E0DA76C4F9AE02/ePv82NUyv7urfXnFGnc46klMJrc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ePv82NUyv7urfXnFGnc46klMJrc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 57 (0x39)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91106C7/serialNumber=78FBFCD8D532BFBBAB7D79C51A7738EA494C26B7
        Validity
            Not Before: Oct 10 06:18:58 2024 GMT
            Not After : Aug 31 00:00:00 2025 GMT
        Subject: CN=670771d1-9197
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:4a:65:88:5e:8c:9c:15:7f:63:6f:33:57:ee:
                    2f:8d:a8:8f:95:79:c6:ab:c5:13:e9:e5:c2:95:4e:
                    80:f2:49:49:84:69:3a:92:0d:18:e8:26:4d:64:f2:
                    83:1c:3c:82:8d:8d:7e:d7:8b:cd:15:8d:43:83:69:
                    6f:2b:36:65:45:d8:15:54:e5:36:2f:30:68:8c:11:
                    73:71:fe:96:76:08:6d:79:e9:80:06:67:a5:39:57:
                    5a:18:aa:bf:42:f0:56:7d:10:d9:3f:86:20:9c:bb:
                    aa:11:8a:be:14:ac:4b:46:2e:f6:09:cf:8a:46:ed:
                    e0:b7:73:85:ff:75:76:5a:ec:20:1f:66:9f:e6:42:
                    fc:52:c1:8b:12:ba:6d:29:b6:84:d9:02:50:94:45:
                    29:8a:ed:03:52:76:cf:45:17:e6:16:a0:92:55:80:
                    0b:9c:a0:7a:37:bf:0b:cb:81:78:ae:db:98:28:05:
                    a5:b2:24:f6:11:f5:66:0d:0a:a1:75:f1:3c:00:7a:
                    6d:84:70:83:bd:76:d0:b0:25:08:ba:90:1f:ff:d9:
                    d8:5f:b2:63:f9:a2:a5:f9:ab:fc:c1:aa:72:cb:ae:
                    3c:6f:aa:fc:9e:12:59:5b:d6:68:42:48:94:89:86:
                    b5:a1:b1:c8:7f:fc:51:80:d3:4f:b1:52:3e:5d:c3:
                    55:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:B1:CD:39:41:EF:A8:BF:81:7E:00:D8:E0:1F:5D:5C:A7:7C:AD:9B
            X509v3 Authority Key Identifier:
                keyid:78:FB:FC:D8:D5:32:BF:BB:AB:7D:79:C5:1A:77:38:EA:49:4C:26:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91106C7/77B69434320E11EFB6E0DA76C4F9AE02/ePv82NUyv7urfXnFGnc46klMJrc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ePv82NUyv7urfXnFGnc46klMJrc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91106C7/77B69434320E11EFB6E0DA76C4F9AE02/8862654086CF11EF901ED838C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df3:f640::/48

    Signature Algorithm: sha256WithRSAEncryption
         85:1f:88:15:87:52:bc:ee:62:4f:c2:ed:ce:c4:e8:8d:8b:f1:
         20:89:33:00:91:a3:37:cf:f3:6d:0d:b1:2f:4f:98:64:88:b9:
         69:10:2e:1b:22:a2:ec:5d:ad:ca:12:c9:c6:9a:d6:0e:96:f2:
         1e:b5:7d:b1:76:63:ce:72:d3:3f:64:88:97:de:98:d2:48:d6:
         6d:9d:52:19:d1:0d:d4:c2:54:db:73:c0:32:c9:15:b8:a0:a4:
         23:63:5b:d6:b0:21:0a:ac:ef:1d:ca:00:17:51:18:1d:fe:43:
         59:35:21:17:45:6a:2f:53:88:e0:b1:99:b8:67:69:ab:8f:05:
         ce:2a:9c:76:fc:c4:33:0a:13:d8:b4:33:8e:c9:2d:af:bc:71:
         36:d2:cd:08:d3:1f:44:40:06:1f:03:f5:7f:11:95:d4:b4:71:
         2f:d9:90:b4:e8:5c:c7:81:e6:9d:d9:e3:de:83:37:4d:7f:18:
         62:c4:e6:4f:eb:fe:75:26:16:d7:70:f1:fd:59:da:84:d4:11:
         bc:73:a1:2c:f8:97:4b:09:83:ee:4d:4e:34:17:25:76:96:55:
         16:e7:e5:8d:74:1e:fc:31:96:6f:7e:3f:b3:fe:f4:13:5a:39:
         86:1e:9a:43:e7:58:70:38:9b:53:49:81:a5:ce:7e:64:6d:3a:
         a8:8c:bc:dc
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgIBOTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx
MDZDNzExMC8GA1UEBRMoNzhGQkZDRDhENTMyQkZCQkFCN0Q3OUM1MUE3NzM4RUE0
OTRDMjZCNzAeFw0yNDEwMTAwNjE4NThaFw0yNTA4MzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY3MDc3MWQxLTkxOTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDySmWIXoycFX9jbzNX7i+NqI+VecarxRPp5cKVToDySUmEaTqSDRjoJk1k8oMc
PIKNjX7Xi80VjUODaW8rNmVF2BVU5TYvMGiMEXNx/pZ2CG156YAGZ6U5V1oYqr9C
8FZ9ENk/hiCcu6oRir4UrEtGLvYJz4pG7eC3c4X/dXZa7CAfZp/mQvxSwYsSum0p
toTZAlCURSmK7QNSds9FF+YWoJJVgAucoHo3vwvLgXiu25goBaWyJPYR9WYNCqF1
8TwAem2EcIO9dtCwJQi6kB//2dhfsmP5oqX5q/zBqnLLrjxvqvyeEllb1mhCSJSJ
hrWhsch//FGA00+xUj5dw1XHAgMBAAGjggKYMIIClDAdBgNVHQ4EFgQUyLHNOUHv
qL+BfgDY4B9dXKd8rZswHwYDVR0jBBgwFoAUePv82NUyv7urfXnFGnc46klMJrcw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEwNkM3Lzc3QjY5NDM0MzIw
RTExRUZCNkUwREE3NkM0RjlBRTAyL2VQdjgyTlV5djd1cmZYbkZHbmM0NmtsTUpy
Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvZVB2ODJOVXl2N3VyZlhuRkduYzQ2a2xNSnJjLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
MDZDNy83N0I2OTQzNDMyMEUxMUVGQjZFMERBNzZDNEY5QUUwMi84ODYyNjU0MDg2
Q0YxMUVGOTAxRUQ4MzhDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHACABDfP2QDANBgkqhkiG9w0BAQsFAAOCAQEAhR+IFYdSvO5i
T8LtzsTojYvxIIkzAJGjN8/zbQ2xL0+YZIi5aRAuGyKi7F2tyhLJxprWDpbyHrV9
sXZjznLTP2SIl96Y0kjWbZ1SGdEN1MJU23PAMskVuKCkI2Nb1rAhCqzvHcoAF1EY
Hf5DWTUhF0VqL1OI4LGZuGdpq48FziqcdvzEMwoT2LQzjsktr7xxNtLNCNMfREAG
HwP1fxGV1LRxL9mQtOhcx4Hmndnj3oM3TX8YYsTmT+v+dSYW13Dx/VnahNQRvHOh
LPiXSwmD7k1ONBcldpZVFufljXQe/DGWb34/s/70E1o5hh6aQ+dYcDibU0mBpc5+
ZG06qIy83A==
-----END CERTIFICATE-----
Generated at Sat Nov 23 06:21:21 2024 by rpki-client on console-fra.rpki-client.org