Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911DF1F/F5CB6E6A5C5311EBB6627853C4F9AE02/E9ECC32008C611EDBC862E48C4F9AE02.roa
File:                     E9ECC32008C611EDBC862E48C4F9AE02.roa (raw, json)
Hash identifier:          MLnnPRhSxrBAPO2PRy6L51ZnNG94AxrfvPay2pP4DPc=
Subject key identifier:   3C:EE:06:98:A6:63:4E:72:B6:87:E8:68:99:A9:E8:4C:9D:27:90:65
Certificate issuer:       /CN=A911DF1F/serialNumber=D37179CBB97D680E6A80DC12EE422FE8B6E363F5
Certificate serial:       0621
Authority key identifier: D3:71:79:CB:B9:7D:68:0E:6A:80:DC:12:EE:42:2F:E8:B6:E3:63:F5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/03F5y7l9aA5qgNwS7kIv6LbjY_U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911DF1F/F5CB6E6A5C5311EBB6627853C4F9AE02/E9ECC32008C611EDBC862E48C4F9AE02.roa
Signing time:             Fri 10 Nov 2023 23:31:38 +0000
ROA not before:           Fri 10 Nov 2023 23:31:38 +0000
ROA not after:            Mon 30 Dec 2024 00:00:00 +0000
asID:                     9289
IP address blocks:        123.1.151.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911DF1F/F5CB6E6A5C5311EBB6627853C4F9AE02/03F5y7l9aA5qgNwS7kIv6LbjY_U.crl
                          rsync://rpki.apnic.net/member_repository/A911DF1F/F5CB6E6A5C5311EBB6627853C4F9AE02/03F5y7l9aA5qgNwS7kIv6LbjY_U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/03F5y7l9aA5qgNwS7kIv6LbjY_U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 14 Jun 2024 00:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1569 (0x621)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911DF1F/serialNumber=D37179CBB97D680E6A80DC12EE422FE8B6E363F5
        Validity
            Not Before: Nov 10 23:31:38 2023 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=654ebd5a-709c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:70:b5:a6:db:bf:7a:1c:62:c3:41:a5:3a:ae:
                    15:16:3b:8e:f8:65:81:f1:86:98:72:b2:fd:ab:6b:
                    1c:58:e2:4f:bc:29:d4:c2:17:c8:7f:2d:b1:11:0e:
                    91:2e:ca:c8:e3:b8:13:5e:0e:7b:e6:7e:4f:ae:ba:
                    39:36:67:69:ad:0d:17:9f:52:6d:1a:d4:b7:01:73:
                    c2:1a:c7:1b:de:a0:3b:80:a2:a3:a2:93:06:8f:c6:
                    61:43:46:93:db:42:13:32:55:58:0f:36:4d:0f:50:
                    bc:85:7a:0b:35:13:8a:73:0f:6d:3e:77:d6:54:e0:
                    87:b6:11:7d:ad:74:14:3a:d9:1c:d7:0f:73:3a:dd:
                    93:5a:bc:20:19:a7:d7:de:a3:7f:33:c5:1d:f4:61:
                    4b:54:77:45:a6:3b:45:ab:46:78:75:39:5f:f8:ff:
                    5e:1f:41:0f:77:3c:0a:17:c7:37:1e:5f:f6:d1:e2:
                    c6:7a:a6:e2:5b:f0:e3:ba:7b:5a:95:13:1f:92:2d:
                    31:11:fc:1e:84:b6:e7:a2:50:5b:d6:b1:3f:d4:a3:
                    39:2f:f2:de:b5:20:e3:83:75:2b:a0:63:48:f3:ae:
                    20:71:98:33:dd:1f:b2:e2:e9:53:c5:94:3d:00:28:
                    4d:34:65:c1:2b:40:85:38:87:87:ad:ca:2c:93:d6:
                    25:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:EE:06:98:A6:63:4E:72:B6:87:E8:68:99:A9:E8:4C:9D:27:90:65
            X509v3 Authority Key Identifier:
                keyid:D3:71:79:CB:B9:7D:68:0E:6A:80:DC:12:EE:42:2F:E8:B6:E3:63:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911DF1F/F5CB6E6A5C5311EBB6627853C4F9AE02/03F5y7l9aA5qgNwS7kIv6LbjY_U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/03F5y7l9aA5qgNwS7kIv6LbjY_U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DF1F/F5CB6E6A5C5311EBB6627853C4F9AE02/E9ECC32008C611EDBC862E48C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.1.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:06:52:c8:0f:01:56:66:38:d8:c1:fe:0b:ef:5c:9d:e9:8c:
         2b:7c:37:70:9e:6f:35:e3:d2:3a:25:d8:b5:ea:41:16:81:57:
         fc:93:f5:a6:e9:b0:47:6b:1b:c3:f6:f0:5e:d0:ca:cc:76:06:
         b4:35:b5:f4:85:89:f3:ed:32:f1:3e:9b:a0:6e:b2:55:05:88:
         6b:0b:dc:1a:41:d9:61:48:03:c2:3d:fb:d5:ae:b9:37:49:bc:
         78:db:d6:74:5d:19:8c:08:1e:21:6f:f5:94:20:32:f1:5f:0d:
         a7:72:a3:c8:77:1c:6c:73:52:76:3f:09:a4:fb:c8:5d:82:b0:
         33:a8:14:2b:5a:ad:73:2d:ad:c1:f8:01:3c:8e:13:ad:1d:92:
         e0:28:4b:fb:55:e2:62:74:f7:5f:a7:1f:31:4d:7f:fe:95:03:
         39:78:bf:6a:4c:0c:3a:97:cf:06:a0:a2:96:38:f4:b4:ef:3d:
         7a:99:b5:38:23:79:3c:09:bb:ee:10:34:84:df:ee:3e:8d:05:
         41:e7:dd:24:b4:2a:b6:b8:db:55:2e:47:65:d6:2a:1f:90:e4:
         97:04:3d:49:a8:37:19:d6:0b:cd:2d:4b:09:b4:c4:2c:06:28:
         39:09:84:30:44:92:39:c6:dc:3b:41:79:ce:08:95:2a:02:a2:
         73:41:aa:a8
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBiEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MURGMUYxMTAvBgNVBAUTKEQzNzE3OUNCQjk3RDY4MEU2QTgwREMxMkVFNDIyRkU4
QjZFMzYzRjUwHhcNMjMxMTEwMjMzMTM4WhcNMjQxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NTRlYmQ1YS03MDljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0HC1ptu/ehxiw0GlOq4VFjuO+GWB8YaYcrL9q2scWOJPvCnUwhfIfy2xEQ6R
LsrI47gTXg575n5Prro5NmdprQ0Xn1JtGtS3AXPCGscb3qA7gKKjopMGj8ZhQ0aT
20ITMlVYDzZND1C8hXoLNROKcw9tPnfWVOCHthF9rXQUOtkc1w9zOt2TWrwgGafX
3qN/M8Ud9GFLVHdFpjtFq0Z4dTlf+P9eH0EPdzwKF8c3Hl/20eLGeqbiW/Djunta
lRMfki0xEfwehLbnolBb1rE/1KM5L/LetSDjg3UroGNI864gcZgz3R+y4ulTxZQ9
AChNNGXBK0CFOIeHrcosk9YlSwIDAQABo4IClTCCApEwHQYDVR0OBBYEFDzuBpim
Y05ytofoaJmp6EydJ5BlMB8GA1UdIwQYMBaAFNNxecu5fWgOaoDcEu5CL+i242P1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExREYxRi9GNUNCNkU2QTVD
NTMxMUVCQjY2Mjc4NTNDNEY5QUUwMi8wM0Y1eTdsOWFBNXFnTndTN2tJdjZMYmpZ
X1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzAzRjV5N2w5YUE1cWdOd1M3a0l2NkxiallfVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MURGMUYvRjVDQjZFNkE1QzUzMTFFQkI2NjI3ODUzQzRGOUFFMDIvRTlFQ0MzMjAw
OEM2MTFFREJDODYyRTQ4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAB7AZcwDQYJKoZIhvcNAQELBQADggEBAA8GUsgPAVZmONjB
/gvvXJ3pjCt8N3CebzXj0jol2LXqQRaBV/yT9abpsEdrG8P28F7Qysx2BrQ1tfSF
ifPtMvE+m6BuslUFiGsL3BpB2WFIA8I9+9WuuTdJvHjb1nRdGYwIHiFv9ZQgMvFf
Dadyo8h3HGxzUnY/CaT7yF2CsDOoFCtarXMtrcH4ATyOE60dkuAoS/tV4mJ091+n
HzFNf/6VAzl4v2pMDDqXzwagopY49LTvPXqZtTgjeTwJu+4QNITf7j6NBUHn3SS0
Kra421UuR2XWKh+Q5JcEPUmoNxnWC80tSwm0xCwGKDkJhDBEkjnG3DtBec4IlSoC
onNBqqg=
-----END CERTIFICATE-----
Generated at Fri Jun 7 02:20:47 2024 by rpki-client on console-fra.rpki-client.org