Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9123D9C/455942D650B211E9B5DB6A6BC4F9AE02/CC320712ACE011EAB535D034C4F9AE02.roa
File:                     CC320712ACE011EAB535D034C4F9AE02.roa (raw, json)
Hash identifier:          JYY7Jlcu8MvbqrTObq1zVkDo+73nlBcySqwLIuU2yn4=
Subject key identifier:   17:C7:13:8C:89:9F:B8:73:B9:29:1A:17:E1:5C:48:51:F0:A0:80:11
Certificate issuer:       /CN=A9123D9C/serialNumber=5B2CF0FB62F160F1838AEE3E6CDE07544DFF8BFF
Certificate serial:       0F58
Authority key identifier: 5B:2C:F0:FB:62:F1:60:F1:83:8A:EE:3E:6C:DE:07:54:4D:FF:8B:FF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9123D9C/455942D650B211E9B5DB6A6BC4F9AE02/CC320712ACE011EAB535D034C4F9AE02.roa
Signing time:             Thu 08 Feb 2024 18:15:58 +0000
ROA not before:           Thu 08 Feb 2024 18:15:58 +0000
ROA not after:            Thu 01 May 2025 00:00:00 +0000
asID:                     138467
IP address blocks:        2404:9ec0:5::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9123D9C/455942D650B211E9B5DB6A6BC4F9AE02/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.crl
                          rsync://rpki.apnic.net/member_repository/A9123D9C/455942D650B211E9B5DB6A6BC4F9AE02/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 May 2024 18:21:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3928 (0xf58)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9123D9C/serialNumber=5B2CF0FB62F160F1838AEE3E6CDE07544DFF8BFF
        Validity
            Not Before: Feb  8 18:15:58 2024 GMT
            Not After : May  1 00:00:00 2025 GMT
        Subject: CN=65c51a5e-6f43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ac:cf:b0:e7:b8:5b:64:ea:aa:1b:41:4b:8c:
                    d1:79:5d:f4:2d:c4:4a:f3:fa:15:af:f1:0d:a8:70:
                    e1:26:3e:d7:c5:f9:e5:89:69:f5:d4:97:a3:a1:13:
                    15:a9:f2:9c:e2:68:b0:6e:91:7a:6d:5d:47:28:af:
                    3a:15:9a:6e:53:92:b1:c5:60:cb:2e:da:51:d9:45:
                    18:b3:1d:49:78:b7:ae:85:fd:2c:ea:1d:66:e7:9a:
                    8f:2f:a6:99:d9:58:ee:89:a3:7f:bd:4c:16:ac:05:
                    71:41:65:19:62:27:4a:59:e7:85:f5:21:a6:ea:5d:
                    af:1b:b5:cb:4b:ed:fa:aa:9a:a2:99:04:eb:e8:67:
                    5a:04:6b:63:c1:df:ac:5d:a0:33:a6:1e:3e:b5:a9:
                    9e:90:dc:de:f1:3d:03:0c:a8:ab:76:1c:0d:80:0f:
                    04:ff:fd:d9:2c:27:7c:74:59:e6:3a:96:ed:4e:29:
                    61:4c:2a:fa:98:09:9f:2c:99:e3:bb:57:04:df:af:
                    3e:29:8b:58:3b:14:77:c4:a3:98:8d:b3:7b:88:d7:
                    0e:1a:b1:64:e0:f6:70:2a:8b:81:aa:b7:1e:7d:de:
                    a1:c2:77:26:4f:65:1f:0c:19:8e:02:ff:58:f1:3e:
                    af:24:3c:e9:71:ee:f9:94:26:b6:5c:ae:c1:e7:05:
                    87:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:C7:13:8C:89:9F:B8:73:B9:29:1A:17:E1:5C:48:51:F0:A0:80:11
            X509v3 Authority Key Identifier:
                keyid:5B:2C:F0:FB:62:F1:60:F1:83:8A:EE:3E:6C:DE:07:54:4D:FF:8B:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9123D9C/455942D650B211E9B5DB6A6BC4F9AE02/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123D9C/455942D650B211E9B5DB6A6BC4F9AE02/CC320712ACE011EAB535D034C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:9ec0:5::/48

    Signature Algorithm: sha256WithRSAEncryption
         84:35:0c:fc:97:6f:6e:46:38:ff:ae:03:7f:b4:0f:67:12:bf:
         b8:b0:2f:f4:b7:c1:4b:cc:7b:95:51:68:6e:32:de:c5:61:16:
         64:ae:61:47:bc:0b:f8:1d:e4:30:d2:b4:78:73:41:81:c8:b3:
         be:f0:39:6c:80:fa:c6:d1:1f:ec:84:27:13:0d:18:5b:2a:6a:
         e1:5a:d4:30:7c:db:bc:d4:32:ef:f6:ec:fe:76:6d:22:67:74:
         d4:47:54:19:03:51:e6:28:ba:7c:37:be:95:00:ff:be:78:74:
         ce:4f:e6:80:f7:c0:b2:84:15:8e:fe:7c:79:75:08:58:98:58:
         6e:97:57:e4:da:c8:8f:ca:5e:f1:70:a2:3a:3a:94:d6:38:8b:
         5c:00:87:f3:0a:14:87:2e:45:7d:c2:b2:8a:41:12:84:ab:d2:
         f9:9c:ec:6c:54:19:48:3d:e2:7f:ed:ff:a2:60:1b:89:cc:2a:
         2a:dd:67:e0:3d:bc:8e:c4:dc:a4:0c:63:9e:c4:58:29:0d:57:
         69:d7:e0:b8:2c:46:4f:f8:0b:59:58:51:9d:1a:43:ba:13:61:
         d8:3e:aa:43:c8:61:9c:9b:86:73:03:e0:dc:a2:68:ac:1f:2a:
         53:b2:6e:bb:fc:83:27:94:0d:87:a7:3d:22:56:34:23:74:5d:
         44:b3:62:fb
-----BEGIN CERTIFICATE-----
MIIFdDCCBFygAwIBAgICD1gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjNEOUMxMTAvBgNVBAUTKDVCMkNGMEZCNjJGMTYwRjE4MzhBRUUzRTZDREUwNzU0
NERGRjhCRkYwHhcNMjQwMjA4MTgxNTU4WhcNMjUwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NWM1MWE1ZS02ZjQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArazPsOe4W2TqqhtBS4zReV30LcRK8/oVr/ENqHDhJj7XxfnliWn11JejoRMV
qfKc4miwbpF6bV1HKK86FZpuU5KxxWDLLtpR2UUYsx1JeLeuhf0s6h1m55qPL6aZ
2VjuiaN/vUwWrAVxQWUZYidKWeeF9SGm6l2vG7XLS+36qpqimQTr6GdaBGtjwd+s
XaAzph4+tamekNze8T0DDKirdhwNgA8E//3ZLCd8dFnmOpbtTilhTCr6mAmfLJnj
u1cE368+KYtYOxR3xKOYjbN7iNcOGrFk4PZwKouBqrcefd6hwncmT2UfDBmOAv9Y
8T6vJDzpce75lCa2XK7B5wWHwQIDAQABo4ICmDCCApQwHQYDVR0OBBYEFBfHE4yJ
n7hzuSkaF+FcSFHwoIARMB8GA1UdIwQYMBaAFFss8Pti8WDxg4ruPmzeB1RN/4v/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyM0Q5Qy80NTU5NDJENjUw
QjIxMUU5QjVEQjZBNkJDNEY5QUUwMi9XeXp3LTJMeFlQR0RpdTQtYk40SFZFM19p
XzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1d5enctMkx4WVBHRGl1NC1iTjRIVkUzX2lfOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MjNEOUMvNDU1OTQyRDY1MEIyMTFFOUI1REI2QTZCQzRGOUFFMDIvQ0MzMjA3MTJB
Q0UwMTFFQUI1MzVEMDM0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E
EzARMA8EAgACMAkDBwAkBJ7AAAUwDQYJKoZIhvcNAQELBQADggEBAIQ1DPyXb25G
OP+uA3+0D2cSv7iwL/S3wUvMe5VRaG4y3sVhFmSuYUe8C/gd5DDStHhzQYHIs77w
OWyA+sbRH+yEJxMNGFsqauFa1DB827zUMu/27P52bSJndNRHVBkDUeYounw3vpUA
/754dM5P5oD3wLKEFY7+fHl1CFiYWG6XV+TayI/KXvFwojo6lNY4i1wAh/MKFIcu
RX3CsopBEoSr0vmc7GxUGUg94n/t/6JgG4nMKirdZ+A9vI7E3KQMY57EWCkNV2nX
4LgsRk/4C1lYUZ0aQ7oTYdg+qkPIYZybhnMD4NyiaKwfKlOybrv8gyeUDYenPSJW
NCN0XUSzYvs=
-----END CERTIFICATE-----
Generated at Thu May 16 20:25:39 2024 by rpki-client on console-ams.rpki-client.org