Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/BBD1CBAAE04611EC8B00CD1BC4F9AE02.roa
File:                     BBD1CBAAE04611EC8B00CD1BC4F9AE02.roa (raw, json)
Hash identifier:          lrTvc/wwjif2VBKHTJ+yb5H7Qqs1DfDS/+r68XW6LR8=
Subject key identifier:   12:79:8F:BB:D1:D6:78:79:C0:42:6A:66:7B:DD:88:2D:F7:E4:64:35
Certificate issuer:       /CN=A91262CA/serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
Certificate serial:       037B
Authority key identifier: 77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/BBD1CBAAE04611EC8B00CD1BC4F9AE02.roa
Signing time:             Thu 27 Jul 2023 02:03:58 +0000
ROA not before:           Thu 27 Jul 2023 02:03:58 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     23873
IP address blocks:        203.146.182.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl
                          rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 20 Jun 2024 02:50:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 891 (0x37b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91262CA/serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
        Validity
            Not Before: Jul 27 02:03:58 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=64c1d08e-6805
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:29:97:09:e7:ab:c5:87:84:1a:96:cb:ae:24:
                    57:db:ab:b5:45:6d:24:55:ad:41:ca:d7:06:18:7e:
                    b8:a7:f4:13:51:69:d8:54:ad:78:bc:aa:98:4d:1c:
                    9f:8b:86:71:59:f9:f8:71:c6:f3:f6:10:ca:8c:2c:
                    00:c2:fb:77:24:5c:77:40:fb:5b:28:fd:08:6d:e3:
                    df:ad:75:7f:db:23:73:1e:29:44:74:0c:c7:37:39:
                    30:c1:76:d7:fa:08:cf:bc:83:6b:10:37:fb:9c:e7:
                    c0:10:f5:de:5e:c3:e5:21:30:b0:39:a5:de:f7:b2:
                    af:50:0d:f9:27:c0:d2:b9:22:75:2c:81:18:d8:c8:
                    11:6c:22:9c:fb:a9:11:36:c9:a0:a9:78:a0:61:89:
                    ee:8d:32:31:d9:16:41:02:c9:de:7b:56:44:41:b1:
                    e3:d9:4e:14:1e:9a:a6:74:d8:04:14:0a:d4:de:a2:
                    c9:d9:2b:5b:ca:56:9e:f0:d9:d5:cf:ee:0b:f7:59:
                    44:12:c6:ca:2a:07:c2:47:f2:92:79:27:f2:21:8f:
                    4c:43:0a:43:48:73:2a:77:7e:9d:7c:5d:26:d6:3d:
                    70:d5:31:91:dd:a0:77:5e:70:66:6b:9c:58:87:82:
                    ae:99:3f:ae:c4:61:cf:91:87:a8:6c:7c:ec:7f:d0:
                    ec:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:79:8F:BB:D1:D6:78:79:C0:42:6A:66:7B:DD:88:2D:F7:E4:64:35
            X509v3 Authority Key Identifier:
                keyid:77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/BBD1CBAAE04611EC8B00CD1BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.146.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:17:45:d5:d7:aa:1a:bc:a6:20:65:79:8f:96:35:ef:fa:81:
         49:f2:f7:48:03:5e:8a:a4:de:a2:a8:1b:97:a8:5f:89:b7:8f:
         21:de:9a:94:8d:5b:bf:c1:8c:60:f1:75:d3:10:16:85:9e:a9:
         ea:4b:8c:65:a0:82:cd:c8:75:bf:f1:61:f8:69:28:a4:a7:bd:
         78:ec:24:aa:1e:d3:69:20:f2:ef:01:50:d9:b4:2d:17:3b:72:
         9f:95:83:9e:d6:86:4c:5e:b4:7c:2a:76:63:06:e6:f8:36:cc:
         de:1c:05:41:1f:95:ba:28:25:e8:c1:9f:12:64:bf:65:59:51:
         63:c0:bc:1f:ac:fa:29:e6:eb:95:73:65:f0:2e:39:ef:b3:17:
         02:40:f8:a5:ca:7b:72:85:62:61:d5:e9:ad:ad:55:27:f4:85:
         50:1d:4f:f2:35:59:0f:d3:d2:2c:2c:11:01:b0:1a:3c:5c:eb:
         02:0c:0a:18:fc:0c:56:87:1c:05:7e:dc:b8:5a:86:aa:f5:a4:
         a6:b9:19:64:f8:11:79:fb:e7:cf:29:9e:63:c2:ed:67:79:33:
         58:36:23:65:0d:21:d9:e0:8a:93:29:ca:b6:29:3c:5a:84:1e:
         fa:9c:c9:b6:36:b6:9c:00:3f:8a:99:d6:a7:60:8c:bf:7e:30:
         55:4f:da:6b
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICA3swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjYyQ0ExMTAvBgNVBAUTKDc3QTIwMUM1OEVCM0I0MjA4QzkxQkE3RUNFRDkzNkU1
OTVFNjFBMTkwHhcNMjMwNzI3MDIwMzU4WhcNMjQwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NGMxZDA4ZS02ODA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuymXCeerxYeEGpbLriRX26u1RW0kVa1BytcGGH64p/QTUWnYVK14vKqYTRyf
i4ZxWfn4ccbz9hDKjCwAwvt3JFx3QPtbKP0IbePfrXV/2yNzHilEdAzHNzkwwXbX
+gjPvINrEDf7nOfAEPXeXsPlITCwOaXe97KvUA35J8DSuSJ1LIEY2MgRbCKc+6kR
NsmgqXigYYnujTIx2RZBAsnee1ZEQbHj2U4UHpqmdNgEFArU3qLJ2Stbylae8NnV
z+4L91lEEsbKKgfCR/KSeSfyIY9MQwpDSHMqd36dfF0m1j1w1TGR3aB3XnBma5xY
h4KumT+uxGHPkYeobHzsf9DsnQIDAQABo4IClTCCApEwHQYDVR0OBBYEFBJ5j7vR
1nh5wEJqZnvdiC335GQ1MB8GA1UdIwQYMBaAFHeiAcWOs7QgjJG6fs7ZNuWV5hoZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjJDQS9GNUVEQzdGQzhB
NTcxMUVDOTZFQkMwMTRDNEY5QUUwMi9kNklCeFk2enRDQ01rYnAtenRrMjVaWG1H
aGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2Q2SUJ4WTZ6dENDTWticC16dGsyNVpYbUdoay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MjYyQ0EvRjVFREM3RkM4QTU3MTFFQzk2RUJDMDE0QzRGOUFFMDIvQkJEMUNCQUFF
MDQ2MTFFQzhCMDBDRDFCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADLkrYwDQYJKoZIhvcNAQELBQADggEBAIQXRdXXqhq8piBl
eY+WNe/6gUny90gDXoqk3qKoG5eoX4m3jyHempSNW7/BjGDxddMQFoWeqepLjGWg
gs3Idb/xYfhpKKSnvXjsJKoe02kg8u8BUNm0LRc7cp+Vg57WhkxetHwqdmMG5vg2
zN4cBUEflbooJejBnxJkv2VZUWPAvB+s+inm65VzZfAuOe+zFwJA+KXKe3KFYmHV
6a2tVSf0hVAdT/I1WQ/T0iwsEQGwGjxc6wIMChj8DFaHHAV+3Lhahqr1pKa5GWT4
EXn7588pnmPC7Wd5M1g2I2UNIdngipMpyrYpPFqEHvqcybY2tpwAP4qZ1qdgjL9+
MFVP2ms=
-----END CERTIFICATE-----
Generated at Thu Jun 13 04:12:04 2024 by rpki-client on console-ams.rpki-client.org