Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/45B5A3E81E0111E9A590C837C4F9AE02.roa
File:                     45B5A3E81E0111E9A590C837C4F9AE02.roa (raw, json)
Hash identifier:          EJstnFt5gHJ9dw/lKUhEgl7JH0Vx+GDpHY2egQyHMp0=
Subject key identifier:   7D:90:46:CA:CE:7E:16:AE:FF:15:F8:95:91:08:97:37:19:9B:29:3B
Certificate issuer:       /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Certificate serial:       36AB
Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/45B5A3E81E0111E9A590C837C4F9AE02.roa
Signing time:             Sat 08 Jul 2023 14:30:56 +0000
ROA not before:           Sat 08 Jul 2023 14:30:56 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     24214
IP address blocks:        210.86.137.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
                          rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 14:21:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13995 (0x36ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
        Validity
            Not Before: Jul  8 14:30:56 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=64a97320-4151
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a4:a9:2a:d3:7b:7e:e5:f7:81:b8:84:40:75:
                    c5:46:6c:b0:89:e4:63:0d:94:25:13:62:64:f2:63:
                    1b:1d:b5:ed:d5:4f:61:4c:37:df:da:e0:8d:0a:e6:
                    b1:61:7c:de:47:39:60:64:f2:40:38:43:70:c7:d2:
                    0d:7f:de:75:28:f9:9b:60:56:4b:1f:1e:1a:0c:6f:
                    66:29:cf:4f:a9:e2:7c:f8:8d:c2:34:4a:d7:d4:32:
                    a0:ff:31:ca:a3:27:e3:0b:88:b4:88:22:d8:f1:e6:
                    3a:97:d7:75:39:0f:6b:64:c0:54:da:4c:ee:1e:ed:
                    87:6d:9d:a7:7b:b2:2e:e4:3c:af:06:af:58:7a:a8:
                    2d:fc:22:c0:39:cc:79:b5:de:67:5a:f6:71:33:a4:
                    18:cf:23:25:07:42:a4:89:9b:94:f4:90:58:59:62:
                    fc:ce:d4:07:f1:bc:89:09:54:6b:fe:45:9a:a8:97:
                    2e:a8:26:0d:64:1d:3f:6b:15:68:82:1b:f1:32:74:
                    ff:5f:76:cd:a4:07:09:bd:f8:28:02:04:37:e3:a4:
                    12:f3:ad:db:32:e0:09:d3:37:b6:d4:e5:95:33:40:
                    b0:95:ff:7f:6b:5f:a5:d2:c6:f0:48:39:e0:54:2c:
                    d6:57:ed:81:af:84:57:b1:23:43:aa:1e:b5:95:0b:
                    58:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:90:46:CA:CE:7E:16:AE:FF:15:F8:95:91:08:97:37:19:9B:29:3B
            X509v3 Authority Key Identifier:
                keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/45B5A3E81E0111E9A590C837C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.86.137.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:4b:71:be:ee:b0:39:71:55:be:63:12:12:d8:f8:ee:b4:bf:
         e5:30:ad:ee:78:5a:79:45:5c:e5:b4:11:c1:09:9c:dd:af:8e:
         7c:f4:fd:a3:00:3a:d7:52:fc:2b:d4:36:09:4d:46:59:5c:ed:
         f5:20:0c:39:9a:d5:cf:ce:a2:b6:f4:9a:02:29:2a:ed:d6:b9:
         09:e0:08:f4:a7:2a:24:58:68:92:ac:5c:09:72:5f:a8:dc:b6:
         33:46:61:62:d9:e7:96:26:f6:6c:21:04:78:1d:02:aa:6e:9f:
         09:8c:1f:27:9d:6d:83:c3:dd:27:11:3f:9d:32:56:f4:6a:a4:
         14:21:db:f5:3c:77:03:21:5a:91:f0:d1:e1:ee:67:ce:4a:e2:
         25:7a:e3:e6:75:28:3e:b8:08:22:f0:90:22:2a:e1:8e:9f:84:
         be:74:5f:b4:1d:b9:21:69:17:90:a4:3b:41:3c:65:99:5b:1b:
         b2:7d:10:a8:38:f0:5b:2e:d1:bd:cd:06:1d:67:35:94:25:e8:
         db:20:26:cc:8f:6b:47:a0:46:c8:dd:2e:25:89:b9:35:ef:a5:
         9e:60:79:eb:4f:af:4c:96:e5:40:dc:3c:f0:ae:f7:d9:a6:8c:
         be:8b:d6:8a:e7:bd:55:f0:60:c2:ac:09:16:59:6a:7e:0d:fc:
         99:7c:43:36
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICNqswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzdBQkMxMTAvBgNVBAUTKDYxQkYzRUQ0QzNCRkJDMDkxNkVGOTQ4MEFBRkYyMjJB
NDM3QUYwMkMwHhcNMjMwNzA4MTQzMDU2WhcNMjQwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NGE5NzMyMC00MTUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyKSpKtN7fuX3gbiEQHXFRmywieRjDZQlE2Jk8mMbHbXt1U9hTDff2uCNCuax
YXzeRzlgZPJAOENwx9INf951KPmbYFZLHx4aDG9mKc9PqeJ8+I3CNErX1DKg/zHK
oyfjC4i0iCLY8eY6l9d1OQ9rZMBU2kzuHu2HbZ2ne7Iu5DyvBq9Yeqgt/CLAOcx5
td5nWvZxM6QYzyMlB0KkiZuU9JBYWWL8ztQH8byJCVRr/kWaqJcuqCYNZB0/axVo
ghvxMnT/X3bNpAcJvfgoAgQ346QS863bMuAJ0ze21OWVM0Cwlf9/a1+l0sbwSDng
VCzWV+2Br4RXsSNDqh61lQtYeQIDAQABo4IClTCCApEwHQYDVR0OBBYEFH2QRsrO
fhau/xX4lZEIlzcZmyk7MB8GA1UdIwQYMBaAFGG/PtTDv7wJFu+UgKr/IipDevAs
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzN0FCQy83MTNEOUZCMDFE
NzgxMUUyODI4NjhEQzQwOEIwMkNEMi9ZYjgtMU1PX3ZBa1c3NVNBcXY4aUtrTjY4
Q3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1liOC0xTU9fdkFrVzc1U0FxdjhpS2tONjhDdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzdBQkMvNzEzRDlGQjAxRDc4MTFFMjgyODY4REM0MDhCMDJDRDIvNDVCNUEzRTgx
RTAxMTFFOUE1OTBDODM3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADSVokwDQYJKoZIhvcNAQELBQADggEBAC9Lcb7usDlxVb5j
EhLY+O60v+Uwre54WnlFXOW0EcEJnN2vjnz0/aMAOtdS/CvUNglNRllc7fUgDDma
1c/Oorb0mgIpKu3WuQngCPSnKiRYaJKsXAlyX6jctjNGYWLZ55Ym9mwhBHgdAqpu
nwmMHyedbYPD3ScRP50yVvRqpBQh2/U8dwMhWpHw0eHuZ85K4iV64+Z1KD64CCLw
kCIq4Y6fhL50X7QduSFpF5CkO0E8ZZlbG7J9EKg48Fsu0b3NBh1nNZQl6NsgJsyP
a0egRsjdLiWJuTXvpZ5geetPr0yW5UDcPPCu99mmjL6L1ornvVXwYMKsCRZZan4N
/Jl8QzY=
-----END CERTIFICATE-----
Generated at Fri May 31 15:08:08 2024 by rpki-client on console-fra.rpki-client.org