Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B077/26C304EA906A11EEB3490627C4F9AE02/2B752026906B11EE8F088143C4F9AE02.roa
File:                     2B752026906B11EE8F088143C4F9AE02.roa (raw, json)
Hash identifier:          pmbJAheNFOhxQQhbXBEozs5HvMW28O8cu4rrDKnfYtY=
Subject key identifier:   CB:C9:60:1F:40:36:9A:C2:2D:4B:BE:60:FB:75:8A:B2:64:5D:5A:50
Certificate issuer:       /CN=A913B077/serialNumber=4BB80DD8E5B6ED2F5745585070333EF4A15D722B
Certificate serial:       04
Authority key identifier: 4B:B8:0D:D8:E5:B6:ED:2F:57:45:58:50:70:33:3E:F4:A1:5D:72:2B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S7gN2OW27S9XRVhQcDM-9KFdcis.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B077/26C304EA906A11EEB3490627C4F9AE02/2B752026906B11EE8F088143C4F9AE02.roa
Signing time:             Fri 01 Dec 2023 17:00:46 +0000
ROA not before:           Fri 01 Dec 2023 17:00:46 +0000
ROA not after:            Sun 02 Mar 2025 00:00:00 +0000
asID:                     9786
IP address blocks:        210.79.186.0/23 maxlen: 24
                          2001:df3:3c40::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B077/26C304EA906A11EEB3490627C4F9AE02/S7gN2OW27S9XRVhQcDM-9KFdcis.crl
                          rsync://rpki.apnic.net/member_repository/A913B077/26C304EA906A11EEB3490627C4F9AE02/S7gN2OW27S9XRVhQcDM-9KFdcis.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S7gN2OW27S9XRVhQcDM-9KFdcis.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B077/serialNumber=4BB80DD8E5B6ED2F5745585070333EF4A15D722B
        Validity
            Not Before: Dec  1 17:00:46 2023 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=656a113e-cfa1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:86:79:ce:9c:e3:3c:39:03:7c:4f:ca:23:a0:
                    5c:d6:df:ba:28:75:c2:aa:b6:a6:e7:a1:bc:f4:fb:
                    ac:29:48:54:db:42:01:bf:3e:dc:a5:b4:50:b3:60:
                    41:a8:e5:a5:4b:c7:50:78:02:0a:8c:72:b0:e4:12:
                    96:ab:a9:9c:a0:ce:d9:06:9e:f5:5a:28:8a:ec:2b:
                    15:15:01:9e:a4:66:a3:54:b7:12:41:4c:8c:09:de:
                    f9:c1:06:2a:c3:78:e1:c2:95:2d:3f:79:aa:49:7a:
                    59:de:f7:c5:ba:34:38:e0:2f:a8:8f:0e:1a:c4:09:
                    c6:f0:30:c2:03:68:d1:93:8a:f8:1d:56:75:28:ef:
                    93:cb:2f:ea:52:0c:12:c2:57:8f:7f:32:d7:ab:a0:
                    d4:b4:0b:66:39:ee:9f:3d:6d:f7:f6:ab:ec:fa:a7:
                    8d:1f:23:8a:eb:f5:2c:1e:d4:3d:ac:36:6b:d5:be:
                    79:58:b8:a1:25:c1:48:0c:1f:fc:22:e6:cc:8a:41:
                    40:47:7a:84:54:fa:43:5c:cd:97:8e:7f:f7:24:a1:
                    e1:2f:89:13:2a:0b:56:84:3a:4a:36:df:4b:1f:6d:
                    81:8e:e7:d1:84:f3:12:40:69:2f:7f:84:1f:72:30:
                    d3:c1:ee:60:17:d1:f8:b9:8e:f1:e5:5c:eb:34:76:
                    f8:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:C9:60:1F:40:36:9A:C2:2D:4B:BE:60:FB:75:8A:B2:64:5D:5A:50
            X509v3 Authority Key Identifier:
                keyid:4B:B8:0D:D8:E5:B6:ED:2F:57:45:58:50:70:33:3E:F4:A1:5D:72:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B077/26C304EA906A11EEB3490627C4F9AE02/S7gN2OW27S9XRVhQcDM-9KFdcis.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S7gN2OW27S9XRVhQcDM-9KFdcis.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B077/26C304EA906A11EEB3490627C4F9AE02/2B752026906B11EE8F088143C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.79.186.0/23
                IPv6:
                  2001:df3:3c40::/48

    Signature Algorithm: sha256WithRSAEncryption
         a5:8d:47:18:b1:b7:c2:09:5f:09:3d:61:fb:d6:83:03:b3:c5:
         59:21:fa:a0:bf:68:f1:9b:9a:7a:f5:b2:fc:ff:e4:f6:9e:8b:
         6b:4a:a3:fa:2a:91:b3:9c:90:8e:d3:6b:f8:9f:4f:a7:a2:94:
         6b:37:47:f2:0f:28:2d:1a:e8:87:b2:8c:a1:a8:7f:b7:97:fc:
         f2:9a:8c:31:60:ef:9f:1b:29:85:96:d3:06:d8:92:ed:30:c1:
         23:31:af:77:f3:28:2f:ea:b2:83:07:24:40:02:6a:84:9c:5b:
         ff:72:c8:18:48:69:15:61:4a:23:a3:4d:85:a4:74:e2:52:76:
         1d:e4:57:29:32:14:c0:aa:b0:ed:09:34:19:92:6c:87:71:30:
         2b:e4:04:30:c8:50:b7:bd:f1:4a:82:61:2f:45:b8:b0:24:08:
         ca:db:ab:9a:2e:1e:fb:aa:2a:89:4c:d1:47:a6:29:27:fc:b9:
         53:54:7b:6a:5e:e6:2e:6e:30:a2:53:8c:a9:02:a8:15:0c:3a:
         e1:58:b9:0c:fd:e8:f9:1b:0f:e5:9b:0e:16:78:0e:12:b5:19:
         f7:77:09:6e:a9:90:ac:e1:73:c6:da:d1:01:c1:e2:47:84:16:
         6c:cb:5c:71:df:79:ac:c8:8b:18:03:cb:28:ea:b4:b9:42:ee:
         d0:ac:27:40
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIBBDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz
QjA3NzExMC8GA1UEBRMoNEJCODBERDhFNUI2RUQyRjU3NDU1ODUwNzAzMzNFRjRB
MTVENzIyQjAeFw0yMzEyMDExNzAwNDZaFw0yNTAzMDIwMDAwMDBaMBgxFjAUBgNV
BAMTDTY1NmExMTNlLWNmYTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCchnnOnOM8OQN8T8ojoFzW37oodcKqtqbnobz0+6wpSFTbQgG/PtyltFCzYEGo
5aVLx1B4AgqMcrDkEparqZygztkGnvVaKIrsKxUVAZ6kZqNUtxJBTIwJ3vnBBirD
eOHClS0/eapJelne98W6NDjgL6iPDhrECcbwMMIDaNGTivgdVnUo75PLL+pSDBLC
V49/MteroNS0C2Y57p89bff2q+z6p40fI4rr9Swe1D2sNmvVvnlYuKElwUgMH/wi
5syKQUBHeoRU+kNczZeOf/ckoeEviRMqC1aEOko230sfbYGO59GE8xJAaS9/hB9y
MNPB7mAX0fi5jvHlXOs0dvg9AgMBAAGjggKmMIICojAdBgNVHQ4EFgQUy8lgH0A2
msItS75g+3WKsmRdWlAwHwYDVR0jBBgwFoAUS7gN2OW27S9XRVhQcDM+9KFdcisw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNCMDc3LzI2QzMwNEVBOTA2
QTExRUVCMzQ5MDYyN0M0RjlBRTAyL1M3Z04yT1cyN1M5WFJWaFFjRE0tOUtGZGNp
cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvUzdnTjJPVzI3UzlYUlZoUWNETS05S0ZkY2lzLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
QjA3Ny8yNkMzMDRFQTkwNkExMUVFQjM0OTA2MjdDNEY5QUUwMi8yQjc1MjAyNjkw
NkIxMUVFOEYwODgxNDNDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAwBggrBgEFBQcBBwEB/wQh
MB8wDAQCAAEwBgMEAdJPujAPBAIAAjAJAwcAIAEN8zxAMA0GCSqGSIb3DQEBCwUA
A4IBAQCljUcYsbfCCV8JPWH71oMDs8VZIfqgv2jxm5p69bL8/+T2notrSqP6KpGz
nJCO02v4n0+nopRrN0fyDygtGuiHsoyhqH+3l/zymowxYO+fGymFltMG2JLtMMEj
Ma938ygv6rKDByRAAmqEnFv/csgYSGkVYUojo02FpHTiUnYd5FcpMhTAqrDtCTQZ
kmyHcTAr5AQwyFC3vfFKgmEvRbiwJAjK26uaLh77qiqJTNFHpikn/LlTVHtqXuYu
bjCiU4ypAqgVDDrhWLkM/ej5Gw/lmw4WeA4StRn3dwluqZCs4XPG2tEBweJHhBZs
y1xx33msyIsYA8so6rS5Qu7QrCdA
-----END CERTIFICATE-----
Generated at Sat Nov 23 06:13:05 2024 by rpki-client on console-ams.rpki-client.org