Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913CC0C/8425856A835711EEABEB2A3FC4F9AE02/791E1D14836E11EEAD2B0731C4F9AE02.roa
File:                     791E1D14836E11EEAD2B0731C4F9AE02.roa (raw, json)
Hash identifier:          nlX4UA9TsikyajFvvI/4zlXs7BTa/hUYD0dYR5wA+wc=
Subject key identifier:   03:EF:BF:8B:7C:6C:BA:81:E4:C5:B9:FE:47:6C:5C:BD:C9:B2:78:C3
Certificate issuer:       /CN=A913CC0C/serialNumber=AD765E4AD5C0AB3EF4841D3E3484280BEACBCC2D
Certificate serial:       38
Authority key identifier: AD:76:5E:4A:D5:C0:AB:3E:F4:84:1D:3E:34:84:28:0B:EA:CB:CC:2D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXZeStXAqz70hB0-NIQoC-rLzC0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913CC0C/8425856A835711EEABEB2A3FC4F9AE02/791E1D14836E11EEAD2B0731C4F9AE02.roa
Signing time:             Sat 17 Feb 2024 07:09:17 +0000
ROA not before:           Sat 17 Feb 2024 07:09:17 +0000
ROA not after:            Wed 28 May 2025 00:00:00 +0000
asID:                     151833
IP address blocks:        203.223.179.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913CC0C/8425856A835711EEABEB2A3FC4F9AE02/rXZeStXAqz70hB0-NIQoC-rLzC0.crl
                          rsync://rpki.apnic.net/member_repository/A913CC0C/8425856A835711EEABEB2A3FC4F9AE02/rXZeStXAqz70hB0-NIQoC-rLzC0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXZeStXAqz70hB0-NIQoC-rLzC0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 08:57:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 56 (0x38)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913CC0C/serialNumber=AD765E4AD5C0AB3EF4841D3E3484280BEACBCC2D
        Validity
            Not Before: Feb 17 07:09:17 2024 GMT
            Not After : May 28 00:00:00 2025 GMT
        Subject: CN=65d05b9d-e494
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:c0:42:55:30:b2:ed:69:20:a1:74:aa:e4:71:
                    26:93:f0:ee:29:4a:29:11:2f:48:79:0f:9f:dd:c5:
                    f8:bb:6a:c7:c3:c5:49:94:f8:5e:23:31:a7:27:14:
                    05:70:f2:3c:60:ca:86:11:a6:91:fe:2e:01:23:d3:
                    a7:2d:b5:bc:52:28:2f:27:46:25:bb:24:ed:23:16:
                    a4:48:5f:cf:9a:b5:1d:dd:29:ca:cc:5a:9c:a7:7f:
                    d7:37:80:7a:82:19:02:17:63:36:87:71:8e:82:e3:
                    12:d3:84:6b:0c:66:45:c4:7c:f2:d4:c2:7f:f2:c9:
                    72:e8:d4:c0:df:84:c8:35:da:1d:37:25:ec:de:a3:
                    dd:6c:53:11:c8:a3:3a:5e:f6:c4:1f:65:dd:90:b0:
                    02:57:96:aa:65:02:76:e9:74:4e:8d:c3:a2:93:76:
                    88:de:1c:2c:5a:c2:d0:3d:99:a5:c9:5b:5e:e8:6c:
                    96:2a:0b:42:4d:2d:32:03:b0:e9:54:14:3b:ab:ab:
                    31:88:df:5b:bd:26:b3:6d:4e:e3:d7:ef:c4:c5:cd:
                    74:11:72:37:38:62:1e:a8:88:d6:cf:24:b4:2d:db:
                    44:b8:f7:24:6f:e7:b3:a8:4c:3e:2c:58:7a:f3:27:
                    36:5f:e1:5e:60:c7:59:aa:b4:fd:b6:93:06:52:bc:
                    6c:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:EF:BF:8B:7C:6C:BA:81:E4:C5:B9:FE:47:6C:5C:BD:C9:B2:78:C3
            X509v3 Authority Key Identifier:
                keyid:AD:76:5E:4A:D5:C0:AB:3E:F4:84:1D:3E:34:84:28:0B:EA:CB:CC:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913CC0C/8425856A835711EEABEB2A3FC4F9AE02/rXZeStXAqz70hB0-NIQoC-rLzC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXZeStXAqz70hB0-NIQoC-rLzC0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CC0C/8425856A835711EEABEB2A3FC4F9AE02/791E1D14836E11EEAD2B0731C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.223.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bd:59:5f:18:b8:db:ee:82:a8:76:22:ea:8c:64:d4:10:69:bf:
         a5:9b:d1:00:ee:17:6f:d1:fc:2e:2b:17:ca:39:54:27:d8:74:
         e2:5f:e8:86:30:fb:ec:e4:73:1f:43:bb:75:9d:d3:80:33:78:
         32:f0:12:5d:a0:7f:e0:f9:4e:42:96:59:21:ec:ca:95:1c:97:
         d4:11:85:b6:8f:09:d3:d2:8e:9e:b7:ef:d7:cc:73:54:1f:48:
         6f:b8:7a:aa:6b:4a:2e:3e:41:ec:39:2f:7c:83:00:82:0d:11:
         82:fb:58:c8:44:9d:b0:43:0b:3b:de:03:fc:c3:47:f0:bf:56:
         56:4f:2e:be:59:94:f3:83:b8:cb:f1:07:16:72:48:c2:16:5a:
         d1:62:d5:bd:fd:bd:70:83:2c:d0:94:dd:46:71:82:d7:45:f3:
         cf:6b:15:89:77:a9:24:4e:b8:f5:ca:cf:b2:23:db:5b:b9:cc:
         d7:1b:27:f9:fc:cc:ee:a0:a5:71:51:b4:9f:4c:b1:91:51:32:
         e2:7f:f6:de:2d:44:eb:b7:f3:76:a1:79:10:45:ca:48:30:f7:
         44:76:00:1c:42:00:54:35:b7:99:5e:39:f3:fc:09:54:cb:22:
         7f:98:fe:ca:a2:aa:e2:06:f1:8a:2a:24:7a:53:c1:5d:af:c3:
         05:b7:fe:5b
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBODANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz
Q0MwQzExMC8GA1UEBRMoQUQ3NjVFNEFENUMwQUIzRUY0ODQxRDNFMzQ4NDI4MEJF
QUNCQ0MyRDAeFw0yNDAyMTcwNzA5MTdaFw0yNTA1MjgwMDAwMDBaMBgxFjAUBgNV
BAMTDTY1ZDA1YjlkLWU0OTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDHwEJVMLLtaSChdKrkcSaT8O4pSikRL0h5D5/dxfi7asfDxUmU+F4jMacnFAVw
8jxgyoYRppH+LgEj06cttbxSKC8nRiW7JO0jFqRIX8+atR3dKcrMWpynf9c3gHqC
GQIXYzaHcY6C4xLThGsMZkXEfPLUwn/yyXLo1MDfhMg12h03Jezeo91sUxHIozpe
9sQfZd2QsAJXlqplAnbpdE6Nw6KTdojeHCxawtA9maXJW17obJYqC0JNLTIDsOlU
FDurqzGI31u9JrNtTuPX78TFzXQRcjc4Yh6oiNbPJLQt20S49yRv57OoTD4sWHrz
JzZf4V5gx1mqtP22kwZSvGwLAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUA++/i3xs
uoHkxbn+R2xcvcmyeMMwHwYDVR0jBBgwFoAUrXZeStXAqz70hB0+NIQoC+rLzC0w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNDQzBDLzg0MjU4NTZBODM1
NzExRUVBQkVCMkEzRkM0RjlBRTAyL3JYWmVTdFhBcXo3MGhCMC1OSVFvQy1yTHpD
MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvclhaZVN0WEFxejcwaEIwLU5JUW9DLXJMekMwLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
Q0MwQy84NDI1ODU2QTgzNTcxMUVFQUJFQjJBM0ZDNEY5QUUwMi83OTFFMUQxNDgz
NkUxMUVFQUQyQjA3MzFDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMvfszANBgkqhkiG9w0BAQsFAAOCAQEAvVlfGLjb7oKodiLq
jGTUEGm/pZvRAO4Xb9H8LisXyjlUJ9h04l/ohjD77ORzH0O7dZ3TgDN4MvASXaB/
4PlOQpZZIezKlRyX1BGFto8J09KOnrfv18xzVB9Ib7h6qmtKLj5B7DkvfIMAgg0R
gvtYyESdsEMLO94D/MNH8L9WVk8uvlmU84O4y/EHFnJIwhZa0WLVvf29cIMs0JTd
RnGC10Xzz2sViXepJE649crPsiPbW7nM1xsn+fzM7qClcVG0n0yxkVEy4n/23i1E
67fzdqF5EEXKSDD3RHYAHEIAVDW3mV458/wJVMsif5j+yqKq4gbxiiokelPBXa/D
Bbf+Ww==
-----END CERTIFICATE-----
Generated at Sat Jun 1 11:14:27 2024 by rpki-client on console-fra.rpki-client.org