Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/069626A6ABC211EA9C9FC06EC4F9AE02.roa
File:                     069626A6ABC211EA9C9FC06EC4F9AE02.roa (raw, json)
Hash identifier:          2yJ7kFYTJkf50U0uBqpDGHxgNhUCgO6DtJXDA60CFgc=
Subject key identifier:   8D:0F:F6:AF:FE:A2:B7:B7:D5:56:1A:2F:D3:12:2F:8B:35:A4:F9:E0
Certificate issuer:       /CN=A914781A/serialNumber=59314703092845FCBD0BFBAEEF87D83FC66ED1D7
Certificate serial:       127E
Authority key identifier: 59:31:47:03:09:28:45:FC:BD:0B:FB:AE:EF:87:D8:3F:C6:6E:D1:D7
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WTFHAwkoRfy9C_uu74fYP8Zu0dc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/069626A6ABC211EA9C9FC06EC4F9AE02.roa
Signing time:             Sat 02 Mar 2024 15:20:56 +0000
ROA not before:           Sat 02 Mar 2024 15:20:56 +0000
ROA not after:            Thu 01 May 2025 00:00:00 +0000
asID:                     54994
IP address blocks:        167.179.254.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/WTFHAwkoRfy9C_uu74fYP8Zu0dc.crl
                          rsync://rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/WTFHAwkoRfy9C_uu74fYP8Zu0dc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WTFHAwkoRfy9C_uu74fYP8Zu0dc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 15:10:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4734 (0x127e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914781A/serialNumber=59314703092845FCBD0BFBAEEF87D83FC66ED1D7
        Validity
            Not Before: Mar  2 15:20:56 2024 GMT
            Not After : May  1 00:00:00 2025 GMT
        Subject: CN=65e343d7-afc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:cf:a8:6f:b2:bf:64:e6:f7:d5:14:56:91:06:
                    d6:90:60:06:0a:57:18:01:d3:6e:b2:44:6c:d1:b9:
                    3d:32:89:ca:85:2d:9f:65:61:0f:e0:cc:51:28:75:
                    fa:8d:a7:8e:f6:91:83:af:b6:01:ba:50:c7:db:ec:
                    87:e3:9d:d8:9b:bd:01:d5:ec:08:f8:8a:1b:b5:a2:
                    95:be:e6:20:b4:9f:5e:0d:5c:78:af:a1:f5:20:f3:
                    e4:35:2b:4c:1a:1a:10:f6:4d:6e:87:cb:b0:43:32:
                    da:28:83:d7:86:7d:7a:27:1c:7f:a9:59:b1:ea:77:
                    41:37:82:20:af:eb:ab:8c:94:14:82:ce:27:e3:a2:
                    1f:e5:e8:36:59:b4:5c:3e:78:74:81:98:4b:1a:16:
                    c9:1d:d9:b2:f6:c7:8a:4d:26:e2:dd:f3:1b:96:ff:
                    8f:82:98:0b:1a:cb:f8:02:18:64:92:af:bd:1f:06:
                    38:62:c1:0d:de:27:d6:64:ef:f6:32:f1:a7:db:8c:
                    3e:cc:a1:92:3f:f5:fa:56:70:23:90:69:dd:90:5f:
                    ee:f0:07:50:b7:99:c7:4e:1d:a5:4d:0e:a3:69:e7:
                    ad:58:d6:6a:e5:3f:fd:47:e4:2b:2a:8b:09:ae:65:
                    c3:bf:fc:a6:7e:b8:63:19:84:3e:8c:e3:e9:11:f6:
                    ce:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:0F:F6:AF:FE:A2:B7:B7:D5:56:1A:2F:D3:12:2F:8B:35:A4:F9:E0
            X509v3 Authority Key Identifier:
                keyid:59:31:47:03:09:28:45:FC:BD:0B:FB:AE:EF:87:D8:3F:C6:6E:D1:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/WTFHAwkoRfy9C_uu74fYP8Zu0dc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WTFHAwkoRfy9C_uu74fYP8Zu0dc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/069626A6ABC211EA9C9FC06EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.179.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:45:16:ed:4d:71:a1:54:15:52:44:77:da:72:c5:5e:40:7a:
         5e:de:77:0e:14:bb:34:8f:be:35:3d:e8:c1:a4:c7:bc:11:b6:
         ec:62:69:83:11:93:eb:22:57:e2:13:b5:e8:10:72:8c:f1:d2:
         b9:0d:45:83:6d:81:41:3a:ec:7a:f4:16:b0:3a:bf:aa:38:72:
         f9:b9:e1:91:e9:db:ff:4e:34:90:e6:96:1e:16:b5:50:2d:bc:
         ef:6e:10:59:ed:c5:dd:4d:37:b5:3f:36:4d:ea:7e:4a:83:d5:
         4c:ae:c3:48:ac:24:c6:9e:2d:25:2d:8c:d5:28:69:7f:59:ca:
         fc:dc:02:f3:41:33:f3:86:74:b4:3c:05:8c:31:86:2b:68:45:
         9b:26:ff:2d:a6:c1:d0:21:9b:dd:a8:da:ae:a9:d4:a5:c1:83:
         84:ac:c4:ab:5d:19:11:e8:03:a9:b8:04:e4:aa:bb:cf:d6:84:
         d3:8e:e5:42:d8:5d:29:84:a5:78:6b:ef:05:f4:aa:e4:cc:1e:
         84:2d:54:50:6b:9c:b8:88:cc:ac:d6:a6:85:58:6d:4b:a5:00:
         8f:e2:78:41:93:9a:f7:05:87:fc:d0:21:b7:a1:49:f1:00:4e:
         15:d0:bb:8b:c7:fd:d6:65:38:8a:de:67:8c:5f:48:29:9c:c7:
         3d:13:7a:66
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICEn4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDc4MUExMTAvBgNVBAUTKDU5MzE0NzAzMDkyODQ1RkNCRDBCRkJBRUVGODdEODNG
QzY2RUQxRDcwHhcNMjQwMzAyMTUyMDU2WhcNMjUwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NWUzNDNkNy1hZmMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvc+ob7K/ZOb31RRWkQbWkGAGClcYAdNuskRs0bk9MonKhS2fZWEP4MxRKHX6
jaeO9pGDr7YBulDH2+yH453Ym70B1ewI+IobtaKVvuYgtJ9eDVx4r6H1IPPkNStM
GhoQ9k1uh8uwQzLaKIPXhn16Jxx/qVmx6ndBN4Igr+urjJQUgs4n46If5eg2WbRc
Pnh0gZhLGhbJHdmy9seKTSbi3fMblv+PgpgLGsv4Ahhkkq+9HwY4YsEN3ifWZO/2
MvGn24w+zKGSP/X6VnAjkGndkF/u8AdQt5nHTh2lTQ6jaeetWNZq5T/9R+QrKosJ
rmXDv/ymfrhjGYQ+jOPpEfbODwIDAQABo4IClTCCApEwHQYDVR0OBBYEFI0P9q/+
ore31VYaL9MSL4s1pPngMB8GA1UdIwQYMBaAFFkxRwMJKEX8vQv7ru+H2D/GbtHX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzgxQS80RUVDNUI3RUE2
QjQxMUU4QjQzQTE0NjdDNEY5QUUwMi9XVEZIQXdrb1JmeTlDX3V1NzRmWVA4WnUw
ZGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1dURkhBd2tvUmZ5OUNfdXU3NGZZUDhadTBkYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDc4MUEvNEVFQzVCN0VBNkI0MTFFOEI0M0ExNDY3QzRGOUFFMDIvMDY5NjI2QTZB
QkMyMTFFQTlDOUZDMDZFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBACns/4wDQYJKoZIhvcNAQELBQADggEBAC9FFu1NcaFUFVJE
d9pyxV5Ael7edw4UuzSPvjU96MGkx7wRtuxiaYMRk+siV+ITtegQcozx0rkNRYNt
gUE67Hr0FrA6v6o4cvm54ZHp2/9ONJDmlh4WtVAtvO9uEFntxd1NN7U/Nk3qfkqD
1Uyuw0isJMaeLSUtjNUoaX9ZyvzcAvNBM/OGdLQ8BYwxhitoRZsm/y2mwdAhm92o
2q6p1KXBg4SsxKtdGRHoA6m4BOSqu8/WhNOO5ULYXSmEpXhr7wX0quTMHoQtVFBr
nLiIzKzWpoVYbUulAI/ieEGTmvcFh/zQIbehSfEAThXQu4vH/dZlOIreZ4xfSCmc
xz0TemY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 21:10:37 2024 by rpki-client on console-ams.rpki-client.org