Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9164655/D8BB849AF3DE11EB9E5EC06EC4F9AE02/B2CB84D4F3E211EB9512E219C4F9AE02.roa
File:                     B2CB84D4F3E211EB9512E219C4F9AE02.roa (raw, json)
Hash identifier:          UQeEFTuNXAG7b/hVvosRIanvr4I2HKmRXBl53YEBALo=
Subject key identifier:   89:75:36:F2:31:12:5C:7E:BD:A6:8C:5E:A7:22:6E:EC:9E:19:FB:4E
Certificate issuer:       /CN=A9164655/serialNumber=6BD145ECE42AE4FD82AD67CFD1A4059A9EAB3A6D
Certificate serial:       03EB
Authority key identifier: 6B:D1:45:EC:E4:2A:E4:FD:82:AD:67:CF:D1:A4:05:9A:9E:AB:3A:6D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a9FF7OQq5P2CrWfP0aQFmp6rOm0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9164655/D8BB849AF3DE11EB9E5EC06EC4F9AE02/B2CB84D4F3E211EB9512E219C4F9AE02.roa
Signing time:             Thu 03 Aug 2023 01:01:31 +0000
ROA not before:           Thu 03 Aug 2023 01:01:31 +0000
ROA not after:            Thu 31 Oct 2024 00:00:00 +0000
asID:                     136500
IP address blocks:        202.36.175.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9164655/D8BB849AF3DE11EB9E5EC06EC4F9AE02/a9FF7OQq5P2CrWfP0aQFmp6rOm0.crl
                          rsync://rpki.apnic.net/member_repository/A9164655/D8BB849AF3DE11EB9E5EC06EC4F9AE02/a9FF7OQq5P2CrWfP0aQFmp6rOm0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a9FF7OQq5P2CrWfP0aQFmp6rOm0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 02:36:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1003 (0x3eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9164655/serialNumber=6BD145ECE42AE4FD82AD67CFD1A4059A9EAB3A6D
        Validity
            Not Before: Aug  3 01:01:31 2023 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=64cafc6b-8c23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f2:48:91:e3:f8:0c:54:b5:5c:c5:88:1f:93:
                    0b:29:96:a9:59:b3:b5:f1:cf:d6:01:b4:f0:09:3b:
                    27:0f:0d:37:3d:0a:a7:c8:71:f2:7b:0a:f2:fc:cf:
                    75:aa:4d:c0:92:a9:2d:f7:4c:af:c8:05:7c:ce:f6:
                    79:93:53:03:da:91:ba:fb:b3:e4:6e:57:df:02:c0:
                    eb:d0:e3:39:a8:cf:00:2e:7d:e5:c1:62:2d:a5:8c:
                    a9:49:d9:99:58:4a:cc:c2:52:a8:fd:ee:4a:34:34:
                    bc:95:11:10:0c:79:9a:1f:2b:eb:a9:71:89:d1:19:
                    4a:a1:36:68:89:b8:5c:bb:5e:71:3f:ed:2a:fe:a5:
                    02:9b:ec:92:7e:c9:93:cf:36:e0:b1:44:2c:a1:ce:
                    85:e0:54:8a:a4:a6:20:bb:32:bb:d9:57:8a:d2:ef:
                    be:d6:b9:e8:55:31:1a:20:2b:70:b4:0b:a2:dc:ad:
                    cc:14:62:50:d6:78:2c:69:ef:20:74:e7:76:d9:80:
                    59:c7:8e:42:d9:0a:db:0f:66:2e:b4:35:b8:6d:df:
                    0b:2b:89:a7:a4:a4:2b:0a:2e:14:bb:28:88:ba:38:
                    b5:73:4c:99:a4:e1:df:44:e3:ac:72:68:e7:13:2b:
                    7a:52:f1:3a:ef:da:b0:9e:a9:82:dd:60:27:38:c0:
                    21:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:75:36:F2:31:12:5C:7E:BD:A6:8C:5E:A7:22:6E:EC:9E:19:FB:4E
            X509v3 Authority Key Identifier:
                keyid:6B:D1:45:EC:E4:2A:E4:FD:82:AD:67:CF:D1:A4:05:9A:9E:AB:3A:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9164655/D8BB849AF3DE11EB9E5EC06EC4F9AE02/a9FF7OQq5P2CrWfP0aQFmp6rOm0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a9FF7OQq5P2CrWfP0aQFmp6rOm0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164655/D8BB849AF3DE11EB9E5EC06EC4F9AE02/B2CB84D4F3E211EB9512E219C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.36.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:0c:29:13:24:7f:01:5b:6c:de:3e:84:22:b5:8f:27:d1:5d:
         7d:ca:ae:46:95:39:d2:46:03:0c:e6:12:7f:f1:a5:26:97:a3:
         4a:5a:d3:02:f0:dd:ab:ac:67:79:92:20:0f:6c:2a:8e:05:aa:
         c6:b9:d3:83:fa:fe:55:03:13:64:2b:cd:22:ef:fe:32:ae:2e:
         92:99:f9:c3:69:f7:3e:1f:42:c9:6b:4d:35:2b:25:6e:06:d5:
         4f:b7:4c:cf:8f:df:9a:f1:81:18:db:86:8d:ee:34:24:ef:77:
         79:fd:26:f1:89:14:47:26:b3:c8:b5:aa:01:a6:33:70:be:d8:
         16:61:52:1d:50:cd:45:f0:0b:29:ff:b2:90:58:8e:c4:13:a8:
         38:60:f6:f7:f1:18:92:28:08:75:de:21:6c:da:7e:06:15:75:
         a2:8c:a4:95:14:0b:a9:4a:8a:a0:2d:8a:90:69:6f:74:85:d3:
         c9:ff:0e:02:13:05:24:11:f4:5d:34:2c:79:5c:fd:a5:41:79:
         28:0b:8d:f0:c7:61:09:d4:8b:56:43:f2:fa:8e:f3:77:a1:01:
         bd:58:96:da:67:6e:cf:ef:1c:d7:24:22:b3:9c:6e:e2:2e:19:
         56:a6:11:1f:6a:d4:a1:ad:16:ed:a0:65:5d:9a:a1:14:9a:58:
         c7:d0:f0:5b
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICA+swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjQ2NTUxMTAvBgNVBAUTKDZCRDE0NUVDRTQyQUU0RkQ4MkFENjdDRkQxQTQwNTlB
OUVBQjNBNkQwHhcNMjMwODAzMDEwMTMxWhcNMjQxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NGNhZmM2Yi04YzIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAq/JIkeP4DFS1XMWIH5MLKZapWbO18c/WAbTwCTsnDw03PQqnyHHyewry/M91
qk3Akqkt90yvyAV8zvZ5k1MD2pG6+7PkblffAsDr0OM5qM8ALn3lwWItpYypSdmZ
WErMwlKo/e5KNDS8lREQDHmaHyvrqXGJ0RlKoTZoibhcu15xP+0q/qUCm+ySfsmT
zzbgsUQsoc6F4FSKpKYguzK72VeK0u++1rnoVTEaICtwtAui3K3MFGJQ1ngsae8g
dOd22YBZx45C2QrbD2YutDW4bd8LK4mnpKQrCi4UuyiIuji1c0yZpOHfROOscmjn
Eyt6UvE679qwnqmC3WAnOMAh6QIDAQABo4IClTCCApEwHQYDVR0OBBYEFIl1NvIx
Elx+vaaMXqcibuyeGftOMB8GA1UdIwQYMBaAFGvRRezkKuT9gq1nz9GkBZqeqzpt
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDY1NS9EOEJCODQ5QUYz
REUxMUVCOUU1RUMwNkVDNEY5QUUwMi9hOUZGN09RcTVQMkNyV2ZQMGFRRm1wNnJP
bTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2E5RkY3T1FxNVAyQ3JXZlAwYVFGbXA2ck9tMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NjQ2NTUvRDhCQjg0OUFGM0RFMTFFQjlFNUVDMDZFQzRGOUFFMDIvQjJDQjg0RDRG
M0UyMTFFQjk1MTJFMjE5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADKJK8wDQYJKoZIhvcNAQELBQADggEBACQMKRMkfwFbbN4+
hCK1jyfRXX3KrkaVOdJGAwzmEn/xpSaXo0pa0wLw3ausZ3mSIA9sKo4Fqsa504P6
/lUDE2QrzSLv/jKuLpKZ+cNp9z4fQslrTTUrJW4G1U+3TM+P35rxgRjbho3uNCTv
d3n9JvGJFEcms8i1qgGmM3C+2BZhUh1QzUXwCyn/spBYjsQTqDhg9vfxGJIoCHXe
IWzafgYVdaKMpJUUC6lKiqAtipBpb3SF08n/DgITBSQR9F00LHlc/aVBeSgLjfDH
YQnUi1ZD8vqO83ehAb1Yltpnbs/vHNckIrOcbuIuGVamER9q1KGtFu2gZV2aoRSa
WMfQ8Fs=
-----END CERTIFICATE-----
Generated at Sat Jun 1 04:59:02 2024 by rpki-client on console-fra.rpki-client.org