Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/4D21FB36F7DB11EE92D1E11FC4F9AE02.roa
File:                     4D21FB36F7DB11EE92D1E11FC4F9AE02.roa (raw, json)
Hash identifier:          3ny77XmK0R0t+wWpRaRj6/0jADY7h8DW4tQXhN5wy1Q=
Subject key identifier:   26:A5:A6:9B:2D:63:AB:4F:6D:2E:04:A2:A4:AE:94:F3:1E:0E:FF:33
Certificate issuer:       /CN=A91697FA/serialNumber=9F82DBC9466312C5BA2E921279302400956A982A
Certificate serial:       3493
Authority key identifier: 9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/4D21FB36F7DB11EE92D1E11FC4F9AE02.roa
Signing time:             Thu 11 Apr 2024 08:12:56 +0000
ROA not before:           Thu 11 Apr 2024 08:12:56 +0000
ROA not after:            Thu 31 Oct 2024 00:00:00 +0000
asID:                     17460
IP address blocks:        203.155.47.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.crl
                          rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 14:03:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13459 (0x3493)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91697FA/serialNumber=9F82DBC9466312C5BA2E921279302400956A982A
        Validity
            Not Before: Apr 11 08:12:56 2024 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=66179b88-4ba5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:c2:d7:80:d8:47:13:12:80:db:5b:ff:ef:bc:
                    ed:77:be:87:ab:e2:d8:f5:f5:14:1e:96:05:6c:6f:
                    32:d4:9c:56:be:03:11:77:3b:e0:cc:62:9a:61:7d:
                    4f:40:7c:14:2b:c6:74:34:52:77:59:ba:d5:ce:d7:
                    7e:dc:92:a4:25:d0:b8:2f:75:a3:68:22:50:25:20:
                    da:d1:26:f2:1a:a8:46:2a:45:66:77:6a:80:85:aa:
                    02:7c:cc:00:4b:d4:26:40:53:7b:eb:4d:a7:23:92:
                    4d:56:11:89:67:7b:f5:d0:76:c1:d4:0a:bf:8b:fa:
                    0d:c3:e6:d3:15:62:10:4a:7d:4b:4c:99:57:f2:c5:
                    10:41:c9:8e:59:f5:da:49:43:43:38:3a:c7:89:fa:
                    d8:e2:40:b8:25:3c:10:67:84:e0:fa:a5:6c:46:f0:
                    a8:31:63:1e:23:a4:f9:f4:1c:5c:ef:5a:7e:4c:a5:
                    ab:36:ca:a1:dd:32:28:ef:ef:77:55:77:0f:51:37:
                    0c:3d:1d:d0:76:86:3e:c0:a8:55:d2:79:d6:5b:e9:
                    87:d8:01:ca:7b:0b:15:bc:45:5d:24:d3:ac:94:95:
                    78:4a:7d:a0:ad:7c:35:aa:72:eb:fd:fe:a4:70:40:
                    1d:21:c1:be:e3:4c:e5:5e:6d:03:84:52:6f:12:d9:
                    ae:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:A5:A6:9B:2D:63:AB:4F:6D:2E:04:A2:A4:AE:94:F3:1E:0E:FF:33
            X509v3 Authority Key Identifier:
                keyid:9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/4D21FB36F7DB11EE92D1E11FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.155.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:c5:07:57:f0:3e:70:34:80:6a:ad:b5:bc:50:e6:81:e5:8a:
         f4:e8:e8:7b:04:c3:ac:1c:a9:07:4c:fb:0f:11:31:ce:be:07:
         87:15:64:d2:6a:29:45:7b:a6:32:88:8a:c0:e0:b6:08:4c:0a:
         a1:77:41:59:fe:61:83:35:61:e2:78:20:b3:c4:70:42:53:3f:
         b0:36:54:33:71:e8:f4:08:43:81:25:33:5d:d0:12:d9:98:50:
         ae:28:af:59:a0:02:16:3c:0a:88:0d:81:fb:00:54:d3:a3:13:
         13:83:31:8d:bf:7d:4c:7b:1b:cb:88:16:18:42:d1:4b:5f:c5:
         d1:a0:94:80:5b:b6:81:58:68:35:03:bc:d0:53:d2:02:37:5c:
         6a:82:da:1e:51:02:5e:a4:2a:0d:5d:65:87:e6:c5:fe:18:02:
         0b:58:0b:fa:55:d7:f0:ae:fd:79:cc:cd:8a:f8:7c:04:06:5f:
         3d:fc:13:ec:20:fa:4e:11:ef:b8:ac:eb:64:08:f5:d5:fb:bf:
         17:8c:36:df:49:28:04:c3:3a:dc:df:46:84:d9:4c:e6:3d:e9:
         72:0d:89:8b:8a:3f:12:b0:26:d6:62:bb:a5:be:b5:40:fe:ae:
         fa:ce:45:fd:74:56:8d:b7:07:3e:d4:18:7b:b1:a6:32:38:c6:
         32:17:97:ab
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICNJMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Njk3RkExMTAvBgNVBAUTKDlGODJEQkM5NDY2MzEyQzVCQTJFOTIxMjc5MzAyNDAw
OTU2QTk4MkEwHhcNMjQwNDExMDgxMjU2WhcNMjQxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NjE3OWI4OC00YmE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3cLXgNhHExKA21v/77ztd76Hq+LY9fUUHpYFbG8y1JxWvgMRdzvgzGKaYX1P
QHwUK8Z0NFJ3WbrVztd+3JKkJdC4L3WjaCJQJSDa0SbyGqhGKkVmd2qAhaoCfMwA
S9QmQFN7602nI5JNVhGJZ3v10HbB1Aq/i/oNw+bTFWIQSn1LTJlX8sUQQcmOWfXa
SUNDODrHifrY4kC4JTwQZ4Tg+qVsRvCoMWMeI6T59Bxc71p+TKWrNsqh3TIo7+93
VXcPUTcMPR3QdoY+wKhV0nnWW+mH2AHKewsVvEVdJNOslJV4Sn2grXw1qnLr/f6k
cEAdIcG+40zlXm0DhFJvEtmudwIDAQABo4IClTCCApEwHQYDVR0OBBYEFCalppst
Y6tPbS4EoqSulPMeDv8zMB8GA1UdIwQYMBaAFJ+C28lGYxLFui6SEnkwJACVapgq
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OTdGQS8yN0Y4M0I3MDFE
ODMxMUUyOTMyOTIxRDgwOEIwMkNEMi9uNExieVVaakVzVzZMcElTZVRBa0FKVnFt
Q28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL240TGJ5VVpqRXNXNkxwSVNlVEFrQUpWcW1Dby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Njk3RkEvMjdGODNCNzAxRDgzMTFFMjkzMjkyMUQ4MDhCMDJDRDIvNEQyMUZCMzZG
N0RCMTFFRTkyRDFFMTFGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADLmy8wDQYJKoZIhvcNAQELBQADggEBACrFB1fwPnA0gGqt
tbxQ5oHlivTo6HsEw6wcqQdM+w8RMc6+B4cVZNJqKUV7pjKIisDgtghMCqF3QVn+
YYM1YeJ4ILPEcEJTP7A2VDNx6PQIQ4ElM13QEtmYUK4or1mgAhY8CogNgfsAVNOj
ExODMY2/fUx7G8uIFhhC0UtfxdGglIBbtoFYaDUDvNBT0gI3XGqC2h5RAl6kKg1d
ZYfmxf4YAgtYC/pV1/Cu/XnMzYr4fAQGXz38E+wg+k4R77is62QI9dX7vxeMNt9J
KATDOtzfRoTZTOY96XINiYuKPxKwJtZiu6W+tUD+rvrORf10Vo23Bz7UGHuxpjI4
xjIXl6s=
-----END CERTIFICATE-----
Generated at Thu Jun 6 14:59:01 2024 by rpki-client on console-fra.rpki-client.org