Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9172D91/EA672A5C19E711E8B243D57CC4F9AE02/62AE77F649CF11EDB720FD60C4F9AE02.roa
File:                     62AE77F649CF11EDB720FD60C4F9AE02.roa (raw, json)
Hash identifier:          rPdePceetxct/a19Wt0pkL9R3PCdheQ+DNEGWQBnu0Y=
Subject key identifier:   38:DF:68:45:82:04:BE:9E:B7:96:06:C1:DF:B2:F8:FA:0E:B3:6F:7C
Certificate issuer:       /CN=A9172D91/serialNumber=E2EDE4A7EA972668A795B27BA9DC87F4B90DA897
Certificate serial:       156C
Authority key identifier: E2:ED:E4:A7:EA:97:26:68:A7:95:B2:7B:A9:DC:87:F4:B9:0D:A8:97
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4u3kp-qXJminlbJ7qdyH9LkNqJc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9172D91/EA672A5C19E711E8B243D57CC4F9AE02/62AE77F649CF11EDB720FD60C4F9AE02.roa
Signing time:             Mon 29 Apr 2024 03:59:13 +0000
ROA not before:           Mon 29 Apr 2024 03:59:13 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     17819
IP address blocks:        27.111.160.0/19 maxlen: 19
                          27.111.169.0/24 maxlen: 24
                          27.111.170.0/24 maxlen: 24
                          27.111.171.0/24 maxlen: 24
                          27.111.183.0/24 maxlen: 24
                          27.111.192.0/20 maxlen: 20
                          27.111.195.0/24 maxlen: 24
                          45.126.14.0/23 maxlen: 23
                          103.14.116.0/22 maxlen: 22
                          113.59.240.0/20 maxlen: 20
                          113.59.240.0/24 maxlen: 24
                          113.59.241.0/24 maxlen: 24
                          113.59.243.0/24 maxlen: 24
                          113.59.248.0/21 maxlen: 21
                          113.59.250.0/24 maxlen: 24
                          2404:6900::/33 maxlen: 33
                          2404:6900:7000::/40 maxlen: 40
                          2404:6900:7001::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9172D91/EA672A5C19E711E8B243D57CC4F9AE02/4u3kp-qXJminlbJ7qdyH9LkNqJc.crl
                          rsync://rpki.apnic.net/member_repository/A9172D91/EA672A5C19E711E8B243D57CC4F9AE02/4u3kp-qXJminlbJ7qdyH9LkNqJc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4u3kp-qXJminlbJ7qdyH9LkNqJc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 May 2024 17:24:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5484 (0x156c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9172D91/serialNumber=E2EDE4A7EA972668A795B27BA9DC87F4B90DA897
        Validity
            Not Before: Apr 29 03:59:13 2024 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=662f1b11-d78a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:2a:43:85:0a:41:f5:41:a1:e8:05:cd:a1:e5:
                    73:e9:bf:1a:a7:c4:27:df:2a:6a:df:7f:b2:21:3e:
                    48:cc:8a:55:ff:2d:e3:92:0e:87:bc:50:8b:0b:da:
                    0f:de:c5:2d:ce:4e:2d:03:09:96:4c:1b:0e:3e:ce:
                    eb:9a:e6:75:f2:70:8b:f6:cc:53:e8:92:e7:f6:d3:
                    9c:84:7b:95:df:ad:71:28:b6:28:ff:75:f6:8f:6c:
                    51:23:70:b4:99:cd:72:24:59:b9:62:6c:83:e4:c8:
                    a8:33:b8:3b:25:23:6e:c9:65:e2:43:9e:0e:3c:72:
                    2b:7c:49:2e:45:a9:0b:4b:15:1c:e7:65:b0:2a:39:
                    8f:4d:7c:46:83:78:f5:69:92:ec:0f:21:52:82:3d:
                    f3:4c:c9:bb:6b:cd:5c:92:8a:65:50:6b:50:76:63:
                    e3:11:ff:cc:3b:0d:22:07:7d:e2:56:46:bc:65:94:
                    f0:0b:9c:99:b2:49:a5:54:df:3d:93:fa:df:87:8a:
                    b7:64:a3:32:fd:50:28:19:a6:7c:85:13:0a:3e:6f:
                    07:85:b9:f3:c3:88:47:96:f1:ef:b0:26:61:88:04:
                    c8:63:e5:20:8a:33:bb:98:e6:13:1d:a8:b6:6d:5f:
                    c5:07:9c:6c:1f:e0:95:ad:11:5a:e1:ef:e9:cb:93:
                    f7:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:DF:68:45:82:04:BE:9E:B7:96:06:C1:DF:B2:F8:FA:0E:B3:6F:7C
            X509v3 Authority Key Identifier:
                keyid:E2:ED:E4:A7:EA:97:26:68:A7:95:B2:7B:A9:DC:87:F4:B9:0D:A8:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9172D91/EA672A5C19E711E8B243D57CC4F9AE02/4u3kp-qXJminlbJ7qdyH9LkNqJc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4u3kp-qXJminlbJ7qdyH9LkNqJc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172D91/EA672A5C19E711E8B243D57CC4F9AE02/62AE77F649CF11EDB720FD60C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.111.160.0-27.111.207.255
                  45.126.14.0/23
                  103.14.116.0/22
                  113.59.240.0/20
                IPv6:
                  2404:6900::/33

    Signature Algorithm: sha256WithRSAEncryption
         c2:ea:d4:e6:c6:71:ec:a9:fa:4d:96:0f:c8:a1:82:f4:49:60:
         a9:ff:1c:4b:f0:3b:49:e5:f3:0c:73:26:76:80:ba:66:47:64:
         58:38:40:ad:e1:68:4e:3b:db:e6:d6:73:ba:a3:ec:6f:79:d8:
         04:19:30:b2:2f:c5:f9:48:19:2e:77:68:5e:71:a1:db:ec:ff:
         11:a6:ff:f3:4b:86:89:01:e6:24:97:34:f7:e6:4a:fe:96:65:
         d7:8e:ee:d2:c3:50:39:20:eb:12:b9:39:20:01:9b:c0:2b:b4:
         d3:48:aa:66:93:a6:71:86:c6:b7:d9:8e:75:2f:b0:47:5b:4c:
         2d:d4:5c:ed:0d:dd:d2:cf:11:0c:0f:51:b0:dd:fc:1a:e2:e4:
         b4:fe:97:62:71:5b:e9:39:c0:73:5f:2d:cc:f6:1d:3b:4a:2c:
         05:2f:ec:9a:a4:cb:54:09:d3:be:7d:19:9b:4c:7b:cf:2f:57:
         cb:43:e2:89:ab:b0:d7:5e:b8:84:9b:c4:c6:6e:25:ed:ca:1b:
         76:0e:04:97:df:51:10:7b:51:4e:06:a1:1a:d4:be:d9:6f:f3:
         47:cc:f4:9b:1d:39:32:81:9b:bd:db:bc:41:16:6d:46:7a:d5:
         c6:e8:e4:7d:c3:06:5d:ba:c1:23:83:a1:0a:16:64:44:b4:78:
         ce:a5:ce:7d
-----BEGIN CERTIFICATE-----
MIIFmzCCBIOgAwIBAgICFWwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzJEOTExMTAvBgNVBAUTKEUyRURFNEE3RUE5NzI2NjhBNzk1QjI3QkE5REM4N0Y0
QjkwREE4OTcwHhcNMjQwNDI5MDM1OTEzWhcNMjQwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NjJmMWIxMS1kNzhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtSpDhQpB9UGh6AXNoeVz6b8ap8Qn3ypq33+yIT5IzIpV/y3jkg6HvFCLC9oP
3sUtzk4tAwmWTBsOPs7rmuZ18nCL9sxT6JLn9tOchHuV361xKLYo/3X2j2xRI3C0
mc1yJFm5YmyD5MioM7g7JSNuyWXiQ54OPHIrfEkuRakLSxUc52WwKjmPTXxGg3j1
aZLsDyFSgj3zTMm7a81ckoplUGtQdmPjEf/MOw0iB33iVka8ZZTwC5yZskmlVN89
k/rfh4q3ZKMy/VAoGaZ8hRMKPm8Hhbnzw4hHlvHvsCZhiATIY+UgijO7mOYTHai2
bV/FB5xsH+CVrRFa4e/py5P3kwIDAQABo4ICvzCCArswHQYDVR0OBBYEFDjfaEWC
BL6et5YGwd+y+PoOs298MB8GA1UdIwQYMBaAFOLt5KfqlyZop5Wye6nch/S5DaiX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkQ5MS9FQTY3MkE1QzE5
RTcxMUU4QjI0M0Q1N0NDNEY5QUUwMi80dTNrcC1xWEptaW5sYko3cWR5SDlMa05x
SmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzR1M2twLXFYSm1pbmxiSjdxZHlIOUxrTnFKYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NzJEOTEvRUE2NzJBNUMxOUU3MTFFOEIyNDNENTdDQzRGOUFFMDIvNjJBRTc3RjY0
OUNGMTFFREI3MjBGRDYwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwSQYIKwYBBQUHAQcBAf8E
OjA4MCYEAgABMCAwDAMEBRtvoAMEBBtvwAMEAS1+DgMEAmcOdAMEBHE78DAOBAIA
AjAIAwYHJARpAAAwDQYJKoZIhvcNAQELBQADggEBAMLq1ObGceyp+k2WD8ihgvRJ
YKn/HEvwO0nl8wxzJnaAumZHZFg4QK3haE472+bWc7qj7G952AQZMLIvxflIGS53
aF5xodvs/xGm//NLhokB5iSXNPfmSv6WZdeO7tLDUDkg6xK5OSABm8ArtNNIqmaT
pnGGxrfZjnUvsEdbTC3UXO0N3dLPEQwPUbDd/Bri5LT+l2JxW+k5wHNfLcz2HTtK
LAUv7Jqky1QJ0759GZtMe88vV8tD4omrsNdeuISbxMZuJe3KG3YOBJffURB7UU4G
oRrUvtlv80fM9JsdOTKBm73bvEEWbUZ61cbo5H3DBl26wSODoQoWZES0eM6lzn0=
-----END CERTIFICATE-----
Generated at Tue May 14 19:10:18 2024 by rpki-client on console-ams.rpki-client.org