Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917576D/2E767E3282CD11EA895C7B5CC4F9AE02/EA7554AC82D011EA8BCCCA64C4F9AE02.roa
File:                     EA7554AC82D011EA8BCCCA64C4F9AE02.roa (raw, json)
Hash identifier:          uNczvRDJfd4jz5DSR1JPhHDTfb/BkC5W5DhH4+uBMjA=
Subject key identifier:   CB:A3:0E:58:CF:DA:13:48:5A:EF:8B:E8:BD:6D:BD:FB:D0:35:34:64
Certificate issuer:       /CN=A917576D/serialNumber=B70318D71AA0E804324E013C3097FDBCD60134D4
Certificate serial:       08D4
Authority key identifier: B7:03:18:D7:1A:A0:E8:04:32:4E:01:3C:30:97:FD:BC:D6:01:34:D4
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/twMY1xqg6AQyTgE8MJf9vNYBNNQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917576D/2E767E3282CD11EA895C7B5CC4F9AE02/EA7554AC82D011EA8BCCCA64C4F9AE02.roa
Signing time:             Fri 10 Nov 2023 21:08:45 +0000
ROA not before:           Fri 10 Nov 2023 21:08:45 +0000
ROA not after:            Fri 31 Jan 2025 00:00:00 +0000
asID:                     63527
IP address blocks:        63.140.1.0/24 maxlen: 24
                          63.140.2.0/24 maxlen: 24
                          63.140.12.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917576D/2E767E3282CD11EA895C7B5CC4F9AE02/twMY1xqg6AQyTgE8MJf9vNYBNNQ.crl
                          rsync://rpki.apnic.net/member_repository/A917576D/2E767E3282CD11EA895C7B5CC4F9AE02/twMY1xqg6AQyTgE8MJf9vNYBNNQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/twMY1xqg6AQyTgE8MJf9vNYBNNQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 18:32:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2260 (0x8d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917576D/serialNumber=B70318D71AA0E804324E013C3097FDBCD60134D4
        Validity
            Not Before: Nov 10 21:08:45 2023 GMT
            Not After : Jan 31 00:00:00 2025 GMT
        Subject: CN=654e9bdc-75ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:34:42:6d:18:88:4d:1a:a9:f8:00:ce:56:be:
                    de:76:28:c0:ca:ec:a4:c3:0b:5e:56:1f:bc:24:b7:
                    08:b4:b5:be:9a:a8:c8:f3:50:96:61:ed:7a:ef:18:
                    97:50:38:19:9c:62:93:bd:b4:a3:fd:42:d2:9f:d5:
                    0b:25:20:06:1d:c2:5b:76:85:8f:13:00:65:2c:dc:
                    0e:77:41:c0:5f:13:ec:04:24:24:e6:64:18:be:be:
                    a3:7b:8d:1b:08:bd:3e:4b:96:a1:42:ac:27:11:d1:
                    e5:59:4b:88:0f:6d:5a:42:f2:cf:ff:4e:2c:8f:db:
                    ac:fb:c1:82:16:c4:8a:d6:a4:53:b5:63:21:f2:85:
                    49:c9:22:1d:12:61:9c:11:37:7c:0a:a9:44:75:ff:
                    d8:e0:7e:a8:b7:6d:d9:0c:32:48:99:25:63:7a:ab:
                    e1:ed:df:77:cc:b1:c3:43:ae:25:a0:dd:c5:e8:28:
                    a0:98:27:9f:b9:44:16:8b:ec:ca:3c:5b:9f:62:9f:
                    6d:18:85:b3:0f:bd:ff:5a:f3:55:53:42:be:9f:8b:
                    fc:d5:14:85:ea:6d:b5:bc:00:85:cf:95:45:27:e4:
                    26:46:57:bf:09:4c:7f:6e:db:07:9e:7c:3b:a4:4e:
                    12:9d:08:55:67:71:96:4c:0c:3a:2f:5c:fe:52:08:
                    6d:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:A3:0E:58:CF:DA:13:48:5A:EF:8B:E8:BD:6D:BD:FB:D0:35:34:64
            X509v3 Authority Key Identifier:
                keyid:B7:03:18:D7:1A:A0:E8:04:32:4E:01:3C:30:97:FD:BC:D6:01:34:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917576D/2E767E3282CD11EA895C7B5CC4F9AE02/twMY1xqg6AQyTgE8MJf9vNYBNNQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/twMY1xqg6AQyTgE8MJf9vNYBNNQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917576D/2E767E3282CD11EA895C7B5CC4F9AE02/EA7554AC82D011EA8BCCCA64C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.140.1.0-63.140.2.255
                  63.140.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:f8:b7:3d:14:78:44:69:ab:08:c8:92:ce:6c:23:97:15:28:
         12:4d:71:8c:f8:3f:0a:8f:8d:c5:66:cf:1d:17:53:73:8a:0d:
         7b:fd:a9:30:c6:9c:ba:c1:2b:69:5b:12:07:a2:18:02:b8:08:
         79:ce:cd:43:5b:74:ac:12:95:bd:8b:71:27:ef:28:41:dc:7a:
         0f:6a:29:6f:1c:a6:a9:ef:73:cb:f8:34:36:c6:ce:43:f5:08:
         d1:46:45:97:e0:aa:bf:e6:e6:60:50:8d:fa:16:fa:8b:e5:a0:
         83:6c:03:3d:d4:5c:f6:96:7a:68:27:9e:54:85:40:62:53:47:
         17:e3:03:c0:4e:c0:9b:97:97:6c:e9:93:4c:70:30:72:ff:a0:
         2e:e5:3a:f7:20:de:3a:ee:c8:d8:8f:86:7b:d2:58:56:06:5b:
         9c:a9:2d:b3:81:0f:d3:27:a2:f3:b3:ea:bc:cd:51:50:df:e7:
         be:6d:b9:cd:b0:72:b7:1b:0a:ba:9c:3c:70:d0:2f:8d:e0:7b:
         06:f2:04:b9:0d:9e:b9:ef:4e:f0:48:d9:a9:f7:47:f9:b8:90:
         fe:53:90:e7:84:2f:2f:d2:2b:9c:a7:46:00:c7:f1:a4:d1:6f:
         23:74:7b:52:03:8d:bc:9e:55:25:e8:0c:f0:e0:89:5d:9b:a8:
         1f:e8:95:73
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgICCNQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzU3NkQxMTAvBgNVBAUTKEI3MDMxOEQ3MUFBMEU4MDQzMjRFMDEzQzMwOTdGREJD
RDYwMTM0RDQwHhcNMjMxMTEwMjEwODQ1WhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NTRlOWJkYy03NWVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAujRCbRiITRqp+ADOVr7edijAyuykwwteVh+8JLcItLW+mqjI81CWYe167xiX
UDgZnGKTvbSj/ULSn9ULJSAGHcJbdoWPEwBlLNwOd0HAXxPsBCQk5mQYvr6je40b
CL0+S5ahQqwnEdHlWUuID21aQvLP/04sj9us+8GCFsSK1qRTtWMh8oVJySIdEmGc
ETd8CqlEdf/Y4H6ot23ZDDJImSVjeqvh7d93zLHDQ64loN3F6CigmCefuUQWi+zK
PFufYp9tGIWzD73/WvNVU0K+n4v81RSF6m21vACFz5VFJ+QmRle/CUx/btsHnnw7
pE4SnQhVZ3GWTAw6L1z+UghtnQIDAQABo4ICozCCAp8wHQYDVR0OBBYEFMujDljP
2hNIWu+L6L1tvfvQNTRkMB8GA1UdIwQYMBaAFLcDGNcaoOgEMk4BPDCX/bzWATTU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTc2RC8yRTc2N0UzMjgy
Q0QxMUVBODk1QzdCNUNDNEY5QUUwMi90d01ZMXhxZzZBUXlUZ0U4TUpmOXZOWUJO
TlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3R3TVkxeHFnNkFReVRnRThNSmY5dk5ZQk5OUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NzU3NkQvMkU3NjdFMzI4MkNEMTFFQTg5NUM3QjVDQzRGOUFFMDIvRUE3NTU0QUM4
MkQwMTFFQThCQ0NDQTY0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLQYIKwYBBQUHAQcBAf8E
HjAcMBoEAgABMBQwDAMEAD+MAQMEAD+MAgMEAD+MDDANBgkqhkiG9w0BAQsFAAOC
AQEAevi3PRR4RGmrCMiSzmwjlxUoEk1xjPg/Co+NxWbPHRdTc4oNe/2pMMacusEr
aVsSB6IYArgIec7NQ1t0rBKVvYtxJ+8oQdx6D2opbxymqe9zy/g0NsbOQ/UI0UZF
l+Cqv+bmYFCN+hb6i+Wgg2wDPdRc9pZ6aCeeVIVAYlNHF+MDwE7Am5eXbOmTTHAw
cv+gLuU69yDeOu7I2I+Ge9JYVgZbnKkts4EP0yei87PqvM1RUN/nvm25zbBytxsK
upw8cNAvjeB7BvIEuQ2eue9O8EjZqfdH+biQ/lOQ54QvL9IrnKdGAMfxpNFvI3R7
UgONvJ5VJegM8OCJXZuoH+iVcw==
-----END CERTIFICATE-----
Generated at Fri May 31 22:56:57 2024 by rpki-client on console-fra.rpki-client.org