Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917576D/2E767E3282CD11EA895C7B5CC4F9AE02/F8C86248AAF711EAB266AB46C4F9AE02.roa
File:                     F8C86248AAF711EAB266AB46C4F9AE02.roa (raw, json)
Hash identifier:          fqN4w77NmNmncNmf24Zti3bdR6MrQjvCytTr8TlaQ/8=
Subject key identifier:   4E:83:D9:FC:CB:F6:23:21:46:9F:DB:25:3C:3A:18:70:54:67:18:63
Certificate issuer:       /CN=A917576D/serialNumber=B70318D71AA0E804324E013C3097FDBCD60134D4
Certificate serial:       08D5
Authority key identifier: B7:03:18:D7:1A:A0:E8:04:32:4E:01:3C:30:97:FD:BC:D6:01:34:D4
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/twMY1xqg6AQyTgE8MJf9vNYBNNQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917576D/2E767E3282CD11EA895C7B5CC4F9AE02/F8C86248AAF711EAB266AB46C4F9AE02.roa
Signing time:             Fri 10 Nov 2023 21:08:46 +0000
ROA not before:           Fri 10 Nov 2023 21:08:46 +0000
ROA not after:            Fri 31 Jan 2025 00:00:00 +0000
asID:                     64079
IP address blocks:        69.194.169.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917576D/2E767E3282CD11EA895C7B5CC4F9AE02/twMY1xqg6AQyTgE8MJf9vNYBNNQ.crl
                          rsync://rpki.apnic.net/member_repository/A917576D/2E767E3282CD11EA895C7B5CC4F9AE02/twMY1xqg6AQyTgE8MJf9vNYBNNQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/twMY1xqg6AQyTgE8MJf9vNYBNNQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Jun 2024 19:38:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2261 (0x8d5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917576D/serialNumber=B70318D71AA0E804324E013C3097FDBCD60134D4
        Validity
            Not Before: Nov 10 21:08:46 2023 GMT
            Not After : Jan 31 00:00:00 2025 GMT
        Subject: CN=654e9bde-44c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:3e:f6:fb:90:b3:67:73:59:f2:1b:0d:e1:d3:
                    6d:cf:d4:72:48:ff:86:e2:32:be:9e:d8:14:99:4e:
                    e0:c5:5f:68:cf:1a:68:8f:4b:36:a1:62:34:78:f9:
                    64:e5:5b:e6:cd:60:e5:82:eb:f2:48:99:01:73:65:
                    13:56:b9:fa:fd:54:2e:ed:46:6e:24:37:b8:9c:64:
                    72:d8:b0:8c:11:25:a8:f2:91:6b:de:8a:aa:01:f5:
                    99:57:b1:50:96:de:2a:a3:15:5c:97:2d:05:04:49:
                    90:0b:3d:f8:34:3c:2c:40:8d:0d:f6:11:83:23:c5:
                    52:c8:a0:5e:cf:0b:4f:06:6b:2b:7f:49:3e:31:99:
                    29:9f:c3:89:51:44:64:0e:4b:59:a8:99:ba:67:cb:
                    06:f1:e4:1f:b4:a7:fb:f4:96:94:4a:18:39:de:76:
                    73:46:d8:cc:d8:3f:57:ed:2b:11:78:29:43:78:a5:
                    a3:a7:14:07:fe:df:b4:39:a1:ec:eb:9b:c7:4c:7a:
                    cf:9f:12:f9:d1:ea:f2:39:64:3c:e6:52:8a:f1:68:
                    d8:92:1c:c7:d2:fa:3d:a5:02:82:ad:89:8a:3f:d6:
                    96:57:b0:2b:10:f3:56:e5:9d:51:82:8a:8a:f0:25:
                    24:8d:39:91:c2:ac:5f:74:a2:7d:b2:9e:e2:c6:6f:
                    73:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:83:D9:FC:CB:F6:23:21:46:9F:DB:25:3C:3A:18:70:54:67:18:63
            X509v3 Authority Key Identifier:
                keyid:B7:03:18:D7:1A:A0:E8:04:32:4E:01:3C:30:97:FD:BC:D6:01:34:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917576D/2E767E3282CD11EA895C7B5CC4F9AE02/twMY1xqg6AQyTgE8MJf9vNYBNNQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/twMY1xqg6AQyTgE8MJf9vNYBNNQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917576D/2E767E3282CD11EA895C7B5CC4F9AE02/F8C86248AAF711EAB266AB46C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.194.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:fb:18:79:84:fb:6c:ab:2a:44:b3:ec:ec:20:9b:40:cb:c7:
         12:a5:b4:31:14:ad:fe:6a:53:60:5d:4d:c1:59:34:53:09:35:
         49:a7:1e:6d:f6:93:24:31:2f:c2:ca:a3:3c:dd:18:ba:87:26:
         e9:8a:f0:22:99:4a:ff:73:45:55:1f:dc:a8:f8:b6:3a:71:12:
         9f:ae:c6:73:4f:2c:81:c1:9f:4e:22:75:b2:c6:da:a8:b8:b9:
         98:9d:98:60:0d:e9:75:8b:7c:43:58:9f:bc:bf:91:06:76:19:
         10:1f:e4:25:e4:12:67:6c:a7:2f:ad:7a:96:98:cf:5b:fe:28:
         df:62:3b:83:33:98:a4:12:13:0c:91:bf:57:0d:c0:b0:fa:01:
         5e:dc:72:57:32:86:9a:65:96:eb:c9:f5:5b:fb:64:1a:ca:55:
         b2:b5:d5:78:8d:6e:cf:97:54:5a:06:7f:87:82:5a:b0:af:c2:
         a0:5f:58:44:17:14:44:64:e4:52:19:77:45:0c:f4:97:da:55:
         e3:c9:8f:77:35:76:c7:af:96:9c:2c:78:23:e0:2c:f5:74:46:
         1e:a9:cb:f1:02:09:d3:37:1b:1b:ae:92:e6:53:e4:97:d3:63:
         98:d6:81:a7:5c:1c:92:6c:3f:d7:40:28:04:ef:86:6f:aa:00:
         19:53:0c:bf
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICCNUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzU3NkQxMTAvBgNVBAUTKEI3MDMxOEQ3MUFBMEU4MDQzMjRFMDEzQzMwOTdGREJD
RDYwMTM0RDQwHhcNMjMxMTEwMjEwODQ2WhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NTRlOWJkZS00NGM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyz72+5CzZ3NZ8hsN4dNtz9RySP+G4jK+ntgUmU7gxV9ozxpoj0s2oWI0ePlk
5VvmzWDlguvySJkBc2UTVrn6/VQu7UZuJDe4nGRy2LCMESWo8pFr3oqqAfWZV7FQ
lt4qoxVcly0FBEmQCz34NDwsQI0N9hGDI8VSyKBezwtPBmsrf0k+MZkpn8OJUURk
DktZqJm6Z8sG8eQftKf79JaUShg53nZzRtjM2D9X7SsReClDeKWjpxQH/t+0OaHs
65vHTHrPnxL50eryOWQ85lKK8WjYkhzH0vo9pQKCrYmKP9aWV7ArEPNW5Z1RgoqK
8CUkjTmRwqxfdKJ9sp7ixm9zJwIDAQABo4IClTCCApEwHQYDVR0OBBYEFE6D2fzL
9iMhRp/bJTw6GHBUZxhjMB8GA1UdIwQYMBaAFLcDGNcaoOgEMk4BPDCX/bzWATTU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTc2RC8yRTc2N0UzMjgy
Q0QxMUVBODk1QzdCNUNDNEY5QUUwMi90d01ZMXhxZzZBUXlUZ0U4TUpmOXZOWUJO
TlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3R3TVkxeHFnNkFReVRnRThNSmY5dk5ZQk5OUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NzU3NkQvMkU3NjdFMzI4MkNEMTFFQTg5NUM3QjVDQzRGOUFFMDIvRjhDODYyNDhB
QUY3MTFFQUIyNjZBQjQ2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABFwqkwDQYJKoZIhvcNAQELBQADggEBACv7GHmE+2yrKkSz
7Owgm0DLxxKltDEUrf5qU2BdTcFZNFMJNUmnHm32kyQxL8LKozzdGLqHJumK8CKZ
Sv9zRVUf3Kj4tjpxEp+uxnNPLIHBn04idbLG2qi4uZidmGAN6XWLfENYn7y/kQZ2
GRAf5CXkEmdspy+tepaYz1v+KN9iO4MzmKQSEwyRv1cNwLD6AV7cclcyhpplluvJ
9Vv7ZBrKVbK11XiNbs+XVFoGf4eCWrCvwqBfWEQXFERk5FIZd0UM9JfaVePJj3c1
dsevlpwseCPgLPV0Rh6py/ECCdM3GxuukuZT5JfTY5jWgadcHJJsP9dAKATvhm+q
ABlTDL8=
-----END CERTIFICATE-----
Generated at Fri Jun 14 22:37:17 2024 by rpki-client on console-fra.rpki-client.org