Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9191436/A30B5A4AC78C11E8A76CD914C4F9AE02/4426B244F6A011EC8E197883C4F9AE02.roa
File:                     4426B244F6A011EC8E197883C4F9AE02.roa (raw, json)
Hash identifier:          bBZfLoHpOK0OlB0OzQEVHa924CCG++Yge8OBC7CQuI4=
Subject key identifier:   E0:12:10:33:AD:2A:59:72:BE:D6:A8:A2:59:83:64:2F:48:53:F2:B5
Certificate issuer:       /CN=A9191436/serialNumber=AD3BB603B14EFB26D715682FB041351EC8F9D367
Certificate serial:       11E3
Authority key identifier: AD:3B:B6:03:B1:4E:FB:26:D7:15:68:2F:B0:41:35:1E:C8:F9:D3:67
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rTu2A7FO-ybXFWgvsEE1Hsj502c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9191436/A30B5A4AC78C11E8A76CD914C4F9AE02/4426B244F6A011EC8E197883C4F9AE02.roa
Signing time:             Tue 02 Apr 2024 17:55:53 +0000
ROA not before:           Tue 02 Apr 2024 17:55:53 +0000
ROA not after:            Wed 28 May 2025 00:00:00 +0000
asID:                     55002
IP address blocks:        167.179.8.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9191436/A30B5A4AC78C11E8A76CD914C4F9AE02/rTu2A7FO-ybXFWgvsEE1Hsj502c.crl
                          rsync://rpki.apnic.net/member_repository/A9191436/A30B5A4AC78C11E8A76CD914C4F9AE02/rTu2A7FO-ybXFWgvsEE1Hsj502c.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rTu2A7FO-ybXFWgvsEE1Hsj502c.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Jun 2024 16:32:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4579 (0x11e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9191436/serialNumber=AD3BB603B14EFB26D715682FB041351EC8F9D367
        Validity
            Not Before: Apr  2 17:55:53 2024 GMT
            Not After : May 28 00:00:00 2025 GMT
        Subject: CN=660c46a8-46d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:82:1f:42:b0:0c:6b:c8:34:f0:54:c2:06:1d:
                    ad:2c:08:89:89:fa:74:ba:8c:8a:8f:ca:a0:3d:3a:
                    1e:b2:6e:12:b7:80:e7:e1:f6:ef:03:e0:29:c1:24:
                    3b:e2:c1:41:24:86:c5:9c:79:e6:b7:5e:b1:9b:59:
                    8c:c3:e2:25:96:5c:ac:01:26:16:d2:01:26:d1:fc:
                    a9:0a:f3:44:53:1b:f3:48:76:17:91:40:43:7f:38:
                    48:bd:20:e2:3b:60:9b:fe:9d:8e:ad:df:32:56:f4:
                    fc:2e:43:2c:5e:f5:49:5f:86:3b:60:70:1e:8f:9d:
                    bc:6b:47:8b:18:a1:82:4c:1c:cd:32:53:54:3a:fa:
                    7a:55:00:08:16:6e:0a:b9:fd:23:6b:a4:d0:8a:c1:
                    5d:76:74:ef:0a:66:c2:5b:5d:e3:2c:d6:5c:04:34:
                    e7:25:68:41:02:2a:33:ff:9d:81:f6:c6:e7:04:48:
                    a3:40:cc:aa:f7:c8:33:6d:96:7a:f8:10:de:c7:a9:
                    ef:dc:f3:c6:eb:15:a5:8b:8e:76:20:0b:dc:54:d0:
                    9b:e9:27:dd:38:aa:9a:11:74:ce:e3:9a:62:65:f5:
                    43:56:b3:ac:60:aa:d4:bb:9e:98:1f:cb:78:c5:28:
                    aa:64:66:64:95:c9:70:5e:5b:21:6c:09:7c:bf:ff:
                    c8:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:12:10:33:AD:2A:59:72:BE:D6:A8:A2:59:83:64:2F:48:53:F2:B5
            X509v3 Authority Key Identifier:
                keyid:AD:3B:B6:03:B1:4E:FB:26:D7:15:68:2F:B0:41:35:1E:C8:F9:D3:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9191436/A30B5A4AC78C11E8A76CD914C4F9AE02/rTu2A7FO-ybXFWgvsEE1Hsj502c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rTu2A7FO-ybXFWgvsEE1Hsj502c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191436/A30B5A4AC78C11E8A76CD914C4F9AE02/4426B244F6A011EC8E197883C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.179.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         7b:00:9f:13:9d:4e:04:f6:68:c1:b1:a1:67:5c:2c:ea:ca:ba:
         75:8d:e9:d2:96:51:5e:14:01:27:ee:e0:a7:51:1e:70:e2:c3:
         4d:db:e9:e5:83:95:c6:53:4b:a9:da:29:5d:9d:01:d6:63:0b:
         3c:24:d4:84:44:3d:fe:26:ad:a1:4e:7b:ba:2b:79:af:c2:5d:
         fa:25:52:14:fd:9f:22:f2:bf:61:88:05:3c:ea:ab:44:37:cd:
         4f:f7:c8:a8:5d:8b:75:78:0c:1d:c1:15:ce:ca:60:84:b3:56:
         f5:2f:2e:da:eb:d5:0d:53:74:4f:12:c4:6f:b7:a1:22:81:c6:
         c1:df:69:35:a0:da:1a:e6:ff:15:31:ee:13:81:74:38:7d:28:
         a8:9e:15:ec:6f:1f:6a:08:eb:ce:b8:b5:07:16:08:29:3a:fe:
         e2:52:43:76:c0:80:fe:0e:0b:91:20:72:15:dc:90:9b:b8:73:
         47:f7:3d:cb:62:35:2d:fc:ad:69:3a:68:f8:f5:3e:ab:da:aa:
         b4:9f:f9:76:9c:d9:d4:81:61:b6:ba:a5:b2:a5:9e:23:e9:ce:
         ca:81:45:4a:bc:5c:28:cd:ca:f9:38:28:5a:0c:7a:4c:07:96:
         02:66:5a:73:80:54:5f:83:da:5f:0f:7e:ab:8d:8e:d6:d3:c3:
         05:9b:14:ae
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICEeMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTE0MzYxMTAvBgNVBAUTKEFEM0JCNjAzQjE0RUZCMjZENzE1NjgyRkIwNDEzNTFF
QzhGOUQzNjcwHhcNMjQwNDAyMTc1NTUzWhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02NjBjNDZhOC00NmQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAroIfQrAMa8g08FTCBh2tLAiJifp0uoyKj8qgPToesm4St4Dn4fbvA+ApwSQ7
4sFBJIbFnHnmt16xm1mMw+IlllysASYW0gEm0fypCvNEUxvzSHYXkUBDfzhIvSDi
O2Cb/p2Ord8yVvT8LkMsXvVJX4Y7YHAej528a0eLGKGCTBzNMlNUOvp6VQAIFm4K
uf0ja6TQisFddnTvCmbCW13jLNZcBDTnJWhBAioz/52B9sbnBEijQMyq98gzbZZ6
+BDex6nv3PPG6xWli452IAvcVNCb6SfdOKqaEXTO45piZfVDVrOsYKrUu56YH8t4
xSiqZGZklclwXlshbAl8v//IQQIDAQABo4IClTCCApEwHQYDVR0OBBYEFOASEDOt
KllyvtaoolmDZC9IU/K1MB8GA1UdIwQYMBaAFK07tgOxTvsm1xVoL7BBNR7I+dNn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTQzNi9BMzBCNUE0QUM3
OEMxMUU4QTc2Q0Q5MTRDNEY5QUUwMi9yVHUyQTdGTy15YlhGV2d2c0VFMUhzajUw
MmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3JUdTJBN0ZPLXliWEZXZ3ZzRUUxSHNqNTAyYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTE0MzYvQTMwQjVBNEFDNzhDMTFFOEE3NkNEOTE0QzRGOUFFMDIvNDQyNkIyNDRG
NkEwMTFFQzhFMTk3ODgzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAOnswgwDQYJKoZIhvcNAQELBQADggEBAHsAnxOdTgT2aMGx
oWdcLOrKunWN6dKWUV4UASfu4KdRHnDiw03b6eWDlcZTS6naKV2dAdZjCzwk1IRE
Pf4mraFOe7orea/CXfolUhT9nyLyv2GIBTzqq0Q3zU/3yKhdi3V4DB3BFc7KYISz
VvUvLtrr1Q1TdE8SxG+3oSKBxsHfaTWg2hrm/xUx7hOBdDh9KKieFexvH2oI6864
tQcWCCk6/uJSQ3bAgP4OC5EgchXckJu4c0f3PctiNS38rWk6aPj1PqvaqrSf+Xac
2dSBYba6pbKlniPpzsqBRUq8XCjNyvk4KFoMekwHlgJmWnOAVF+D2l8PfquNjtbT
wwWbFK4=
-----END CERTIFICATE-----
Generated at Sun Jun 2 18:40:07 2024 by rpki-client on console-fra.rpki-client.org