Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/76CBE6E64EA911EC9C441B57C4F9AE02.roa
File:                     76CBE6E64EA911EC9C441B57C4F9AE02.roa (raw, json)
Hash identifier:          Cbc1k+H9sQ+qbhePfygoHo5kUF6wGKQYwZRUcYn7cm0=
Subject key identifier:   D5:78:2E:16:56:1D:6E:A9:D9:85:31:11:2A:52:59:6F:FE:5E:94:57
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       3F0D
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/76CBE6E64EA911EC9C441B57C4F9AE02.roa
Signing time:             Tue 12 Sep 2023 02:43:45 +0000
ROA not before:           Tue 12 Sep 2023 02:43:45 +0000
ROA not after:            Thu 31 Oct 2024 00:00:00 +0000
asID:                     45554
IP address blocks:        202.47.142.0/24 maxlen: 24
                          2001:dc8:6000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 14:37:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16141 (0x3f0d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Sep 12 02:43:45 2023 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=64ffd061-8f0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:50:c7:e1:62:e3:38:e2:88:10:ef:0e:ef:b2:
                    f7:6b:8a:3a:f8:8a:89:30:8d:de:5a:db:17:67:68:
                    0d:7f:e7:7d:12:b7:0b:a8:8c:f2:fe:0d:cd:b6:91:
                    d5:c8:5c:3f:c8:89:c8:fb:cf:cc:bb:51:3f:d3:1b:
                    34:6f:19:0a:1f:86:3c:c6:22:3c:a9:9a:d3:1e:9c:
                    56:d2:fc:e1:54:d2:1b:3c:79:99:47:da:70:9b:e0:
                    c5:cc:5c:bd:4d:79:db:7e:a7:4e:1a:d8:cf:70:2a:
                    7f:47:da:62:03:40:be:a7:e1:86:ea:00:a4:ff:2f:
                    f6:b6:3e:83:33:2b:d0:bc:28:54:62:be:88:6e:bc:
                    af:d0:48:f9:cf:66:d0:47:df:f9:bf:d7:32:9f:d7:
                    19:2e:87:5b:1d:d7:71:27:0f:1d:01:28:aa:c5:70:
                    d7:bf:dc:c7:e0:bb:f2:95:b2:2d:db:bc:45:d3:3e:
                    a1:ba:a0:ff:08:f6:f7:f3:29:24:8a:eb:11:98:1f:
                    41:5a:8b:d5:c1:43:8d:ee:6b:3f:d5:e8:6d:dc:35:
                    fa:44:5b:7f:53:d4:b6:71:8b:8d:11:02:71:44:a0:
                    39:2e:0d:d2:fd:b2:44:c6:f0:67:fd:e3:77:4e:f7:
                    9a:f0:3a:40:b6:a9:a9:a5:d5:3f:b9:4f:a8:f6:b5:
                    31:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:78:2E:16:56:1D:6E:A9:D9:85:31:11:2A:52:59:6F:FE:5E:94:57
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/76CBE6E64EA911EC9C441B57C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.47.142.0/24
                IPv6:
                  2001:dc8:6000::/48

    Signature Algorithm: sha256WithRSAEncryption
         39:7a:1d:a5:a7:b5:73:04:7e:26:7a:0b:d8:c2:4f:0d:8d:87:
         74:fb:6a:3a:b2:3f:66:fe:5a:8d:e9:29:c2:c3:0c:0b:2e:26:
         9b:eb:61:d1:f5:49:1b:e2:ea:f9:bf:3c:b5:ee:8f:48:13:a6:
         e0:12:53:a7:4f:69:03:93:13:87:4b:78:61:b4:2d:13:7a:53:
         c8:80:3c:ec:77:b5:60:ae:82:59:95:9a:97:da:3e:6a:c7:fb:
         44:03:57:2e:99:b9:6b:6f:a7:ac:b0:42:0b:fc:80:3e:bc:2f:
         e8:a5:9c:f0:a3:ee:e6:3c:63:d9:a3:a5:ca:56:94:54:ee:88:
         c1:fa:af:95:88:25:d4:ec:a1:89:b9:e0:e1:84:ef:44:2b:55:
         2a:a2:4c:73:11:22:78:97:9c:71:fe:12:35:4f:fd:7e:83:dc:
         c9:c0:e8:52:b9:ab:cc:4b:a0:bf:d9:29:c6:45:2a:27:ac:4c:
         75:9c:a4:eb:6a:6d:81:69:82:00:10:03:60:cd:b9:ae:0f:68:
         d3:5e:4f:28:57:ff:63:a0:1d:e8:2e:9e:77:ef:b0:95:7f:67:
         d9:83:38:41:f8:27:b3:32:28:1b:18:68:02:fb:68:bc:3f:87:
         62:15:c4:19:6f:3f:51:af:2c:c6:3f:60:10:17:42:2a:bf:06:
         5e:c5:75:b7
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgICPw0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3
NTZBQzZGMEEwHhcNMjMwOTEyMDI0MzQ1WhcNMjQxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NGZmZDA2MS04ZjBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsFDH4WLjOOKIEO8O77L3a4o6+IqJMI3eWtsXZ2gNf+d9ErcLqIzy/g3NtpHV
yFw/yInI+8/Mu1E/0xs0bxkKH4Y8xiI8qZrTHpxW0vzhVNIbPHmZR9pwm+DFzFy9
TXnbfqdOGtjPcCp/R9piA0C+p+GG6gCk/y/2tj6DMyvQvChUYr6Ibryv0Ej5z2bQ
R9/5v9cyn9cZLodbHddxJw8dASiqxXDXv9zH4LvylbIt27xF0z6huqD/CPb38ykk
iusRmB9BWovVwUON7ms/1eht3DX6RFt/U9S2cYuNEQJxRKA5Lg3S/bJExvBn/eN3
Tvea8DpAtqmppdU/uU+o9rUxHwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFNV4LhZW
HW6p2YUxESpSWW/+XpRXMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE
OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi
d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvNzZDQkU2RTY0
RUE5MTFFQzlDNDQxQjU3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E
ITAfMAwEAgABMAYDBADKL44wDwQCAAIwCQMHACABDchgADANBgkqhkiG9w0BAQsF
AAOCAQEAOXodpae1cwR+JnoL2MJPDY2HdPtqOrI/Zv5ajekpwsMMCy4mm+th0fVJ
G+Lq+b88te6PSBOm4BJTp09pA5MTh0t4YbQtE3pTyIA87He1YK6CWZWal9o+asf7
RANXLpm5a2+nrLBCC/yAPrwv6KWc8KPu5jxj2aOlylaUVO6IwfqvlYgl1Oyhibng
4YTvRCtVKqJMcxEieJeccf4SNU/9foPcycDoUrmrzEugv9kpxkUqJ6xMdZyk62pt
gWmCABADYM25rg9o015PKFf/Y6Ad6C6ed++wlX9n2YM4QfgnszIoGxhoAvtovD+H
YhXEGW8/Ua8sxj9gEBdCKr8GXsV1tw==
-----END CERTIFICATE-----
Generated at Fri May 31 16:41:40 2024 by rpki-client on console-ams.rpki-client.org