Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F77FC/FED90156AF3011E9AEE13E34C4F9AE02/70783ACCAF3411E99DF2F83EC4F9AE02.roa
File:                     70783ACCAF3411E99DF2F83EC4F9AE02.roa (raw, json)
Hash identifier:          cPuH3KnObJ5LzUMt7RntsKohdQaNvdVKPfVrdLH882w=
Subject key identifier:   89:7D:8E:1E:1A:44:78:38:A8:88:6F:69:63:D8:6B:1A:B7:19:48:9B
Certificate issuer:       /CN=A91F77FC/serialNumber=ABA4C394C8B9BD151B3B389639B8C6FF807049F2
Certificate serial:       0C99
Authority key identifier: AB:A4:C3:94:C8:B9:BD:15:1B:3B:38:96:39:B8:C6:FF:80:70:49:F2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q6TDlMi5vRUbOziWObjG_4BwSfI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F77FC/FED90156AF3011E9AEE13E34C4F9AE02/70783ACCAF3411E99DF2F83EC4F9AE02.roa
Signing time:             Mon 10 Jul 2023 18:35:23 +0000
ROA not before:           Mon 10 Jul 2023 18:35:23 +0000
ROA not after:            Sat 31 Aug 2024 00:00:00 +0000
asID:                     134099
IP address blocks:        202.36.47.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F77FC/FED90156AF3011E9AEE13E34C4F9AE02/q6TDlMi5vRUbOziWObjG_4BwSfI.crl
                          rsync://rpki.apnic.net/member_repository/A91F77FC/FED90156AF3011E9AEE13E34C4F9AE02/q6TDlMi5vRUbOziWObjG_4BwSfI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q6TDlMi5vRUbOziWObjG_4BwSfI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 19:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3225 (0xc99)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F77FC/serialNumber=ABA4C394C8B9BD151B3B389639B8C6FF807049F2
        Validity
            Not Before: Jul 10 18:35:23 2023 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=64ac4f6b-8a8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:0e:6d:48:76:9f:58:c3:f2:7a:b5:20:0e:0b:
                    bc:da:90:46:98:a6:f1:0d:da:eb:9a:d3:f4:2f:80:
                    6a:fa:aa:ee:c1:60:0d:b8:65:4c:84:10:59:3b:9f:
                    2f:20:c6:be:da:24:a6:ee:21:4a:e3:be:24:96:5c:
                    5a:7c:33:9a:bd:bc:bb:e9:05:54:96:f6:bb:3a:1d:
                    46:e9:50:b7:41:be:58:1b:f2:95:3a:55:e5:e9:ec:
                    da:2b:4a:9e:b8:b3:24:3d:35:53:e9:74:7b:35:16:
                    1b:99:06:11:a9:5a:79:72:34:f7:53:9b:28:5d:ac:
                    11:30:0b:15:ed:cf:4c:15:c1:f6:50:08:bf:d0:27:
                    5e:3f:37:5c:61:6e:01:55:a4:66:95:02:8d:d3:0a:
                    33:6a:fb:e9:20:f5:fc:ec:c5:a5:47:86:e0:32:f1:
                    47:2f:35:b8:d6:de:ed:f8:bc:4c:6a:1f:f5:b9:f4:
                    93:c5:a0:a6:70:ee:72:27:4c:1f:7f:b4:ab:5f:45:
                    15:78:c7:4f:46:a4:e8:e9:14:a8:28:d9:2a:93:71:
                    64:23:5b:c5:f2:fd:57:0f:4f:34:98:7a:61:95:cd:
                    35:17:c5:bb:2a:fd:34:99:88:1d:13:37:40:4c:34:
                    28:78:df:c2:21:51:6f:60:43:90:a3:b7:ee:e2:09:
                    7f:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:7D:8E:1E:1A:44:78:38:A8:88:6F:69:63:D8:6B:1A:B7:19:48:9B
            X509v3 Authority Key Identifier:
                keyid:AB:A4:C3:94:C8:B9:BD:15:1B:3B:38:96:39:B8:C6:FF:80:70:49:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F77FC/FED90156AF3011E9AEE13E34C4F9AE02/q6TDlMi5vRUbOziWObjG_4BwSfI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q6TDlMi5vRUbOziWObjG_4BwSfI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F77FC/FED90156AF3011E9AEE13E34C4F9AE02/70783ACCAF3411E99DF2F83EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.36.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:ff:26:54:45:7d:28:04:44:1b:11:84:ac:f5:53:5e:fb:99:
         d8:6b:b3:08:61:20:a2:fd:ed:34:1d:22:e3:01:1a:73:a7:ab:
         5c:59:6e:bc:25:84:03:8f:e1:a3:69:a3:47:12:04:17:f0:00:
         ca:ec:9c:ab:74:f6:fe:21:c8:97:73:36:e4:c5:8a:d6:c2:a6:
         18:eb:db:1f:5c:28:52:1b:92:f5:1a:62:a2:2e:89:92:ac:1b:
         e8:c7:de:7c:7b:cf:de:33:41:e6:ae:2b:7a:2a:b3:4e:ce:d2:
         34:72:b6:17:b8:3a:45:6c:0b:b0:15:d6:3c:24:77:e1:bb:5a:
         35:d9:cc:83:11:48:33:86:96:62:4a:f1:99:ae:77:60:07:12:
         4a:33:ad:7e:90:fd:48:ff:51:99:10:5b:93:a8:db:60:fa:98:
         37:d1:8d:08:1c:54:73:e9:54:3c:49:f9:26:59:74:95:c1:1f:
         bc:1b:dd:e4:ab:f4:03:ef:f9:f2:54:ed:8a:56:30:0e:02:16:
         92:74:47:bf:56:7f:4c:d9:4d:cb:1d:31:9b:62:07:41:49:ae:
         57:ff:07:b2:5e:ea:38:c6:49:1e:ba:0f:c7:b6:ee:c0:ce:80:
         19:99:43:70:f7:b5:c2:5a:8d:4a:99:68:51:80:ba:6d:36:e4:
         19:b1:66:09
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICDJkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Rjc3RkMxMTAvBgNVBAUTKEFCQTRDMzk0QzhCOUJEMTUxQjNCMzg5NjM5QjhDNkZG
ODA3MDQ5RjIwHhcNMjMwNzEwMTgzNTIzWhcNMjQwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NGFjNGY2Yi04YThmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3Q5tSHafWMPyerUgDgu82pBGmKbxDdrrmtP0L4Bq+qruwWANuGVMhBBZO58v
IMa+2iSm7iFK474kllxafDOavby76QVUlva7Oh1G6VC3Qb5YG/KVOlXl6ezaK0qe
uLMkPTVT6XR7NRYbmQYRqVp5cjT3U5soXawRMAsV7c9MFcH2UAi/0CdePzdcYW4B
VaRmlQKN0wozavvpIPX87MWlR4bgMvFHLzW41t7t+LxMah/1ufSTxaCmcO5yJ0wf
f7SrX0UVeMdPRqTo6RSoKNkqk3FkI1vF8v1XD080mHphlc01F8W7Kv00mYgdEzdA
TDQoeN/CIVFvYEOQo7fu4gl/BwIDAQABo4IClTCCApEwHQYDVR0OBBYEFIl9jh4a
RHg4qIhvaWPYaxq3GUibMB8GA1UdIwQYMBaAFKukw5TIub0VGzs4ljm4xv+AcEny
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzdGQy9GRUQ5MDE1NkFG
MzAxMUU5QUVFMTNFMzRDNEY5QUUwMi9xNlREbE1pNXZSVWJPemlXT2JqR180QndT
ZkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3E2VERsTWk1dlJVYk96aVdPYmpHXzRCd1NmSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Rjc3RkMvRkVEOTAxNTZBRjMwMTFFOUFFRTEzRTM0QzRGOUFFMDIvNzA3ODNBQ0NB
RjM0MTFFOTlERjJGODNFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADKJC8wDQYJKoZIhvcNAQELBQADggEBADP/JlRFfSgERBsR
hKz1U177mdhrswhhIKL97TQdIuMBGnOnq1xZbrwlhAOP4aNpo0cSBBfwAMrsnKt0
9v4hyJdzNuTFitbCphjr2x9cKFIbkvUaYqIuiZKsG+jH3nx7z94zQeauK3oqs07O
0jRythe4OkVsC7AV1jwkd+G7WjXZzIMRSDOGlmJK8Zmud2AHEkozrX6Q/Uj/UZkQ
W5Oo22D6mDfRjQgcVHPpVDxJ+SZZdJXBH7wb3eSr9APv+fJU7YpWMA4CFpJ0R79W
f0zZTcsdMZtiB0FJrlf/B7Je6jjGSR66D8e27sDOgBmZQ3D3tcJajUqZaFGAum02
5BmxZgk=
-----END CERTIFICATE-----
Generated at Thu Jun 6 21:11:40 2024 by rpki-client on console-ams.rpki-client.org