Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/D55BADE4193911ED82BB7358C4F9AE02.roa
File:                     D55BADE4193911ED82BB7358C4F9AE02.roa (raw, json)
Hash identifier:          wzpW0H2xl9IMiS2MU8LoO/Pkm6/TTCP+V9WTTRyG49s=
Subject key identifier:   3E:1E:96:02:9C:84:BA:D2:FB:D5:8A:EA:61:B1:20:29:45:70:25:D4
Certificate issuer:       /CN=A911B412/serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934
Certificate serial:       06C2
Authority key identifier: 87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/D55BADE4193911ED82BB7358C4F9AE02.roa
Signing time:             Thu 24 Oct 2024 23:43:14 +0000
ROA not before:           Thu 24 Oct 2024 23:43:14 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     9381
IP address blocks:        2401:2c80::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl
                          rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 20:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1730 (0x6c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911B412/serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934
        Validity
            Not Before: Oct 24 23:43:14 2024 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=671adb92-cca6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:15:7f:b7:70:c5:29:ea:c5:d3:3e:4c:8d:8a:
                    cd:0b:09:55:5e:87:b0:40:6f:08:1a:d9:d7:90:92:
                    bf:ab:62:6b:57:4b:8d:d5:03:28:2f:48:4d:9d:b4:
                    e9:10:20:5b:d4:1d:14:15:1e:e8:61:26:68:de:58:
                    63:f6:d2:60:1e:a2:0a:39:66:c3:08:fe:82:00:32:
                    b7:02:84:1f:27:2a:12:10:5d:45:91:7a:a7:96:e3:
                    a7:28:bb:e6:22:55:16:cd:8f:dd:97:a7:77:a1:20:
                    4f:10:64:7c:fa:38:a0:7a:74:ac:50:e8:f3:0b:85:
                    0f:01:c1:b5:c5:d5:35:65:83:b8:b3:13:26:45:4b:
                    ef:db:4f:0d:50:36:24:c9:c8:d3:8a:92:1b:61:6e:
                    6a:d4:d6:60:94:bc:52:47:db:2f:e0:f6:aa:40:92:
                    72:86:53:12:04:17:29:c6:2a:35:98:34:89:51:1e:
                    31:ea:8c:b9:9f:05:59:c4:cf:4b:e8:16:cf:0d:ca:
                    bc:ed:05:e8:ba:62:0c:64:b4:1d:93:1c:1a:ac:16:
                    a1:20:bd:d2:31:6f:b3:dc:73:46:cc:44:78:16:5f:
                    f8:0d:10:92:be:19:c7:3a:65:bd:82:9f:ca:34:e0:
                    90:09:10:e8:c9:a8:2f:df:7d:91:e8:ab:ed:17:74:
                    94:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:1E:96:02:9C:84:BA:D2:FB:D5:8A:EA:61:B1:20:29:45:70:25:D4
            X509v3 Authority Key Identifier:
                keyid:87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/D55BADE4193911ED82BB7358C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:2c80::/32

    Signature Algorithm: sha256WithRSAEncryption
         ab:d4:e9:df:cd:5b:27:22:ad:0c:d9:2b:ae:18:00:d8:e5:a3:
         93:ff:9f:d3:80:62:98:66:77:ef:56:89:30:16:2f:1f:f6:d1:
         22:d1:5c:e4:c8:ae:8b:20:73:7c:11:b0:ff:de:71:39:6d:b5:
         b5:b6:e9:19:dc:d7:e4:16:7c:68:4e:f5:d0:78:fc:33:f8:26:
         6d:3d:f0:b3:70:eb:ca:dc:d5:58:ad:cf:4e:62:30:c8:3a:57:
         47:82:65:e6:a5:d7:de:8a:84:ee:a3:02:88:40:8d:81:35:52:
         c0:b1:a7:68:58:a9:ec:23:6e:52:2b:38:ee:43:28:b7:b5:1d:
         60:11:90:5c:85:3d:1b:c4:2d:12:2e:a3:c5:66:cd:0a:fc:e4:
         c5:c1:f0:e1:3a:1c:75:cc:0e:af:96:f4:bd:f8:7b:0c:ec:71:
         da:a7:9c:7b:14:c9:89:a0:ed:81:42:0f:73:b7:76:78:1d:4d:
         02:ab:7e:10:03:9c:f5:e4:99:70:80:0a:dd:a0:d2:a9:92:76:
         ef:c8:9d:e3:45:72:bb:09:e4:9f:3a:0e:bb:87:e6:84:6f:43:
         f6:81:ce:3a:8d:1f:99:c3:fc:e6:ed:37:f0:95:f3:03:52:b8:
         3a:c2:70:b7:85:16:b3:4f:68:7f:fc:c1:13:99:59:3e:14:bb:
         88:55:11:f2
-----BEGIN CERTIFICATE-----
MIIFcjCCBFqgAwIBAgICBsIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUI0MTIxMTAvBgNVBAUTKDg3M0Q1OTVBRjU1NjlDMjAyMzlGNTNERDgwRUIxMTc3
RDgwQjA5MzQwHhcNMjQxMDI0MjM0MzE0WhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzFhZGI5Mi1jY2E2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyRV/t3DFKerF0z5MjYrNCwlVXoewQG8IGtnXkJK/q2JrV0uN1QMoL0hNnbTp
ECBb1B0UFR7oYSZo3lhj9tJgHqIKOWbDCP6CADK3AoQfJyoSEF1FkXqnluOnKLvm
IlUWzY/dl6d3oSBPEGR8+jigenSsUOjzC4UPAcG1xdU1ZYO4sxMmRUvv208NUDYk
ycjTipIbYW5q1NZglLxSR9sv4PaqQJJyhlMSBBcpxio1mDSJUR4x6oy5nwVZxM9L
6BbPDcq87QXoumIMZLQdkxwarBahIL3SMW+z3HNGzER4Fl/4DRCSvhnHOmW9gp/K
NOCQCRDoyagv332R6KvtF3SUzwIDAQABo4ICljCCApIwHQYDVR0OBBYEFD4elgKc
hLrS+9WK6mGxIClFcCXUMB8GA1UdIwQYMBaAFIc9WVr1VpwgI59T3YDrEXfYCwk0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjQxMi9DMUVBMDMzQ0Qy
RUExMUVCQTIwNkIxNzhDNEY5QUUwMi9oejFaV3ZWV25DQWpuMVBkZ09zUmQ5Z0xD
VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2h6MVpXdlZXbkNBam4xUGRnT3NSZDlnTENUUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MUI0MTIvQzFFQTAzM0NEMkVBMTFFQkEyMDZCMTc4QzRGOUFFMDIvRDU1QkFERTQx
OTM5MTFFRDgyQkI3MzU4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8E
ETAPMA0EAgACMAcDBQAkASyAMA0GCSqGSIb3DQEBCwUAA4IBAQCr1OnfzVsnIq0M
2SuuGADY5aOT/5/TgGKYZnfvVokwFi8f9tEi0VzkyK6LIHN8EbD/3nE5bbW1tukZ
3NfkFnxoTvXQePwz+CZtPfCzcOvK3NVYrc9OYjDIOldHgmXmpdfeioTuowKIQI2B
NVLAsadoWKnsI25SKzjuQyi3tR1gEZBchT0bxC0SLqPFZs0K/OTFwfDhOhx1zA6v
lvS9+HsM7HHap5x7FMmJoO2BQg9zt3Z4HU0Cq34QA5z15JlwgArdoNKpknbvyJ3j
RXK7CeSfOg67h+aEb0P2gc46jR+Zw/zm7TfwlfMDUrg6wnC3hRazT2h//METmVk+
FLuIVRHy
-----END CERTIFICATE-----
Generated at Thu Nov 21 00:21:18 2024 by rpki-client on console-fra.rpki-client.org