Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/F077B26084A511EAB3356318C4F9AE02.roa
File:                     F077B26084A511EAB3356318C4F9AE02.roa (raw, json)
Hash identifier:          DUDPY5SSr5VgvbfBigBSa1qYY1gFhAjw7IXC4WJSYmw=
Subject key identifier:   0A:B2:4D:1B:B9:1B:A0:27:3D:DD:2F:9C:D5:7A:7D:90:D5:F2:5E:70
Certificate issuer:       /CN=A911BD54/serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C
Certificate serial:       280B
Authority key identifier: BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/F077B26084A511EAB3356318C4F9AE02.roa
Signing time:             Thu 28 Dec 2023 16:02:44 +0000
ROA not before:           Thu 28 Dec 2023 16:02:44 +0000
ROA not after:            Sun 02 Mar 2025 00:00:00 +0000
asID:                     132866
IP address blocks:        49.229.32.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl
                          rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Dec 2024 15:39:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10251 (0x280b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911BD54/serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C
        Validity
            Not Before: Dec 28 16:02:44 2023 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=658d9c23-b759
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c4:0d:84:08:4a:d2:9b:ed:11:f0:16:ee:5c:
                    a3:f0:fd:07:b7:ea:6d:84:3b:09:94:1a:72:d6:d4:
                    07:d3:be:82:db:87:f3:e5:31:a8:f8:84:54:c0:e1:
                    41:82:f8:f2:cc:ee:0e:dd:28:ca:3f:13:8b:fe:b7:
                    3d:fd:1c:84:f1:58:b0:d2:25:8c:24:69:7a:fc:9a:
                    3b:c7:97:ea:16:2e:ec:d8:a4:a7:8b:c6:41:d2:a2:
                    92:14:5f:31:44:52:49:ae:8b:0a:b2:e2:e3:0d:92:
                    a0:48:39:ef:a5:60:ca:c1:38:0a:78:16:c0:f4:98:
                    00:db:cc:89:fb:f9:c4:20:d5:97:2f:58:25:b6:aa:
                    13:c7:8e:8f:da:8d:6d:5a:2c:af:09:9d:b8:b5:d8:
                    a0:58:f6:99:4c:e1:50:0e:6b:c9:0d:7b:16:81:4c:
                    e1:26:21:94:ed:bc:b8:93:b4:32:07:53:8a:c6:2e:
                    d8:46:48:3b:18:35:d1:0f:e4:b1:89:4d:79:6d:ad:
                    6e:21:ff:60:2f:f6:6d:49:be:6d:a3:52:1b:f7:a4:
                    72:10:27:39:4a:50:4e:de:29:10:cb:ae:f0:72:60:
                    50:18:98:d6:7d:05:76:24:03:82:50:ac:8d:60:41:
                    66:aa:bd:3c:12:89:37:48:9a:6e:fd:78:2d:0d:62:
                    8b:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:B2:4D:1B:B9:1B:A0:27:3D:DD:2F:9C:D5:7A:7D:90:D5:F2:5E:70
            X509v3 Authority Key Identifier:
                keyid:BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/F077B26084A511EAB3356318C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.229.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:02:80:0c:1a:3b:d5:3e:f6:41:70:29:96:0e:59:db:46:d8:
         d2:f9:b2:b1:0a:a8:5b:6d:40:3f:0f:42:3d:41:c8:f5:ab:dd:
         8a:35:9c:cc:05:1c:94:10:88:8a:50:75:e6:29:41:be:b9:5e:
         aa:12:90:e0:28:09:b5:47:bb:67:cf:4c:db:9c:41:4f:cd:28:
         5d:a8:2e:3e:a9:2d:f3:4e:f1:81:24:e7:1e:a6:32:c3:9e:b7:
         b2:fa:b3:b3:6b:b1:f3:5c:1b:55:61:93:47:53:6d:1d:88:6e:
         f8:4f:d3:0b:16:aa:51:f1:51:7d:af:3b:ae:6f:3c:f4:96:9d:
         7d:3c:b7:7c:49:e9:49:8e:38:29:20:75:5f:b4:be:ad:f4:8d:
         23:a6:be:0c:80:97:38:27:30:ac:bb:68:39:e0:8b:45:04:1e:
         67:6b:c9:44:2d:bc:7f:28:08:08:37:47:57:3e:4d:64:cd:ac:
         6f:9d:3d:2b:36:7f:12:96:e9:70:33:ab:14:39:a2:43:63:df:
         e1:d7:71:b8:cb:09:d0:2b:ba:d6:74:11:7e:d2:c7:9a:6a:5a:
         e9:87:79:60:7b:d7:50:1b:ae:42:32:9c:b2:b1:68:91:bd:b6:
         49:52:d0:b4:8d:e3:3b:06:db:9c:cb:56:c9:11:a4:21:a2:f6:
         3a:c4:00:9f
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICKAswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUJENTQxMTAvBgNVBAUTKEJDRkFGOEQzM0YxOEE4RDM2MDIwMjlFQkNFREUxRTM2
QUYyMDcxNUMwHhcNMjMxMjI4MTYwMjQ0WhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02NThkOWMyMy1iNzU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAusQNhAhK0pvtEfAW7lyj8P0Ht+pthDsJlBpy1tQH076C24fz5TGo+IRUwOFB
gvjyzO4O3SjKPxOL/rc9/RyE8Viw0iWMJGl6/Jo7x5fqFi7s2KSni8ZB0qKSFF8x
RFJJrosKsuLjDZKgSDnvpWDKwTgKeBbA9JgA28yJ+/nEINWXL1gltqoTx46P2o1t
WiyvCZ24tdigWPaZTOFQDmvJDXsWgUzhJiGU7by4k7QyB1OKxi7YRkg7GDXRD+Sx
iU15ba1uIf9gL/ZtSb5to1Ib96RyECc5SlBO3ikQy67wcmBQGJjWfQV2JAOCUKyN
YEFmqr08Eok3SJpu/XgtDWKLjwIDAQABo4IClTCCApEwHQYDVR0OBBYEFAqyTRu5
G6AnPd0vnNV6fZDV8l5wMB8GA1UdIwQYMBaAFLz6+NM/GKjTYCAp687eHjavIHFc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkQ1NC8zRTI4MUM5ODAw
NDkxMUU1QjRCNjRGNjNDNEY5QUUwMi92UHI0MHo4WXFOTmdJQ25yenQ0ZU5xOGdj
VncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ZQcjQwejhZcU5OZ0lDbnJ6dDRlTnE4Z2NWdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MUJENTQvM0UyODFDOTgwMDQ5MTFFNUI0QjY0RjYzQzRGOUFFMDIvRjA3N0IyNjA4
NEE1MTFFQUIzMzU2MzE4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAAx5SAwDQYJKoZIhvcNAQELBQADggEBAIgCgAwaO9U+9kFw
KZYOWdtG2NL5srEKqFttQD8PQj1ByPWr3Yo1nMwFHJQQiIpQdeYpQb65XqoSkOAo
CbVHu2fPTNucQU/NKF2oLj6pLfNO8YEk5x6mMsOet7L6s7NrsfNcG1Vhk0dTbR2I
bvhP0wsWqlHxUX2vO65vPPSWnX08t3xJ6UmOOCkgdV+0vq30jSOmvgyAlzgnMKy7
aDngi0UEHmdryUQtvH8oCAg3R1c+TWTNrG+dPSs2fxKW6XAzqxQ5okNj3+HXcbjL
CdArutZ0EX7Sx5pqWumHeWB711AbrkIynLKxaJG9tklS0LSN4zsG25zLVskRpCGi
9jrEAJ8=
-----END CERTIFICATE-----
Generated at Sun Nov 24 18:24:03 2024 by rpki-client on console-ams.rpki-client.org