Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/FD3182EA164511ED9C2DE51EC4F9AE02.roa
File:                     FD3182EA164511ED9C2DE51EC4F9AE02.roa (raw, json)
Hash identifier:          nAl9HMcYL1Qze9TI4YNdH45GhaJPbu8TA5FD1cGLxME=
Subject key identifier:   FF:A8:A6:43:14:EA:9C:20:99:6F:29:49:FA:F1:36:8F:24:E8:0C:96
Certificate issuer:       /CN=A911BD54/serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C
Certificate serial:       280C
Authority key identifier: BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/FD3182EA164511ED9C2DE51EC4F9AE02.roa
Signing time:             Thu 28 Dec 2023 16:02:45 +0000
ROA not before:           Thu 28 Dec 2023 16:02:45 +0000
ROA not after:            Sun 02 Mar 2025 00:00:00 +0000
asID:                     132920
IP address blocks:        58.64.33.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl
                          rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Dec 2024 15:39:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10252 (0x280c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911BD54/serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C
        Validity
            Not Before: Dec 28 16:02:45 2023 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=658d9c24-7017
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:26:07:00:51:b7:ab:ac:21:ef:6f:7b:d4:0a:
                    38:b0:fd:07:73:7d:3a:e0:a3:11:98:fb:11:0f:1f:
                    d9:db:30:5b:7e:d5:05:6a:01:1f:8d:b6:cc:26:8c:
                    8d:88:82:3e:10:83:b2:7f:f0:78:6a:80:7a:49:d3:
                    ad:f4:57:28:30:73:38:f0:e6:3c:93:53:31:50:b2:
                    d3:fd:ea:60:bc:b9:43:cc:72:f2:d4:be:a6:ad:fe:
                    09:29:7b:a9:27:29:52:ca:60:20:13:ed:71:b7:4a:
                    35:c1:b7:60:92:25:d7:a2:4f:39:ed:8f:42:9d:5e:
                    f1:d9:20:a5:6e:df:65:dc:ff:cd:32:c0:ec:2d:5f:
                    18:71:34:e4:27:9b:27:ef:96:ee:48:4f:8a:9e:39:
                    75:87:c1:e3:76:fb:77:39:46:52:20:58:ef:4e:0b:
                    a7:02:c0:15:8f:a2:8b:11:82:f4:f9:b8:1a:af:a2:
                    8c:a8:35:08:f9:ae:a8:8f:c3:cb:28:b5:52:e2:11:
                    c2:67:2e:a2:a7:23:8f:d6:ae:23:ac:dc:ec:de:96:
                    e7:61:d6:3b:9d:10:a5:71:de:f8:13:09:b5:45:a1:
                    c2:5a:73:f4:b2:43:51:cb:3d:37:ce:b6:a5:74:35:
                    ac:19:ef:50:cf:d5:ea:32:08:97:69:28:bb:5c:11:
                    df:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:A8:A6:43:14:EA:9C:20:99:6F:29:49:FA:F1:36:8F:24:E8:0C:96
            X509v3 Authority Key Identifier:
                keyid:BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/FD3182EA164511ED9C2DE51EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  58.64.33.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b7:5f:ca:f4:37:6c:de:09:40:75:94:77:a7:38:9d:ad:51:ca:
         86:67:75:ec:45:6e:46:c2:71:20:07:97:16:df:5e:4f:c2:be:
         2c:fc:85:49:1d:a6:73:42:63:14:5b:56:a8:4a:6d:0e:bc:c8:
         4c:df:50:e3:8d:16:9e:d9:70:92:8f:2a:7c:85:79:09:ae:b1:
         06:30:8c:1c:67:ed:67:8e:65:23:03:d5:2e:61:38:6a:04:8f:
         01:ce:79:86:ce:2b:1e:58:70:fc:5a:4c:46:f2:46:23:26:e1:
         01:03:7d:2f:d3:00:c2:0b:eb:bb:24:ec:a7:fe:78:cd:22:61:
         be:a9:9d:4f:51:c4:02:41:de:24:82:ee:d0:b4:d9:d4:8f:9f:
         d3:a7:db:66:25:2e:f4:38:10:4b:8c:aa:49:f1:57:55:6c:b9:
         36:dc:1c:97:11:61:d5:f7:6d:a5:12:b4:d3:2e:5c:6f:4e:8d:
         38:d3:c5:27:fc:f1:77:08:e6:a3:74:cd:8a:a5:c3:cb:59:14:
         44:c0:c4:d4:11:70:76:9c:be:54:e9:2b:eb:6a:bd:b6:dc:51:
         3c:72:df:e9:b7:3e:92:11:1b:d6:8f:bc:f2:35:ed:b6:df:06:
         55:12:55:cc:ed:3c:ce:90:93:83:56:1f:be:5e:0d:f4:68:db:
         6d:17:c8:48
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICKAwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUJENTQxMTAvBgNVBAUTKEJDRkFGOEQzM0YxOEE4RDM2MDIwMjlFQkNFREUxRTM2
QUYyMDcxNUMwHhcNMjMxMjI4MTYwMjQ1WhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02NThkOWMyNC03MDE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvSYHAFG3q6wh72971Ao4sP0Hc3064KMRmPsRDx/Z2zBbftUFagEfjbbMJoyN
iII+EIOyf/B4aoB6SdOt9FcoMHM48OY8k1MxULLT/epgvLlDzHLy1L6mrf4JKXup
JylSymAgE+1xt0o1wbdgkiXXok857Y9CnV7x2SClbt9l3P/NMsDsLV8YcTTkJ5sn
75buSE+Knjl1h8Hjdvt3OUZSIFjvTgunAsAVj6KLEYL0+bgar6KMqDUI+a6oj8PL
KLVS4hHCZy6ipyOP1q4jrNzs3pbnYdY7nRClcd74Ewm1RaHCWnP0skNRyz03zral
dDWsGe9Qz9XqMgiXaSi7XBHf/wIDAQABo4IClTCCApEwHQYDVR0OBBYEFP+opkMU
6pwgmW8pSfrxNo8k6AyWMB8GA1UdIwQYMBaAFLz6+NM/GKjTYCAp687eHjavIHFc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkQ1NC8zRTI4MUM5ODAw
NDkxMUU1QjRCNjRGNjNDNEY5QUUwMi92UHI0MHo4WXFOTmdJQ25yenQ0ZU5xOGdj
VncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ZQcjQwejhZcU5OZ0lDbnJ6dDRlTnE4Z2NWdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MUJENTQvM0UyODFDOTgwMDQ5MTFFNUI0QjY0RjYzQzRGOUFFMDIvRkQzMTgyRUEx
NjQ1MTFFRDlDMkRFNTFFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAA6QCEwDQYJKoZIhvcNAQELBQADggEBALdfyvQ3bN4JQHWU
d6c4na1RyoZndexFbkbCcSAHlxbfXk/Cviz8hUkdpnNCYxRbVqhKbQ68yEzfUOON
Fp7ZcJKPKnyFeQmusQYwjBxn7WeOZSMD1S5hOGoEjwHOeYbOKx5YcPxaTEbyRiMm
4QEDfS/TAMIL67sk7Kf+eM0iYb6pnU9RxAJB3iSC7tC02dSPn9On22YlLvQ4EEuM
qknxV1VsuTbcHJcRYdX3baUStNMuXG9OjTjTxSf88XcI5qN0zYqlw8tZFETAxNQR
cHacvlTpK+tqvbbcUTxy3+m3PpIRG9aPvPI17bbfBlUSVcztPM6Qk4NWH75eDfRo
220XyEg=
-----END CERTIFICATE-----
Generated at Sun Nov 24 17:19:57 2024 by rpki-client on console-fra.rpki-client.org