Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/E681416041C511E8BEC06D36C4F9AE02.roa
File:                     E681416041C511E8BEC06D36C4F9AE02.roa (raw, json)
Hash identifier:          bHiiIS3BwoO5KuYLpL/BbLehporq4oxa+44HbBZEM3U=
Subject key identifier:   C5:E2:DB:55:5C:DE:85:FD:15:13:D0:99:50:96:CB:4B:A2:3E:1D:0D
Certificate issuer:       /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Certificate serial:       2772
Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/E681416041C511E8BEC06D36C4F9AE02.roa
Signing time:             Tue 30 Jul 2024 16:04:26 +0000
ROA not before:           Tue 30 Jul 2024 16:04:26 +0000
ROA not after:            Tue 30 Sep 2025 00:00:00 +0000
asID:                     49745
IP address blocks:        2402:9e80:20::/47 maxlen: 47

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl
                          rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:47:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10098 (0x2772)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
        Validity
            Not Before: Jul 30 16:04:26 2024 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=66a90f0a-3f8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:9e:06:ee:81:71:fc:52:e7:11:df:3a:4a:8c:
                    e0:ce:76:68:1d:87:a9:26:f8:22:09:87:b0:aa:47:
                    fe:5c:9f:3a:5e:84:6e:7f:67:0b:1f:f4:76:f0:21:
                    5c:d8:63:af:58:a9:69:47:5f:d7:bd:67:15:72:00:
                    ba:af:55:09:90:0b:5c:2a:18:18:ec:1c:72:1a:7a:
                    12:50:b6:ea:ab:24:08:d8:cf:58:15:be:1c:f2:61:
                    0c:2a:91:02:b9:91:78:cd:36:90:b3:6b:f6:41:fc:
                    9b:6e:09:ee:84:88:c9:c8:db:45:c9:77:c8:32:44:
                    32:4d:e7:ca:ed:3e:1d:c3:e6:6f:88:33:e2:11:8b:
                    4a:be:8a:31:dc:d5:1c:7d:75:67:94:0a:7b:9f:9f:
                    ba:e4:9c:f1:e4:b9:ea:7e:41:39:13:fd:b8:78:e6:
                    af:f2:34:2d:49:7f:15:1c:96:c0:1d:b8:2b:7f:2e:
                    2f:90:fb:c2:97:88:41:5c:af:b0:45:61:99:a2:d1:
                    db:00:25:b3:52:42:cd:46:26:63:25:35:69:10:9d:
                    2b:00:88:d6:c9:6c:bd:9a:ba:c2:2e:85:a7:e3:aa:
                    65:0d:bb:7f:9a:bc:33:49:f9:71:fa:ba:73:4e:49:
                    de:2a:0d:50:62:31:50:ca:24:9a:93:77:21:c8:d9:
                    6b:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:E2:DB:55:5C:DE:85:FD:15:13:D0:99:50:96:CB:4B:A2:3E:1D:0D
            X509v3 Authority Key Identifier:
                keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/E681416041C511E8BEC06D36C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:9e80:20::/47

    Signature Algorithm: sha256WithRSAEncryption
         8c:dd:82:c1:ea:ad:b6:b8:3c:9a:2e:6a:ca:68:6b:68:5c:73:
         7e:f0:73:f5:1c:c7:d7:d9:5f:c9:04:fe:c2:9d:c0:6b:86:e9:
         2a:44:11:9c:b5:9f:f4:c2:e7:6c:ec:fd:fa:09:f2:4e:84:47:
         d0:63:6e:4a:dc:ec:7c:01:7a:03:16:7d:90:02:44:a3:a8:b0:
         fc:0f:e7:0d:4c:56:54:63:0d:65:f0:2c:60:91:30:1c:3a:3d:
         a9:63:11:eb:a6:b9:f8:6e:fd:2c:0e:35:54:3c:4c:5b:61:89:
         1b:c6:83:f5:2f:82:11:f0:28:16:1c:ca:80:39:6b:f0:37:cf:
         ed:d3:0a:b5:2e:b6:9c:52:fa:59:f6:58:c1:ee:43:b3:4d:5e:
         4a:ca:3b:b0:d7:08:df:05:ed:43:6f:b8:79:d7:79:75:98:c7:
         2a:f5:67:0c:03:4f:87:4d:1f:70:3c:c3:f9:4b:2c:f9:5d:a1:
         23:5f:a1:d0:f2:62:ae:cd:0d:ab:88:82:63:df:90:99:93:46:
         f1:fb:dd:60:81:a7:68:ea:69:3c:2d:8b:20:7b:c9:7b:a8:fa:
         75:5a:1e:94:26:fa:60:4f:09:b6:92:28:39:96:d7:09:83:db:
         5a:d7:a4:b1:67:8a:85:92:28:d7:3c:58:9a:02:eb:3a:5e:75:
         2a:83:a5:77
-----BEGIN CERTIFICATE-----
MIIFdDCCBFygAwIBAgICJ3IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUMyOEQxMTAvBgNVBAUTKDk5REZCNkJGNzk1MEU2QjQwMTk1QTU5MDI0RjRCNzUw
ODYzRDNEOTMwHhcNMjQwNzMwMTYwNDI2WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmE5MGYwYS0zZjhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA+p4G7oFx/FLnEd86SozgznZoHYepJvgiCYewqkf+XJ86XoRuf2cLH/R28CFc
2GOvWKlpR1/XvWcVcgC6r1UJkAtcKhgY7BxyGnoSULbqqyQI2M9YFb4c8mEMKpEC
uZF4zTaQs2v2QfybbgnuhIjJyNtFyXfIMkQyTefK7T4dw+ZviDPiEYtKvoox3NUc
fXVnlAp7n5+65Jzx5LnqfkE5E/24eOav8jQtSX8VHJbAHbgrfy4vkPvCl4hBXK+w
RWGZotHbACWzUkLNRiZjJTVpEJ0rAIjWyWy9mrrCLoWn46plDbt/mrwzSflx+rpz
TkneKg1QYjFQyiSak3chyNlriwIDAQABo4ICmDCCApQwHQYDVR0OBBYEFMXi21Vc
3oX9FRPQmVCWy0uiPh0NMB8GA1UdIwQYMBaAFJnftr95UOa0AZWlkCT0t1CGPT2T
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzI4RC9CREFCNjdGNjNB
ODAxMUU1QUUzOTAxNTVDNEY5QUUwMi9tZC0ydjNsUTVyUUJsYVdRSlBTM1VJWTlQ
Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL21kLTJ2M2xRNXJRQmxhV1FKUFMzVUlZOVBaTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MUMyOEQvQkRBQjY3RjYzQTgwMTFFNUFFMzkwMTU1QzRGOUFFMDIvRTY4MTQxNjA0
MUM1MTFFOEJFQzA2RDM2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E
EzARMA8EAgACMAkDBwEkAp6AACAwDQYJKoZIhvcNAQELBQADggEBAIzdgsHqrba4
PJouaspoa2hcc37wc/Ucx9fZX8kE/sKdwGuG6SpEEZy1n/TC52zs/foJ8k6ER9Bj
bkrc7HwBegMWfZACRKOosPwP5w1MVlRjDWXwLGCRMBw6PaljEeumufhu/SwONVQ8
TFthiRvGg/UvghHwKBYcyoA5a/A3z+3TCrUutpxS+ln2WMHuQ7NNXkrKO7DXCN8F
7UNvuHnXeXWYxyr1ZwwDT4dNH3A8w/lLLPldoSNfodDyYq7NDauIgmPfkJmTRvH7
3WCBp2jqaTwtiyB7yXuo+nVaHpQm+mBPCbaSKDmW1wmD21rXpLFnioWSKNc8WJoC
6zpedSqDpXc=
-----END CERTIFICATE-----
Generated at Fri Nov 22 17:55:38 2024 by rpki-client on console-fra.rpki-client.org