Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/DA202262C34F11EE93BC8317C4F9AE02.roa
File:                     DA202262C34F11EE93BC8317C4F9AE02.roa (raw, json)
Hash identifier:          UPNy9mXh9V1JREa7xBmKEY6nu0QxtMbBhZWdNaDQGV0=
Subject key identifier:   51:12:34:B5:61:8A:8E:B2:8F:BF:80:21:12:5F:DE:BA:F5:4A:34:12
Certificate issuer:       /CN=A911C5B0/serialNumber=7A961769549E0AAD0A9BF9925683BAEF733A2F1A
Certificate serial:       3395
Authority key identifier: 7A:96:17:69:54:9E:0A:AD:0A:9B:F9:92:56:83:BA:EF:73:3A:2F:1A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epYXaVSeCq0Km_mSVoO673M6Lxo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/DA202262C34F11EE93BC8317C4F9AE02.roa
Signing time:             Sun 04 Feb 2024 11:24:47 +0000
ROA not before:           Sun 04 Feb 2024 11:24:47 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     9715
IP address blocks:        210.246.144.0/24 maxlen: 24
                          210.246.145.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/epYXaVSeCq0Km_mSVoO673M6Lxo.crl
                          rsync://rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/epYXaVSeCq0Km_mSVoO673M6Lxo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epYXaVSeCq0Km_mSVoO673M6Lxo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 May 2024 14:23:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13205 (0x3395)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C5B0/serialNumber=7A961769549E0AAD0A9BF9925683BAEF733A2F1A
        Validity
            Not Before: Feb  4 11:24:47 2024 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=65bf73ff-f71e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:45:7e:e9:08:81:16:62:64:f2:36:d6:7c:42:
                    97:59:58:64:22:77:76:da:ed:c4:61:83:2b:c4:4b:
                    8d:ec:0e:86:4e:91:4e:25:73:dc:5f:67:39:39:00:
                    95:77:12:fe:05:56:4b:b7:98:e6:b3:37:05:d1:ac:
                    3e:d5:f2:d5:56:a9:3a:ed:fd:c0:fe:d3:fc:8a:b5:
                    c4:93:33:a1:75:a5:d7:0e:0c:1a:63:e2:4f:47:1b:
                    af:d9:f5:1e:ae:5b:05:d1:47:30:42:93:2e:93:a9:
                    4f:f9:c9:2d:b1:b6:66:55:06:72:ac:fa:ad:5f:0b:
                    f1:49:ad:b3:b7:3c:37:98:3f:e2:d4:b0:f6:67:e3:
                    e7:bb:57:ca:a3:d2:aa:0f:38:44:d4:77:70:7c:80:
                    87:61:8f:7b:8f:4b:c3:9d:52:c5:74:80:fb:a5:97:
                    dd:00:2d:9f:9c:10:f2:48:09:74:27:b1:23:f6:3c:
                    a0:06:d3:d2:18:d6:39:a4:54:20:8f:55:6d:65:c9:
                    94:f2:06:c8:26:b9:49:91:3b:b9:e6:e1:21:fc:c5:
                    53:9f:2b:91:b5:6c:f0:39:6f:72:b3:85:3a:bc:b1:
                    f1:98:80:8d:eb:39:53:b5:5d:58:b3:f3:bc:3f:15:
                    71:69:5f:88:80:09:75:1b:43:54:a9:62:6f:6f:a6:
                    55:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:12:34:B5:61:8A:8E:B2:8F:BF:80:21:12:5F:DE:BA:F5:4A:34:12
            X509v3 Authority Key Identifier:
                keyid:7A:96:17:69:54:9E:0A:AD:0A:9B:F9:92:56:83:BA:EF:73:3A:2F:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/epYXaVSeCq0Km_mSVoO673M6Lxo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epYXaVSeCq0Km_mSVoO673M6Lxo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/DA202262C34F11EE93BC8317C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.246.144.0/23

    Signature Algorithm: sha256WithRSAEncryption
         82:18:e9:57:c8:12:b7:f6:76:21:4b:ad:1f:cd:67:16:55:b1:
         dc:ca:19:b9:9e:31:6e:99:af:3c:91:9c:7f:da:dc:d1:2b:72:
         dd:1d:fa:70:3a:8a:e2:93:06:06:9b:51:b7:ca:f4:fd:a6:b2:
         4f:76:c7:42:21:7d:b5:a2:02:99:b6:93:fe:f2:6c:0d:56:ee:
         16:f9:f0:99:85:5e:70:05:96:64:ca:12:1c:25:f9:7a:78:7a:
         a9:3d:83:8a:40:43:8b:1f:3b:7a:3e:38:bf:32:13:2a:d4:b3:
         c3:79:2e:77:f1:85:4d:d6:20:a9:f4:ad:76:81:25:d5:7d:b1:
         88:db:d7:2f:a4:0c:e7:07:8a:de:ce:4c:44:02:4e:7a:49:e3:
         f1:6a:83:d3:b2:2b:68:ed:40:f3:b5:21:fd:28:fa:af:f3:73:
         d8:51:4f:c8:20:2e:96:af:fa:18:32:ec:4a:3d:e2:bf:38:2a:
         d6:09:eb:5f:a6:da:4b:40:74:63:d9:2a:89:ba:09:eb:3f:60:
         ef:2d:06:08:27:b2:8d:80:b5:b7:75:62:e6:a4:3c:90:f8:ba:
         f7:b5:f9:f1:b6:80:23:f3:04:09:af:50:8f:f1:a0:73:35:a6:
         0c:4f:55:97:a0:3d:0c:28:b2:1f:ea:a5:0b:30:6c:c6:e7:df:
         56:00:fe:ff
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICM5UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUM1QjAxMTAvBgNVBAUTKDdBOTYxNzY5NTQ5RTBBQUQwQTlCRjk5MjU2ODNCQUVG
NzMzQTJGMUEwHhcNMjQwMjA0MTEyNDQ3WhcNMjQwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NWJmNzNmZi1mNzFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtEV+6QiBFmJk8jbWfEKXWVhkInd22u3EYYMrxEuN7A6GTpFOJXPcX2c5OQCV
dxL+BVZLt5jmszcF0aw+1fLVVqk67f3A/tP8irXEkzOhdaXXDgwaY+JPRxuv2fUe
rlsF0UcwQpMuk6lP+cktsbZmVQZyrPqtXwvxSa2ztzw3mD/i1LD2Z+Pnu1fKo9Kq
DzhE1HdwfICHYY97j0vDnVLFdID7pZfdAC2fnBDySAl0J7Ej9jygBtPSGNY5pFQg
j1VtZcmU8gbIJrlJkTu55uEh/MVTnyuRtWzwOW9ys4U6vLHxmICN6zlTtV1Ys/O8
PxVxaV+IgAl1G0NUqWJvb6ZVYwIDAQABo4IClTCCApEwHQYDVR0OBBYEFFESNLVh
io6yj7+AIRJf3rr1SjQSMB8GA1UdIwQYMBaAFHqWF2lUngqtCpv5klaDuu9zOi8a
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzVCMC80MEM4RDVBNjFE
ODMxMUUyODIzQTVGRDgwOEIwMkNEMi9lcFlYYVZTZUNxMEttX21TVm9PNjczTTZM
eG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2VwWVhhVlNlQ3EwS21fbVNWb082NzNNNkx4by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MUM1QjAvNDBDOEQ1QTYxRDgzMTFFMjgyM0E1RkQ4MDhCMDJDRDIvREEyMDIyNjJD
MzRGMTFFRTkzQkM4MzE3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAHS9pAwDQYJKoZIhvcNAQELBQADggEBAIIY6VfIErf2diFL
rR/NZxZVsdzKGbmeMW6ZrzyRnH/a3NErct0d+nA6iuKTBgabUbfK9P2msk92x0Ih
fbWiApm2k/7ybA1W7hb58JmFXnAFlmTKEhwl+Xp4eqk9g4pAQ4sfO3o+OL8yEyrU
s8N5LnfxhU3WIKn0rXaBJdV9sYjb1y+kDOcHit7OTEQCTnpJ4/Fqg9OyK2jtQPO1
If0o+q/zc9hRT8ggLpav+hgy7Eo94r84KtYJ61+m2ktAdGPZKom6Ces/YO8tBggn
so2Atbd1YuakPJD4uve1+fG2gCPzBAmvUI/xoHM1pgxPVZegPQwosh/qpQswbMbn
31YA/v8=
-----END CERTIFICATE-----
Generated at Thu May 16 15:21:27 2024 by rpki-client on console-ams.rpki-client.org