Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9122EBD/3120065EBC5A11EB8E1D9258C4F9AE02/1576F19ABC5C11EB831EC25AC4F9AE02.roa
File:                     1576F19ABC5C11EB831EC25AC4F9AE02.roa (raw, json)
Hash identifier:          N+OLwoylWKY2cx48mF8MRzwF1FMHW/ZLDW5PqvusQ+I=
Subject key identifier:   5D:A2:FA:8D:E1:04:32:BB:7F:08:82:E7:C4:7F:98:A1:D8:CD:21:1C
Certificate issuer:       /CN=A9122EBD/serialNumber=DA6E941CDBFE01AAEE091B3F95595D6D4018316D
Certificate serial:       052B
Authority key identifier: DA:6E:94:1C:DB:FE:01:AA:EE:09:1B:3F:95:59:5D:6D:40:18:31:6D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2m6UHNv-AaruCRs_lVldbUAYMW0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9122EBD/3120065EBC5A11EB8E1D9258C4F9AE02/1576F19ABC5C11EB831EC25AC4F9AE02.roa
Signing time:             Wed 03 Jul 2024 00:42:18 +0000
ROA not before:           Wed 03 Jul 2024 00:42:18 +0000
ROA not after:            Sun 31 Aug 2025 00:00:00 +0000
asID:                     4826
IP address blocks:        203.23.76.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9122EBD/3120065EBC5A11EB8E1D9258C4F9AE02/2m6UHNv-AaruCRs_lVldbUAYMW0.crl
                          rsync://rpki.apnic.net/member_repository/A9122EBD/3120065EBC5A11EB8E1D9258C4F9AE02/2m6UHNv-AaruCRs_lVldbUAYMW0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2m6UHNv-AaruCRs_lVldbUAYMW0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1323 (0x52b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9122EBD/serialNumber=DA6E941CDBFE01AAEE091B3F95595D6D4018316D
        Validity
            Not Before: Jul  3 00:42:18 2024 GMT
            Not After : Aug 31 00:00:00 2025 GMT
        Subject: CN=66849e69-8029
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:4d:0c:89:f5:f5:f6:ba:1b:23:68:7f:c0:33:
                    50:e5:c5:60:dc:1e:ee:88:25:11:51:9c:0c:e7:03:
                    ad:a6:8e:52:ca:d9:46:65:32:60:1e:65:f6:25:35:
                    c0:1e:a5:0b:9b:d2:a3:6a:c0:6a:e6:13:d0:e0:b5:
                    15:6e:b1:73:a8:d9:a4:77:4a:6e:64:6c:89:8f:ee:
                    cb:7f:0c:ad:0e:24:1a:b4:10:9f:8d:c8:41:9f:b1:
                    94:ac:8f:45:13:52:bd:06:b8:0f:b0:69:62:67:6d:
                    f6:b7:9a:aa:e2:b6:1e:44:b3:c0:c4:20:07:db:ad:
                    9a:57:be:99:a1:4f:be:74:13:3a:96:aa:b9:93:77:
                    38:0b:d5:cf:2a:89:65:27:d6:47:ea:6e:b7:e3:b3:
                    ab:4b:24:4d:00:7a:f8:17:ad:94:10:13:f5:d1:9b:
                    fb:f4:77:fa:c2:9c:57:58:4e:13:2e:79:9f:2f:f1:
                    bd:0c:64:16:4f:ff:08:85:a7:af:23:b4:38:7e:0b:
                    6a:6a:e4:4a:49:8c:4c:fc:c7:21:9a:89:7f:c7:dd:
                    4f:47:97:01:2e:38:69:66:59:1c:a3:ea:dc:77:d0:
                    27:bb:1b:66:60:d9:17:4b:1b:87:9b:ec:29:23:15:
                    6c:66:2e:5a:c8:cc:01:9a:51:62:5e:13:db:09:fb:
                    99:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:A2:FA:8D:E1:04:32:BB:7F:08:82:E7:C4:7F:98:A1:D8:CD:21:1C
            X509v3 Authority Key Identifier:
                keyid:DA:6E:94:1C:DB:FE:01:AA:EE:09:1B:3F:95:59:5D:6D:40:18:31:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9122EBD/3120065EBC5A11EB8E1D9258C4F9AE02/2m6UHNv-AaruCRs_lVldbUAYMW0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2m6UHNv-AaruCRs_lVldbUAYMW0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122EBD/3120065EBC5A11EB8E1D9258C4F9AE02/1576F19ABC5C11EB831EC25AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.23.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:db:ae:65:9d:d4:f9:e3:c7:8e:73:e7:3a:ef:2b:22:6a:b5:
         bf:89:94:a1:4e:96:6f:cc:50:4f:0e:d2:22:b3:d2:27:1e:b5:
         fd:41:d3:49:82:5f:a5:26:92:d5:cc:6c:22:14:65:91:9c:0e:
         ce:04:a7:44:25:73:12:15:f6:05:5a:25:c1:87:d5:5c:bf:08:
         24:bf:b2:7a:fa:06:ca:8d:05:af:d6:d9:d0:2b:00:cb:8b:fe:
         a2:13:76:ad:c3:7a:22:fa:5c:5c:72:8a:cc:98:10:86:53:98:
         81:4d:11:eb:63:86:34:8e:3b:ea:d2:dc:a2:8a:05:f6:dc:ee:
         5e:83:1a:39:aa:96:61:b6:ca:9f:4e:d9:91:ae:8e:15:c0:d3:
         46:c3:6f:13:70:44:a8:53:65:a7:a6:1a:b3:cc:4f:5a:0f:67:
         a0:94:87:8f:cf:02:49:a2:f4:db:78:b9:98:fe:dc:a6:e0:d5:
         c1:05:6a:5d:b3:1c:15:1e:6e:d5:29:ba:9b:cd:07:ad:69:04:
         8d:f1:d8:49:90:d2:5e:2f:ef:2d:9c:2c:14:3f:f5:fb:ef:da:
         4d:36:7b:0b:1d:67:be:26:5e:b6:5b:ec:30:cc:75:52:bf:0b:
         f7:17:68:a3:42:49:dc:ba:c5:6b:a2:0a:dd:62:7b:15:d0:91:
         8b:e8:bb:08
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBSswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjJFQkQxMTAvBgNVBAUTKERBNkU5NDFDREJGRTAxQUFFRTA5MUIzRjk1NTk1RDZE
NDAxODMxNkQwHhcNMjQwNzAzMDA0MjE4WhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02Njg0OWU2OS04MDI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA000MifX19robI2h/wDNQ5cVg3B7uiCURUZwM5wOtpo5SytlGZTJgHmX2JTXA
HqULm9KjasBq5hPQ4LUVbrFzqNmkd0puZGyJj+7LfwytDiQatBCfjchBn7GUrI9F
E1K9BrgPsGliZ232t5qq4rYeRLPAxCAH262aV76ZoU++dBM6lqq5k3c4C9XPKoll
J9ZH6m6347OrSyRNAHr4F62UEBP10Zv79Hf6wpxXWE4TLnmfL/G9DGQWT/8Ihaev
I7Q4fgtqauRKSYxM/Mchmol/x91PR5cBLjhpZlkco+rcd9AnuxtmYNkXSxuHm+wp
IxVsZi5ayMwBmlFiXhPbCfuZTQIDAQABo4IClTCCApEwHQYDVR0OBBYEFF2i+o3h
BDK7fwiC58R/mKHYzSEcMB8GA1UdIwQYMBaAFNpulBzb/gGq7gkbP5VZXW1AGDFt
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMkVCRC8zMTIwMDY1RUJD
NUExMUVCOEUxRDkyNThDNEY5QUUwMi8ybTZVSE52LUFhcnVDUnNfbFZsZGJVQVlN
VzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJtNlVITnYtQWFydUNSc19sVmxkYlVBWU1XMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MjJFQkQvMzEyMDA2NUVCQzVBMTFFQjhFMUQ5MjU4QzRGOUFFMDIvMTU3NkYxOUFC
QzVDMTFFQjgzMUVDMjVBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADLF0wwDQYJKoZIhvcNAQELBQADggEBAJbbrmWd1Pnjx45z
5zrvKyJqtb+JlKFOlm/MUE8O0iKz0icetf1B00mCX6UmktXMbCIUZZGcDs4Ep0Ql
cxIV9gVaJcGH1Vy/CCS/snr6BsqNBa/W2dArAMuL/qITdq3DeiL6XFxyisyYEIZT
mIFNEetjhjSOO+rS3KKKBfbc7l6DGjmqlmG2yp9O2ZGujhXA00bDbxNwRKhTZaem
GrPMT1oPZ6CUh4/PAkmi9Nt4uZj+3Kbg1cEFal2zHBUebtUpupvNB61pBI3x2EmQ
0l4v7y2cLBQ/9fvv2k02ewsdZ74mXrZb7DDMdVK/C/cXaKNCSdy6xWuiCt1iexXQ
kYvouwg=
-----END CERTIFICATE-----
Generated at Fri Nov 22 23:39:23 2024 by rpki-client on console-fra.rpki-client.org