Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9123D9C/455942D650B211E9B5DB6A6BC4F9AE02/884A03F4447111EC83674068C4F9AE02.roa
File:                     884A03F4447111EC83674068C4F9AE02.roa (raw, json)
Hash identifier:          BEHDTAZA1ATzsmitace9+w4q5zuGmH+c62oba+E6Pp0=
Subject key identifier:   09:BE:74:AA:7E:13:7A:3A:B8:88:3D:3D:79:C4:65:2E:73:5C:A0:F7
Certificate issuer:       /CN=A9123D9C/serialNumber=5B2CF0FB62F160F1838AEE3E6CDE07544DFF8BFF
Certificate serial:       0F60
Authority key identifier: 5B:2C:F0:FB:62:F1:60:F1:83:8A:EE:3E:6C:DE:07:54:4D:FF:8B:FF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9123D9C/455942D650B211E9B5DB6A6BC4F9AE02/884A03F4447111EC83674068C4F9AE02.roa
Signing time:             Thu 08 Feb 2024 18:16:06 +0000
ROA not before:           Thu 08 Feb 2024 18:16:06 +0000
ROA not after:            Thu 01 May 2025 00:00:00 +0000
asID:                     38136
IP address blocks:        2404:9ec0:500::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9123D9C/455942D650B211E9B5DB6A6BC4F9AE02/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.crl
                          rsync://rpki.apnic.net/member_repository/A9123D9C/455942D650B211E9B5DB6A6BC4F9AE02/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 17:31:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3936 (0xf60)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9123D9C/serialNumber=5B2CF0FB62F160F1838AEE3E6CDE07544DFF8BFF
        Validity
            Not Before: Feb  8 18:16:06 2024 GMT
            Not After : May  1 00:00:00 2025 GMT
        Subject: CN=65c51a65-f012
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b5:2a:fc:38:3f:88:1e:e0:c6:e3:a2:77:65:
                    1d:b3:7d:57:76:5b:6d:83:ed:5b:07:2d:8a:25:95:
                    c4:3e:25:af:e6:0f:13:12:b2:41:7c:bf:bb:b1:48:
                    51:6b:63:3e:77:b0:c2:a0:d5:eb:d7:3c:d6:a4:16:
                    df:f8:f2:73:b3:84:41:0a:97:91:55:5a:a1:cf:f0:
                    dc:2f:e5:68:d7:ed:50:29:01:cd:b1:07:71:3d:a0:
                    f1:bc:5b:8a:24:50:14:9e:d6:1e:13:01:95:58:33:
                    bf:a6:67:26:81:64:bc:88:3e:83:43:c6:cc:b5:75:
                    15:56:ab:08:4d:c4:51:f1:3c:be:44:5a:aa:53:50:
                    2d:11:b5:32:70:8d:d0:0e:ac:88:25:9f:fb:a6:ae:
                    66:27:a1:4a:2f:ac:89:17:ff:5e:43:b9:95:d2:c1:
                    ef:c6:94:f3:78:d1:75:6f:c9:22:69:d7:0d:61:55:
                    19:75:69:41:d7:dc:c3:10:74:af:90:48:ab:eb:e0:
                    47:f8:86:a5:35:31:52:39:e8:b1:fc:ea:bd:ed:65:
                    ab:6f:79:60:9e:9a:0e:7b:8e:13:6d:dd:98:32:df:
                    89:51:30:a1:3b:de:51:f6:da:6a:57:b8:e9:a8:b0:
                    1a:53:0e:e2:fa:18:59:6a:62:32:58:2d:59:95:d8:
                    db:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:BE:74:AA:7E:13:7A:3A:B8:88:3D:3D:79:C4:65:2E:73:5C:A0:F7
            X509v3 Authority Key Identifier:
                keyid:5B:2C:F0:FB:62:F1:60:F1:83:8A:EE:3E:6C:DE:07:54:4D:FF:8B:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9123D9C/455942D650B211E9B5DB6A6BC4F9AE02/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123D9C/455942D650B211E9B5DB6A6BC4F9AE02/884A03F4447111EC83674068C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:9ec0:500::/48

    Signature Algorithm: sha256WithRSAEncryption
         8c:a8:b3:ba:29:18:04:0c:ca:f6:34:36:e3:a9:a9:43:d3:9b:
         16:61:37:23:9a:c5:55:cd:2a:82:ff:c2:3d:82:61:de:17:be:
         ee:8b:04:b6:6a:ca:ca:cb:3e:99:93:d9:3b:fa:2a:9c:cc:12:
         b1:67:08:be:34:94:b9:fe:92:e4:e4:81:2f:06:0b:74:10:23:
         cd:d5:1a:db:f6:f5:d1:a7:4f:80:ab:63:3d:42:b8:27:f2:0d:
         fb:e9:cb:d6:20:cf:20:c4:41:f6:9b:7f:f2:3e:5d:b0:8b:5a:
         db:3c:90:ae:02:2b:04:7a:c3:ea:8b:43:c1:4d:0f:a8:57:d8:
         71:eb:93:86:84:5b:01:9a:56:92:3f:a9:d7:93:33:cb:3c:22:
         df:12:b6:6f:ff:6e:31:4a:ff:37:60:14:1c:cd:1d:d7:db:71:
         c8:28:43:d6:63:a9:12:97:bc:ad:ec:85:9f:a5:05:fd:3b:f9:
         44:c2:8e:68:39:61:17:98:ae:13:06:a8:90:a3:5e:2a:61:37:
         dd:e3:be:ce:07:c2:04:44:60:0e:82:c4:09:d7:fb:04:91:6d:
         d6:32:c6:b7:0c:6f:0f:83:32:95:93:fe:2a:bd:3d:93:12:f3:
         f2:df:7e:73:c8:13:d4:78:87:54:d6:b6:ca:eb:d2:d5:2a:6e:
         24:7e:a4:17
-----BEGIN CERTIFICATE-----
MIIFdDCCBFygAwIBAgICD2AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjNEOUMxMTAvBgNVBAUTKDVCMkNGMEZCNjJGMTYwRjE4MzhBRUUzRTZDREUwNzU0
NERGRjhCRkYwHhcNMjQwMjA4MTgxNjA2WhcNMjUwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NWM1MWE2NS1mMDEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqbUq/Dg/iB7gxuOid2Uds31Xdlttg+1bBy2KJZXEPiWv5g8TErJBfL+7sUhR
a2M+d7DCoNXr1zzWpBbf+PJzs4RBCpeRVVqhz/DcL+Vo1+1QKQHNsQdxPaDxvFuK
JFAUntYeEwGVWDO/pmcmgWS8iD6DQ8bMtXUVVqsITcRR8Ty+RFqqU1AtEbUycI3Q
DqyIJZ/7pq5mJ6FKL6yJF/9eQ7mV0sHvxpTzeNF1b8kiadcNYVUZdWlB19zDEHSv
kEir6+BH+IalNTFSOeix/Oq97WWrb3lgnpoOe44Tbd2YMt+JUTChO95R9tpqV7jp
qLAaUw7i+hhZamIyWC1ZldjbOwIDAQABo4ICmDCCApQwHQYDVR0OBBYEFAm+dKp+
E3o6uIg9PXnEZS5zXKD3MB8GA1UdIwQYMBaAFFss8Pti8WDxg4ruPmzeB1RN/4v/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyM0Q5Qy80NTU5NDJENjUw
QjIxMUU5QjVEQjZBNkJDNEY5QUUwMi9XeXp3LTJMeFlQR0RpdTQtYk40SFZFM19p
XzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1d5enctMkx4WVBHRGl1NC1iTjRIVkUzX2lfOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MjNEOUMvNDU1OTQyRDY1MEIyMTFFOUI1REI2QTZCQzRGOUFFMDIvODg0QTAzRjQ0
NDcxMTFFQzgzNjc0MDY4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E
EzARMA8EAgACMAkDBwAkBJ7ABQAwDQYJKoZIhvcNAQELBQADggEBAIyos7opGAQM
yvY0NuOpqUPTmxZhNyOaxVXNKoL/wj2CYd4Xvu6LBLZqysrLPpmT2Tv6KpzMErFn
CL40lLn+kuTkgS8GC3QQI83VGtv29dGnT4CrYz1CuCfyDfvpy9YgzyDEQfabf/I+
XbCLWts8kK4CKwR6w+qLQ8FND6hX2HHrk4aEWwGaVpI/qdeTM8s8It8Stm//bjFK
/zdgFBzNHdfbccgoQ9ZjqRKXvK3shZ+lBf07+UTCjmg5YReYrhMGqJCjXiphN93j
vs4HwgREYA6CxAnX+wSRbdYyxrcMbw+DMpWT/iq9PZMS8/LffnPIE9R4h1TWtsrr
0tUqbiR+pBc=
-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:56 2024 by rpki-client on console-fra.rpki-client.org