Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/2DA5FED2E0CD11ECB03A892AC4F9AE02.roa
File:                     2DA5FED2E0CD11ECB03A892AC4F9AE02.roa (raw, json)
Hash identifier:          SOl9YItRRDs2OWQ3GL3UcWx5g3cT2DUpnD6VL5JEq6k=
Subject key identifier:   9B:64:D5:85:D4:21:4D:2E:FD:86:25:40:71:FC:AC:D3:F5:44:D2:06
Certificate issuer:       /CN=A91262CA/serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
Certificate serial:       0376
Authority key identifier: 77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/2DA5FED2E0CD11ECB03A892AC4F9AE02.roa
Signing time:             Thu 27 Jul 2023 02:03:54 +0000
ROA not before:           Thu 27 Jul 2023 02:03:54 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     17427
IP address blocks:        202.183.131.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl
                          rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 01 Jun 2024 02:50:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 886 (0x376)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91262CA/serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
        Validity
            Not Before: Jul 27 02:03:54 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=64c1d08a-75b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:5d:c5:0a:25:f6:2d:8f:44:bc:ca:d4:b2:26:
                    ca:a6:41:bf:3b:47:2a:7d:29:da:34:98:9f:57:f2:
                    61:c3:a2:88:89:8d:af:b2:af:a8:b2:a4:33:32:b8:
                    45:c9:e9:17:f7:d7:31:05:c4:b7:1e:2c:8d:14:42:
                    96:f0:32:dc:ae:76:81:b1:f0:4b:ed:e1:0b:5b:97:
                    9f:a8:69:b5:67:22:d2:58:7e:2b:bd:fe:04:ff:97:
                    88:1e:1a:35:e6:5a:dd:26:58:87:60:6e:34:1c:e2:
                    c3:66:a3:63:0f:93:0c:2f:3e:fd:ea:a9:26:f0:53:
                    2f:2e:af:69:43:fc:22:da:5e:3b:a3:e9:b6:a6:6e:
                    17:5e:6e:66:30:11:08:2c:c5:88:32:70:85:7a:10:
                    c1:94:11:e6:52:6b:30:06:80:ba:cd:9e:63:16:f6:
                    3d:55:20:ef:05:8b:e4:21:d9:47:eb:55:2b:c4:22:
                    b0:90:d5:0c:18:65:5e:95:12:fb:c0:b1:01:14:9e:
                    2a:28:52:65:6a:ff:54:6c:39:db:ca:5c:8c:dd:c9:
                    fd:fa:14:19:d1:90:a7:ec:03:1f:1e:f0:d1:59:4d:
                    c5:52:62:74:f3:7c:14:87:85:63:17:3d:83:df:1a:
                    3b:bd:61:ce:e2:c2:b5:94:e6:bc:fe:06:3e:64:9e:
                    32:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:64:D5:85:D4:21:4D:2E:FD:86:25:40:71:FC:AC:D3:F5:44:D2:06
            X509v3 Authority Key Identifier:
                keyid:77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/2DA5FED2E0CD11ECB03A892AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.183.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:dc:de:f6:7c:86:07:1e:26:87:c7:dc:9d:03:04:e2:1c:68:
         92:0e:fe:0d:13:31:50:15:d1:a0:32:0c:5e:a3:27:e3:fa:d4:
         00:28:f1:e1:aa:53:29:50:e0:22:30:13:54:b3:28:f4:03:0f:
         9d:e3:95:7c:da:2c:7c:38:c7:c1:ed:17:3f:73:c4:0e:7a:da:
         35:7e:91:28:24:48:00:3f:75:84:ad:c4:b2:6f:3e:21:76:0c:
         ef:0a:c5:4f:d8:f6:21:b7:9d:99:b4:99:1b:a3:fc:2f:2c:0a:
         c0:0f:fe:3c:99:1a:f7:c3:18:b7:6d:9b:41:23:63:13:3b:2b:
         0f:2f:a1:e6:af:dc:7d:45:90:5b:8c:a4:e2:88:a7:38:1f:2f:
         19:4e:cf:2c:2a:10:96:e9:f7:97:55:e0:62:69:bb:f6:20:5f:
         68:19:e5:e8:b1:eb:a3:f7:b1:29:93:0f:48:68:17:9b:84:df:
         b9:8b:01:0b:b7:c4:75:3e:74:84:98:61:ed:93:fd:9a:b8:fb:
         b1:23:93:28:3e:61:bc:b6:60:64:67:72:08:31:72:4b:7f:2f:
         83:eb:43:00:98:0f:ab:9f:bc:5e:50:6c:b7:2c:bc:21:fc:48:
         73:e6:b2:64:13:fa:c4:0f:26:f7:84:f5:04:ee:25:6e:d4:63:
         a3:5e:4c:d6
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICA3YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjYyQ0ExMTAvBgNVBAUTKDc3QTIwMUM1OEVCM0I0MjA4QzkxQkE3RUNFRDkzNkU1
OTVFNjFBMTkwHhcNMjMwNzI3MDIwMzU0WhcNMjQwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NGMxZDA4YS03NWI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApF3FCiX2LY9EvMrUsibKpkG/O0cqfSnaNJifV/Jhw6KIiY2vsq+osqQzMrhF
yekX99cxBcS3HiyNFEKW8DLcrnaBsfBL7eELW5efqGm1ZyLSWH4rvf4E/5eIHho1
5lrdJliHYG40HOLDZqNjD5MMLz796qkm8FMvLq9pQ/wi2l47o+m2pm4XXm5mMBEI
LMWIMnCFehDBlBHmUmswBoC6zZ5jFvY9VSDvBYvkIdlH61UrxCKwkNUMGGVelRL7
wLEBFJ4qKFJlav9UbDnbylyM3cn9+hQZ0ZCn7AMfHvDRWU3FUmJ083wUh4VjFz2D
3xo7vWHO4sK1lOa8/gY+ZJ4y3wIDAQABo4IClTCCApEwHQYDVR0OBBYEFJtk1YXU
IU0u/YYlQHH8rNP1RNIGMB8GA1UdIwQYMBaAFHeiAcWOs7QgjJG6fs7ZNuWV5hoZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjJDQS9GNUVEQzdGQzhB
NTcxMUVDOTZFQkMwMTRDNEY5QUUwMi9kNklCeFk2enRDQ01rYnAtenRrMjVaWG1H
aGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2Q2SUJ4WTZ6dENDTWticC16dGsyNVpYbUdoay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MjYyQ0EvRjVFREM3RkM4QTU3MTFFQzk2RUJDMDE0QzRGOUFFMDIvMkRBNUZFRDJF
MENEMTFFQ0IwM0E4OTJBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADKt4MwDQYJKoZIhvcNAQELBQADggEBAFbc3vZ8hgceJofH
3J0DBOIcaJIO/g0TMVAV0aAyDF6jJ+P61AAo8eGqUylQ4CIwE1SzKPQDD53jlXza
LHw4x8HtFz9zxA562jV+kSgkSAA/dYStxLJvPiF2DO8KxU/Y9iG3nZm0mRuj/C8s
CsAP/jyZGvfDGLdtm0EjYxM7Kw8voeav3H1FkFuMpOKIpzgfLxlOzywqEJbp95dV
4GJpu/YgX2gZ5eix66P3sSmTD0hoF5uE37mLAQu3xHU+dISYYe2T/Zq4+7Ejkyg+
Yby2YGRncggxckt/L4PrQwCYD6ufvF5QbLcsvCH8SHPmsmQT+sQPJveE9QTuJW7U
Y6NeTNY=
-----END CERTIFICATE-----
Generated at Sat May 25 04:34:56 2024 by rpki-client on console-ams.rpki-client.org