Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/C1F18634E04A11ECB5330E65C4F9AE02.roa
File:                     C1F18634E04A11ECB5330E65C4F9AE02.roa (raw, json)
Hash identifier:          1naWfPkuL+EtsWQCxVVA0t1kMaUTYeR5LR6TGgQN3vg=
Subject key identifier:   08:0C:A9:70:68:91:E1:2E:F2:FC:75:C9:04:3F:E0:4E:F8:7C:4F:D8
Certificate issuer:       /CN=A91262CA/serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
Certificate serial:       0387
Authority key identifier: 77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/C1F18634E04A11ECB5330E65C4F9AE02.roa
Signing time:             Thu 27 Jul 2023 02:04:09 +0000
ROA not before:           Thu 27 Jul 2023 02:04:09 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     38448
IP address blocks:        202.183.146.0/24 maxlen: 24
                          203.146.204.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl
                          rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 May 2024 02:50:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 903 (0x387)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91262CA/serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
        Validity
            Not Before: Jul 27 02:04:09 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=64c1d099-b1d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:26:77:9c:a4:62:08:4e:03:32:89:49:34:88:
                    42:58:e7:bf:ec:49:5c:ad:fe:d9:a3:01:29:e2:49:
                    2c:1b:7a:9b:d6:18:11:b8:c5:c6:19:e3:77:4a:6c:
                    91:2e:48:2f:6b:0b:82:2c:90:2b:33:3d:f3:39:78:
                    28:46:8f:b3:52:14:49:14:09:c9:76:bc:d3:97:cc:
                    d4:40:5f:0c:b1:5e:45:7e:30:52:5c:05:1a:02:f1:
                    7d:6b:17:cb:ff:22:db:71:0e:26:9a:cf:6b:dd:06:
                    0a:ba:e3:2b:0a:26:41:8e:bf:d5:b9:7c:fa:c6:f9:
                    2f:10:61:e8:fe:86:23:ed:82:a5:76:7d:f3:86:49:
                    bd:27:26:2e:0b:f3:4d:ed:7a:01:4c:45:e3:b4:3b:
                    01:d6:ef:3c:00:77:e3:15:b0:0e:8d:3a:06:c1:a1:
                    11:19:0e:39:86:84:34:32:89:81:71:a0:cc:cf:a7:
                    6d:e7:09:fc:31:e4:c0:1b:a9:6f:7b:ea:0c:f9:d9:
                    21:57:ac:83:f7:3b:e2:6c:0d:45:e5:9f:64:69:40:
                    9d:ad:97:dc:f8:2e:e3:55:4b:f4:d8:7c:0a:e5:32:
                    b0:3e:72:1d:6b:ba:a0:cd:52:20:89:c7:28:65:68:
                    57:dd:bc:c3:4b:79:bd:30:98:9c:ad:a6:89:3c:8c:
                    d1:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:0C:A9:70:68:91:E1:2E:F2:FC:75:C9:04:3F:E0:4E:F8:7C:4F:D8
            X509v3 Authority Key Identifier:
                keyid:77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/C1F18634E04A11ECB5330E65C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.183.146.0/24
                  203.146.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:ef:15:5d:f3:bc:d7:79:b6:04:68:da:34:ea:e4:f2:c3:43:
         f8:37:c7:f5:5f:4f:2c:c4:6b:38:71:91:59:94:7f:f4:c5:56:
         e6:75:53:b6:94:04:50:e5:32:a4:4b:87:17:28:95:dd:cf:52:
         21:65:54:1d:f3:7c:e7:90:e8:41:0c:3e:bc:d6:47:ba:1b:80:
         26:a6:f2:a4:97:82:b4:72:57:01:b0:ef:03:b7:f3:6e:bf:22:
         17:a1:59:9c:a8:35:93:7f:cb:2b:bc:e0:ce:00:c4:d6:95:ca:
         cd:5b:59:8b:fa:6f:ac:37:6c:f8:f7:70:31:b6:29:fa:5c:23:
         5e:08:2c:28:d0:37:ac:c2:56:99:50:f9:db:e1:07:2c:bf:6d:
         bf:12:72:ec:64:a3:16:01:c8:de:1a:73:37:88:22:fd:76:78:
         41:1e:b4:d3:eb:4a:40:1a:62:20:e6:25:e7:c7:60:a3:79:08:
         b8:e3:11:c4:b9:71:0b:dc:30:e6:89:1e:14:27:84:60:e2:d0:
         35:b0:13:5c:7e:ab:1b:73:0d:32:a2:6c:a5:20:9f:c4:67:1c:
         d7:6c:d2:4e:cd:31:51:5b:bc:f7:2e:32:26:36:30:53:6f:e8:
         55:24:08:cb:31:de:fd:14:6f:d9:de:98:d3:a5:f4:05:ba:b1:
         88:7e:05:37
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICA4cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjYyQ0ExMTAvBgNVBAUTKDc3QTIwMUM1OEVCM0I0MjA4QzkxQkE3RUNFRDkzNkU1
OTVFNjFBMTkwHhcNMjMwNzI3MDIwNDA5WhcNMjQwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NGMxZDA5OS1iMWQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqCZ3nKRiCE4DMolJNIhCWOe/7Elcrf7ZowEp4kksG3qb1hgRuMXGGeN3SmyR
LkgvawuCLJArMz3zOXgoRo+zUhRJFAnJdrzTl8zUQF8MsV5FfjBSXAUaAvF9axfL
/yLbcQ4mms9r3QYKuuMrCiZBjr/VuXz6xvkvEGHo/oYj7YKldn3zhkm9JyYuC/NN
7XoBTEXjtDsB1u88AHfjFbAOjToGwaERGQ45hoQ0MomBcaDMz6dt5wn8MeTAG6lv
e+oM+dkhV6yD9zvibA1F5Z9kaUCdrZfc+C7jVUv02HwK5TKwPnIda7qgzVIgicco
ZWhX3bzDS3m9MJicraaJPIzRpwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFAgMqXBo
keEu8vx1yQQ/4E74fE/YMB8GA1UdIwQYMBaAFHeiAcWOs7QgjJG6fs7ZNuWV5hoZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjJDQS9GNUVEQzdGQzhB
NTcxMUVDOTZFQkMwMTRDNEY5QUUwMi9kNklCeFk2enRDQ01rYnAtenRrMjVaWG1H
aGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2Q2SUJ4WTZ6dENDTWticC16dGsyNVpYbUdoay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MjYyQ0EvRjVFREM3RkM4QTU3MTFFQzk2RUJDMDE0QzRGOUFFMDIvQzFGMTg2MzRF
MDRBMTFFQ0I1MzMwRTY1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBADKt5IDBADLkswwDQYJKoZIhvcNAQELBQADggEBAFPvFV3z
vNd5tgRo2jTq5PLDQ/g3x/VfTyzEazhxkVmUf/TFVuZ1U7aUBFDlMqRLhxcold3P
UiFlVB3zfOeQ6EEMPrzWR7obgCam8qSXgrRyVwGw7wO3826/IhehWZyoNZN/yyu8
4M4AxNaVys1bWYv6b6w3bPj3cDG2KfpcI14ILCjQN6zCVplQ+dvhByy/bb8Scuxk
oxYByN4aczeIIv12eEEetNPrSkAaYiDmJefHYKN5CLjjEcS5cQvcMOaJHhQnhGDi
0DWwE1x+qxtzDTKibKUgn8RnHNds0k7NMVFbvPcuMiY2MFNv6FUkCMsx3v0Ub9ne
mNOl9AW6sYh+BTc=
-----END CERTIFICATE-----
Generated at Sun May 19 03:38:13 2024 by rpki-client on console-ams.rpki-client.org