Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/F7E56716E03511EC8D8CC540C4F9AE02.roa
File:                     F7E56716E03511EC8D8CC540C4F9AE02.roa (raw, json)
Hash identifier:          gXcCL7C3jsgrsF7/CwHa/eBSCIsyluTG/0/iTkti2pk=
Subject key identifier:   D0:DC:77:F9:9D:CF:7B:54:95:74:C9:AE:7B:D6:12:50:F8:BA:3F:65
Certificate issuer:       /CN=A91262CA/serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
Certificate serial:       052E
Authority key identifier: 77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/F7E56716E03511EC8D8CC540C4F9AE02.roa
Signing time:             Wed 31 Jul 2024 02:34:09 +0000
ROA not before:           Wed 31 Jul 2024 02:34:09 +0000
ROA not after:            Tue 30 Sep 2025 00:00:00 +0000
asID:                     9339
IP address blocks:        203.146.13.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl
                          rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1326 (0x52e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91262CA/serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
        Validity
            Not Before: Jul 31 02:34:09 2024 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=66a9a2a1-e1a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:27:b3:9a:52:18:95:83:da:e7:6c:d6:2e:ec:
                    5c:a2:e2:96:06:94:6d:1e:4c:1f:cb:23:bb:5b:07:
                    62:8e:fa:c6:da:12:7f:b9:5b:93:12:1a:08:34:27:
                    2b:73:65:4e:4b:15:89:e1:a0:ea:4d:ad:7d:c2:cf:
                    08:24:69:4d:37:2a:86:50:0d:60:18:ad:2d:4f:6c:
                    2f:61:ae:fc:eb:d4:69:8e:3c:04:c5:25:43:f4:35:
                    20:de:a6:54:28:a1:cc:55:53:98:60:19:ee:c9:43:
                    10:91:f3:f8:42:95:df:25:4a:88:bd:0a:a2:2a:33:
                    17:6e:1f:61:d1:7a:26:bf:1d:4d:34:35:7c:dc:18:
                    04:d7:0b:8c:60:e8:39:35:69:64:07:1a:86:be:46:
                    f6:b0:0b:31:26:3e:8b:c5:f1:68:54:5b:f8:89:de:
                    e1:c0:1e:8d:9d:4a:1c:ce:a1:5a:71:2e:fb:33:ef:
                    09:f5:8e:a9:01:b5:a1:d0:dd:80:92:e1:67:d0:16:
                    50:ba:33:d5:51:e0:39:1e:e3:15:f3:10:7e:7c:97:
                    35:6d:c8:c6:79:24:ae:a1:ff:97:77:08:a4:f5:01:
                    c8:dc:fe:2d:5f:93:93:11:3e:f0:2f:72:ce:f0:17:
                    0f:c7:a5:57:0d:a0:de:a0:eb:a7:0f:0d:b0:79:6e:
                    74:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:DC:77:F9:9D:CF:7B:54:95:74:C9:AE:7B:D6:12:50:F8:BA:3F:65
            X509v3 Authority Key Identifier:
                keyid:77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/F7E56716E03511EC8D8CC540C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.146.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:fc:96:ab:03:ab:1d:ea:2c:8d:36:39:b6:c9:b5:1c:d0:84:
         7d:c1:54:b4:a0:c5:3d:20:a4:fd:bb:5a:e6:c2:bf:3b:6c:d1:
         76:24:dc:52:67:54:b9:c2:0b:c6:80:23:0b:f2:96:1d:bd:db:
         94:0f:f3:49:52:df:18:7d:ec:21:86:02:bb:83:27:1e:a1:89:
         12:cd:f8:39:98:b5:a0:3d:95:fa:22:61:ae:97:01:54:45:ea:
         0d:ea:3e:ee:bd:de:a4:b8:ca:e4:c5:17:b8:3e:e9:9b:8b:8d:
         13:31:50:69:ea:ab:92:a8:dc:98:36:af:dd:36:27:31:06:3c:
         59:8f:41:54:3d:c3:93:c0:94:07:1c:b1:f2:5c:97:50:de:4f:
         a5:cd:50:ca:79:d3:8a:07:b8:2d:1d:e3:ca:0b:e8:9d:4a:7a:
         b7:ba:65:81:29:15:ae:10:db:2f:a0:db:b7:a3:61:74:3d:66:
         48:14:3d:4c:15:02:18:83:d0:16:9e:4e:fc:7e:62:2d:1e:d1:
         a1:d4:28:42:2b:27:d4:aa:61:20:68:12:3f:05:05:2d:da:c0:
         0a:b0:02:9f:70:41:ac:1a:23:75:17:3e:f6:47:d9:cb:53:b8:
         cc:38:c4:74:e8:f1:ec:94:0c:a3:3c:dd:e5:81:13:97:8d:2b:
         5b:59:e4:66
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBS4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjYyQ0ExMTAvBgNVBAUTKDc3QTIwMUM1OEVCM0I0MjA4QzkxQkE3RUNFRDkzNkU1
OTVFNjFBMTkwHhcNMjQwNzMxMDIzNDA5WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmE5YTJhMS1lMWE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3CezmlIYlYPa52zWLuxcouKWBpRtHkwfyyO7WwdijvrG2hJ/uVuTEhoINCcr
c2VOSxWJ4aDqTa19ws8IJGlNNyqGUA1gGK0tT2wvYa7869RpjjwExSVD9DUg3qZU
KKHMVVOYYBnuyUMQkfP4QpXfJUqIvQqiKjMXbh9h0Xomvx1NNDV83BgE1wuMYOg5
NWlkBxqGvkb2sAsxJj6LxfFoVFv4id7hwB6NnUoczqFacS77M+8J9Y6pAbWh0N2A
kuFn0BZQujPVUeA5HuMV8xB+fJc1bcjGeSSuof+Xdwik9QHI3P4tX5OTET7wL3LO
8BcPx6VXDaDeoOunDw2weW50ywIDAQABo4IClTCCApEwHQYDVR0OBBYEFNDcd/md
z3tUlXTJrnvWElD4uj9lMB8GA1UdIwQYMBaAFHeiAcWOs7QgjJG6fs7ZNuWV5hoZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjJDQS9GNUVEQzdGQzhB
NTcxMUVDOTZFQkMwMTRDNEY5QUUwMi9kNklCeFk2enRDQ01rYnAtenRrMjVaWG1H
aGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2Q2SUJ4WTZ6dENDTWticC16dGsyNVpYbUdoay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MjYyQ0EvRjVFREM3RkM4QTU3MTFFQzk2RUJDMDE0QzRGOUFFMDIvRjdFNTY3MTZF
MDM1MTFFQzhEOENDNTQwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADLkg0wDQYJKoZIhvcNAQELBQADggEBADv8lqsDqx3qLI02
ObbJtRzQhH3BVLSgxT0gpP27WubCvzts0XYk3FJnVLnCC8aAIwvylh2925QP80lS
3xh97CGGAruDJx6hiRLN+DmYtaA9lfoiYa6XAVRF6g3qPu693qS4yuTFF7g+6ZuL
jRMxUGnqq5Ko3Jg2r902JzEGPFmPQVQ9w5PAlAccsfJcl1DeT6XNUMp504oHuC0d
48oL6J1Kere6ZYEpFa4Q2y+g27ejYXQ9ZkgUPUwVAhiD0BaeTvx+Yi0e0aHUKEIr
J9SqYSBoEj8FBS3awAqwAp9wQawaI3UXPvZH2ctTuMw4xHTo8eyUDKM83eWBE5eN
K1tZ5GY=
-----END CERTIFICATE-----
Generated at Sat Nov 23 01:27:20 2024 by rpki-client on console-ams.rpki-client.org