Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/1F8F28E09EB611EC8210607DC4F9AE02.roa
File:                     1F8F28E09EB611EC8210607DC4F9AE02.roa (raw, json)
Hash identifier:          plCH8iZKZP+zUrTUrIE/I46uWq093wgGrwTwyDX4pE0=
Subject key identifier:   91:34:56:B4:40:80:B5:77:5C:11:2A:A7:B2:24:5F:04:85:B7:4D:03
Certificate issuer:       /CN=A91275FD/serialNumber=4E10F13F295FBF2B359C84DDD1651BC851AA8AF5
Certificate serial:       2577
Authority key identifier: 4E:10:F1:3F:29:5F:BF:2B:35:9C:84:DD:D1:65:1B:C8:51:AA:8A:F5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThDxPylfvys1nITd0WUbyFGqivU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/1F8F28E09EB611EC8210607DC4F9AE02.roa
Signing time:             Tue 02 May 2023 16:32:49 +0000
ROA not before:           Tue 02 May 2023 16:32:49 +0000
ROA not after:            Tue 30 Jul 2024 00:00:00 +0000
asID:                     24306
IP address blocks:        202.81.160.0/22 maxlen: 24
                          202.81.164.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.crl
                          rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThDxPylfvys1nITd0WUbyFGqivU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 09 May 2024 16:02:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9591 (0x2577)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91275FD/serialNumber=4E10F13F295FBF2B359C84DDD1651BC851AA8AF5
        Validity
            Not Before: May  2 16:32:49 2023 GMT
            Not After : Jul 30 00:00:00 2024 GMT
        Subject: CN=64513b30-b8a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:36:99:d6:28:1f:99:ed:74:8b:aa:ea:dc:4c:
                    9b:d4:a4:c3:a3:34:55:58:93:1e:c5:eb:c2:4d:a4:
                    59:32:a5:89:97:c6:5b:42:5e:a2:cd:a4:b1:0d:dd:
                    0c:e6:7e:dc:54:52:6c:30:cc:6c:32:5c:7d:99:c0:
                    f6:56:1c:b0:6a:a2:20:58:3f:c1:6a:6a:ae:92:bf:
                    1e:62:fa:ba:cf:b9:6b:f3:af:4f:30:b7:9b:32:94:
                    2e:31:ee:2f:31:1b:55:31:ca:34:f5:a6:77:bf:75:
                    52:0f:fd:53:73:79:e5:43:31:03:de:38:ec:cf:bb:
                    bc:59:45:12:18:42:cd:56:52:b0:b8:09:3f:07:8a:
                    a0:46:87:73:bf:e5:03:12:3c:c4:20:84:e0:f8:70:
                    04:10:c0:77:52:da:53:fa:c1:84:11:c3:6f:c7:3c:
                    9e:f9:fc:8c:ea:85:d3:c5:f8:cb:3d:dd:1e:27:cc:
                    53:54:d0:69:89:84:39:7a:0d:16:a3:7d:17:01:ee:
                    43:fc:d6:6d:ca:89:70:28:73:58:d3:3c:f4:b5:84:
                    4c:cc:86:3e:56:90:fe:43:a0:37:0d:f6:67:f4:6a:
                    5d:f6:e4:9f:a6:1c:a7:f9:65:00:38:75:d1:37:eb:
                    44:dc:27:9e:d7:a4:af:b8:31:e6:17:ee:21:26:70:
                    b1:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:34:56:B4:40:80:B5:77:5C:11:2A:A7:B2:24:5F:04:85:B7:4D:03
            X509v3 Authority Key Identifier:
                keyid:4E:10:F1:3F:29:5F:BF:2B:35:9C:84:DD:D1:65:1B:C8:51:AA:8A:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThDxPylfvys1nITd0WUbyFGqivU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/1F8F28E09EB611EC8210607DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.81.160.0/21

    Signature Algorithm: sha256WithRSAEncryption
         12:ed:b0:2f:79:4f:fb:b4:95:0a:81:f4:69:b3:bb:d8:c8:67:
         05:60:3b:2a:60:99:7d:15:f9:59:db:7a:ae:30:ff:cb:cd:37:
         e2:be:2d:a7:76:56:dd:b0:2f:d4:5c:5c:0f:12:59:b1:1f:b2:
         a2:69:fd:e6:fa:a8:72:f6:ed:c2:d9:fd:d2:27:4e:77:77:00:
         16:70:30:a3:5a:6a:09:be:6e:30:98:62:d5:a6:96:2d:b6:73:
         90:59:33:55:57:6c:b0:2a:ca:68:88:17:f2:1f:68:25:13:06:
         34:a8:35:a8:52:98:c4:38:0b:2d:e0:b6:d6:62:b5:12:54:37:
         4a:e2:bc:b8:65:11:b5:d2:c2:61:f3:ba:ef:61:76:7f:aa:fb:
         b5:82:b8:41:cb:de:98:85:a3:d6:93:73:54:4c:5c:44:97:09:
         89:a7:dc:06:23:cd:0b:f2:bb:aa:62:f9:fd:24:68:73:46:8c:
         b0:ef:52:31:cf:c2:58:d8:d3:cd:ae:67:74:dd:50:75:11:b0:
         b2:1b:ba:73:ff:49:48:3d:03:9e:23:eb:db:f5:28:c6:f9:e7:
         fa:f2:95:86:92:0f:2d:0b:2d:ef:05:4f:ae:71:e4:bf:b8:9f:
         e7:68:80:6c:86:4f:ff:76:3a:a1:77:a9:5a:dd:b5:ad:3f:f6:
         63:06:87:29
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICJXcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Mjc1RkQxMTAvBgNVBAUTKDRFMTBGMTNGMjk1RkJGMkIzNTlDODREREQxNjUxQkM4
NTFBQThBRjUwHhcNMjMwNTAyMTYzMjQ5WhcNMjQwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NDUxM2IzMC1iOGE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApDaZ1igfme10i6rq3Eyb1KTDozRVWJMexevCTaRZMqWJl8ZbQl6izaSxDd0M
5n7cVFJsMMxsMlx9mcD2VhywaqIgWD/Bamqukr8eYvq6z7lr869PMLebMpQuMe4v
MRtVMco09aZ3v3VSD/1Tc3nlQzED3jjsz7u8WUUSGELNVlKwuAk/B4qgRodzv+UD
EjzEIITg+HAEEMB3UtpT+sGEEcNvxzye+fyM6oXTxfjLPd0eJ8xTVNBpiYQ5eg0W
o30XAe5D/NZtyolwKHNY0zz0tYRMzIY+VpD+Q6A3DfZn9Gpd9uSfphyn+WUAOHXR
N+tE3Cee16SvuDHmF+4hJnCxzQIDAQABo4IClTCCApEwHQYDVR0OBBYEFJE0VrRA
gLV3XBEqp7IkXwSFt00DMB8GA1UdIwQYMBaAFE4Q8T8pX78rNZyE3dFlG8hRqor1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzVGRC9FMUVGRDlCNkRF
Q0UxMUU0QTE0RjAwNjhDNEY5QUUwMi9UaER4UHlsZnZ5czFuSVRkMFdVYnlGR3Fp
dlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1RoRHhQeWxmdnlzMW5JVGQwV1VieUZHcWl2VS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Mjc1RkQvRTFFRkQ5QjZERUNFMTFFNEExNEYwMDY4QzRGOUFFMDIvMUY4RjI4RTA5
RUI2MTFFQzgyMTA2MDdEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAPKUaAwDQYJKoZIhvcNAQELBQADggEBABLtsC95T/u0lQqB
9Gmzu9jIZwVgOypgmX0V+Vnbeq4w/8vNN+K+Lad2Vt2wL9RcXA8SWbEfsqJp/eb6
qHL27cLZ/dInTnd3ABZwMKNaagm+bjCYYtWmli22c5BZM1VXbLAqymiIF/IfaCUT
BjSoNahSmMQ4Cy3gttZitRJUN0rivLhlEbXSwmHzuu9hdn+q+7WCuEHL3piFo9aT
c1RMXESXCYmn3AYjzQvyu6pi+f0kaHNGjLDvUjHPwljY082uZ3TdUHURsLIbunP/
SUg9A54j69v1KMb55/rylYaSDy0LLe8FT65x5L+4n+dogGyGT/92OqF3qVrdta0/
9mMGhyk=
-----END CERTIFICATE-----
Generated at Thu May 2 17:18:26 2024 by rpki-client on console-ams.rpki-client.org