Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912AED4/BEC9AC82B0BD11E792A2BF30C4F9AE02/2E1E405E712D11EDA8C64C3DC4F9AE02.roa
File:                     2E1E405E712D11EDA8C64C3DC4F9AE02.roa (raw, json)
Hash identifier:          nI3yZmnSdsVB8w1Scj2HA5x9f9q6bMD+CfH5CHWCUdk=
Subject key identifier:   75:7F:07:EC:72:B5:3D:5E:01:72:A3:FD:24:8B:59:C3:73:49:19:F8
Certificate issuer:       /CN=A912AED4/serialNumber=66F0C1DBCDF1ABC34ED11B46A90AE3201802A95C
Certificate serial:       16EA
Authority key identifier: 66:F0:C1:DB:CD:F1:AB:C3:4E:D1:1B:46:A9:0A:E3:20:18:02:A9:5C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZvDB283xq8NO0RtGqQrjIBgCqVw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912AED4/BEC9AC82B0BD11E792A2BF30C4F9AE02/2E1E405E712D11EDA8C64C3DC4F9AE02.roa
Signing time:             Sat 26 Aug 2023 16:53:48 +0000
ROA not before:           Sat 26 Aug 2023 16:53:48 +0000
ROA not after:            Thu 31 Oct 2024 00:00:00 +0000
asID:                     45873
IP address blocks:        180.94.236.0/23 maxlen: 24
                          2401:e880::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912AED4/BEC9AC82B0BD11E792A2BF30C4F9AE02/ZvDB283xq8NO0RtGqQrjIBgCqVw.crl
                          rsync://rpki.apnic.net/member_repository/A912AED4/BEC9AC82B0BD11E792A2BF30C4F9AE02/ZvDB283xq8NO0RtGqQrjIBgCqVw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZvDB283xq8NO0RtGqQrjIBgCqVw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 31 May 2024 17:05:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5866 (0x16ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912AED4/serialNumber=66F0C1DBCDF1ABC34ED11B46A90AE3201802A95C
        Validity
            Not Before: Aug 26 16:53:48 2023 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=64ea2e1c-5589
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:16:ff:ea:51:bd:eb:3d:88:a3:91:f6:83:12:
                    f5:28:91:21:2e:f0:38:80:88:62:f4:a9:15:36:55:
                    3f:e7:b2:93:93:4d:f3:7a:c6:ff:2b:4d:f4:a8:8d:
                    68:53:6d:0c:fb:6f:0a:2f:c4:29:30:fe:b1:0f:4b:
                    40:98:92:56:aa:c1:17:3b:69:f6:4e:d9:08:63:5e:
                    51:c4:93:83:c5:9f:81:8b:fe:03:17:2e:27:23:ee:
                    30:85:12:87:28:df:d0:f2:62:00:e9:72:e0:53:c7:
                    4e:4b:59:14:00:97:f9:84:d0:1d:00:9e:29:00:bc:
                    99:5a:43:3b:43:36:00:96:49:ee:ad:a2:1d:19:c1:
                    92:7a:5b:e8:0e:59:15:80:4a:6a:3b:33:19:df:35:
                    4f:cd:91:c8:7b:3a:23:3a:46:a3:d0:9d:78:83:cd:
                    10:87:b1:22:b0:1b:ce:82:91:dc:13:e9:64:38:e3:
                    16:25:54:9b:3c:e2:24:91:7d:fb:70:54:45:a4:24:
                    f0:63:42:c3:aa:54:eb:a2:22:bc:48:e3:6f:67:35:
                    ae:04:6b:4b:ce:5f:5a:2f:f1:e1:27:2a:27:0d:f7:
                    0e:fd:64:92:40:8f:b5:8b:cc:55:44:33:49:c3:bb:
                    84:04:7c:f1:4b:90:b1:26:ec:55:f6:4d:35:76:5e:
                    99:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:7F:07:EC:72:B5:3D:5E:01:72:A3:FD:24:8B:59:C3:73:49:19:F8
            X509v3 Authority Key Identifier:
                keyid:66:F0:C1:DB:CD:F1:AB:C3:4E:D1:1B:46:A9:0A:E3:20:18:02:A9:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912AED4/BEC9AC82B0BD11E792A2BF30C4F9AE02/ZvDB283xq8NO0RtGqQrjIBgCqVw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZvDB283xq8NO0RtGqQrjIBgCqVw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AED4/BEC9AC82B0BD11E792A2BF30C4F9AE02/2E1E405E712D11EDA8C64C3DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.94.236.0/23
                IPv6:
                  2401:e880::/32

    Signature Algorithm: sha256WithRSAEncryption
         b7:ca:9c:f7:59:d2:b8:63:ac:15:9c:ac:a2:7b:9c:34:9a:d6:
         4d:eb:a0:b4:0b:cc:30:fc:89:46:19:2b:d6:a5:f9:c1:c7:04:
         2e:f5:09:99:50:55:c7:20:f8:a8:52:eb:0c:9f:7d:61:ac:4e:
         7d:09:d4:17:21:8d:90:14:f8:a1:59:f5:e2:ff:68:bc:ef:04:
         f3:9a:3d:01:9a:6d:cb:7f:4f:9a:bd:74:3a:46:a3:15:9a:f6:
         99:65:a2:49:97:d6:84:1f:f9:c8:7d:bc:2a:0b:20:c2:c2:83:
         99:04:fd:dd:a6:9b:08:07:18:9a:f1:a4:d5:1f:4e:c3:f9:31:
         c2:c3:f1:66:99:f1:a3:32:79:dd:43:25:37:cf:aa:22:ca:d6:
         6b:15:17:43:ec:2f:21:b1:50:9c:07:03:21:4c:c0:9c:97:28:
         2f:44:88:0d:54:ed:54:e4:57:24:35:39:39:69:67:d3:b4:9d:
         58:dd:f8:76:51:85:17:8f:2c:10:c9:af:3d:9e:85:69:8b:5a:
         45:68:2b:8c:17:38:94:4c:c3:d6:da:2f:20:db:05:d0:ad:de:
         a0:9b:cf:63:da:88:a0:7c:3b:42:0a:c5:ff:dd:60:c3:52:aa:
         7a:52:7b:88:f7:8b:ed:cf:81:ce:d3:f2:d8:e2:4d:25:b6:a7:
         fe:8b:ef:39
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICFuowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkFFRDQxMTAvBgNVBAUTKDY2RjBDMURCQ0RGMUFCQzM0RUQxMUI0NkE5MEFFMzIw
MTgwMkE5NUMwHhcNMjMwODI2MTY1MzQ4WhcNMjQxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NGVhMmUxYy01NTg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1Bb/6lG96z2Io5H2gxL1KJEhLvA4gIhi9KkVNlU/57KTk03zesb/K030qI1o
U20M+28KL8QpMP6xD0tAmJJWqsEXO2n2TtkIY15RxJODxZ+Bi/4DFy4nI+4whRKH
KN/Q8mIA6XLgU8dOS1kUAJf5hNAdAJ4pALyZWkM7QzYAlknuraIdGcGSelvoDlkV
gEpqOzMZ3zVPzZHIezojOkaj0J14g80Qh7EisBvOgpHcE+lkOOMWJVSbPOIkkX37
cFRFpCTwY0LDqlTroiK8SONvZzWuBGtLzl9aL/HhJyonDfcO/WSSQI+1i8xVRDNJ
w7uEBHzxS5CxJuxV9k01dl6Z1wIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFHV/B+xy
tT1eAXKj/SSLWcNzSRn4MB8GA1UdIwQYMBaAFGbwwdvN8avDTtEbRqkK4yAYAqlc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQUVENC9CRUM5QUM4MkIw
QkQxMUU3OTJBMkJGMzBDNEY5QUUwMi9adkRCMjgzeHE4Tk8wUnRHcVFyaklCZ0Nx
VncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1p2REIyODN4cThOTzBSdEdxUXJqSUJnQ3FWdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MkFFRDQvQkVDOUFDODJCMEJEMTFFNzkyQTJCRjMwQzRGOUFFMDIvMkUxRTQwNUU3
MTJEMTFFREE4QzY0QzNEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E
HzAdMAwEAgABMAYDBAG0XuwwDQQCAAIwBwMFACQB6IAwDQYJKoZIhvcNAQELBQAD
ggEBALfKnPdZ0rhjrBWcrKJ7nDSa1k3roLQLzDD8iUYZK9al+cHHBC71CZlQVccg
+KhS6wyffWGsTn0J1BchjZAU+KFZ9eL/aLzvBPOaPQGabct/T5q9dDpGoxWa9pll
okmX1oQf+ch9vCoLIMLCg5kE/d2mmwgHGJrxpNUfTsP5McLD8WaZ8aMyed1DJTfP
qiLK1msVF0PsLyGxUJwHAyFMwJyXKC9EiA1U7VTkVyQ1OTlpZ9O0nVjd+HZRhReP
LBDJrz2ehWmLWkVoK4wXOJRMw9baLyDbBdCt3qCbz2PaiKB8O0IKxf/dYMNSqnpS
e4j3i+3Pgc7T8tjiTSW2p/6L7zk=
-----END CERTIFICATE-----
Generated at Fri May 24 17:56:31 2024 by rpki-client on console-fra.rpki-client.org