Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91348C9/CFC10E0ACE9711EE923F0470C4F9AE02/F278C026892911EFB08D7746C4F9AE02.roa
File:                     F278C026892911EFB08D7746C4F9AE02.roa (raw, json)
Hash identifier:          vYK9qyYR2qZK8ft3AcqYm/AEVp1ckpD6/U1Duag7/+g=
Subject key identifier:   DA:43:E5:A0:48:17:7F:40:9B:22:EE:16:E8:B2:46:05:58:38:22:55
Certificate issuer:       /CN=A91348C9/serialNumber=0C762B2C9024B34C988482F1D71D749AE7DC4AEB
Certificate serial:       82
Authority key identifier: 0C:76:2B:2C:90:24:B3:4C:98:84:82:F1:D7:1D:74:9A:E7:DC:4A:EB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHYrLJAks0yYhILx1x10mufcSus.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91348C9/CFC10E0ACE9711EE923F0470C4F9AE02/F278C026892911EFB08D7746C4F9AE02.roa
Signing time:             Sun 13 Oct 2024 06:11:13 +0000
ROA not before:           Sun 13 Oct 2024 06:11:13 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     146859
IP address blocks:        43.239.92.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91348C9/CFC10E0ACE9711EE923F0470C4F9AE02/DHYrLJAks0yYhILx1x10mufcSus.crl
                          rsync://rpki.apnic.net/member_repository/A91348C9/CFC10E0ACE9711EE923F0470C4F9AE02/DHYrLJAks0yYhILx1x10mufcSus.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHYrLJAks0yYhILx1x10mufcSus.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 04:37:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 130 (0x82)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91348C9/serialNumber=0C762B2C9024B34C988482F1D71D749AE7DC4AEB
        Validity
            Not Before: Oct 13 06:11:13 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=670b6480-4bff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:ac:dd:70:22:45:5d:92:b6:b6:95:26:32:bb:
                    ff:1d:d8:82:1d:d8:3d:71:81:59:e9:42:4e:0c:99:
                    5c:30:ae:5b:0a:86:b5:00:10:06:3d:55:33:8c:84:
                    da:52:e5:20:eb:1c:f8:d6:37:f1:50:60:10:ed:89:
                    ca:a2:e2:2e:18:76:22:fa:13:15:b7:7a:c7:e5:80:
                    15:d5:8d:67:cf:bc:70:3d:0c:37:72:61:21:8a:d0:
                    7a:fa:87:f7:d9:6f:a8:6e:1f:56:f0:63:4a:bf:45:
                    1f:1a:b6:ee:cb:01:99:9a:64:e7:43:b9:5c:b9:6e:
                    21:88:23:c3:72:86:4c:2e:36:db:11:d6:6e:df:fc:
                    59:70:a1:7c:39:8d:50:84:3e:cf:76:07:a9:41:37:
                    7d:9c:f9:3d:2f:a6:73:51:c1:b0:ad:58:05:68:2a:
                    86:e4:6f:b7:db:09:c4:27:7c:14:21:71:2b:0c:c7:
                    f7:8d:a7:de:9f:07:89:15:7b:b2:e4:b2:35:71:02:
                    3a:51:76:1f:37:2b:c9:d9:ba:9c:1e:b7:32:93:17:
                    6e:d5:89:cf:ef:22:11:f5:27:6a:dc:31:3a:2d:7d:
                    e8:6b:06:4f:8e:02:31:d0:9c:54:1f:07:75:1f:f7:
                    b2:a3:4c:dd:5e:ac:a3:4f:ab:22:68:0c:36:9e:c2:
                    45:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:43:E5:A0:48:17:7F:40:9B:22:EE:16:E8:B2:46:05:58:38:22:55
            X509v3 Authority Key Identifier:
                keyid:0C:76:2B:2C:90:24:B3:4C:98:84:82:F1:D7:1D:74:9A:E7:DC:4A:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91348C9/CFC10E0ACE9711EE923F0470C4F9AE02/DHYrLJAks0yYhILx1x10mufcSus.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHYrLJAks0yYhILx1x10mufcSus.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91348C9/CFC10E0ACE9711EE923F0470C4F9AE02/F278C026892911EFB08D7746C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.239.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:a1:86:89:18:63:b2:23:ce:5a:6e:4c:ec:31:3e:39:83:3f:
         b9:07:76:a7:9f:8c:20:37:ef:25:09:94:3c:cf:f7:2e:f6:9b:
         1a:c8:77:cf:46:2c:e2:01:35:cf:bd:89:d0:3e:b9:f3:d6:e7:
         da:36:fb:86:13:dc:ee:95:a9:ae:24:27:21:3b:1b:06:bb:a0:
         ef:20:1d:a9:af:96:d3:69:a1:57:40:54:58:b8:79:c0:d1:9a:
         dc:ca:30:9b:24:eb:df:dd:8a:bc:d0:c1:40:df:46:5f:6a:d0:
         a8:b3:0b:dc:81:df:fb:8f:60:3c:fd:3a:78:06:7b:a4:57:b2:
         39:df:7b:79:f4:09:68:1f:a0:38:82:b5:94:b0:c1:30:ba:66:
         d8:59:de:ca:19:8b:a8:80:36:d7:aa:63:55:cf:18:39:51:3a:
         eb:73:a8:95:ce:3c:66:41:14:e5:0f:b5:39:23:13:c0:1f:7e:
         56:23:46:3c:1d:79:61:da:29:77:e1:f8:4b:d5:ee:b7:8b:05:
         58:81:a6:b5:6d:a8:b0:bf:d3:c2:8f:77:c9:67:99:a1:6d:e9:
         7e:59:c8:c1:d2:65:68:53:90:51:eb:b6:4b:d1:3c:e0:90:5e:
         5f:4c:76:bb:d7:b5:b4:2b:5c:aa:61:c1:ed:a2:db:5f:cc:0f:
         0f:de:75:91
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAIIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzQ4QzkxMTAvBgNVBAUTKDBDNzYyQjJDOTAyNEIzNEM5ODg0ODJGMUQ3MUQ3NDlB
RTdEQzRBRUIwHhcNMjQxMDEzMDYxMTEzWhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzBiNjQ4MC00YmZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA26zdcCJFXZK2tpUmMrv/HdiCHdg9cYFZ6UJODJlcMK5bCoa1ABAGPVUzjITa
UuUg6xz41jfxUGAQ7YnKouIuGHYi+hMVt3rH5YAV1Y1nz7xwPQw3cmEhitB6+of3
2W+obh9W8GNKv0UfGrbuywGZmmTnQ7lcuW4hiCPDcoZMLjbbEdZu3/xZcKF8OY1Q
hD7PdgepQTd9nPk9L6ZzUcGwrVgFaCqG5G+32wnEJ3wUIXErDMf3jafenweJFXuy
5LI1cQI6UXYfNyvJ2bqcHrcykxdu1YnP7yIR9Sdq3DE6LX3oawZPjgIx0JxUHwd1
H/eyo0zdXqyjT6siaAw2nsJFsQIDAQABo4IClTCCApEwHQYDVR0OBBYEFNpD5aBI
F39AmyLuFuiyRgVYOCJVMB8GA1UdIwQYMBaAFAx2KyyQJLNMmISC8dcddJrn3Err
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDhDOS9DRkMxMEUwQUNF
OTcxMUVFOTIzRjA0NzBDNEY5QUUwMi9ESFlyTEpBa3MweVloSUx4MXgxMG11ZmNT
dXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0RIWXJMSkFrczB5WWhJTHgxeDEwbXVmY1N1cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzQ4QzkvQ0ZDMTBFMEFDRTk3MTFFRTkyM0YwNDcwQzRGOUFFMDIvRjI3OEMwMjY4
OTI5MTFFRkIwOEQ3NzQ2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAAr71wwDQYJKoZIhvcNAQELBQADggEBAHGhhokYY7Ijzlpu
TOwxPjmDP7kHdqefjCA37yUJlDzP9y72mxrId89GLOIBNc+9idA+ufPW59o2+4YT
3O6Vqa4kJyE7Gwa7oO8gHamvltNpoVdAVFi4ecDRmtzKMJsk69/dirzQwUDfRl9q
0KizC9yB3/uPYDz9OngGe6RXsjnfe3n0CWgfoDiCtZSwwTC6ZthZ3soZi6iANteq
Y1XPGDlROutzqJXOPGZBFOUPtTkjE8AfflYjRjwdeWHaKXfh+EvV7reLBViBprVt
qLC/08KPd8lnmaFt6X5ZyMHSZWhTkFHrtkvRPOCQXl9MdrvXtbQrXKphwe2i21/M
Dw/edZE=
-----END CERTIFICATE-----
Generated at Thu Nov 21 05:37:03 2024 by rpki-client on console-ams.rpki-client.org