Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9138C14/3E4C46305BC411EC96279354C4F9AE02/53E4239C99F811ECA0663D19C4F9AE02.roa
File:                     53E4239C99F811ECA0663D19C4F9AE02.roa (raw, json)
Hash identifier:          dR2muClPcLpQN+xv2JndS2S2ddR9spCzvVQI+l9CEQE=
Subject key identifier:   22:A6:DA:B7:F0:C9:8F:1B:37:CC:72:8D:43:EE:E4:F4:39:74:5E:D8
Certificate issuer:       /CN=A9138C14/serialNumber=BB0E550379FEA281A881A67479B77C8602D01314
Certificate serial:       03C5
Authority key identifier: BB:0E:55:03:79:FE:A2:81:A8:81:A6:74:79:B7:7C:86:02:D0:13:14
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uw5VA3n-ooGogaZ0ebd8hgLQExQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9138C14/3E4C46305BC411EC96279354C4F9AE02/53E4239C99F811ECA0663D19C4F9AE02.roa
Signing time:             Tue 03 Sep 2024 02:14:30 +0000
ROA not before:           Tue 03 Sep 2024 02:14:30 +0000
ROA not after:            Mon 01 Dec 2025 00:00:00 +0000
asID:                     58411
IP address blocks:        2407:d040::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9138C14/3E4C46305BC411EC96279354C4F9AE02/uw5VA3n-ooGogaZ0ebd8hgLQExQ.crl
                          rsync://rpki.apnic.net/member_repository/A9138C14/3E4C46305BC411EC96279354C4F9AE02/uw5VA3n-ooGogaZ0ebd8hgLQExQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uw5VA3n-ooGogaZ0ebd8hgLQExQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Dec 2024 23:39:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 965 (0x3c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9138C14/serialNumber=BB0E550379FEA281A881A67479B77C8602D01314
        Validity
            Not Before: Sep  3 02:14:30 2024 GMT
            Not After : Dec  1 00:00:00 2025 GMT
        Subject: CN=66d67106-9f52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:4a:ee:da:ae:bc:25:67:8e:8c:ad:e4:8b:98:
                    d7:26:51:41:60:9f:28:63:7a:46:4b:4f:ec:c2:82:
                    52:41:f5:e6:5a:ed:ba:1e:0a:03:08:df:95:9d:b8:
                    23:c4:21:6e:25:6a:35:c8:04:b7:f1:02:4b:ac:d0:
                    d7:71:18:79:0c:e8:da:71:80:4f:33:5a:a8:c7:6c:
                    ad:03:e6:b4:86:83:73:33:22:3a:d8:06:8b:81:51:
                    61:8a:57:45:66:21:63:96:d3:e6:5b:44:90:65:30:
                    29:52:14:6e:f7:70:2d:6f:c2:64:4d:7b:14:01:6f:
                    c7:00:8b:91:b5:26:6e:ad:65:99:66:16:49:fd:6d:
                    43:7e:1b:db:15:cc:48:16:59:fb:70:e3:0a:17:fd:
                    f1:49:41:c0:13:ed:60:0e:c8:44:3f:58:04:bf:b4:
                    87:e0:ba:8b:15:0e:93:77:43:3b:fe:de:4c:e7:55:
                    49:a0:17:a3:f4:c6:da:2b:5e:0e:a0:b7:b8:c1:d5:
                    b4:34:4c:4f:83:fe:8d:b7:f9:35:1e:13:ae:3b:4c:
                    c2:c6:a0:5a:cd:8c:5b:20:e8:53:e2:a4:1c:e6:47:
                    ba:30:95:d7:b2:a3:87:57:2a:67:68:9a:dd:64:02:
                    21:aa:03:1a:e5:6c:87:e3:a8:7f:7b:0a:98:4a:b9:
                    db:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:A6:DA:B7:F0:C9:8F:1B:37:CC:72:8D:43:EE:E4:F4:39:74:5E:D8
            X509v3 Authority Key Identifier:
                keyid:BB:0E:55:03:79:FE:A2:81:A8:81:A6:74:79:B7:7C:86:02:D0:13:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9138C14/3E4C46305BC411EC96279354C4F9AE02/uw5VA3n-ooGogaZ0ebd8hgLQExQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uw5VA3n-ooGogaZ0ebd8hgLQExQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138C14/3E4C46305BC411EC96279354C4F9AE02/53E4239C99F811ECA0663D19C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:d040::/32

    Signature Algorithm: sha256WithRSAEncryption
         a5:c4:8e:31:0d:b4:da:78:eb:66:78:77:60:c0:62:75:9b:de:
         f4:00:26:25:16:8b:f5:1c:7f:92:2a:32:a9:2a:5a:ca:60:5e:
         ac:bd:eb:ee:d0:98:df:09:d3:6c:d5:28:5a:6c:a7:22:6a:97:
         d2:3f:52:d5:9e:20:4d:c4:ab:51:3f:e8:1f:21:d7:fd:61:dc:
         e0:2b:68:9c:cb:f2:be:a0:00:16:99:cc:4f:e9:35:3b:87:7e:
         6f:05:69:77:4b:7e:fd:6a:4f:a2:c4:30:e0:93:e5:4f:7c:91:
         75:17:c8:fc:ce:7c:a4:b6:ba:71:11:9b:b6:3e:b9:aa:a4:69:
         cd:77:e2:9a:78:6a:ce:47:f5:a4:97:73:0e:14:6e:ea:7c:de:
         70:52:9a:14:99:78:d4:73:76:b6:0b:d8:c2:af:65:07:20:36:
         e8:d4:07:e0:78:92:f0:aa:73:48:9a:d9:87:64:40:b2:a5:4f:
         c5:4e:73:57:cf:7a:c6:8e:b2:69:8a:cd:b7:50:ee:d2:cc:54:
         a2:c4:b8:ff:87:d4:49:c9:85:ab:89:2b:ac:51:ca:d9:58:8e:
         1f:1b:36:49:88:e7:6c:ac:1b:25:f6:87:36:93:9a:f8:cf:76:
         48:d7:37:91:71:44:b3:ff:26:b3:c5:fc:bc:2b:d2:a6:3c:05:
         a1:71:87:d0
-----BEGIN CERTIFICATE-----
MIIFcjCCBFqgAwIBAgICA8UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzhDMTQxMTAvBgNVBAUTKEJCMEU1NTAzNzlGRUEyODFBODgxQTY3NDc5Qjc3Qzg2
MDJEMDEzMTQwHhcNMjQwOTAzMDIxNDMwWhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmQ2NzEwNi05ZjUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxEru2q68JWeOjK3ki5jXJlFBYJ8oY3pGS0/swoJSQfXmWu26HgoDCN+Vnbgj
xCFuJWo1yAS38QJLrNDXcRh5DOjacYBPM1qox2ytA+a0hoNzMyI62AaLgVFhildF
ZiFjltPmW0SQZTApUhRu93Atb8JkTXsUAW/HAIuRtSZurWWZZhZJ/W1DfhvbFcxI
Fln7cOMKF/3xSUHAE+1gDshEP1gEv7SH4LqLFQ6Td0M7/t5M51VJoBej9MbaK14O
oLe4wdW0NExPg/6Nt/k1HhOuO0zCxqBazYxbIOhT4qQc5ke6MJXXsqOHVypnaJrd
ZAIhqgMa5WyH46h/ewqYSrnb9QIDAQABo4ICljCCApIwHQYDVR0OBBYEFCKm2rfw
yY8bN8xyjUPu5PQ5dF7YMB8GA1UdIwQYMBaAFLsOVQN5/qKBqIGmdHm3fIYC0BMU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOEMxNC8zRTRDNDYzMDVC
QzQxMUVDOTYyNzkzNTRDNEY5QUUwMi91dzVWQTNuLW9vR29nYVowZWJkOGhnTFFF
eFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3V3NVZBM24tb29Hb2dhWjBlYmQ4aGdMUUV4US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzhDMTQvM0U0QzQ2MzA1QkM0MTFFQzk2Mjc5MzU0QzRGOUFFMDIvNTNFNDIzOUM5
OUY4MTFFQ0EwNjYzRDE5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8E
ETAPMA0EAgACMAcDBQAkB9BAMA0GCSqGSIb3DQEBCwUAA4IBAQClxI4xDbTaeOtm
eHdgwGJ1m970ACYlFov1HH+SKjKpKlrKYF6svevu0JjfCdNs1ShabKciapfSP1LV
niBNxKtRP+gfIdf9YdzgK2icy/K+oAAWmcxP6TU7h35vBWl3S379ak+ixDDgk+VP
fJF1F8j8znyktrpxEZu2PrmqpGnNd+KaeGrOR/Wkl3MOFG7qfN5wUpoUmXjUc3a2
C9jCr2UHIDbo1AfgeJLwqnNImtmHZECypU/FTnNXz3rGjrJpis23UO7SzFSixLj/
h9RJyYWriSusUcrZWI4fGzZJiOdsrBsl9oc2k5r4z3ZI1zeRcUSz/yazxfy8K9Km
PAWhcYfQ
-----END CERTIFICATE-----
Generated at Mon Nov 25 01:15:26 2024 by rpki-client on console-fra.rpki-client.org