Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B714/6404C018F67111EB8B63A117C4F9AE02/4A4C8CD0F67311EBA0F18818C4F9AE02.roa
File:                     4A4C8CD0F67311EBA0F18818C4F9AE02.roa (raw, json)
Hash identifier:          3gaCcI2B39Ypqww+a42sCy+UnmO00x0eV5GOdvcimLM=
Subject key identifier:   F4:2E:97:89:CD:46:A9:69:BD:70:1D:32:54:BA:53:D6:C0:E7:2E:CD
Certificate issuer:       /CN=A913B714/serialNumber=5BE97FA4D34B3ED31DBD64860E180093FEA111DF
Certificate serial:       04C2
Authority key identifier: 5B:E9:7F:A4:D3:4B:3E:D3:1D:BD:64:86:0E:18:00:93:FE:A1:11:DF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W-l_pNNLPtMdvWSGDhgAk_6hEd8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B714/6404C018F67111EB8B63A117C4F9AE02/4A4C8CD0F67311EBA0F18818C4F9AE02.roa
Signing time:             Sat 28 Sep 2024 23:43:21 +0000
ROA not before:           Sat 28 Sep 2024 23:43:21 +0000
ROA not after:            Mon 01 Dec 2025 00:00:00 +0000
asID:                     136423
IP address blocks:        203.25.82.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B714/6404C018F67111EB8B63A117C4F9AE02/W-l_pNNLPtMdvWSGDhgAk_6hEd8.crl
                          rsync://rpki.apnic.net/member_repository/A913B714/6404C018F67111EB8B63A117C4F9AE02/W-l_pNNLPtMdvWSGDhgAk_6hEd8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W-l_pNNLPtMdvWSGDhgAk_6hEd8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1218 (0x4c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B714/serialNumber=5BE97FA4D34B3ED31DBD64860E180093FEA111DF
        Validity
            Not Before: Sep 28 23:43:21 2024 GMT
            Not After : Dec  1 00:00:00 2025 GMT
        Subject: CN=66f89499-9974
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:4b:54:df:1d:22:cb:cb:51:7d:f9:56:6c:25:
                    7e:d1:32:cc:f6:aa:f6:19:06:38:74:67:ab:d4:88:
                    6c:5d:bc:7d:ee:d1:28:6e:33:3a:64:dd:f4:fa:19:
                    39:ea:22:54:a0:bc:4e:76:68:20:d4:ca:26:3a:85:
                    50:39:64:2e:d9:2e:c5:ce:39:e1:8b:fa:66:2c:9a:
                    49:f7:cb:58:61:92:f1:80:31:2c:4b:2b:d3:d4:68:
                    42:35:c1:fe:2c:a8:69:0f:44:93:bb:a8:54:6a:48:
                    32:ff:be:92:ae:51:6c:44:d5:b2:00:d4:cf:5d:0c:
                    11:ba:9e:53:12:6e:46:d3:5e:f1:00:01:e8:2e:df:
                    e1:19:c8:57:04:90:f3:08:9d:42:b4:b3:ce:da:71:
                    c7:9d:87:99:a6:62:d6:4f:ef:fb:25:73:2a:52:ee:
                    60:89:ab:73:8b:54:6a:9a:bc:7d:44:5b:f1:5b:e7:
                    6d:c1:18:d0:c5:33:58:4a:5d:d9:ac:64:3a:e9:d1:
                    e5:47:2a:3a:d0:ec:39:46:81:b5:7f:b0:0c:e6:06:
                    2a:fa:b4:e2:d7:5a:2f:f1:f9:d0:5e:b1:56:ff:4c:
                    e8:46:43:af:64:23:d9:dc:aa:2d:a9:64:4a:e1:3d:
                    1d:1b:70:aa:c6:2c:f3:63:89:6a:c9:9d:c3:1d:ed:
                    00:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:2E:97:89:CD:46:A9:69:BD:70:1D:32:54:BA:53:D6:C0:E7:2E:CD
            X509v3 Authority Key Identifier:
                keyid:5B:E9:7F:A4:D3:4B:3E:D3:1D:BD:64:86:0E:18:00:93:FE:A1:11:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B714/6404C018F67111EB8B63A117C4F9AE02/W-l_pNNLPtMdvWSGDhgAk_6hEd8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W-l_pNNLPtMdvWSGDhgAk_6hEd8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B714/6404C018F67111EB8B63A117C4F9AE02/4A4C8CD0F67311EBA0F18818C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.25.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:f2:a2:0e:cc:35:e9:7c:99:fc:14:f2:4f:54:cf:e6:4c:cc:
         82:b0:93:cc:e9:e7:ff:79:90:39:ca:c6:a0:30:09:bb:7c:55:
         8e:b5:89:a3:98:bd:5e:da:95:bf:33:27:06:2b:34:df:e7:e8:
         42:97:39:7f:1b:43:38:4f:cd:8d:2c:1c:51:a9:1c:64:5b:4d:
         d9:fc:27:60:67:11:72:c3:78:30:26:38:29:e3:7f:82:de:56:
         94:12:f0:9a:d4:00:4f:0a:1d:b7:08:d3:14:3f:51:02:dd:b4:
         e4:d9:c3:d8:dd:50:82:22:d9:4e:52:52:77:38:64:d2:b2:cf:
         e4:a6:31:5d:09:27:35:c0:f1:1a:74:4e:93:ea:52:45:ac:c0:
         9f:ea:3f:40:86:ae:19:64:bd:0d:f2:4f:36:97:87:ad:3f:03:
         2c:95:41:a6:2f:98:90:bf:4f:52:ef:2a:8d:8a:57:b4:16:e4:
         95:5b:19:ad:fb:42:c1:31:f1:bc:5d:28:7e:e4:00:de:8b:39:
         51:1f:09:be:05:69:b0:cb:c6:25:0a:4c:43:4e:ac:55:06:4c:
         b6:55:f0:fa:c0:31:79:8a:3e:0f:59:bf:22:8d:73:c8:84:8b:
         b3:b4:da:04:f3:26:40:f2:83:d0:2d:14:36:70:f6:90:f8:a3:
         43:e5:8e:b8
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBMIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0I3MTQxMTAvBgNVBAUTKDVCRTk3RkE0RDM0QjNFRDMxREJENjQ4NjBFMTgwMDkz
RkVBMTExREYwHhcNMjQwOTI4MjM0MzIxWhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmY4OTQ5OS05OTc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAx0tU3x0iy8tRfflWbCV+0TLM9qr2GQY4dGer1IhsXbx97tEobjM6ZN30+hk5
6iJUoLxOdmgg1MomOoVQOWQu2S7Fzjnhi/pmLJpJ98tYYZLxgDEsSyvT1GhCNcH+
LKhpD0STu6hUakgy/76SrlFsRNWyANTPXQwRup5TEm5G017xAAHoLt/hGchXBJDz
CJ1CtLPO2nHHnYeZpmLWT+/7JXMqUu5giatzi1Rqmrx9RFvxW+dtwRjQxTNYSl3Z
rGQ66dHlRyo60Ow5RoG1f7AM5gYq+rTi11ov8fnQXrFW/0zoRkOvZCPZ3KotqWRK
4T0dG3CqxizzY4lqyZ3DHe0AVwIDAQABo4IClTCCApEwHQYDVR0OBBYEFPQul4nN
RqlpvXAdMlS6U9bA5y7NMB8GA1UdIwQYMBaAFFvpf6TTSz7THb1khg4YAJP+oRHf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjcxNC82NDA0QzAxOEY2
NzExMUVCOEI2M0ExMTdDNEY5QUUwMi9XLWxfcE5OTFB0TWR2V1NHRGhnQWtfNmhF
ZDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1ctbF9wTk5MUHRNZHZXU0dEaGdBa182aEVkOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
M0I3MTQvNjQwNEMwMThGNjcxMTFFQjhCNjNBMTE3QzRGOUFFMDIvNEE0QzhDRDBG
NjczMTFFQkEwRjE4ODE4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADLGVIwDQYJKoZIhvcNAQELBQADggEBACXyog7MNel8mfwU
8k9Uz+ZMzIKwk8zp5/95kDnKxqAwCbt8VY61iaOYvV7alb8zJwYrNN/n6EKXOX8b
QzhPzY0sHFGpHGRbTdn8J2BnEXLDeDAmOCnjf4LeVpQS8JrUAE8KHbcI0xQ/UQLd
tOTZw9jdUIIi2U5SUnc4ZNKyz+SmMV0JJzXA8Rp0TpPqUkWswJ/qP0CGrhlkvQ3y
TzaXh60/AyyVQaYvmJC/T1LvKo2KV7QW5JVbGa37QsEx8bxdKH7kAN6LOVEfCb4F
abDLxiUKTENOrFUGTLZV8PrAMXmKPg9ZvyKNc8iEi7O02gTzJkDyg9AtFDZw9pD4
o0Pljrg=
-----END CERTIFICATE-----
Generated at Sat Nov 23 00:49:33 2024 by rpki-client on console-fra.rpki-client.org