Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/0649562CC63A11EAB59CC262C4F9AE02.roa
File:                     0649562CC63A11EAB59CC262C4F9AE02.roa (raw, json)
Hash identifier:          ndTFS2r0EnV/1WKrTkxafP1yrj/Cl22lQpmkunzynGg=
Subject key identifier:   A7:E6:90:7A:D3:6E:E7:C1:3C:DB:BF:D0:C2:15:FC:DC:8D:DD:4C:1F
Certificate issuer:       /CN=A9142241/serialNumber=2B53091DC9CB38447758E61D9DEE153541413ED0
Certificate serial:       0735
Authority key identifier: 2B:53:09:1D:C9:CB:38:44:77:58:E6:1D:9D:EE:15:35:41:41:3E:D0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1MJHcnLOER3WOYdne4VNUFBPtA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/0649562CC63A11EAB59CC262C4F9AE02.roa
Signing time:             Mon 28 Aug 2023 21:38:29 +0000
ROA not before:           Mon 28 Aug 2023 21:38:29 +0000
ROA not after:            Thu 31 Oct 2024 00:00:00 +0000
asID:                     21866
IP address blocks:        202.173.25.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/K1MJHcnLOER3WOYdne4VNUFBPtA.crl
                          rsync://rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/K1MJHcnLOER3WOYdne4VNUFBPtA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1MJHcnLOER3WOYdne4VNUFBPtA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 May 2024 20:05:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1845 (0x735)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9142241/serialNumber=2B53091DC9CB38447758E61D9DEE153541413ED0
        Validity
            Not Before: Aug 28 21:38:29 2023 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=64ed13d5-b078
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:0c:d3:24:68:a3:b3:c0:45:eb:f8:eb:12:f9:
                    19:4b:31:6e:40:33:6f:12:34:4b:06:ba:2d:66:d5:
                    09:38:38:b0:f5:62:dd:3c:0a:cc:5c:11:f7:11:fc:
                    8c:ea:24:f5:e4:59:9b:cb:5c:a1:b9:ba:99:c7:2a:
                    f8:a5:e5:8e:0e:79:74:67:d2:8b:43:ec:49:7f:2a:
                    c7:e7:c8:a1:36:9f:03:28:31:f4:fd:2f:88:2d:a9:
                    83:44:cd:78:8e:bb:a6:d0:ce:6f:01:c4:97:81:45:
                    f4:41:92:40:c7:25:9d:10:72:83:23:d1:cb:44:e5:
                    d0:99:b6:4b:cf:11:68:6e:1b:c9:87:d0:e8:98:f0:
                    c2:68:69:48:a2:4d:ac:98:db:19:42:9c:60:f2:b5:
                    9c:8d:b8:69:87:51:ec:ee:08:a2:62:59:c1:3c:66:
                    f5:e8:b2:a7:2a:ff:33:af:1d:2a:30:91:5d:c4:a9:
                    71:90:62:a8:2c:28:cd:05:c0:ea:f9:cd:b7:53:7c:
                    74:d5:bd:48:fc:e9:22:36:cd:21:64:e0:d0:15:26:
                    48:f8:f0:dd:95:da:95:74:f3:6d:e0:df:15:7a:d3:
                    5e:3d:5e:32:0a:df:e6:da:eb:63:c0:5c:6a:d6:50:
                    49:e2:6b:ae:c7:e8:67:81:7d:a0:cf:09:1f:84:f9:
                    37:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:E6:90:7A:D3:6E:E7:C1:3C:DB:BF:D0:C2:15:FC:DC:8D:DD:4C:1F
            X509v3 Authority Key Identifier:
                keyid:2B:53:09:1D:C9:CB:38:44:77:58:E6:1D:9D:EE:15:35:41:41:3E:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/K1MJHcnLOER3WOYdne4VNUFBPtA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1MJHcnLOER3WOYdne4VNUFBPtA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/0649562CC63A11EAB59CC262C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.173.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:b7:6f:d2:6c:63:95:e7:06:ff:53:c8:6b:53:3f:60:36:a5:
         e8:20:91:b0:18:f5:d5:b9:51:29:c5:bf:c4:31:02:d0:85:b8:
         37:46:78:57:33:a4:c7:99:15:94:ef:78:83:ce:56:0c:99:b7:
         8a:54:99:40:cf:d3:83:f1:b6:05:c2:b0:82:98:f6:c2:23:5c:
         bf:cf:97:4b:b8:95:37:0d:9e:7e:0c:b4:30:a4:01:9b:10:2d:
         8c:94:6d:c2:ad:55:55:9f:1f:c5:99:6e:a6:1b:bd:9b:67:33:
         f8:09:75:b5:d2:3f:85:69:a4:48:e8:4f:d9:3e:ac:af:85:3e:
         a9:a6:62:32:3d:e4:d2:dd:6d:d6:80:9e:8b:0a:b1:fa:e8:82:
         a3:f0:e1:48:f1:c1:30:ac:4f:1f:b7:22:0e:cd:be:d4:ea:cf:
         46:88:50:b9:f3:d4:a4:42:80:cb:59:9b:dd:37:e4:92:8b:b3:
         1f:b5:71:c6:23:89:d9:31:42:f1:14:e5:e1:12:27:a7:23:d1:
         2a:24:82:ae:ad:45:6b:53:1b:ca:de:c7:e8:85:bd:0f:66:96:
         02:48:b1:7e:07:26:7d:af:53:bb:f6:23:a7:06:b6:1a:af:a5:
         49:ea:c0:2b:49:25:a6:b7:ad:82:76:cb:48:24:22:25:e0:17:
         8f:a7:7e:10
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBzUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDIyNDExMTAvBgNVBAUTKDJCNTMwOTFEQzlDQjM4NDQ3NzU4RTYxRDlERUUxNTM1
NDE0MTNFRDAwHhcNMjMwODI4MjEzODI5WhcNMjQxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NGVkMTNkNS1iMDc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1gzTJGijs8BF6/jrEvkZSzFuQDNvEjRLBrotZtUJODiw9WLdPArMXBH3EfyM
6iT15Fmby1yhubqZxyr4peWODnl0Z9KLQ+xJfyrH58ihNp8DKDH0/S+ILamDRM14
jrum0M5vAcSXgUX0QZJAxyWdEHKDI9HLROXQmbZLzxFobhvJh9DomPDCaGlIok2s
mNsZQpxg8rWcjbhph1Hs7giiYlnBPGb16LKnKv8zrx0qMJFdxKlxkGKoLCjNBcDq
+c23U3x01b1I/OkiNs0hZODQFSZI+PDdldqVdPNt4N8VetNePV4yCt/m2utjwFxq
1lBJ4muux+hngX2gzwkfhPk3HQIDAQABo4IClTCCApEwHQYDVR0OBBYEFKfmkHrT
bufBPNu/0MIV/NyN3UwfMB8GA1UdIwQYMBaAFCtTCR3JyzhEd1jmHZ3uFTVBQT7Q
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjI0MS80RjdCOTg2NkM1
RjcxMUVBQkE5RDIwODFDNEY5QUUwMi9LMU1KSGNuTE9FUjNXT1lkbmU0Vk5VRkJQ
dEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0sxTUpIY25MT0VSM1dPWWRuZTRWTlVGQlB0QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDIyNDEvNEY3Qjk4NjZDNUY3MTFFQUJBOUQyMDgxQzRGOUFFMDIvMDY0OTU2MkND
NjNBMTFFQUI1OUNDMjYyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADKrRkwDQYJKoZIhvcNAQELBQADggEBAGO3b9JsY5XnBv9T
yGtTP2A2peggkbAY9dW5USnFv8QxAtCFuDdGeFczpMeZFZTveIPOVgyZt4pUmUDP
04PxtgXCsIKY9sIjXL/Pl0u4lTcNnn4MtDCkAZsQLYyUbcKtVVWfH8WZbqYbvZtn
M/gJdbXSP4VppEjoT9k+rK+FPqmmYjI95NLdbdaAnosKsfrogqPw4UjxwTCsTx+3
Ig7NvtTqz0aIULnz1KRCgMtZm9035JKLsx+1ccYjidkxQvEU5eESJ6cj0Sokgq6t
RWtTG8rex+iFvQ9mlgJIsX4HJn2vU7v2I6cGthqvpUnqwCtJJaa3rYJ2y0gkIiXg
F4+nfhA=
-----END CERTIFICATE-----
Generated at Thu May 16 22:58:17 2024 by rpki-client on console-fra.rpki-client.org