Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/DB386CDAB0F811E595E0F761C4F9AE02.roa
File:                     DB386CDAB0F811E595E0F761C4F9AE02.roa (raw, json)
Hash identifier:          5+0P2oMrZxwSpuHlRVHY+lcirmBZELX1piLb/+FKwgs=
Subject key identifier:   AE:84:09:1F:6B:38:F3:73:CC:D8:28:BF:53:D6:64:A4:38:37:03:8A
Certificate issuer:       /CN=A91474C3/serialNumber=F3FEF462A4D8E2F7FA0735A6AB645EE5635DA8F2
Certificate serial:       3420
Authority key identifier: F3:FE:F4:62:A4:D8:E2:F7:FA:07:35:A6:AB:64:5E:E5:63:5D:A8:F2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_70YqTY4vf6BzWmq2Re5WNdqPI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/DB386CDAB0F811E595E0F761C4F9AE02.roa
Signing time:             Tue 02 Apr 2024 14:50:10 +0000
ROA not before:           Tue 02 Apr 2024 14:50:10 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     45315
IP address blocks:        27.50.35.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.crl
                          rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_70YqTY4vf6BzWmq2Re5WNdqPI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:19:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13344 (0x3420)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91474C3/serialNumber=F3FEF462A4D8E2F7FA0735A6AB645EE5635DA8F2
        Validity
            Not Before: Apr  2 14:50:10 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=660c1b22-b305
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:a6:c7:da:78:02:b7:16:cb:bc:49:86:5e:b0:
                    45:f2:f5:b0:6a:d8:28:2e:bc:bc:7f:ec:96:5d:e8:
                    6f:af:3c:3b:26:7f:5f:ff:9d:c1:5a:69:4e:f9:8a:
                    49:3e:90:46:46:6d:b1:6e:8f:3c:ae:bb:78:f2:c4:
                    4f:db:25:b1:63:d1:41:38:77:91:17:ae:dd:5d:eb:
                    70:da:40:e8:28:10:df:42:f8:e7:3f:57:ea:a3:9e:
                    68:2d:31:eb:a9:a1:64:89:4a:da:aa:fb:c7:0f:2f:
                    4f:85:91:84:a1:68:35:73:8a:a7:a3:23:63:16:dc:
                    84:45:ad:d9:90:a6:43:5c:52:61:e4:37:8f:47:ee:
                    2f:de:ca:c2:18:75:f1:ac:8a:0b:b5:cc:fe:8c:7e:
                    2e:04:03:ff:9d:e3:ae:20:0b:4b:5c:48:71:63:7c:
                    2e:0b:26:47:f8:15:b6:52:6f:c7:d8:8a:03:2a:9c:
                    08:c9:c5:d4:76:59:7f:f8:7a:bb:ba:67:34:8a:6f:
                    a6:d0:cc:94:64:ef:88:69:2d:4a:05:40:69:d3:70:
                    a7:79:70:2b:38:74:f3:fa:07:d2:69:be:f2:50:e9:
                    f2:b9:af:3d:6f:db:53:d8:c5:58:ca:f5:4a:8c:94:
                    75:0e:5a:f7:c4:80:64:9d:c2:30:af:fa:dc:14:9a:
                    6e:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:84:09:1F:6B:38:F3:73:CC:D8:28:BF:53:D6:64:A4:38:37:03:8A
            X509v3 Authority Key Identifier:
                keyid:F3:FE:F4:62:A4:D8:E2:F7:FA:07:35:A6:AB:64:5E:E5:63:5D:A8:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_70YqTY4vf6BzWmq2Re5WNdqPI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/DB386CDAB0F811E595E0F761C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.50.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b7:2e:35:e2:6a:4a:6b:87:86:7a:fe:a1:49:a2:ce:23:82:e0:
         7c:ca:97:bd:d4:6f:42:d4:59:6b:0c:77:d0:72:21:d7:3f:d6:
         26:e4:9f:af:94:b7:ab:d0:fc:3d:00:17:19:ae:fb:5d:28:9d:
         fe:e6:6c:c8:6e:b7:65:c5:a2:3f:30:e2:32:82:f4:cf:79:de:
         3f:25:7f:a9:87:cb:d4:6d:6e:06:0e:16:66:77:99:a2:0a:ae:
         72:ed:84:ed:62:73:86:a8:82:e5:64:86:68:e3:ba:bc:9e:af:
         11:f4:ce:6d:3f:28:04:5b:14:b1:bc:a7:d0:d6:24:63:96:6d:
         36:04:34:e4:bf:d1:a4:f8:da:a1:3a:f9:bc:23:d4:7b:4d:7f:
         37:7f:18:e9:fd:bc:be:6e:9c:d1:c4:f2:72:ac:45:44:5e:07:
         cf:bb:4c:18:58:dc:13:38:cf:c5:eb:f3:ef:66:65:80:8c:8f:
         c8:37:cc:e2:9b:7f:e7:3b:3b:1c:79:9c:08:e2:24:a2:e0:b7:
         f2:11:35:77:d6:39:c4:13:19:20:5b:03:b1:67:e8:46:8e:52:
         e7:bd:d9:45:a4:6e:cf:40:71:58:42:1a:28:c1:c7:06:f4:95:
         fe:f7:78:fd:d3:5d:ad:95:e4:6d:0e:31:a4:f9:37:07:15:65:
         ca:82:0f:b8
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICNCAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDc0QzMxMTAvBgNVBAUTKEYzRkVGNDYyQTREOEUyRjdGQTA3MzVBNkFCNjQ1RUU1
NjM1REE4RjIwHhcNMjQwNDAyMTQ1MDEwWhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NjBjMWIyMi1iMzA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1KbH2ngCtxbLvEmGXrBF8vWwatgoLry8f+yWXehvrzw7Jn9f/53BWmlO+YpJ
PpBGRm2xbo88rrt48sRP2yWxY9FBOHeRF67dXetw2kDoKBDfQvjnP1fqo55oLTHr
qaFkiUraqvvHDy9PhZGEoWg1c4qnoyNjFtyERa3ZkKZDXFJh5DePR+4v3srCGHXx
rIoLtcz+jH4uBAP/neOuIAtLXEhxY3wuCyZH+BW2Um/H2IoDKpwIycXUdll/+Hq7
umc0im+m0MyUZO+IaS1KBUBp03CneXArOHTz+gfSab7yUOnyua89b9tT2MVYyvVK
jJR1Dlr3xIBkncIwr/rcFJpu0QIDAQABo4IClTCCApEwHQYDVR0OBBYEFK6ECR9r
OPNzzNgov1PWZKQ4NwOKMB8GA1UdIwQYMBaAFPP+9GKk2OL3+gc1pqtkXuVjXajy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzRDMy82RjhCNTJBMDFE
NzAxMUUyQkMxMURBQjQwOEIwMkNEMi84XzcwWXFUWTR2ZjZCeldtcTJSZTVXTmRx
UEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzhfNzBZcVRZNHZmNkJ6V21xMlJlNVdOZHFQSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDc0QzMvNkY4QjUyQTAxRDcwMTFFMkJDMTFEQUI0MDhCMDJDRDIvREIzODZDREFC
MEY4MTFFNTk1RTBGNzYxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAAbMiMwDQYJKoZIhvcNAQELBQADggEBALcuNeJqSmuHhnr+
oUmiziOC4HzKl73Ub0LUWWsMd9ByIdc/1ibkn6+Ut6vQ/D0AFxmu+10onf7mbMhu
t2XFoj8w4jKC9M953j8lf6mHy9RtbgYOFmZ3maIKrnLthO1ic4aoguVkhmjjurye
rxH0zm0/KARbFLG8p9DWJGOWbTYENOS/0aT42qE6+bwj1HtNfzd/GOn9vL5unNHE
8nKsRUReB8+7TBhY3BM4z8Xr8+9mZYCMj8g3zOKbf+c7Oxx5nAjiJKLgt/IRNXfW
OcQTGSBbA7Fn6EaOUue92UWkbs9AcVhCGijBxwb0lf73eP3TXa2V5G0OMaT5NwcV
ZcqCD7g=
-----END CERTIFICATE-----
Generated at Fri Nov 22 15:25:36 2024 by rpki-client on console-fra.rpki-client.org