Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/E205744CABA111EAB7C51982C4F9AE02.roa
File:                     E205744CABA111EAB7C51982C4F9AE02.roa (raw, json)
Hash identifier:          OxKW8hsqjWscxfPShTM40PQzZKSrlzhnwSut+FEmnlg=
Subject key identifier:   79:8B:E8:27:B1:A8:BD:63:C8:8D:67:22:B3:38:E1:62:9D:72:B5:4C
Certificate issuer:       /CN=A914781A/serialNumber=4D723955243AE88D552439AF8E4E0A09C8F6590D
Certificate serial:       33E3
Authority key identifier: 4D:72:39:55:24:3A:E8:8D:55:24:39:AF:8E:4E:0A:09:C8:F6:59:0D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/E205744CABA111EAB7C51982C4F9AE02.roa
Signing time:             Sat 02 Mar 2024 15:20:57 +0000
ROA not before:           Sat 02 Mar 2024 15:20:57 +0000
ROA not after:            Thu 01 May 2025 00:00:00 +0000
asID:                     134718
IP address blocks:        58.82.186.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.crl
                          rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:58:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13283 (0x33e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914781A/serialNumber=4D723955243AE88D552439AF8E4E0A09C8F6590D
        Validity
            Not Before: Mar  2 15:20:57 2024 GMT
            Not After : May  1 00:00:00 2025 GMT
        Subject: CN=65e343d9-6514
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:f6:f9:df:3e:9a:29:03:23:cf:09:ec:b9:1f:
                    40:1c:56:02:c4:5c:8e:4f:2d:a4:56:8c:d2:82:82:
                    49:2e:c9:ee:2f:ed:b2:f2:39:7a:b8:d4:a4:af:af:
                    7d:f5:7a:ab:5a:50:57:cf:ee:3a:a1:77:e7:08:66:
                    f7:73:26:25:2d:77:47:7d:7a:67:df:0a:dc:32:1a:
                    21:5a:92:30:2d:ff:89:27:d8:65:d5:6d:17:a4:58:
                    b4:21:f7:31:0e:18:f5:81:f4:05:36:c1:09:02:ef:
                    36:d2:de:0c:b7:0f:d8:aa:a1:e7:1f:ab:47:74:6c:
                    04:2f:da:76:7d:9c:aa:a3:08:92:de:1a:82:e4:35:
                    71:06:fb:74:5f:d5:b1:51:0b:f5:d9:51:43:f5:c1:
                    a1:20:c0:98:cb:96:37:2c:60:19:1a:9c:01:dd:72:
                    99:c3:b1:cb:be:7c:72:d9:7a:70:86:69:c7:a5:5d:
                    c0:23:69:67:be:65:0f:be:65:90:64:06:8a:b2:ff:
                    bc:dd:9e:e6:17:0b:b2:2c:da:ff:2c:32:f8:5c:b6:
                    a7:97:7d:9f:cd:2d:1d:26:c4:01:18:18:a8:52:1d:
                    a9:c8:ea:af:fc:c8:2f:ba:8f:0e:bc:39:52:9e:f8:
                    de:66:30:c4:64:07:a9:30:eb:d5:59:20:68:1b:1a:
                    fc:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:8B:E8:27:B1:A8:BD:63:C8:8D:67:22:B3:38:E1:62:9D:72:B5:4C
            X509v3 Authority Key Identifier:
                keyid:4D:72:39:55:24:3A:E8:8D:55:24:39:AF:8E:4E:0A:09:C8:F6:59:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/E205744CABA111EAB7C51982C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  58.82.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:b7:42:69:f6:7c:5e:5b:83:42:c2:88:87:9d:ab:a6:83:9d:
         6b:77:de:70:ad:39:7b:90:b7:29:49:cd:a0:9e:d7:ed:f0:93:
         ff:2d:66:b0:2f:f4:a7:a5:7e:13:de:9f:9e:75:36:af:1b:c7:
         45:ee:2a:b8:67:2a:8d:af:57:a2:60:b0:b5:00:f3:ee:85:c9:
         b5:fb:c9:b9:d9:37:87:34:81:f5:b3:74:b8:98:be:ae:bc:04:
         1a:3a:f5:23:55:e3:d8:7d:0b:d8:7b:b8:69:64:3e:a6:43:36:
         1f:c6:b9:23:23:fc:46:09:bc:f3:4d:00:a1:42:f7:a9:b0:10:
         a3:ab:0b:90:40:47:1b:d8:f2:b1:0f:fc:cc:0e:8c:f5:27:62:
         54:99:dd:2a:99:02:5d:03:09:d5:25:9c:54:d8:79:f7:ad:33:
         3a:1e:61:44:a4:92:e2:c9:b4:1b:29:de:25:31:ab:63:74:c0:
         be:e9:4a:c5:b4:29:d3:54:ce:27:70:3c:41:f7:d9:04:5b:2d:
         d3:76:18:54:be:cb:0c:32:22:ad:38:5a:1b:56:61:af:15:97:
         8f:dd:d9:58:d6:27:36:d3:ce:88:80:7f:9e:a7:0c:14:f5:57:
         31:2f:1b:0e:03:8d:22:36:21:34:c0:a6:fe:85:dc:23:c3:2b:
         0e:13:3b:cf
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICM+MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDc4MUExMTAvBgNVBAUTKDRENzIzOTU1MjQzQUU4OEQ1NTI0MzlBRjhFNEUwQTA5
QzhGNjU5MEQwHhcNMjQwMzAyMTUyMDU3WhcNMjUwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NWUzNDNkOS02NTE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6vb53z6aKQMjzwnsuR9AHFYCxFyOTy2kVozSgoJJLsnuL+2y8jl6uNSkr699
9XqrWlBXz+46oXfnCGb3cyYlLXdHfXpn3wrcMhohWpIwLf+JJ9hl1W0XpFi0Ifcx
Dhj1gfQFNsEJAu820t4Mtw/YqqHnH6tHdGwEL9p2fZyqowiS3hqC5DVxBvt0X9Wx
UQv12VFD9cGhIMCYy5Y3LGAZGpwB3XKZw7HLvnxy2XpwhmnHpV3AI2lnvmUPvmWQ
ZAaKsv+83Z7mFwuyLNr/LDL4XLanl32fzS0dJsQBGBioUh2pyOqv/Mgvuo8OvDlS
nvjeZjDEZAepMOvVWSBoGxr8sQIDAQABo4IClTCCApEwHQYDVR0OBBYEFHmL6Cex
qL1jyI1nIrM44WKdcrVMMB8GA1UdIwQYMBaAFE1yOVUkOuiNVSQ5r45OCgnI9lkN
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzgxQS9ENTIxNDI3MDFE
OUIxMUUyQjgyMUZEODkwOEIwMkNEMi9UWEk1VlNRNjZJMVZKRG12ams0S0NjajJX
UTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1RYSTVWU1E2NkkxVkpEbXZqazRLQ2NqMldRMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDc4MUEvRDUyMTQyNzAxRDlCMTFFMkI4MjFGRDg5MDhCMDJDRDIvRTIwNTc0NENB
QkExMTFFQUI3QzUxOTgyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAA6UrowDQYJKoZIhvcNAQELBQADggEBAI+3Qmn2fF5bg0LC
iIedq6aDnWt33nCtOXuQtylJzaCe1+3wk/8tZrAv9KelfhPen551Nq8bx0XuKrhn
Ko2vV6JgsLUA8+6FybX7ybnZN4c0gfWzdLiYvq68BBo69SNV49h9C9h7uGlkPqZD
Nh/GuSMj/EYJvPNNAKFC96mwEKOrC5BARxvY8rEP/MwOjPUnYlSZ3SqZAl0DCdUl
nFTYefetMzoeYUSkkuLJtBsp3iUxq2N0wL7pSsW0KdNUzidwPEH32QRbLdN2GFS+
ywwyIq04WhtWYa8Vl4/d2VjWJzbTzoiAf56nDBT1VzEvGw4DjSI2ITTApv6F3CPD
Kw4TO88=
-----END CERTIFICATE-----
Generated at Fri Nov 22 17:55:43 2024 by rpki-client on console-fra.rpki-client.org