Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/000724C6F7D511EE8C03CA65C4F9AE02.roa
File:                     000724C6F7D511EE8C03CA65C4F9AE02.roa (raw, json)
Hash identifier:          qRm7sLi+ft5KW8Py8mk5/RGIGmgNqW682TRZrJCWKEU=
Subject key identifier:   C6:BE:4B:E2:36:7E:D1:60:0F:1E:76:A6:52:40:BE:1E:35:F4:7E:7F
Certificate issuer:       /CN=A9149F3E/serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
Certificate serial:       3576
Authority key identifier: EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/000724C6F7D511EE8C03CA65C4F9AE02.roa
Signing time:             Thu 11 Apr 2024 07:27:49 +0000
ROA not before:           Thu 11 Apr 2024 07:27:49 +0000
ROA not after:            Sat 31 Aug 2024 00:00:00 +0000
asID:                     23600
IP address blocks:        202.31.190.0/24 maxlen: 24
                          203.83.158.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl
                          rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 14:23:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13686 (0x3576)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9149F3E/serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
        Validity
            Not Before: Apr 11 07:27:49 2024 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=661790f5-dcf4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:7f:0c:5e:b8:6e:d4:3f:38:07:bc:99:dc:0f:
                    f7:74:71:cb:a4:f0:1a:5b:34:60:1d:c3:9c:fe:d3:
                    a9:cc:8f:e5:48:35:09:55:a2:73:5d:10:07:ed:4e:
                    4c:47:8a:c1:93:b6:23:5e:a9:f0:d2:d1:71:7b:cc:
                    81:88:05:12:f4:89:62:3a:81:f6:86:95:05:b2:dd:
                    98:c0:09:8b:d6:39:09:a0:18:db:e4:13:0c:f7:46:
                    a3:20:47:8b:b0:87:e5:ec:3b:37:f6:60:64:e6:34:
                    3f:9f:61:40:65:79:c3:15:1b:ef:79:79:d0:54:1c:
                    78:2d:5e:dc:d1:3a:61:e2:09:01:6a:71:c9:45:d7:
                    a6:36:42:2d:47:fc:2e:1f:96:86:2a:39:0c:eb:5a:
                    44:e5:08:23:1f:a0:3e:bf:a3:bd:36:28:41:c7:52:
                    84:2c:6a:75:ee:0b:e1:60:ae:b8:4a:95:7b:2d:79:
                    35:c7:2a:75:47:14:20:35:99:31:98:ad:14:c1:7f:
                    c5:3b:20:e8:12:32:7a:8c:6f:1a:54:67:fd:78:a6:
                    5c:29:eb:ab:6b:2b:dd:98:58:21:36:a9:4b:6e:4c:
                    18:f0:a2:9f:e8:1e:c8:ab:2f:3f:6a:f2:18:47:79:
                    b3:e0:de:8d:f8:e5:f5:5a:8f:c1:17:7d:16:4b:5f:
                    75:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:BE:4B:E2:36:7E:D1:60:0F:1E:76:A6:52:40:BE:1E:35:F4:7E:7F
            X509v3 Authority Key Identifier:
                keyid:EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/000724C6F7D511EE8C03CA65C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.31.190.0/24
                  203.83.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:ba:29:c6:6d:99:b8:d1:57:a0:80:fd:31:20:ac:07:f8:65:
         2d:a1:4a:e4:4f:73:0f:dc:40:a1:0a:bf:3f:cc:d9:62:82:74:
         1b:32:35:73:4a:c1:66:6f:b1:45:32:87:7d:c4:c9:70:ae:1c:
         49:99:d1:83:fa:98:64:6e:b6:33:3b:f8:58:25:a2:34:23:c3:
         a8:82:9c:74:07:67:6b:50:75:d5:00:6b:d1:5d:33:35:3c:a3:
         ac:d0:83:e9:97:f0:ad:87:0a:ca:33:a7:64:b2:e3:9a:82:bc:
         4a:52:91:20:98:af:d8:64:c9:75:b6:e3:11:ef:1e:8a:4e:01:
         15:e5:71:e8:80:d5:c3:41:cc:43:9b:94:ff:86:0b:46:7e:80:
         c9:96:6b:d1:81:07:77:fa:48:9a:6d:f4:ea:7f:a6:7c:8d:3f:
         a6:bd:30:1e:54:5a:09:64:4a:0d:10:98:ed:24:62:65:48:df:
         bc:87:a6:89:ca:7e:7a:91:eb:cf:d2:3c:24:5f:00:4d:8a:4a:
         ad:01:d4:2e:cc:77:14:5b:c9:37:3f:ac:a9:da:fe:7a:98:e3:
         6b:1b:be:ca:23:0b:9c:46:49:46:b0:92:e3:29:8a:c8:ff:2b:
         2f:9a:87:ba:85:54:c4:8d:d9:6c:51:2a:b9:a7:e7:86:c5:ee:
         75:3a:99:0b
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICNXYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDlGM0UxMTAvBgNVBAUTKEVCMzg5RkIzMzlCMzkwOEQ1NDlBNjUzOTBDOTJFMTVG
OURGN0M1NEIwHhcNMjQwNDExMDcyNzQ5WhcNMjQwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NjE3OTBmNS1kY2Y0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6n8MXrhu1D84B7yZ3A/3dHHLpPAaWzRgHcOc/tOpzI/lSDUJVaJzXRAH7U5M
R4rBk7YjXqnw0tFxe8yBiAUS9IliOoH2hpUFst2YwAmL1jkJoBjb5BMM90ajIEeL
sIfl7Ds39mBk5jQ/n2FAZXnDFRvveXnQVBx4LV7c0Tph4gkBanHJRdemNkItR/wu
H5aGKjkM61pE5QgjH6A+v6O9NihBx1KELGp17gvhYK64SpV7LXk1xyp1RxQgNZkx
mK0UwX/FOyDoEjJ6jG8aVGf9eKZcKeurayvdmFghNqlLbkwY8KKf6B7Iqy8/avIY
R3mz4N6N+OX1Wo/BF30WS191mQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFMa+S+I2
ftFgDx52plJAvh419H5/MB8GA1UdIwQYMBaAFOs4n7M5s5CNVJplOQyS4V+d98VL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUYzRS9BQzUyQjc0ODFE
ODIxMUUyQkM2NDE3RDcwOEIwMkNEMi82emlmc3ptemtJMVVtbVU1REpMaFg1MzN4
VXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzZ6aWZzem16a0kxVW1tVTVESkxoWDUzM3hVcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDlGM0UvQUM1MkI3NDgxRDgyMTFFMkJDNjQxN0Q3MDhCMDJDRDIvMDAwNzI0QzZG
N0Q1MTFFRThDMDNDQTY1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBADKH74DBADLU54wDQYJKoZIhvcNAQELBQADggEBAHe6KcZt
mbjRV6CA/TEgrAf4ZS2hSuRPcw/cQKEKvz/M2WKCdBsyNXNKwWZvsUUyh33EyXCu
HEmZ0YP6mGRutjM7+FglojQjw6iCnHQHZ2tQddUAa9FdMzU8o6zQg+mX8K2HCsoz
p2Sy45qCvEpSkSCYr9hkyXW24xHvHopOARXlceiA1cNBzEOblP+GC0Z+gMmWa9GB
B3f6SJpt9Op/pnyNP6a9MB5UWglkSg0QmO0kYmVI37yHponKfnqR68/SPCRfAE2K
Sq0B1C7MdxRbyTc/rKna/nqY42sbvsojC5xGSUawkuMpisj/Ky+ah7qFVMSN2WxR
Krmn54bF7nU6mQs=
-----END CERTIFICATE-----
Generated at Sat May 18 15:26:02 2024 by rpki-client on console-fra.rpki-client.org