Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/83F06CF2DF1211EDB91D5C61C4F9AE02.roa
File:                     83F06CF2DF1211EDB91D5C61C4F9AE02.roa (raw, json)
Hash identifier:          XGFULdG/oDt3pkxbthyADyYskJpcdg8ccGyTK9Ua2Ac=
Subject key identifier:   77:94:4C:4F:CE:ED:44:54:B3:8B:90:32:D0:3E:87:A2:E2:A9:3E:2E
Certificate issuer:       /CN=A9149F3E/serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
Certificate serial:       34E4
Authority key identifier: EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/83F06CF2DF1211EDB91D5C61C4F9AE02.roa
Signing time:             Tue 26 Sep 2023 14:30:28 +0000
ROA not before:           Tue 26 Sep 2023 14:30:28 +0000
ROA not after:            Sat 31 Aug 2024 00:00:00 +0000
asID:                     9286
IP address blocks:        121.78.35.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl
                          rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 14:23:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13540 (0x34e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9149F3E/serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
        Validity
            Not Before: Sep 26 14:30:28 2023 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=6512eb04-c824
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:fc:d9:ce:1c:de:10:77:ce:1a:72:37:72:47:
                    ba:a0:b2:f7:23:1e:6e:da:dc:05:e6:eb:a9:b8:97:
                    bf:bc:24:c2:76:64:40:61:c2:78:dd:73:c9:03:12:
                    89:2b:1d:fa:32:7e:72:7f:3e:1f:19:3b:c3:9f:3a:
                    55:e9:29:a7:cf:2a:af:42:9a:93:7d:51:0c:58:ec:
                    23:9c:e9:78:d3:f3:43:ca:b0:78:9c:67:c8:d2:45:
                    84:27:a0:f1:af:1d:c0:38:9a:23:28:d5:c6:e7:bb:
                    77:aa:bd:b2:c1:da:80:d1:ca:4d:a6:7e:7d:82:11:
                    29:1b:1a:4c:16:40:3b:11:6a:1d:f6:80:2e:07:f3:
                    2f:0a:e3:77:67:82:07:c8:b6:87:4e:f3:6b:02:22:
                    68:1d:aa:80:52:20:e6:45:c1:96:61:63:ea:31:ff:
                    c4:7f:f6:f6:de:e2:58:36:25:58:cb:86:7b:5b:8d:
                    90:9f:7c:0b:bc:0d:45:6c:d5:af:36:de:25:78:aa:
                    ad:c5:3b:aa:6a:51:8c:35:c3:7e:d0:53:5c:ce:13:
                    ac:0c:67:ff:ed:f0:6d:af:9e:97:f7:03:31:4d:d2:
                    5e:8d:e1:bf:14:9a:01:9c:26:ca:b1:49:37:9c:96:
                    57:8a:ce:1b:a4:32:b8:65:d9:9d:9b:ee:34:67:b9:
                    86:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:94:4C:4F:CE:ED:44:54:B3:8B:90:32:D0:3E:87:A2:E2:A9:3E:2E
            X509v3 Authority Key Identifier:
                keyid:EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/83F06CF2DF1211EDB91D5C61C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.78.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:e1:39:1e:fc:cb:c7:e1:ee:94:76:75:8a:e4:fc:fb:54:10:
         7c:8f:04:5b:14:31:71:f0:75:cd:8a:e9:f2:6a:ef:64:ef:9e:
         7e:c9:e6:d1:ed:50:3c:a3:0d:fb:24:24:20:d4:41:ea:aa:69:
         48:25:a9:89:de:52:f4:e4:41:48:88:c2:a1:b7:43:4f:22:d7:
         7d:5b:6f:10:84:90:cc:1d:e6:d4:de:3f:74:d1:d2:a3:68:18:
         0d:49:a4:d5:63:72:61:df:93:bb:36:49:5d:ca:d2:96:ad:57:
         10:d8:2e:68:16:7e:24:4b:22:78:21:87:b3:1a:b6:08:96:83:
         59:ec:1a:0d:ab:fd:ea:8d:05:8a:17:ba:22:86:9f:23:af:b2:
         4f:04:af:f4:0e:d3:6c:b0:60:3d:a3:1a:7d:64:20:69:0e:e3:
         a8:e6:88:27:d9:dc:7a:d5:6b:9e:02:71:63:2c:c9:92:2c:38:
         c1:d2:6b:18:85:92:44:38:38:6e:b2:56:e6:02:7f:f8:f8:22:
         c7:53:6b:8e:50:48:fb:dd:97:7e:60:1d:d5:67:85:a2:35:1e:
         9f:a4:76:3e:0b:f2:00:72:d2:3e:97:ac:d5:b8:c7:70:12:75:
         19:50:3c:5a:e3:92:f2:98:49:4d:29:bb:ae:68:66:eb:d8:ac:
         be:c9:dc:3a
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICNOQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDlGM0UxMTAvBgNVBAUTKEVCMzg5RkIzMzlCMzkwOEQ1NDlBNjUzOTBDOTJFMTVG
OURGN0M1NEIwHhcNMjMwOTI2MTQzMDI4WhcNMjQwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NTEyZWIwNC1jODI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3/zZzhzeEHfOGnI3cke6oLL3Ix5u2twF5uupuJe/vCTCdmRAYcJ43XPJAxKJ
Kx36Mn5yfz4fGTvDnzpV6SmnzyqvQpqTfVEMWOwjnOl40/NDyrB4nGfI0kWEJ6Dx
rx3AOJojKNXG57t3qr2ywdqA0cpNpn59ghEpGxpMFkA7EWod9oAuB/MvCuN3Z4IH
yLaHTvNrAiJoHaqAUiDmRcGWYWPqMf/Ef/b23uJYNiVYy4Z7W42Qn3wLvA1FbNWv
Nt4leKqtxTuqalGMNcN+0FNczhOsDGf/7fBtr56X9wMxTdJejeG/FJoBnCbKsUk3
nJZXis4bpDK4Zdmdm+40Z7mGuwIDAQABo4IClTCCApEwHQYDVR0OBBYEFHeUTE/O
7URUs4uQMtA+h6LiqT4uMB8GA1UdIwQYMBaAFOs4n7M5s5CNVJplOQyS4V+d98VL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUYzRS9BQzUyQjc0ODFE
ODIxMUUyQkM2NDE3RDcwOEIwMkNEMi82emlmc3ptemtJMVVtbVU1REpMaFg1MzN4
VXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzZ6aWZzem16a0kxVW1tVTVESkxoWDUzM3hVcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDlGM0UvQUM1MkI3NDgxRDgyMTFFMkJDNjQxN0Q3MDhCMDJDRDIvODNGMDZDRjJE
RjEyMTFFREI5MUQ1QzYxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAB5TiMwDQYJKoZIhvcNAQELBQADggEBAKbhOR78y8fh7pR2
dYrk/PtUEHyPBFsUMXHwdc2K6fJq72Tvnn7J5tHtUDyjDfskJCDUQeqqaUglqYne
UvTkQUiIwqG3Q08i131bbxCEkMwd5tTeP3TR0qNoGA1JpNVjcmHfk7s2SV3K0pat
VxDYLmgWfiRLInghh7MatgiWg1nsGg2r/eqNBYoXuiKGnyOvsk8Er/QO02ywYD2j
Gn1kIGkO46jmiCfZ3HrVa54CcWMsyZIsOMHSaxiFkkQ4OG6yVuYCf/j4IsdTa45Q
SPvdl35gHdVnhaI1Hp+kdj4L8gBy0j6XrNW4x3ASdRlQPFrjkvKYSU0pu65oZuvY
rL7J3Do=
-----END CERTIFICATE-----
Generated at Sat May 18 15:58:22 2024 by rpki-client on console-ams.rpki-client.org