Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/E474AF108D8811EDB3C13D6CC4F9AE02.roa
File:                     E474AF108D8811EDB3C13D6CC4F9AE02.roa (raw, json)
Hash identifier:          4qd2K6kRKLYZ4c94ODZqT6KDm2RQXj8HYq3qQJIs5sM=
Subject key identifier:   FD:19:CB:6F:B6:76:CE:A8:C4:59:97:15:E2:8F:D6:D9:C3:E9:4A:44
Certificate issuer:       /CN=A914BC7A/serialNumber=5312F399A6F7EB0DDCD51C039F83F7B7A47A5F09
Certificate serial:       336A
Authority key identifier: 53:12:F3:99:A6:F7:EB:0D:DC:D5:1C:03:9F:83:F7:B7:A4:7A:5F:09
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxLzmab36w3c1RwDn4P3t6R6Xwk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/E474AF108D8811EDB3C13D6CC4F9AE02.roa
Signing time:             Tue 12 Sep 2023 15:31:17 +0000
ROA not before:           Tue 12 Sep 2023 15:31:17 +0000
ROA not after:            Sun 01 Dec 2024 00:00:00 +0000
asID:                     9885
IP address blocks:        2405:8a00:ffff::/48 maxlen: 48
                          240a:eabc:d00d::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.crl
                          rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxLzmab36w3c1RwDn4P3t6R6Xwk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 14:50:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13162 (0x336a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914BC7A/serialNumber=5312F399A6F7EB0DDCD51C039F83F7B7A47A5F09
        Validity
            Not Before: Sep 12 15:31:17 2023 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=65008445-be0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:2c:3d:e6:67:71:74:00:17:b6:dd:99:b5:9e:
                    cc:f1:ac:b5:e6:95:5e:6b:9d:ae:08:3f:e0:b1:85:
                    74:51:cd:d6:a4:bf:c3:97:c5:04:7b:2f:1d:88:36:
                    7c:46:f0:fc:84:e6:83:e2:d6:a3:07:48:80:06:2f:
                    6f:3b:74:97:a1:18:7b:76:4a:2a:36:96:a6:dd:d2:
                    4e:5f:f7:21:9c:f6:fe:47:7c:70:9b:9c:0e:18:73:
                    14:89:c7:0c:17:ea:eb:a7:34:94:9d:7a:69:b2:71:
                    d0:9e:56:53:58:f7:36:0a:72:e1:01:d2:24:f4:18:
                    58:de:70:d4:41:dd:0c:c6:05:95:86:45:b6:61:8e:
                    1f:db:4c:8f:ce:3a:7e:d2:de:0d:ad:2a:dd:33:9d:
                    e7:28:45:21:40:86:c1:be:0c:39:e2:3b:79:6d:58:
                    1d:92:fe:b3:72:be:e3:33:91:62:7d:ac:5c:f9:54:
                    d7:33:98:e3:90:3b:a0:08:c3:7b:8b:0e:5e:78:14:
                    b9:aa:bf:5a:0e:29:b1:72:13:a0:1b:a9:11:6d:f9:
                    e3:59:aa:16:45:d0:86:91:f7:0d:de:5e:e8:82:ae:
                    fa:5a:75:4d:dd:43:f5:4d:c2:85:d5:53:7f:28:80:
                    e9:39:3a:95:d3:07:b0:75:e3:28:e2:21:a0:28:a7:
                    a7:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:19:CB:6F:B6:76:CE:A8:C4:59:97:15:E2:8F:D6:D9:C3:E9:4A:44
            X509v3 Authority Key Identifier:
                keyid:53:12:F3:99:A6:F7:EB:0D:DC:D5:1C:03:9F:83:F7:B7:A4:7A:5F:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxLzmab36w3c1RwDn4P3t6R6Xwk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/E474AF108D8811EDB3C13D6CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:8a00:ffff::/48
                  240a:eabc:d00d::/48

    Signature Algorithm: sha256WithRSAEncryption
         b1:8a:50:08:f0:1f:04:88:00:2a:62:c3:c8:ec:bd:a5:2b:eb:
         f2:55:de:90:c3:33:91:83:81:39:55:b5:5c:56:8b:80:2a:3f:
         57:2f:60:2f:4d:91:44:e6:88:f5:cb:a6:46:cd:e9:8d:36:94:
         5b:bc:5c:eb:85:a3:a6:19:ab:b2:1a:fa:0b:a3:de:7f:53:ac:
         09:85:e1:31:09:28:60:0e:f5:b4:cd:ae:0b:0c:57:f9:b5:42:
         82:2a:47:2d:3a:21:2f:c8:3c:1a:6a:3f:2b:81:57:1a:0b:f8:
         e9:6b:63:aa:17:85:a1:9f:9f:cd:25:14:c1:27:3a:f1:65:34:
         cf:da:5b:9c:2a:e5:13:08:9c:1d:f3:1a:90:5a:d5:d8:29:0f:
         8f:03:be:9d:64:00:49:84:10:ec:09:a4:34:d4:15:fb:d6:62:
         56:1a:de:be:21:48:e7:dd:00:ac:b3:ca:e0:db:66:30:1d:00:
         5b:02:e6:7d:e1:b6:19:a7:5a:35:7e:15:9c:f3:4c:6d:b1:ed:
         b4:13:cc:8d:f0:ff:af:a3:3d:48:33:fc:1b:ce:4e:11:36:c5:
         a1:7d:16:fd:a2:e0:4d:f5:78:f5:49:12:d5:be:cf:ac:f3:47:
         c1:9f:fb:5d:15:e6:20:b6:5a:65:70:c3:4e:93:19:3e:28:a7:
         67:bd:38:b5
-----BEGIN CERTIFICATE-----
MIIFfTCCBGWgAwIBAgICM2owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEJDN0ExMTAvBgNVBAUTKDUzMTJGMzk5QTZGN0VCMEREQ0Q1MUMwMzlGODNGN0I3
QTQ3QTVGMDkwHhcNMjMwOTEyMTUzMTE3WhcNMjQxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NTAwODQ0NS1iZTBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1iw95mdxdAAXtt2ZtZ7M8ay15pVea52uCD/gsYV0Uc3WpL/Dl8UEey8diDZ8
RvD8hOaD4tajB0iABi9vO3SXoRh7dkoqNpam3dJOX/chnPb+R3xwm5wOGHMUiccM
F+rrpzSUnXppsnHQnlZTWPc2CnLhAdIk9BhY3nDUQd0MxgWVhkW2YY4f20yPzjp+
0t4NrSrdM53nKEUhQIbBvgw54jt5bVgdkv6zcr7jM5Fifaxc+VTXM5jjkDugCMN7
iw5eeBS5qr9aDimxchOgG6kRbfnjWaoWRdCGkfcN3l7ogq76WnVN3UP1TcKF1VN/
KIDpOTqV0wewdeMo4iGgKKen0wIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFP0Zy2+2
ds6oxFmXFeKP1tnD6UpEMB8GA1UdIwQYMBaAFFMS85mm9+sN3NUcA5+D97ekel8J
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QkM3QS80QzUyOEY3ODQ1
MDMxMUUyQkRDQTFGNzMyOTc5QkIyMC9VeEx6bWFiMzZ3M2MxUndEbjRQM3Q2UjZY
d2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1V4THptYWIzNnczYzFSd0RuNFAzdDZSNlh3ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NEJDN0EvNEM1MjhGNzg0NTAzMTFFMkJEQ0ExRjczMjk3OUJCMjAvRTQ3NEFGMTA4
RDg4MTFFREIzQzEzRDZDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E
HDAaMBgEAgACMBIDBwAkBYoA//8DBwAkCuq80A0wDQYJKoZIhvcNAQELBQADggEB
ALGKUAjwHwSIACpiw8jsvaUr6/JV3pDDM5GDgTlVtVxWi4AqP1cvYC9NkUTmiPXL
pkbN6Y02lFu8XOuFo6YZq7Ia+guj3n9TrAmF4TEJKGAO9bTNrgsMV/m1QoIqRy06
IS/IPBpqPyuBVxoL+OlrY6oXhaGfn80lFMEnOvFlNM/aW5wq5RMInB3zGpBa1dgp
D48Dvp1kAEmEEOwJpDTUFfvWYlYa3r4hSOfdAKyzyuDbZjAdAFsC5n3hthmnWjV+
FZzzTG2x7bQTzI3w/6+jPUgz/BvOThE2xaF9Fv2i4E31ePVJEtW+z6zzR8Gf+10V
5iC2WmVww06TGT4op2e9OLU=
-----END CERTIFICATE-----
Generated at Sat May 18 16:19:52 2024 by rpki-client on console-fra.rpki-client.org