Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/682125602A4311EBBD69BE46C4F9AE02.roa
File:                     682125602A4311EBBD69BE46C4F9AE02.roa (raw, json)
Hash identifier:          vd9TS3c3hqUpKC0UOT4J7rOC7tn77c4ltY/9JjoO2uw=
Subject key identifier:   5C:15:8C:5C:30:20:D6:AB:9C:70:31:33:06:A8:64:DA:32:73:ED:12
Certificate issuer:       /CN=A914DC5D/serialNumber=20F2531A7BA8212D2BB0900D576372D33F846928
Certificate serial:       0763
Authority key identifier: 20:F2:53:1A:7B:A8:21:2D:2B:B0:90:0D:57:63:72:D3:3F:84:69:28
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IPJTGnuoIS0rsJANV2Ny0z-EaSg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/682125602A4311EBBD69BE46C4F9AE02.roa
Signing time:             Tue 02 Jul 2024 23:11:28 +0000
ROA not before:           Tue 02 Jul 2024 23:11:28 +0000
ROA not after:            Tue 30 Sep 2025 00:00:00 +0000
asID:                     55932
IP address blocks:        203.151.159.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.crl
                          rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IPJTGnuoIS0rsJANV2Ny0z-EaSg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1891 (0x763)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914DC5D/serialNumber=20F2531A7BA8212D2BB0900D576372D33F846928
        Validity
            Not Before: Jul  2 23:11:28 2024 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=6684891f-9a52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:51:9b:28:ee:c9:93:18:af:84:46:60:14:e2:
                    0c:9c:8e:61:36:09:f9:d9:51:8e:db:e5:dc:d8:32:
                    09:8f:a9:c1:d8:63:c4:04:29:e4:23:be:6b:01:b6:
                    d3:e6:30:24:37:1c:b8:a8:f2:e2:fd:76:d1:26:f4:
                    66:8d:7f:6e:a2:82:df:11:8b:95:e2:c4:fe:39:b2:
                    d4:81:85:cf:74:d1:23:d9:f2:08:47:6e:ee:53:7d:
                    4c:65:f7:4b:82:09:9b:21:39:b5:cf:82:32:20:c4:
                    36:43:c4:c4:b7:63:69:65:8c:89:13:b4:78:c9:90:
                    04:db:8a:b5:f6:63:63:db:3f:91:3d:a0:db:f8:09:
                    b0:c2:42:71:24:bf:57:35:42:b8:b1:7e:89:ed:6b:
                    b7:ec:3f:17:33:f8:f8:48:e7:3b:aa:d6:58:48:31:
                    e8:07:3b:43:03:e2:52:b9:47:dd:a2:f3:11:68:2d:
                    ee:ed:22:dd:f7:03:f0:b3:70:fa:29:1c:08:ee:a6:
                    4d:0e:8f:a9:f6:c3:25:34:b7:c9:f1:8c:8c:ad:d3:
                    02:9c:66:4d:e7:f9:33:c4:e2:11:a4:b0:91:ee:d9:
                    93:6d:02:94:97:92:63:42:31:a3:9e:87:e7:49:22:
                    9c:b3:0f:1a:ef:8c:36:1d:d1:d6:0d:dd:10:25:a0:
                    64:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:15:8C:5C:30:20:D6:AB:9C:70:31:33:06:A8:64:DA:32:73:ED:12
            X509v3 Authority Key Identifier:
                keyid:20:F2:53:1A:7B:A8:21:2D:2B:B0:90:0D:57:63:72:D3:3F:84:69:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IPJTGnuoIS0rsJANV2Ny0z-EaSg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/682125602A4311EBBD69BE46C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.151.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:a7:af:ee:cd:ba:5b:6b:19:fc:78:05:92:c8:15:54:66:28:
         f7:de:aa:fc:b1:c9:cb:fa:57:18:c0:e4:37:27:27:c4:e3:34:
         7a:98:4d:d8:ef:83:88:52:f2:c6:bd:e7:f8:03:49:ff:7c:a3:
         36:71:44:aa:7e:e6:f1:d8:38:95:3f:ab:cd:0a:4a:ef:c8:4c:
         44:f4:50:b9:77:ba:11:c5:30:c5:53:c4:30:1b:e9:d2:00:5f:
         3d:7e:1d:eb:09:07:0d:96:4c:7c:3c:54:f3:e0:29:07:8d:d1:
         ab:f2:ec:9f:92:55:78:11:b3:81:f0:47:4f:47:66:a8:d4:59:
         c9:c0:f1:45:67:e5:51:6c:14:cb:7b:5c:5b:7c:1c:c8:2c:75:
         bc:e5:2f:76:7d:3e:76:2b:0f:51:27:75:58:b5:77:14:30:73:
         b8:3d:db:c4:69:c7:6a:47:4f:c0:3c:be:a0:2c:b8:4c:08:68:
         b0:28:11:45:84:9d:9c:1b:88:42:b7:ef:d3:8b:d0:d0:a9:6b:
         91:46:10:82:72:f0:6d:bd:ad:84:71:76:1a:35:49:ff:cb:2b:
         31:6f:89:7c:25:7f:0b:c7:21:ec:c4:31:77:58:20:95:a1:14:
         6d:5c:82:b1:44:35:cc:a6:27:3d:15:06:60:9d:22:0a:d4:70:
         5e:71:84:30
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICB2MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NERDNUQxMTAvBgNVBAUTKDIwRjI1MzFBN0JBODIxMkQyQkIwOTAwRDU3NjM3MkQz
M0Y4NDY5MjgwHhcNMjQwNzAyMjMxMTI4WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02Njg0ODkxZi05YTUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAx1GbKO7JkxivhEZgFOIMnI5hNgn52VGO2+Xc2DIJj6nB2GPEBCnkI75rAbbT
5jAkNxy4qPLi/XbRJvRmjX9uooLfEYuV4sT+ObLUgYXPdNEj2fIIR27uU31MZfdL
ggmbITm1z4IyIMQ2Q8TEt2NpZYyJE7R4yZAE24q19mNj2z+RPaDb+AmwwkJxJL9X
NUK4sX6J7Wu37D8XM/j4SOc7qtZYSDHoBztDA+JSuUfdovMRaC3u7SLd9wPws3D6
KRwI7qZNDo+p9sMlNLfJ8YyMrdMCnGZN5/kzxOIRpLCR7tmTbQKUl5JjQjGjnofn
SSKcsw8a74w2HdHWDd0QJaBk8wIDAQABo4IClTCCApEwHQYDVR0OBBYEFFwVjFww
INarnHAxMwaoZNoyc+0SMB8GA1UdIwQYMBaAFCDyUxp7qCEtK7CQDVdjctM/hGko
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0REM1RC8zOUU3MTQ2QzJB
MzMxMUVCOTI5REMwN0NDNEY5QUUwMi9JUEpUR251b0lTMHJzSkFOVjJOeTB6LUVh
U2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0lQSlRHbnVvSVMwcnNKQU5WMk55MHotRWFTZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NERDNUQvMzlFNzE0NkMyQTMzMTFFQjkyOURDMDdDQzRGOUFFMDIvNjgyMTI1NjAy
QTQzMTFFQkJENjlCRTQ2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADLl58wDQYJKoZIhvcNAQELBQADggEBAJqnr+7NultrGfx4
BZLIFVRmKPfeqvyxycv6VxjA5DcnJ8TjNHqYTdjvg4hS8sa95/gDSf98ozZxRKp+
5vHYOJU/q80KSu/ITET0ULl3uhHFMMVTxDAb6dIAXz1+HesJBw2WTHw8VPPgKQeN
0avy7J+SVXgRs4HwR09HZqjUWcnA8UVn5VFsFMt7XFt8HMgsdbzlL3Z9PnYrD1En
dVi1dxQwc7g928Rpx2pHT8A8vqAsuEwIaLAoEUWEnZwbiEK379OL0NCpa5FGEIJy
8G29rYRxdho1Sf/LKzFviXwlfwvHIezEMXdYIJWhFG1cgrFENcymJz0VBmCdIgrU
cF5xhDA=
-----END CERTIFICATE-----
Generated at Sat Nov 23 00:08:39 2024 by rpki-client on console-ams.rpki-client.org