Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/689E513E2A4311EBBD69BE46C4F9AE02.roa
File:                     689E513E2A4311EBBD69BE46C4F9AE02.roa (raw, json)
Hash identifier:          +RalAkhwgzpfXCHCzLQ9ex+BzAYGms/+qUTYElmYStI=
Subject key identifier:   26:1F:BF:62:FD:5E:43:45:4D:BC:6A:E4:FD:AA:4B:64:C5:4C:AF:1D
Certificate issuer:       /CN=A914DC5D/serialNumber=20F2531A7BA8212D2BB0900D576372D33F846928
Certificate serial:       0669
Authority key identifier: 20:F2:53:1A:7B:A8:21:2D:2B:B0:90:0D:57:63:72:D3:3F:84:69:28
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IPJTGnuoIS0rsJANV2Ny0z-EaSg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/689E513E2A4311EBBD69BE46C4F9AE02.roa
Signing time:             Thu 20 Jul 2023 22:39:57 +0000
ROA not before:           Thu 20 Jul 2023 22:39:57 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     56018
IP address blocks:        203.150.42.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.crl
                          rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IPJTGnuoIS0rsJANV2Ny0z-EaSg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 19:51:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1641 (0x669)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914DC5D/serialNumber=20F2531A7BA8212D2BB0900D576372D33F846928
        Validity
            Not Before: Jul 20 22:39:57 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=64b9b7bc-d896
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:8c:01:4e:67:f3:fe:9a:33:9b:40:a8:25:83:
                    40:a3:ad:bb:ab:fe:61:00:d3:de:51:6f:0a:f2:73:
                    7e:bf:0a:46:9c:e8:cd:61:11:39:81:3c:b2:04:f6:
                    72:8a:c2:85:96:5b:3c:be:61:0b:d2:79:06:05:b0:
                    7a:4a:70:76:16:4c:78:3e:90:dc:a4:df:5a:25:65:
                    16:4a:37:7b:dc:59:55:37:d1:fe:c0:00:ad:60:2a:
                    cd:77:4e:59:33:bc:fc:44:72:31:83:dd:37:b0:ca:
                    f0:85:d4:a7:3e:f2:93:a0:52:71:d5:18:88:49:a0:
                    f4:cd:9d:54:45:a2:a0:9f:13:77:2f:32:9e:92:3e:
                    c7:cb:c6:b8:f1:09:95:ba:dc:e7:9a:8f:59:6d:9d:
                    f1:08:af:45:ce:d9:6a:9e:d1:ab:85:27:1f:f4:58:
                    10:c8:91:5f:c3:97:6d:44:2b:a9:14:c2:8e:f6:d5:
                    d2:85:17:1f:cd:66:3c:11:86:ad:38:0c:4f:77:2b:
                    3d:1b:9d:7d:2f:03:61:ae:90:ab:72:dd:5d:79:5e:
                    d9:51:2a:ec:f4:ee:15:f1:e6:de:c6:21:90:41:00:
                    2f:3f:25:90:bf:9a:5e:54:ca:8f:8e:2a:95:4a:a5:
                    26:88:c9:79:aa:53:b5:ad:73:94:37:8a:b0:2d:7a:
                    96:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:1F:BF:62:FD:5E:43:45:4D:BC:6A:E4:FD:AA:4B:64:C5:4C:AF:1D
            X509v3 Authority Key Identifier:
                keyid:20:F2:53:1A:7B:A8:21:2D:2B:B0:90:0D:57:63:72:D3:3F:84:69:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IPJTGnuoIS0rsJANV2Ny0z-EaSg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/689E513E2A4311EBBD69BE46C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.150.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:36:f3:55:51:67:4b:49:27:c1:48:85:20:cc:28:b0:23:8c:
         80:15:44:60:d6:3f:17:cd:b9:55:57:b8:c8:48:b0:90:91:48:
         50:ed:70:63:31:2b:59:a6:ab:96:e1:1c:e6:04:eb:f9:3a:f2:
         c6:78:91:ae:fa:e8:95:ed:9b:5a:df:24:aa:a3:64:b6:91:f5:
         cd:8b:53:f6:fe:9b:0a:fa:a0:e3:cb:39:62:35:5d:2b:15:ed:
         4f:bb:04:6f:aa:b4:57:2f:ab:cd:45:3c:fd:73:0e:59:03:c7:
         55:cd:99:aa:0a:b7:97:85:32:d3:07:b4:f7:f6:f3:03:2d:f1:
         6e:eb:6b:74:50:ae:bd:a0:5f:6a:5b:fe:cd:08:7d:a3:7e:e7:
         9e:30:6a:88:f5:46:f0:82:7b:3f:bc:75:bf:17:95:2f:31:b8:
         25:b5:18:72:b1:55:da:cc:87:5e:1b:bf:32:14:6e:0e:10:d0:
         1a:b9:35:bd:1e:5e:5a:9f:87:cc:20:6a:72:33:14:82:bd:48:
         46:2b:13:05:0a:cd:a5:92:ba:70:65:d2:ec:e6:29:18:81:38:
         35:13:58:1d:96:2d:49:3a:30:e0:d9:40:b7:e2:4c:c8:a4:7b:
         55:b4:d4:4d:74:e3:89:00:3d:f2:16:6b:11:48:a4:47:02:f9:
         b8:9a:c2:c9
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBmkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NERDNUQxMTAvBgNVBAUTKDIwRjI1MzFBN0JBODIxMkQyQkIwOTAwRDU3NjM3MkQz
M0Y4NDY5MjgwHhcNMjMwNzIwMjIzOTU3WhcNMjQwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NGI5YjdiYy1kODk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtowBTmfz/pozm0CoJYNAo627q/5hANPeUW8K8nN+vwpGnOjNYRE5gTyyBPZy
isKFlls8vmEL0nkGBbB6SnB2Fkx4PpDcpN9aJWUWSjd73FlVN9H+wACtYCrNd05Z
M7z8RHIxg903sMrwhdSnPvKToFJx1RiISaD0zZ1URaKgnxN3LzKekj7Hy8a48QmV
utznmo9ZbZ3xCK9FztlqntGrhScf9FgQyJFfw5dtRCupFMKO9tXShRcfzWY8EYat
OAxPdys9G519LwNhrpCrct1deV7ZUSrs9O4V8ebexiGQQQAvPyWQv5peVMqPjiqV
SqUmiMl5qlO1rXOUN4qwLXqWBQIDAQABo4IClTCCApEwHQYDVR0OBBYEFCYfv2L9
XkNFTbxq5P2qS2TFTK8dMB8GA1UdIwQYMBaAFCDyUxp7qCEtK7CQDVdjctM/hGko
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0REM1RC8zOUU3MTQ2QzJB
MzMxMUVCOTI5REMwN0NDNEY5QUUwMi9JUEpUR251b0lTMHJzSkFOVjJOeTB6LUVh
U2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0lQSlRHbnVvSVMwcnNKQU5WMk55MHotRWFTZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NERDNUQvMzlFNzE0NkMyQTMzMTFFQjkyOURDMDdDQzRGOUFFMDIvNjg5RTUxM0Uy
QTQzMTFFQkJENjlCRTQ2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADLliowDQYJKoZIhvcNAQELBQADggEBALA281VRZ0tJJ8FI
hSDMKLAjjIAVRGDWPxfNuVVXuMhIsJCRSFDtcGMxK1mmq5bhHOYE6/k68sZ4ka76
6JXtm1rfJKqjZLaR9c2LU/b+mwr6oOPLOWI1XSsV7U+7BG+qtFcvq81FPP1zDlkD
x1XNmaoKt5eFMtMHtPf28wMt8W7ra3RQrr2gX2pb/s0IfaN+554waoj1RvCCez+8
db8XlS8xuCW1GHKxVdrMh14bvzIUbg4Q0Bq5Nb0eXlqfh8wganIzFIK9SEYrEwUK
zaWSunBl0uzmKRiBODUTWB2WLUk6MODZQLfiTMike1W01E1044kAPfIWaxFIpEcC
+biawsk=
-----END CERTIFICATE-----
Generated at Sun May 19 00:30:14 2024 by rpki-client on console-ams.rpki-client.org