Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/AE58A49C2A4111EBA1B1BB3DC4F9AE02.roa
File:                     AE58A49C2A4111EBA1B1BB3DC4F9AE02.roa (raw, json)
Hash identifier:          sOG+vYULSr92Yk59nV8CB5+e8Rv9YmLi3BOvrts4NZI=
Subject key identifier:   DF:19:DC:67:FB:85:0B:54:8A:09:C0:1C:47:AF:F0:6B:6C:8C:78:53
Certificate issuer:       /CN=A914DC5D/serialNumber=20F2531A7BA8212D2BB0900D576372D33F846928
Certificate serial:       065D
Authority key identifier: 20:F2:53:1A:7B:A8:21:2D:2B:B0:90:0D:57:63:72:D3:3F:84:69:28
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IPJTGnuoIS0rsJANV2Ny0z-EaSg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/AE58A49C2A4111EBA1B1BB3DC4F9AE02.roa
Signing time:             Thu 20 Jul 2023 22:39:46 +0000
ROA not before:           Thu 20 Jul 2023 22:39:46 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     17823
IP address blocks:        2001:c00:4618:3000::/64 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.crl
                          rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IPJTGnuoIS0rsJANV2Ny0z-EaSg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 19:51:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1629 (0x65d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914DC5D/serialNumber=20F2531A7BA8212D2BB0900D576372D33F846928
        Validity
            Not Before: Jul 20 22:39:46 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=64b9b7b1-19f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c7:f0:4a:7e:33:e9:67:09:fd:a8:b4:fe:8c:
                    8e:4d:32:7c:4e:f5:02:a5:78:45:cc:a7:1e:7e:69:
                    08:05:bb:14:aa:f5:76:f5:36:10:ec:65:1b:da:b8:
                    31:86:f0:10:ea:1c:33:f5:a5:5a:fb:5d:b8:7f:29:
                    b1:91:c7:5d:75:66:73:5c:75:c9:e1:75:49:66:6a:
                    4f:60:07:c2:5b:26:79:ab:c8:3c:ad:f8:b5:06:ce:
                    ab:de:54:26:fc:99:40:bd:41:0f:5d:58:a9:07:fb:
                    e4:49:77:b7:d6:1c:98:fb:fe:f4:27:c9:44:97:16:
                    ef:12:1f:f1:43:d1:8d:5c:83:8e:5c:6f:42:49:a0:
                    1e:4a:ef:4d:80:82:f7:40:32:07:b5:cd:81:9e:3a:
                    8e:27:e0:13:fe:e5:b8:d6:f6:00:cd:d6:13:26:17:
                    fc:e7:0b:95:60:fa:d4:3a:09:7c:a8:88:65:2c:4a:
                    d6:76:eb:c0:8a:a1:06:71:1d:03:8b:4f:89:00:fb:
                    0f:7b:6e:cb:b1:1b:c5:51:df:47:30:53:92:5c:27:
                    6d:a8:27:a1:75:0b:a9:94:4f:24:1d:3b:17:2b:25:
                    9c:0d:57:e9:0a:e2:dd:fe:54:ae:1e:a7:d1:b7:97:
                    7c:92:41:c8:90:00:70:57:2a:cb:19:39:84:03:30:
                    2d:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:19:DC:67:FB:85:0B:54:8A:09:C0:1C:47:AF:F0:6B:6C:8C:78:53
            X509v3 Authority Key Identifier:
                keyid:20:F2:53:1A:7B:A8:21:2D:2B:B0:90:0D:57:63:72:D3:3F:84:69:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IPJTGnuoIS0rsJANV2Ny0z-EaSg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/AE58A49C2A4111EBA1B1BB3DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:c00:4618:3000::/64

    Signature Algorithm: sha256WithRSAEncryption
         7f:40:ac:0f:c2:89:ed:66:db:67:e4:3d:7c:fb:d1:c1:93:18:
         97:f3:5b:ff:b0:77:ae:a1:c0:c6:19:05:13:90:47:81:92:1d:
         a5:d2:6c:51:db:b9:27:a3:e9:0a:2b:5a:09:25:b7:83:fe:8e:
         97:52:51:a6:fe:be:97:23:60:9e:76:b4:76:ee:a2:27:da:74:
         3f:04:68:96:c3:0c:87:1c:d5:b5:26:d5:2a:66:6d:00:9f:43:
         63:c2:5a:34:ea:aa:76:00:36:98:4d:2d:0e:2a:f7:fc:53:59:
         8f:66:34:42:23:b3:89:70:01:56:33:82:a1:5b:3f:1c:7e:db:
         ca:aa:7b:0c:ce:8e:69:f3:68:54:1f:ad:47:cb:8c:db:09:82:
         a8:96:f1:3b:55:b5:aa:51:ab:53:c6:54:3a:69:39:85:34:cb:
         ea:9f:02:94:a2:37:63:a1:d6:59:7f:47:f5:89:85:ce:a2:7f:
         39:b8:90:ce:12:88:6d:bf:a3:26:87:11:85:59:76:6d:02:6a:
         b9:da:fa:d0:ea:87:6e:56:c6:d6:d0:4b:c0:9a:e1:c1:05:48:
         5f:d3:77:82:00:c0:67:0e:56:2a:df:79:77:7c:72:91:a0:81:
         ac:4e:83:84:50:94:41:29:94:6d:b9:9c:6e:0f:ea:59:90:ff:
         df:ff:a2:9a
-----BEGIN CERTIFICATE-----
MIIFdjCCBF6gAwIBAgICBl0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NERDNUQxMTAvBgNVBAUTKDIwRjI1MzFBN0JBODIxMkQyQkIwOTAwRDU3NjM3MkQz
M0Y4NDY5MjgwHhcNMjMwNzIwMjIzOTQ2WhcNMjQwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NGI5YjdiMS0xOWY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtsfwSn4z6WcJ/ai0/oyOTTJ8TvUCpXhFzKcefmkIBbsUqvV29TYQ7GUb2rgx
hvAQ6hwz9aVa+124fymxkcdddWZzXHXJ4XVJZmpPYAfCWyZ5q8g8rfi1Bs6r3lQm
/JlAvUEPXVipB/vkSXe31hyY+/70J8lElxbvEh/xQ9GNXIOOXG9CSaAeSu9NgIL3
QDIHtc2BnjqOJ+AT/uW41vYAzdYTJhf85wuVYPrUOgl8qIhlLErWduvAiqEGcR0D
i0+JAPsPe27LsRvFUd9HMFOSXCdtqCehdQuplE8kHTsXKyWcDVfpCuLd/lSuHqfR
t5d8kkHIkABwVyrLGTmEAzAtoQIDAQABo4ICmjCCApYwHQYDVR0OBBYEFN8Z3Gf7
hQtUignAHEev8GtsjHhTMB8GA1UdIwQYMBaAFCDyUxp7qCEtK7CQDVdjctM/hGko
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0REM1RC8zOUU3MTQ2QzJB
MzMxMUVCOTI5REMwN0NDNEY5QUUwMi9JUEpUR251b0lTMHJzSkFOVjJOeTB6LUVh
U2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0lQSlRHbnVvSVMwcnNKQU5WMk55MHotRWFTZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NERDNUQvMzlFNzE0NkMyQTMzMTFFQjkyOURDMDdDQzRGOUFFMDIvQUU1OEE0OUMy
QTQxMTFFQkExQjFCQjNEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJAYIKwYBBQUHAQcBAf8E
FTATMBEEAgACMAsDCQAgAQwARhgwADANBgkqhkiG9w0BAQsFAAOCAQEAf0CsD8KJ
7WbbZ+Q9fPvRwZMYl/Nb/7B3rqHAxhkFE5BHgZIdpdJsUdu5J6PpCitaCSW3g/6O
l1JRpv6+lyNgnna0du6iJ9p0PwRolsMMhxzVtSbVKmZtAJ9DY8JaNOqqdgA2mE0t
Dir3/FNZj2Y0QiOziXABVjOCoVs/HH7byqp7DM6OafNoVB+tR8uM2wmCqJbxO1W1
qlGrU8ZUOmk5hTTL6p8ClKI3Y6HWWX9H9YmFzqJ/ObiQzhKIbb+jJocRhVl2bQJq
udr60OqHblbG1tBLwJrhwQVIX9N3ggDAZw5WKt95d3xykaCBrE6DhFCUQSmUbbmc
bg/qWZD/3/+img==
-----END CERTIFICATE-----
Generated at Sun May 19 00:16:13 2024 by rpki-client on console-fra.rpki-client.org