Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/B2B210782A4111EBA1B1BB3DC4F9AE02.roa
File:                     B2B210782A4111EBA1B1BB3DC4F9AE02.roa (raw, json)
Hash identifier:          dGroT90n4HpSSarELnS9ycmTSfu76/xv3XLB7XMogw4=
Subject key identifier:   38:4A:35:ED:C2:2D:5A:29:A8:6E:9A:B3:AB:98:8C:E0:D9:39:D1:35
Certificate issuer:       /CN=A914DC5D/serialNumber=20F2531A7BA8212D2BB0900D576372D33F846928
Certificate serial:       075F
Authority key identifier: 20:F2:53:1A:7B:A8:21:2D:2B:B0:90:0D:57:63:72:D3:3F:84:69:28
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IPJTGnuoIS0rsJANV2Ny0z-EaSg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/B2B210782A4111EBA1B1BB3DC4F9AE02.roa
Signing time:             Tue 02 Jul 2024 23:11:24 +0000
ROA not before:           Tue 02 Jul 2024 23:11:24 +0000
ROA not after:            Tue 30 Sep 2025 00:00:00 +0000
asID:                     38718
IP address blocks:        203.150.22.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.crl
                          rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IPJTGnuoIS0rsJANV2Ny0z-EaSg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1887 (0x75f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914DC5D/serialNumber=20F2531A7BA8212D2BB0900D576372D33F846928
        Validity
            Not Before: Jul  2 23:11:24 2024 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=6684891b-8706
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:73:7f:a8:47:61:7a:00:c2:b2:2a:0f:62:7c:
                    89:29:97:6f:2e:04:6a:1d:53:b0:6f:22:09:b0:52:
                    24:8c:e9:ce:f9:03:78:19:36:b5:f6:81:35:83:5b:
                    64:54:e3:5a:60:8b:bb:fa:45:d2:f2:1c:b0:a2:af:
                    6d:1c:3b:8f:0e:73:2f:9d:c2:d9:3f:c2:df:43:6f:
                    2a:82:83:07:46:26:c1:9e:09:bc:a7:6c:50:fc:f5:
                    54:3d:75:45:78:7a:10:c7:d4:3d:a4:ce:f2:c7:7d:
                    d8:18:35:84:21:74:e4:0e:bb:21:6a:2c:e9:4c:f0:
                    d0:bd:c5:41:c8:0a:2f:02:c5:fa:5b:91:2a:4c:e9:
                    fa:63:99:ee:24:c2:4e:ee:49:6c:9b:0a:61:07:9b:
                    87:85:36:79:87:76:cc:29:bb:21:64:d6:15:4d:bb:
                    dd:c8:a6:19:2f:1b:40:ab:82:0d:85:bd:d1:e9:eb:
                    ea:c7:64:f9:93:6a:3e:bd:8c:e1:da:c1:87:95:1a:
                    66:9e:ca:c5:04:37:7c:be:8b:af:69:1b:23:d2:66:
                    5d:fb:0d:88:8e:01:9e:71:19:c5:10:7c:25:85:81:
                    7f:14:c9:15:2b:98:d4:cb:98:ac:cd:0b:08:72:a1:
                    5e:77:5a:a8:5a:44:0c:42:9d:7d:d9:2c:c5:4c:11:
                    12:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:4A:35:ED:C2:2D:5A:29:A8:6E:9A:B3:AB:98:8C:E0:D9:39:D1:35
            X509v3 Authority Key Identifier:
                keyid:20:F2:53:1A:7B:A8:21:2D:2B:B0:90:0D:57:63:72:D3:3F:84:69:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IPJTGnuoIS0rsJANV2Ny0z-EaSg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/B2B210782A4111EBA1B1BB3DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.150.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:ab:75:3e:19:af:6c:62:79:7a:34:dd:80:2e:c4:e1:4f:c3:
         3e:2d:6c:38:69:77:bb:5e:4d:2e:2c:44:cd:00:cb:8f:ea:fa:
         ee:83:7d:51:17:fe:dc:4d:e6:8d:04:98:04:72:7f:13:9e:1e:
         5e:bf:ea:92:b6:c7:fc:a9:2a:2c:03:3f:3f:dd:6b:f9:63:43:
         03:ac:2b:ef:3f:31:6c:d1:59:01:c2:f9:a4:ea:40:88:0c:e8:
         db:d4:ce:3a:b5:dc:96:d5:a2:de:ce:0f:1a:6e:db:5b:1a:0c:
         e8:7e:f0:08:e9:a3:1e:92:f9:78:95:a0:60:10:57:bd:dd:eb:
         fa:b7:cc:8d:0f:66:f9:8d:63:53:24:7f:66:64:8c:e3:40:81:
         2e:67:93:17:41:d9:2d:0d:79:3c:f7:2f:39:fe:fc:5d:a9:d4:
         7a:1d:a4:af:67:54:18:33:95:7c:f7:95:8b:a8:b4:04:81:97:
         ca:60:87:c4:30:b4:31:71:81:73:80:10:84:ed:c7:8c:a1:af:
         64:ca:c9:95:a2:7a:53:6b:e6:d4:cc:1f:66:55:f5:05:73:d5:
         7f:16:58:36:da:f0:a1:73:5c:80:0d:ed:c0:82:ca:74:7f:42:
         91:71:6d:2e:88:b1:da:5c:01:a6:77:11:65:0e:95:77:c3:e7:
         2c:5a:84:0d
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICB18wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NERDNUQxMTAvBgNVBAUTKDIwRjI1MzFBN0JBODIxMkQyQkIwOTAwRDU3NjM3MkQz
M0Y4NDY5MjgwHhcNMjQwNzAyMjMxMTI0WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02Njg0ODkxYi04NzA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2XN/qEdhegDCsioPYnyJKZdvLgRqHVOwbyIJsFIkjOnO+QN4GTa19oE1g1tk
VONaYIu7+kXS8hywoq9tHDuPDnMvncLZP8LfQ28qgoMHRibBngm8p2xQ/PVUPXVF
eHoQx9Q9pM7yx33YGDWEIXTkDrshaizpTPDQvcVByAovAsX6W5EqTOn6Y5nuJMJO
7klsmwphB5uHhTZ5h3bMKbshZNYVTbvdyKYZLxtAq4INhb3R6evqx2T5k2o+vYzh
2sGHlRpmnsrFBDd8vouvaRsj0mZd+w2IjgGecRnFEHwlhYF/FMkVK5jUy5iszQsI
cqFed1qoWkQMQp192SzFTBESMwIDAQABo4IClTCCApEwHQYDVR0OBBYEFDhKNe3C
LVopqG6as6uYjODZOdE1MB8GA1UdIwQYMBaAFCDyUxp7qCEtK7CQDVdjctM/hGko
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0REM1RC8zOUU3MTQ2QzJB
MzMxMUVCOTI5REMwN0NDNEY5QUUwMi9JUEpUR251b0lTMHJzSkFOVjJOeTB6LUVh
U2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0lQSlRHbnVvSVMwcnNKQU5WMk55MHotRWFTZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NERDNUQvMzlFNzE0NkMyQTMzMTFFQjkyOURDMDdDQzRGOUFFMDIvQjJCMjEwNzgy
QTQxMTFFQkExQjFCQjNEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADLlhYwDQYJKoZIhvcNAQELBQADggEBABerdT4Zr2xieXo0
3YAuxOFPwz4tbDhpd7teTS4sRM0Ay4/q+u6DfVEX/txN5o0EmARyfxOeHl6/6pK2
x/ypKiwDPz/da/ljQwOsK+8/MWzRWQHC+aTqQIgM6NvUzjq13JbVot7ODxpu21sa
DOh+8Ajpox6S+XiVoGAQV73d6/q3zI0PZvmNY1Mkf2ZkjONAgS5nkxdB2S0NeTz3
Lzn+/F2p1HodpK9nVBgzlXz3lYuotASBl8pgh8QwtDFxgXOAEITtx4yhr2TKyZWi
elNr5tTMH2ZV9QVz1X8WWDba8KFzXIAN7cCCynR/QpFxbS6IsdpcAaZ3EWUOlXfD
5yxahA0=
-----END CERTIFICATE-----
Generated at Sat Nov 23 00:08:39 2024 by rpki-client on console-ams.rpki-client.org