Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914E070/808B4D6CBC1011EE8BEB137AC4F9AE02/5AD6391EBC1111EE92B7B02DC4F9AE02.roa
File:                     5AD6391EBC1111EE92B7B02DC4F9AE02.roa (raw, json)
Hash identifier:          ut259rkGij2B93AJ9ZMpQpFJu2cjgHFJdqE5QCl8kGg=
Subject key identifier:   85:6A:25:A5:B3:01:C4:60:DE:01:E9:7C:A3:C8:B6:55:56:1A:BD:C2
Certificate issuer:       /CN=A914E070/serialNumber=C36CF5DE25339B91456E5CC2317248B36EA45B7D
Certificate serial:       61
Authority key identifier: C3:6C:F5:DE:25:33:9B:91:45:6E:5C:C2:31:72:48:B3:6E:A4:5B:7D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w2z13iUzm5FFblzCMXJIs26kW30.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E070/808B4D6CBC1011EE8BEB137AC4F9AE02/5AD6391EBC1111EE92B7B02DC4F9AE02.roa
Signing time:             Tue 23 Jul 2024 06:48:01 +0000
ROA not before:           Tue 23 Jul 2024 06:48:01 +0000
ROA not after:            Tue 30 Sep 2025 00:00:00 +0000
asID:                     45960
IP address blocks:        192.82.222.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914E070/808B4D6CBC1011EE8BEB137AC4F9AE02/w2z13iUzm5FFblzCMXJIs26kW30.crl
                          rsync://rpki.apnic.net/member_repository/A914E070/808B4D6CBC1011EE8BEB137AC4F9AE02/w2z13iUzm5FFblzCMXJIs26kW30.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w2z13iUzm5FFblzCMXJIs26kW30.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 02:50:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 97 (0x61)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E070/serialNumber=C36CF5DE25339B91456E5CC2317248B36EA45B7D
        Validity
            Not Before: Jul 23 06:48:01 2024 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=669f5221-2a17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:57:11:76:69:e3:b9:c0:27:98:87:f3:f5:a2:
                    1e:f5:6e:ca:17:97:1c:32:91:f9:5f:05:f8:46:7e:
                    03:a5:28:85:fd:ef:84:db:df:6f:d0:ab:d4:c9:dd:
                    fe:06:de:97:87:3b:71:bc:86:d5:0f:5b:c7:1a:84:
                    6c:33:d9:62:8f:84:8b:48:70:de:ac:c9:3d:c2:05:
                    28:ca:c3:a0:44:17:e7:6b:a6:dc:30:8e:6c:af:3d:
                    77:e7:50:0c:56:9c:88:31:d9:d7:ab:78:28:40:d4:
                    8b:72:e9:c9:c5:b2:26:cb:7b:8b:36:5c:49:eb:93:
                    fe:b0:9e:65:56:bc:4c:f0:f6:75:d7:46:1a:4c:85:
                    e6:5f:c7:7d:22:2d:86:cf:fb:b2:ce:6c:f7:82:35:
                    82:47:d8:b6:a6:bc:22:8c:a2:e6:f5:76:4f:cf:9a:
                    77:0a:79:86:0a:a3:20:82:62:67:6d:11:a2:5c:c6:
                    03:a8:4f:17:05:3b:5c:57:91:f4:41:d8:c4:fa:7f:
                    21:cc:e4:d3:bd:d4:a5:5d:a2:8e:32:f5:1d:23:ff:
                    ef:c2:50:d7:cc:96:15:b5:b5:8c:01:80:88:0f:49:
                    af:e4:5e:e8:4c:15:3f:8c:58:50:3c:8f:43:8e:b6:
                    76:e0:df:a6:c1:7d:10:f3:96:20:90:a9:39:31:9f:
                    31:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:6A:25:A5:B3:01:C4:60:DE:01:E9:7C:A3:C8:B6:55:56:1A:BD:C2
            X509v3 Authority Key Identifier:
                keyid:C3:6C:F5:DE:25:33:9B:91:45:6E:5C:C2:31:72:48:B3:6E:A4:5B:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E070/808B4D6CBC1011EE8BEB137AC4F9AE02/w2z13iUzm5FFblzCMXJIs26kW30.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w2z13iUzm5FFblzCMXJIs26kW30.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E070/808B4D6CBC1011EE8BEB137AC4F9AE02/5AD6391EBC1111EE92B7B02DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:3f:31:99:16:ed:67:5e:17:be:8c:ff:b4:29:36:b6:d5:d9:
         ab:0a:ec:b8:19:34:5d:47:bd:05:6d:24:a1:29:18:38:b4:19:
         8b:93:c6:27:af:0e:4b:32:84:0b:8a:01:21:3d:7a:70:8d:8f:
         28:1a:aa:6d:a6:e6:64:09:42:bb:2c:dd:ac:d7:c9:db:2f:cd:
         b4:ef:d1:e1:c2:3b:f6:f0:63:e2:2c:dc:22:24:65:5a:a4:ec:
         32:ac:8f:83:00:5f:0e:bc:c6:bf:bc:1e:cc:cb:29:24:8b:10:
         02:2a:7b:1c:58:24:80:12:fe:13:75:1f:db:51:bd:08:9b:b0:
         ec:be:87:5b:d4:bb:5b:3b:79:a2:e9:df:77:c3:83:80:76:80:
         57:c4:e1:b0:a8:e6:5b:51:4c:76:c7:47:60:db:a3:a4:a0:7e:
         6a:a1:d9:2f:76:3b:2e:f8:40:f8:d2:6f:f0:ab:d9:fa:8d:98:
         75:89:32:81:63:97:17:c0:16:5f:59:74:95:9b:e2:dd:ba:97:
         9c:e9:25:0d:e3:20:bf:e3:6e:80:60:0a:1e:3e:8d:77:91:14:
         7c:8e:68:24:7f:96:c7:05:42:6c:df:c3:ea:01:37:bc:c4:df:
         4b:34:ed:8d:ba:08:36:a7:a0:7d:93:cd:32:85:25:72:dd:39:
         fa:56:56:18
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBYTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0
RTA3MDExMC8GA1UEBRMoQzM2Q0Y1REUyNTMzOUI5MTQ1NkU1Q0MyMzE3MjQ4QjM2
RUE0NUI3RDAeFw0yNDA3MjMwNjQ4MDFaFw0yNTA5MzAwMDAwMDBaMBgxFjAUBgNV
BAMTDTY2OWY1MjIxLTJhMTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCsVxF2aeO5wCeYh/P1oh71bsoXlxwykflfBfhGfgOlKIX974Tb32/Qq9TJ3f4G
3peHO3G8htUPW8cahGwz2WKPhItIcN6syT3CBSjKw6BEF+drptwwjmyvPXfnUAxW
nIgx2dereChA1Ity6cnFsibLe4s2XEnrk/6wnmVWvEzw9nXXRhpMheZfx30iLYbP
+7LObPeCNYJH2LamvCKMoub1dk/PmncKeYYKoyCCYmdtEaJcxgOoTxcFO1xXkfRB
2MT6fyHM5NO91KVdoo4y9R0j/+/CUNfMlhW1tYwBgIgPSa/kXuhMFT+MWFA8j0OO
tnbg36bBfRDzliCQqTkxnzFnAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUhWolpbMB
xGDeAel8o8i2VVYavcIwHwYDVR0jBBgwFoAUw2z13iUzm5FFblzCMXJIs26kW30w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRFMDcwLzgwOEI0RDZDQkMx
MDExRUU4QkVCMTM3QUM0RjlBRTAyL3cyejEzaVV6bTVGRmJsekNNWEpJczI2a1cz
MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvdzJ6MTNpVXptNUZGYmx6Q01YSklzMjZrVzMwLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
RTA3MC84MDhCNEQ2Q0JDMTAxMUVFOEJFQjEzN0FDNEY5QUUwMi81QUQ2MzkxRUJD
MTExMUVFOTJCN0IwMkRDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMBS3jANBgkqhkiG9w0BAQsFAAOCAQEAQj8xmRbtZ14Xvoz/
tCk2ttXZqwrsuBk0XUe9BW0koSkYOLQZi5PGJ68OSzKEC4oBIT16cI2PKBqqbabm
ZAlCuyzdrNfJ2y/NtO/R4cI79vBj4izcIiRlWqTsMqyPgwBfDrzGv7wezMspJIsQ
Aip7HFgkgBL+E3Uf21G9CJuw7L6HW9S7Wzt5ounfd8ODgHaAV8ThsKjmW1FMdsdH
YNujpKB+aqHZL3Y7LvhA+NJv8KvZ+o2YdYkygWOXF8AWX1l0lZvi3bqXnOklDeMg
v+NugGAKHj6Nd5EUfI5oJH+WxwVCbN/D6gE3vMTfSzTtjboINqegfZPNMoUlct05
+lZWGA==
-----END CERTIFICATE-----
Generated at Thu Nov 21 06:50:15 2024 by rpki-client on console-fra.rpki-client.org