Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4F17591C7A4011EFBD861118C4F9AE02.roa
File:                     4F17591C7A4011EFBD861118C4F9AE02.roa (raw, json)
Hash identifier:          tuME09BR1YGFAnql3LFRzhwbKyOA+0gHS+nharCOusg=
Subject key identifier:   95:0E:FC:20:07:D8:06:49:15:3B:3C:0F:06:02:1D:FE:B8:50:40:A9
Certificate issuer:       /CN=A91510AD/serialNumber=E1E6908A16EC813DAA0BD64797AE9DBDEB092257
Certificate serial:       3568
Authority key identifier: E1:E6:90:8A:16:EC:81:3D:AA:0B:D6:47:97:AE:9D:BD:EB:09:22:57
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4F17591C7A4011EFBD861118C4F9AE02.roa
Signing time:             Thu 10 Oct 2024 14:50:44 +0000
ROA not before:           Thu 10 Oct 2024 14:50:44 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     150716
IP address blocks:        175.29.18.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.crl
                          rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 14:29:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13672 (0x3568)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91510AD/serialNumber=E1E6908A16EC813DAA0BD64797AE9DBDEB092257
        Validity
            Not Before: Oct 10 14:50:44 2024 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=6707e9c4-a47d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:80:18:ea:f7:a9:91:88:7c:58:13:43:7b:ec:
                    87:79:04:6d:15:b8:61:d2:35:8a:0c:92:f7:fd:ae:
                    e1:ba:9f:8f:98:e5:51:b9:22:da:af:6c:a3:b5:f3:
                    b7:3b:79:d0:3c:6a:3d:f8:df:20:ec:a6:85:34:55:
                    ff:30:9d:d3:4f:a8:27:3e:fd:69:24:21:30:cd:9e:
                    59:96:4a:e3:6c:ad:cd:3e:eb:bf:b6:58:4f:66:ef:
                    8f:f4:3f:18:92:6a:56:07:12:a5:e6:52:1b:42:28:
                    d4:9e:f8:bb:09:97:04:04:0d:dc:24:ce:bd:71:71:
                    ec:e9:32:63:ad:c0:c9:c8:1b:b6:f1:43:c6:cf:02:
                    97:71:32:92:ea:87:95:7f:c7:83:f0:c6:25:28:ad:
                    5b:bf:11:2a:8a:02:38:8e:16:52:23:44:16:49:fc:
                    f8:df:07:70:ea:8f:79:8c:f8:f2:e7:f1:a3:73:95:
                    97:77:c4:4f:50:0d:2f:7b:a4:30:91:e5:15:68:08:
                    2d:54:c8:b8:12:8f:6f:a9:80:2a:f2:78:c2:9c:e5:
                    27:5e:31:86:63:c2:07:f8:c0:c0:d5:2f:6e:e9:d2:
                    ee:6f:88:6b:ba:99:4f:ce:35:80:da:4f:fc:a1:68:
                    f9:13:7e:cb:01:38:7e:ea:f6:ca:54:c8:58:f4:92:
                    81:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:0E:FC:20:07:D8:06:49:15:3B:3C:0F:06:02:1D:FE:B8:50:40:A9
            X509v3 Authority Key Identifier:
                keyid:E1:E6:90:8A:16:EC:81:3D:AA:0B:D6:47:97:AE:9D:BD:EB:09:22:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4F17591C7A4011EFBD861118C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.29.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:c5:8d:0d:57:65:9a:bd:b6:27:63:6d:71:f6:7e:65:88:d8:
         71:87:21:7b:9d:d0:92:9e:6c:74:88:5c:59:76:7d:3f:56:e4:
         b9:d2:64:b0:59:32:13:5e:16:d6:b7:f1:c5:3c:92:5f:59:6c:
         a7:91:bb:db:06:a0:f1:3f:9c:27:93:15:52:48:85:56:35:66:
         93:0a:c3:a2:1b:09:4d:6d:2d:34:45:e4:d7:6c:6e:da:39:01:
         34:81:a3:bb:d6:96:31:4b:89:02:92:00:24:57:45:fa:90:4d:
         c8:9c:ac:fe:e6:4f:52:d5:da:cd:55:cb:34:66:b5:e2:6d:e8:
         49:9a:81:35:da:58:a7:12:1f:88:11:fa:ec:ee:1e:4f:6a:db:
         92:83:b8:11:fa:a9:16:ff:8f:ce:be:c5:93:f4:bb:cf:9f:b3:
         23:0f:14:9a:83:23:e5:9d:53:96:e7:3b:6c:ec:86:a3:bc:40:
         b4:97:61:ce:c7:7b:3b:14:ca:6d:2c:ce:a7:a3:99:80:25:e5:
         9a:90:b2:11:b1:b7:8b:c6:1c:da:c7:bb:a1:ab:e0:02:d6:0b:
         d8:d8:f9:03:bd:6f:4b:a2:10:7e:23:db:da:f5:5b:45:ea:cf:
         e1:22:4b:bd:d6:ee:fb:c7:78:d6:12:d5:64:17:4c:aa:54:9e:
         b9:c3:cb:0b
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICNWgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTEwQUQxMTAvBgNVBAUTKEUxRTY5MDhBMTZFQzgxM0RBQTBCRDY0Nzk3QUU5REJE
RUIwOTIyNTcwHhcNMjQxMDEwMTQ1MDQ0WhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzA3ZTljNC1hNDdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtIAY6vepkYh8WBNDe+yHeQRtFbhh0jWKDJL3/a7hup+PmOVRuSLar2yjtfO3
O3nQPGo9+N8g7KaFNFX/MJ3TT6gnPv1pJCEwzZ5ZlkrjbK3NPuu/tlhPZu+P9D8Y
kmpWBxKl5lIbQijUnvi7CZcEBA3cJM69cXHs6TJjrcDJyBu28UPGzwKXcTKS6oeV
f8eD8MYlKK1bvxEqigI4jhZSI0QWSfz43wdw6o95jPjy5/Gjc5WXd8RPUA0ve6Qw
keUVaAgtVMi4Eo9vqYAq8njCnOUnXjGGY8IH+MDA1S9u6dLub4hruplPzjWA2k/8
oWj5E37LATh+6vbKVMhY9JKBywIDAQABo4IClTCCApEwHQYDVR0OBBYEFJUO/CAH
2AZJFTs8DwYCHf64UECpMB8GA1UdIwQYMBaAFOHmkIoW7IE9qgvWR5eunb3rCSJX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTBBRC84QjVFNzVGRTFE
ODcxMUUyODRCMzgzREYwOEIwMkNEMi80ZWFRaWhic2dUMnFDOVpIbDY2ZHZlc0pJ
bGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzRlYVFpaGJzZ1QycUM5WkhsNjZkdmVzSklsYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTEwQUQvOEI1RTc1RkUxRDg3MTFFMjg0QjM4M0RGMDhCMDJDRDIvNEYxNzU5MUM3
QTQwMTFFRkJEODYxMTE4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBACvHRIwDQYJKoZIhvcNAQELBQADggEBALbFjQ1XZZq9tidj
bXH2fmWI2HGHIXud0JKebHSIXFl2fT9W5LnSZLBZMhNeFta38cU8kl9ZbKeRu9sG
oPE/nCeTFVJIhVY1ZpMKw6IbCU1tLTRF5Ndsbto5ATSBo7vWljFLiQKSACRXRfqQ
TcicrP7mT1LV2s1VyzRmteJt6EmagTXaWKcSH4gR+uzuHk9q25KDuBH6qRb/j86+
xZP0u8+fsyMPFJqDI+WdU5bnO2zshqO8QLSXYc7HezsUym0szqejmYAl5ZqQshGx
t4vGHNrHu6Gr4ALWC9jY+QO9b0uiEH4j29r1W0Xqz+EiS73W7vvHeNYS1WQXTKpU
nrnDyws=
-----END CERTIFICATE-----
Generated at Wed Nov 20 16:11:26 2024 by rpki-client on console-fra.rpki-client.org