Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9151265/05709AEA521F11ECB3D0192BC4F9AE02/B1334FD4522011ECB0594C2BC4F9AE02.roa
File:                     B1334FD4522011ECB0594C2BC4F9AE02.roa (raw, json)
Hash identifier:          AdqmHcdVFHUJYvm1cm6+jhO3q3DYpUc6FI5IG6Qk0Vs=
Subject key identifier:   A6:45:D9:78:D6:A4:BC:55:C6:60:58:5E:2B:68:02:63:E5:AC:91:B1
Certificate issuer:       /CN=A9151265/serialNumber=91A9323CB34426F3D9C890E3978020D417B359F5
Certificate serial:       034E
Authority key identifier: 91:A9:32:3C:B3:44:26:F3:D9:C8:90:E3:97:80:20:D4:17:B3:59:F5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kakyPLNEJvPZyJDjl4Ag1BezWfU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9151265/05709AEA521F11ECB3D0192BC4F9AE02/B1334FD4522011ECB0594C2BC4F9AE02.roa
Signing time:             Sat 23 Dec 2023 02:14:34 +0000
ROA not before:           Sat 23 Dec 2023 02:14:34 +0000
ROA not after:            Sun 02 Mar 2025 00:00:00 +0000
asID:                     132695
IP address blocks:        202.6.84.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9151265/05709AEA521F11ECB3D0192BC4F9AE02/kakyPLNEJvPZyJDjl4Ag1BezWfU.crl
                          rsync://rpki.apnic.net/member_repository/A9151265/05709AEA521F11ECB3D0192BC4F9AE02/kakyPLNEJvPZyJDjl4Ag1BezWfU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kakyPLNEJvPZyJDjl4Ag1BezWfU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 May 2024 02:42:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 846 (0x34e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9151265/serialNumber=91A9323CB34426F3D9C890E3978020D417B359F5
        Validity
            Not Before: Dec 23 02:14:34 2023 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=6586428a-5496
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:32:84:d7:0d:a2:02:67:4e:8d:e0:9b:23:cd:
                    bc:0c:26:c7:8b:79:22:7a:c4:50:b3:a1:fd:7e:99:
                    ba:93:4c:b9:0a:7e:03:49:51:89:74:90:71:7e:03:
                    71:ff:8e:ed:10:95:8c:6b:bb:df:22:21:c3:59:e4:
                    cd:34:e5:db:60:74:be:4e:ce:32:ba:9e:93:70:08:
                    89:56:96:c1:da:b4:24:8d:15:bd:1a:44:03:90:27:
                    bb:2a:56:5b:14:b7:2c:bd:76:d5:14:4a:bd:bf:d7:
                    c0:29:b9:06:5a:81:24:8a:c3:3f:70:c3:4b:5b:67:
                    0d:ec:c6:36:36:4a:1d:3b:03:0d:7a:e8:03:dd:77:
                    f7:bc:a5:aa:a1:80:94:4f:bc:fc:53:fd:70:c9:3f:
                    04:a7:17:d2:9a:53:4b:25:6c:a5:f0:1d:39:32:c6:
                    e4:f6:e8:51:e5:19:ee:3e:40:02:10:94:0f:30:09:
                    a1:7e:b0:4a:7e:f1:4a:0b:8f:ce:11:6c:57:8d:ca:
                    5b:31:a5:39:3c:05:e3:90:ce:e0:01:2c:d9:b9:ea:
                    3e:6f:a2:82:4a:59:69:4f:25:b2:38:8c:77:d5:f6:
                    81:ea:7c:76:ff:bd:d9:82:44:fe:c1:2c:d1:08:aa:
                    c0:e6:a7:c8:a2:3d:b2:d7:59:63:b9:cb:d7:b9:3b:
                    20:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:45:D9:78:D6:A4:BC:55:C6:60:58:5E:2B:68:02:63:E5:AC:91:B1
            X509v3 Authority Key Identifier:
                keyid:91:A9:32:3C:B3:44:26:F3:D9:C8:90:E3:97:80:20:D4:17:B3:59:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9151265/05709AEA521F11ECB3D0192BC4F9AE02/kakyPLNEJvPZyJDjl4Ag1BezWfU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kakyPLNEJvPZyJDjl4Ag1BezWfU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151265/05709AEA521F11ECB3D0192BC4F9AE02/B1334FD4522011ECB0594C2BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.6.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:ca:20:fe:f4:bf:1b:fc:8b:9f:2c:89:9f:ab:f1:7c:0d:1b:
         c1:ad:3f:07:43:0a:93:64:6d:74:2f:db:aa:36:38:8e:2d:f6:
         a6:9a:fb:f4:c3:ec:5c:5a:20:ad:99:4f:cb:4f:7f:a9:04:b8:
         57:19:5e:c5:40:e0:1f:69:72:c6:cd:1a:85:4b:39:36:c6:12:
         4d:cb:12:bf:6c:d3:86:94:ae:e0:73:1d:5a:4f:d4:df:65:21:
         db:0f:24:c9:d1:79:07:64:17:7a:47:68:87:a8:08:e4:f3:68:
         e3:7b:1e:2a:94:43:23:88:2f:02:aa:36:30:c4:b9:74:d3:e3:
         59:98:28:13:c2:9c:76:8b:e6:c7:92:fb:53:b9:11:34:57:65:
         a4:2a:98:7c:2d:5c:95:3c:96:72:6b:bd:cd:37:7a:8d:af:5d:
         c3:68:fe:ee:5f:2c:da:7b:66:ee:4e:07:cd:b6:b3:d2:5f:d2:
         b0:b4:3f:95:3a:6e:b4:8e:b4:32:3f:ee:02:bb:0f:f1:77:3f:
         9a:8c:87:a5:e4:c5:43:cb:75:58:54:92:82:93:c6:01:20:ea:
         a8:09:1b:77:76:d3:d7:03:19:55:21:17:77:d5:35:67:89:35:
         ea:10:38:66:b0:45:93:ff:b0:47:c7:c3:fa:54:04:54:12:e5:
         ee:88:d2:2d
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICA04wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTEyNjUxMTAvBgNVBAUTKDkxQTkzMjNDQjM0NDI2RjNEOUM4OTBFMzk3ODAyMEQ0
MTdCMzU5RjUwHhcNMjMxMjIzMDIxNDM0WhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02NTg2NDI4YS01NDk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqjKE1w2iAmdOjeCbI828DCbHi3kiesRQs6H9fpm6k0y5Cn4DSVGJdJBxfgNx
/47tEJWMa7vfIiHDWeTNNOXbYHS+Ts4yup6TcAiJVpbB2rQkjRW9GkQDkCe7KlZb
FLcsvXbVFEq9v9fAKbkGWoEkisM/cMNLW2cN7MY2NkodOwMNeugD3Xf3vKWqoYCU
T7z8U/1wyT8EpxfSmlNLJWyl8B05Msbk9uhR5RnuPkACEJQPMAmhfrBKfvFKC4/O
EWxXjcpbMaU5PAXjkM7gASzZueo+b6KCSllpTyWyOIx31faB6nx2/73ZgkT+wSzR
CKrA5qfIoj2y11ljucvXuTsg7wIDAQABo4IClTCCApEwHQYDVR0OBBYEFKZF2XjW
pLxVxmBYXitoAmPlrJGxMB8GA1UdIwQYMBaAFJGpMjyzRCbz2ciQ45eAINQXs1n1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTI2NS8wNTcwOUFFQTUy
MUYxMUVDQjNEMDE5MkJDNEY5QUUwMi9rYWt5UExORUp2UFp5SkRqbDRBZzFCZXpX
ZlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2tha3lQTE5FSnZQWnlKRGpsNEFnMUJleldmVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTEyNjUvMDU3MDlBRUE1MjFGMTFFQ0IzRDAxOTJCQzRGOUFFMDIvQjEzMzRGRDQ1
MjIwMTFFQ0IwNTk0QzJCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADKBlQwDQYJKoZIhvcNAQELBQADggEBAFDKIP70vxv8i58s
iZ+r8XwNG8GtPwdDCpNkbXQv26o2OI4t9qaa+/TD7FxaIK2ZT8tPf6kEuFcZXsVA
4B9pcsbNGoVLOTbGEk3LEr9s04aUruBzHVpP1N9lIdsPJMnReQdkF3pHaIeoCOTz
aON7HiqUQyOILwKqNjDEuXTT41mYKBPCnHaL5seS+1O5ETRXZaQqmHwtXJU8lnJr
vc03eo2vXcNo/u5fLNp7Zu5OB822s9Jf0rC0P5U6brSOtDI/7gK7D/F3P5qMh6Xk
xUPLdVhUkoKTxgEg6qgJG3d209cDGVUhF3fVNWeJNeoQOGawRZP/sEfHw/pUBFQS
5e6I0i0=
-----END CERTIFICATE-----
Generated at Sat May 11 03:57:07 2024 by rpki-client on console-fra.rpki-client.org