Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/C6B686020E7811EF85000B7BC4F9AE02.roa
File:                     C6B686020E7811EF85000B7BC4F9AE02.roa (raw, json)
Hash identifier:          MQyExLb7Mr7D0TumhjujEz9GIqRyF/YS1SDy3bPilrg=
Subject key identifier:   15:D7:E0:F5:EF:A8:01:BA:07:C3:61:89:77:CF:55:25:06:7A:EE:1E
Certificate issuer:       /CN=A91514B1/serialNumber=6171432D5594CB3F608D3BE0F52600BBEC46E5FB
Certificate serial:       052C
Authority key identifier: 61:71:43:2D:55:94:CB:3F:60:8D:3B:E0:F5:26:00:BB:EC:46:E5:FB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YXFDLVWUyz9gjTvg9SYAu-xG5fs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/C6B686020E7811EF85000B7BC4F9AE02.roa
Signing time:             Tue 03 Sep 2024 01:14:47 +0000
ROA not before:           Tue 03 Sep 2024 01:14:47 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     132217
IP address blocks:        220.101.96.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.crl
                          rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YXFDLVWUyz9gjTvg9SYAu-xG5fs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 20:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1324 (0x52c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91514B1/serialNumber=6171432D5594CB3F608D3BE0F52600BBEC46E5FB
        Validity
            Not Before: Sep  3 01:14:47 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=66d66307-00f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:e1:b4:c3:06:1e:4f:58:23:db:f3:b8:3a:65:
                    c5:b6:39:38:5a:0e:51:0f:8a:f9:6c:af:2f:00:27:
                    88:21:93:d6:90:34:2d:66:8e:7b:e4:af:c2:9c:ae:
                    84:2c:da:64:88:9a:ae:2f:d8:25:ba:6f:89:f3:74:
                    f7:3d:10:80:92:5c:01:53:f8:44:54:08:e6:87:1a:
                    47:b5:b2:bd:5f:4b:dc:fe:64:ff:d0:44:e4:0e:ab:
                    84:37:2d:d4:19:6c:43:c7:d5:53:ce:b4:54:a3:d5:
                    69:14:81:98:62:69:5b:4b:57:7b:b5:d1:5e:0d:63:
                    f5:e1:e7:af:b0:6b:89:5a:32:ba:26:19:c2:14:6d:
                    bf:0a:2e:e2:b4:17:86:0a:14:ce:82:ac:08:aa:5d:
                    05:a3:8f:db:95:a3:75:b6:0d:dc:a6:5e:8a:06:06:
                    ca:ed:48:ca:28:6b:f2:5b:1e:66:a4:ca:eb:be:6c:
                    43:26:11:29:81:fd:8c:88:c5:9e:16:23:f7:b2:36:
                    0a:b9:38:03:29:cc:87:8f:ec:61:bc:96:91:a1:62:
                    af:6f:e7:6c:e1:65:b1:9e:9e:26:d4:26:bd:fe:db:
                    83:3f:16:2d:60:50:00:10:57:c7:8e:53:ee:86:dc:
                    5d:5f:06:28:ab:32:55:56:0d:06:ec:7c:d3:38:17:
                    5f:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:D7:E0:F5:EF:A8:01:BA:07:C3:61:89:77:CF:55:25:06:7A:EE:1E
            X509v3 Authority Key Identifier:
                keyid:61:71:43:2D:55:94:CB:3F:60:8D:3B:E0:F5:26:00:BB:EC:46:E5:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YXFDLVWUyz9gjTvg9SYAu-xG5fs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/C6B686020E7811EF85000B7BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.101.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:1c:74:07:9c:cb:85:7e:cb:55:40:f9:32:0b:b3:94:d0:71:
         2a:b4:c2:72:4c:8d:88:59:fd:51:02:56:fd:cf:07:2a:a8:ec:
         2b:46:b4:db:76:1b:59:7c:0c:b0:36:b3:d3:ed:0b:e5:51:7c:
         64:8d:07:96:33:46:9b:26:ad:6e:b4:9e:81:1e:ec:bb:33:e2:
         fd:a3:b7:f3:c0:d3:12:10:11:43:8d:43:60:d2:3c:cd:f1:28:
         75:51:3f:ab:5b:17:30:4d:58:47:cc:c1:3c:66:0d:56:7d:b3:
         0e:07:da:1e:bf:3c:5e:40:5f:bc:b0:96:2f:42:4f:f1:cb:9c:
         5a:b9:28:a9:97:7a:b1:4e:78:e7:8c:b0:a0:55:79:b0:08:91:
         4e:53:54:7d:c1:e2:68:72:37:ff:c7:c7:76:61:66:19:e4:86:
         5c:5c:9b:e9:c4:02:f0:45:22:25:41:31:3c:14:e7:92:01:70:
         40:ea:33:d7:be:e7:e4:a1:22:06:39:ad:0a:7c:a6:20:1c:ba:
         10:06:f6:4e:1f:76:97:44:82:94:d7:18:7e:12:47:89:e4:36:
         b7:4d:38:c2:72:fa:ec:f6:40:92:25:88:6f:ab:87:f8:56:55:
         58:96:4e:f7:f9:d9:44:d9:8b:37:18:b7:e1:9a:27:b1:d4:c7:
         46:39:12:9a
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBSwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTE0QjExMTAvBgNVBAUTKDYxNzE0MzJENTU5NENCM0Y2MDhEM0JFMEY1MjYwMEJC
RUM0NkU1RkIwHhcNMjQwOTAzMDExNDQ3WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmQ2NjMwNy0wMGY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0eG0wwYeT1gj2/O4OmXFtjk4Wg5RD4r5bK8vACeIIZPWkDQtZo575K/CnK6E
LNpkiJquL9glum+J83T3PRCAklwBU/hEVAjmhxpHtbK9X0vc/mT/0ETkDquENy3U
GWxDx9VTzrRUo9VpFIGYYmlbS1d7tdFeDWP14eevsGuJWjK6JhnCFG2/Ci7itBeG
ChTOgqwIql0Fo4/blaN1tg3cpl6KBgbK7UjKKGvyWx5mpMrrvmxDJhEpgf2MiMWe
FiP3sjYKuTgDKcyHj+xhvJaRoWKvb+ds4WWxnp4m1Ca9/tuDPxYtYFAAEFfHjlPu
htxdXwYoqzJVVg0G7HzTOBdfWwIDAQABo4IClTCCApEwHQYDVR0OBBYEFBXX4PXv
qAG6B8NhiXfPVSUGeu4eMB8GA1UdIwQYMBaAFGFxQy1VlMs/YI074PUmALvsRuX7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTRCMS84NDE4OTIyNkZC
RTQxMUVCODJCNjI2NEZDNEY5QUUwMi9ZWEZETFZXVXl6OWdqVHZnOVNZQXUteEc1
ZnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1lYRkRMVldVeXo5Z2pUdmc5U1lBdS14RzVmcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTE0QjEvODQxODkyMjZGQkU0MTFFQjgyQjYyNjRGQzRGOUFFMDIvQzZCNjg2MDIw
RTc4MTFFRjg1MDAwQjdCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADcZWAwDQYJKoZIhvcNAQELBQADggEBAKccdAecy4V+y1VA
+TILs5TQcSq0wnJMjYhZ/VECVv3PByqo7CtGtNt2G1l8DLA2s9PtC+VRfGSNB5Yz
RpsmrW60noEe7Lsz4v2jt/PA0xIQEUONQ2DSPM3xKHVRP6tbFzBNWEfMwTxmDVZ9
sw4H2h6/PF5AX7ywli9CT/HLnFq5KKmXerFOeOeMsKBVebAIkU5TVH3B4mhyN//H
x3ZhZhnkhlxcm+nEAvBFIiVBMTwU55IBcEDqM9e+5+ShIgY5rQp8piAcuhAG9k4f
dpdEgpTXGH4SR4nkNrdNOMJy+uz2QJIliG+rh/hWVViWTvf52UTZizcYt+GaJ7HU
x0Y5Epo=
-----END CERTIFICATE-----
Generated at Thu Nov 21 01:25:58 2024 by rpki-client on console-ams.rpki-client.org