Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/EC75126616CA11ED8E290A59C4F9AE02.roa
File:                     EC75126616CA11ED8E290A59C4F9AE02.roa (raw, json)
Hash identifier:          6XDWQ95VUkI8MnkeUoSMN6HEeM3s71jNlFk6+gKQ8uY=
Subject key identifier:   05:42:8A:11:6F:42:22:B4:4A:E6:56:30:D9:5A:14:71:7E:A6:25:AE
Certificate issuer:       /CN=A9156740/serialNumber=E2BBAD393158A0674C6949EC3B8A0B73F86029A2
Certificate serial:       012C
Authority key identifier: E2:BB:AD:39:31:58:A0:67:4C:69:49:EC:3B:8A:0B:73:F8:60:29:A2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4rutOTFYoGdMaUnsO4oLc_hgKaI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/EC75126616CA11ED8E290A59C4F9AE02.roa
Signing time:             Thu 21 Sep 2023 03:24:21 +0000
ROA not before:           Thu 21 Sep 2023 03:24:21 +0000
ROA not after:            Sun 01 Dec 2024 00:00:00 +0000
asID:                     24324
IP address blocks:        202.27.170.0/24 maxlen: 24
                          202.27.171.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/4rutOTFYoGdMaUnsO4oLc_hgKaI.crl
                          rsync://rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/4rutOTFYoGdMaUnsO4oLc_hgKaI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4rutOTFYoGdMaUnsO4oLc_hgKaI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 May 2024 04:45:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 300 (0x12c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9156740/serialNumber=E2BBAD393158A0674C6949EC3B8A0B73F86029A2
        Validity
            Not Before: Sep 21 03:24:21 2023 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=650bb765-5d04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:ae:03:78:dd:44:b5:7b:05:10:9c:f2:29:c9:
                    33:77:c3:f5:f0:28:54:f2:46:05:6f:0d:d6:49:49:
                    46:90:1f:04:d2:af:0c:67:51:21:b4:8f:63:a9:43:
                    80:47:8f:1e:59:56:35:fb:b8:62:57:68:fd:16:1d:
                    19:a7:ee:09:95:ae:c7:4a:13:e2:1c:5e:1c:5a:b3:
                    38:37:4f:7f:4a:ac:bf:96:38:99:1e:12:5f:e8:f7:
                    ba:a6:f6:ce:94:42:1b:9d:9e:7c:b7:e0:47:53:4e:
                    bf:15:59:10:4d:20:20:b9:40:f9:8a:5d:0f:6d:df:
                    97:d1:0a:7f:9d:b0:11:37:a7:02:e2:24:76:fa:58:
                    21:1a:ba:6a:38:69:34:6d:b3:6a:b8:7e:61:9e:e1:
                    98:0f:b3:43:b2:d2:98:05:77:43:dc:60:43:41:6f:
                    ec:e2:af:3b:d2:48:f6:c8:19:2e:3f:9b:47:0d:e2:
                    99:ea:f5:61:d7:44:ef:6f:f2:8b:49:39:7e:69:90:
                    cd:44:a9:b6:30:62:8a:53:50:b2:14:18:07:fa:b1:
                    6c:61:bb:c9:ad:30:a4:eb:cc:e5:5a:4e:93:16:67:
                    c2:54:55:35:f6:68:61:dd:32:d7:3b:0f:00:06:da:
                    b2:07:b9:a8:a6:d9:cc:d6:6e:7f:90:26:92:7c:78:
                    a5:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:42:8A:11:6F:42:22:B4:4A:E6:56:30:D9:5A:14:71:7E:A6:25:AE
            X509v3 Authority Key Identifier:
                keyid:E2:BB:AD:39:31:58:A0:67:4C:69:49:EC:3B:8A:0B:73:F8:60:29:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/4rutOTFYoGdMaUnsO4oLc_hgKaI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4rutOTFYoGdMaUnsO4oLc_hgKaI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/EC75126616CA11ED8E290A59C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.27.170.0/23

    Signature Algorithm: sha256WithRSAEncryption
         81:5f:11:0a:f1:f2:b2:f8:de:e8:e1:f7:c7:92:d6:24:f5:a3:
         2b:49:9a:10:e6:5a:54:95:3d:1a:0e:02:4b:74:0b:ba:ea:aa:
         e1:48:2f:b2:f8:c8:f6:b2:7d:8d:48:47:7a:c0:e7:1c:d1:ef:
         24:c9:8c:4a:28:d8:90:e1:97:0f:06:d3:ac:a3:72:5e:e6:de:
         9a:b7:6b:60:95:d0:18:14:88:a8:06:3f:a9:5d:1c:91:ff:4e:
         9a:f0:18:9e:88:98:53:cb:38:26:07:be:e0:ab:39:1f:b7:c7:
         ed:42:01:4a:83:bf:fb:d6:68:f1:44:d0:23:1b:98:bc:22:4c:
         40:05:a8:f8:d5:95:ef:2e:cb:17:c6:43:dd:b7:8f:20:8a:98:
         26:25:db:a5:37:a3:f1:9e:fe:e9:c5:7c:e6:41:fb:31:23:74:
         85:74:6b:c7:8d:a8:ee:79:2c:fd:dd:7f:db:1c:18:fd:14:46:
         54:06:7f:6e:89:63:15:81:33:62:34:32:4d:f8:58:c3:76:fe:
         cf:77:23:60:be:29:19:8e:ee:f9:59:40:fa:a3:24:3e:fc:4e:
         f6:e6:0a:8e:15:f5:21:40:a7:64:45:9a:e0:80:90:39:03:73:
         b9:b3:d0:6a:38:db:2e:12:f1:fa:d0:e2:41:83:c9:d0:29:aa:
         eb:b2:a9:47
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICASwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTY3NDAxMTAvBgNVBAUTKEUyQkJBRDM5MzE1OEEwNjc0QzY5NDlFQzNCOEEwQjcz
Rjg2MDI5QTIwHhcNMjMwOTIxMDMyNDIxWhcNMjQxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NTBiYjc2NS01ZDA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5a4DeN1EtXsFEJzyKckzd8P18ChU8kYFbw3WSUlGkB8E0q8MZ1EhtI9jqUOA
R48eWVY1+7hiV2j9Fh0Zp+4Jla7HShPiHF4cWrM4N09/Sqy/ljiZHhJf6Pe6pvbO
lEIbnZ58t+BHU06/FVkQTSAguUD5il0Pbd+X0Qp/nbARN6cC4iR2+lghGrpqOGk0
bbNquH5hnuGYD7NDstKYBXdD3GBDQW/s4q870kj2yBkuP5tHDeKZ6vVh10Tvb/KL
STl+aZDNRKm2MGKKU1CyFBgH+rFsYbvJrTCk68zlWk6TFmfCVFU19mhh3TLXOw8A
BtqyB7moptnM1m5/kCaSfHilfQIDAQABo4IClTCCApEwHQYDVR0OBBYEFAVCihFv
QiK0SuZWMNlaFHF+piWuMB8GA1UdIwQYMBaAFOK7rTkxWKBnTGlJ7DuKC3P4YCmi
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Njc0MC8zNTI4QjBDQzE2
QzAxMUVEODAwODlBMjFDNEY5QUUwMi80cnV0T1RGWW9HZE1hVW5zTzRvTGNfaGdL
YUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzRydXRPVEZZb0dkTWFVbnNPNG9MY19oZ0thSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTY3NDAvMzUyOEIwQ0MxNkMwMTFFRDgwMDg5QTIxQzRGOUFFMDIvRUM3NTEyNjYx
NkNBMTFFRDhFMjkwQTU5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAHKG6owDQYJKoZIhvcNAQELBQADggEBAIFfEQrx8rL43ujh
98eS1iT1oytJmhDmWlSVPRoOAkt0C7rqquFIL7L4yPayfY1IR3rA5xzR7yTJjEoo
2JDhlw8G06yjcl7m3pq3a2CV0BgUiKgGP6ldHJH/TprwGJ6ImFPLOCYHvuCrOR+3
x+1CAUqDv/vWaPFE0CMbmLwiTEAFqPjVle8uyxfGQ923jyCKmCYl26U3o/Ge/unF
fOZB+zEjdIV0a8eNqO55LP3df9scGP0URlQGf26JYxWBM2I0Mk34WMN2/s93I2C+
KRmO7vlZQPqjJD78TvbmCo4V9SFAp2RFmuCAkDkDc7mz0Go42y4S8frQ4kGDydAp
quuyqUc=
-----END CERTIFICATE-----
Generated at Fri May 17 06:18:06 2024 by rpki-client on console-fra.rpki-client.org