Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/C21FA1CE080511EAA9457C67C4F9AE02.roa
File:                     C21FA1CE080511EAA9457C67C4F9AE02.roa (raw, json)
Hash identifier:          YKQHGJEMzcVd/VeTOaZJXYx7/8P1yEtO0yBthH+z7wI=
Subject key identifier:   97:35:C5:2A:AF:10:C1:51:19:4F:C8:9F:95:8D:A0:8E:18:6E:B0:E2
Certificate issuer:       /CN=A9157DAE/serialNumber=E1B807AC2B7455FBB1E316068D1D0171260BB1C7
Certificate serial:       11DD
Authority key identifier: E1:B8:07:AC:2B:74:55:FB:B1:E3:16:06:8D:1D:01:71:26:0B:B1:C7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bgHrCt0Vfux4xYGjR0BcSYLscc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/C21FA1CE080511EAA9457C67C4F9AE02.roa
Signing time:             Fri 08 Dec 2023 17:44:54 +0000
ROA not before:           Fri 08 Dec 2023 17:44:54 +0000
ROA not after:            Fri 31 Jan 2025 00:00:00 +0000
asID:                     139263
IP address blocks:        2403:cfc0:1011::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/4bgHrCt0Vfux4xYGjR0BcSYLscc.crl
                          rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/4bgHrCt0Vfux4xYGjR0BcSYLscc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bgHrCt0Vfux4xYGjR0BcSYLscc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 17:09:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4573 (0x11dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9157DAE/serialNumber=E1B807AC2B7455FBB1E316068D1D0171260BB1C7
        Validity
            Not Before: Dec  8 17:44:54 2023 GMT
            Not After : Jan 31 00:00:00 2025 GMT
        Subject: CN=65735616-3bde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ee:40:a7:89:cd:9a:33:ab:57:99:4e:10:c4:
                    71:27:46:65:e9:90:a8:b2:f0:ed:1e:4c:e3:ca:d4:
                    5e:2a:5b:6c:52:14:9c:4d:db:7f:e6:72:03:bd:23:
                    94:00:77:8f:c6:61:76:19:73:d0:32:f1:0b:b8:1d:
                    dc:0b:f6:f3:cb:89:68:5d:0a:98:a7:92:12:88:39:
                    b1:f3:62:01:71:20:65:06:42:66:bd:c5:5c:c7:1e:
                    15:7d:e2:45:a9:d3:bc:0a:4b:0c:d1:0e:c9:65:b7:
                    6a:f3:40:68:58:7f:d4:9b:43:36:ae:43:ee:29:1e:
                    b1:a3:6d:17:f5:08:27:ed:e8:98:02:68:4b:16:c5:
                    be:42:d3:f4:bd:a6:7a:43:17:02:e8:6c:1b:4a:77:
                    60:64:34:c8:f8:79:ff:da:0e:6b:2c:ac:6e:ed:29:
                    d6:af:11:5c:40:28:d8:06:03:8b:cd:df:8e:3b:53:
                    85:d0:6b:1b:ec:1d:aa:3d:67:09:6c:ce:76:d5:b6:
                    72:6b:b8:93:c6:ba:a5:d2:7c:8f:56:66:e0:6c:bd:
                    de:98:6f:18:91:2c:41:5c:bb:6e:9d:c2:89:55:bc:
                    10:0a:83:fe:0f:c6:70:88:76:9a:e5:5e:57:1b:b2:
                    65:38:9d:93:65:57:68:11:e5:f0:0b:7f:33:14:53:
                    33:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:35:C5:2A:AF:10:C1:51:19:4F:C8:9F:95:8D:A0:8E:18:6E:B0:E2
            X509v3 Authority Key Identifier:
                keyid:E1:B8:07:AC:2B:74:55:FB:B1:E3:16:06:8D:1D:01:71:26:0B:B1:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/4bgHrCt0Vfux4xYGjR0BcSYLscc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bgHrCt0Vfux4xYGjR0BcSYLscc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/C21FA1CE080511EAA9457C67C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:cfc0:1011::/48

    Signature Algorithm: sha256WithRSAEncryption
         43:b7:fa:99:48:71:3e:e9:58:b0:da:36:d9:5a:0d:15:79:0c:
         9e:54:a6:b8:06:52:0a:04:72:33:99:99:0c:c6:36:65:f1:26:
         bd:31:87:8d:d7:c8:5a:07:26:63:1a:c7:0a:30:0d:11:d6:f6:
         a5:bd:1d:9d:38:91:dc:b8:ed:1e:68:f0:c7:94:ca:d6:bb:04:
         9a:13:00:94:2d:af:61:a0:1d:df:ca:e4:dd:01:34:e9:f5:a3:
         3c:3c:c7:dc:d6:a8:58:4f:46:b4:bc:56:ae:21:10:4b:9d:18:
         5c:3b:52:ff:7e:a5:c5:c8:c9:27:66:ec:49:b1:c2:7f:b4:e0:
         47:dc:2f:3b:15:0d:93:04:81:2f:27:83:d2:8a:08:a7:1e:9d:
         f1:ae:6e:40:0a:ba:c0:b3:0e:b2:ce:87:9b:9d:ae:40:6e:70:
         3e:a2:b6:5c:90:e5:fb:fb:92:11:55:72:3f:15:59:4f:1f:52:
         95:0d:67:2d:00:e3:e3:d5:10:f7:5d:83:b5:ee:ae:ab:a8:e4:
         aa:45:e8:9b:fe:60:02:dc:50:52:2c:1a:a7:e3:a6:5d:b1:a9:
         89:6d:e6:87:9a:75:26:bf:c9:07:f8:ad:d5:62:9d:d7:67:34:
         80:71:ad:ae:1c:16:12:e9:2e:87:69:fc:c7:34:ad:cd:37:ea:
         04:37:51:a4
-----BEGIN CERTIFICATE-----
MIIFdDCCBFygAwIBAgICEd0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTdEQUUxMTAvBgNVBAUTKEUxQjgwN0FDMkI3NDU1RkJCMUUzMTYwNjhEMUQwMTcx
MjYwQkIxQzcwHhcNMjMxMjA4MTc0NDU0WhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NTczNTYxNi0zYmRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvO5Ap4nNmjOrV5lOEMRxJ0Zl6ZCosvDtHkzjytReKltsUhScTdt/5nIDvSOU
AHePxmF2GXPQMvELuB3cC/bzy4loXQqYp5ISiDmx82IBcSBlBkJmvcVcxx4VfeJF
qdO8CksM0Q7JZbdq80BoWH/Um0M2rkPuKR6xo20X9Qgn7eiYAmhLFsW+QtP0vaZ6
QxcC6GwbSndgZDTI+Hn/2g5rLKxu7SnWrxFcQCjYBgOLzd+OO1OF0Gsb7B2qPWcJ
bM521bZya7iTxrql0nyPVmbgbL3emG8YkSxBXLtuncKJVbwQCoP+D8ZwiHaa5V5X
G7JlOJ2TZVdoEeXwC38zFFMzVwIDAQABo4ICmDCCApQwHQYDVR0OBBYEFJc1xSqv
EMFRGU/In5WNoI4YbrDiMB8GA1UdIwQYMBaAFOG4B6wrdFX7seMWBo0dAXEmC7HH
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0RBRS82MTY2NkMwRUQ2
ODkxMUU4QjY4MTE0MzNDNEY5QUUwMi80YmdIckN0MFZmdXg0eFlHalIwQmNTWUxz
Y2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzRiZ0hyQ3QwVmZ1eDR4WUdqUjBCY1NZTHNjYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTdEQUUvNjE2NjZDMEVENjg5MTFFOEI2ODExNDMzQzRGOUFFMDIvQzIxRkExQ0Uw
ODA1MTFFQUE5NDU3QzY3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E
EzARMA8EAgACMAkDBwAkA8/AEBEwDQYJKoZIhvcNAQELBQADggEBAEO3+plIcT7p
WLDaNtlaDRV5DJ5UprgGUgoEcjOZmQzGNmXxJr0xh43XyFoHJmMaxwowDRHW9qW9
HZ04kdy47R5o8MeUyta7BJoTAJQtr2GgHd/K5N0BNOn1ozw8x9zWqFhPRrS8Vq4h
EEudGFw7Uv9+pcXIySdm7Emxwn+04EfcLzsVDZMEgS8ng9KKCKcenfGubkAKusCz
DrLOh5udrkBucD6itlyQ5fv7khFVcj8VWU8fUpUNZy0A4+PVEPddg7Xurquo5KpF
6Jv+YALcUFIsGqfjpl2xqYlt5oeadSa/yQf4rdVinddnNIBxra4cFhLpLodp/Mc0
rc036gQ3UaQ=
-----END CERTIFICATE-----
Generated at Fri Nov 22 19:50:03 2024 by rpki-client on console-ams.rpki-client.org