Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9158620/0E919934884211EEA7D8C814C4F9AE02/62C61398C93A11EEA1A4CA4FC4F9AE02.roa
File:                     62C61398C93A11EEA1A4CA4FC4F9AE02.roa (raw, json)
Hash identifier:          ROYJghlVOvaMnbHvL/73QuVNi54B62NVGwKlydNJjfk=
Subject key identifier:   6F:CA:FD:6E:82:F2:AE:88:60:61:A2:A7:9E:64:CE:6E:29:A4:39:2F
Certificate issuer:       /CN=A9158620/serialNumber=A408AC94A0D336F47324905A918AF24902F0DE8B
Certificate serial:       96
Authority key identifier: A4:08:AC:94:A0:D3:36:F4:73:24:90:5A:91:8A:F2:49:02:F0:DE:8B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pAislKDTNvRzJJBakYrySQLw3os.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9158620/0E919934884211EEA7D8C814C4F9AE02/62C61398C93A11EEA1A4CA4FC4F9AE02.roa
Signing time:             Mon 01 Jul 2024 07:07:55 +0000
ROA not before:           Mon 01 Jul 2024 07:07:55 +0000
ROA not after:            Sun 31 Aug 2025 00:00:00 +0000
asID:                     202595
IP address blocks:        43.245.43.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9158620/0E919934884211EEA7D8C814C4F9AE02/pAislKDTNvRzJJBakYrySQLw3os.crl
                          rsync://rpki.apnic.net/member_repository/A9158620/0E919934884211EEA7D8C814C4F9AE02/pAislKDTNvRzJJBakYrySQLw3os.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pAislKDTNvRzJJBakYrySQLw3os.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 150 (0x96)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9158620/serialNumber=A408AC94A0D336F47324905A918AF24902F0DE8B
        Validity
            Not Before: Jul  1 07:07:55 2024 GMT
            Not After : Aug 31 00:00:00 2025 GMT
        Subject: CN=668255cb-6a40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:95:50:c2:f2:86:c2:04:8c:3f:7e:34:50:e4:
                    16:85:68:1c:25:02:07:fa:2f:33:f7:a6:ee:25:b3:
                    4a:6b:28:e2:1f:93:33:29:22:7f:38:d8:42:33:f3:
                    b2:54:91:11:e0:24:3c:68:df:bb:63:cc:35:9d:b3:
                    c9:70:e5:47:8a:ff:cb:ee:4d:ea:f4:b2:0f:3d:e0:
                    d5:47:40:5d:55:8d:71:49:dd:8b:21:6b:99:3b:61:
                    ba:2f:ef:95:1e:d7:20:a5:2d:f2:33:88:8f:d8:3b:
                    90:a1:58:d9:c6:0b:30:25:3f:fb:14:6b:e7:7f:f6:
                    d4:32:24:85:d4:3a:91:d6:0e:88:5b:57:e6:a6:81:
                    30:b7:e7:ea:04:09:92:98:7d:bb:53:e7:0d:b7:92:
                    89:cc:3d:12:68:34:b3:4e:26:8d:bc:96:a6:c4:de:
                    a3:d3:37:87:a6:34:13:c4:e4:cf:40:84:91:0e:a2:
                    fa:a7:a1:34:f3:4d:41:61:f2:5f:ef:d8:e1:ad:3a:
                    0a:8f:80:a1:89:02:d8:30:b1:f4:e3:44:19:57:69:
                    fd:69:5f:6e:aa:ab:a5:59:ec:8b:9e:27:e2:17:f7:
                    90:38:21:2a:6a:fb:13:ab:65:83:65:fb:da:7d:9a:
                    51:04:2e:f5:bb:94:39:57:80:aa:42:d8:bc:23:46:
                    10:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:CA:FD:6E:82:F2:AE:88:60:61:A2:A7:9E:64:CE:6E:29:A4:39:2F
            X509v3 Authority Key Identifier:
                keyid:A4:08:AC:94:A0:D3:36:F4:73:24:90:5A:91:8A:F2:49:02:F0:DE:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9158620/0E919934884211EEA7D8C814C4F9AE02/pAislKDTNvRzJJBakYrySQLw3os.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pAislKDTNvRzJJBakYrySQLw3os.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158620/0E919934884211EEA7D8C814C4F9AE02/62C61398C93A11EEA1A4CA4FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.245.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:10:4e:f6:3a:92:1a:7e:3f:b8:61:81:46:7e:1f:ab:1e:26:
         3f:89:1a:be:51:21:c7:d6:27:0c:fb:e4:d8:e1:f9:99:4a:8d:
         2a:bf:78:3b:58:58:51:95:3f:36:72:cf:1e:9e:ee:3e:39:12:
         15:36:d0:62:97:b4:f0:49:df:8b:df:ab:c1:21:49:03:bb:8a:
         a8:49:fc:22:fb:c9:c0:c6:dc:e4:14:6d:7d:38:fd:b0:b3:f9:
         82:91:dc:3b:28:9c:3d:45:11:8c:08:9a:f1:9e:80:e2:e3:31:
         10:40:47:03:56:c7:b3:9b:fb:78:6a:01:08:ff:c3:d1:76:49:
         50:ce:d0:91:37:fa:97:fc:91:42:ec:d6:cb:28:22:81:21:75:
         92:20:18:ca:5a:6f:03:09:33:93:35:7d:f9:81:fa:8a:6b:98:
         8a:07:fd:5b:9d:9e:44:98:51:72:ca:1c:33:a6:8d:e4:20:88:
         4b:fe:67:17:f0:fe:bc:7b:68:65:1b:26:f0:20:d2:70:d0:7c:
         ec:cf:67:d4:aa:dc:bd:e5:62:9f:ca:2d:c6:7d:ef:92:6c:81:
         6b:93:6a:df:bd:e6:c5:a2:fb:52:3d:54:47:9d:d2:61:2a:6f:
         2c:1b:6f:f4:d6:e5:e4:70:b8:a9:59:e6:63:89:72:e7:9e:35:
         6e:37:db:71
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAJYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTg2MjAxMTAvBgNVBAUTKEE0MDhBQzk0QTBEMzM2RjQ3MzI0OTA1QTkxOEFGMjQ5
MDJGMERFOEIwHhcNMjQwNzAxMDcwNzU1WhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NjgyNTVjYi02YTQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA25VQwvKGwgSMP340UOQWhWgcJQIH+i8z96buJbNKayjiH5MzKSJ/ONhCM/Oy
VJER4CQ8aN+7Y8w1nbPJcOVHiv/L7k3q9LIPPeDVR0BdVY1xSd2LIWuZO2G6L++V
HtcgpS3yM4iP2DuQoVjZxgswJT/7FGvnf/bUMiSF1DqR1g6IW1fmpoEwt+fqBAmS
mH27U+cNt5KJzD0SaDSzTiaNvJamxN6j0zeHpjQTxOTPQISRDqL6p6E0801BYfJf
79jhrToKj4ChiQLYMLH040QZV2n9aV9uqqulWeyLnifiF/eQOCEqavsTq2WDZfva
fZpRBC71u5Q5V4CqQti8I0YQ+wIDAQABo4IClTCCApEwHQYDVR0OBBYEFG/K/W6C
8q6IYGGip55kzm4ppDkvMB8GA1UdIwQYMBaAFKQIrJSg0zb0cySQWpGK8kkC8N6L
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODYyMC8wRTkxOTkzNDg4
NDIxMUVFQTdEOEM4MTRDNEY5QUUwMi9wQWlzbEtEVE52UnpKSkJha1lyeVNRTHcz
b3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3BBaXNsS0RUTnZSekpKQmFrWXJ5U1FMdzNvcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTg2MjAvMEU5MTk5MzQ4ODQyMTFFRUE3RDhDODE0QzRGOUFFMDIvNjJDNjEzOThD
OTNBMTFFRUExQTRDQTRGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAAr9SswDQYJKoZIhvcNAQELBQADggEBAKwQTvY6khp+P7hh
gUZ+H6seJj+JGr5RIcfWJwz75Njh+ZlKjSq/eDtYWFGVPzZyzx6e7j45EhU20GKX
tPBJ34vfq8EhSQO7iqhJ/CL7ycDG3OQUbX04/bCz+YKR3DsonD1FEYwImvGegOLj
MRBARwNWx7Ob+3hqAQj/w9F2SVDO0JE3+pf8kULs1ssoIoEhdZIgGMpabwMJM5M1
ffmB+oprmIoH/VudnkSYUXLKHDOmjeQgiEv+Zxfw/rx7aGUbJvAg0nDQfOzPZ9Sq
3L3lYp/KLcZ975JsgWuTat+95sWi+1I9VEed0mEqbywbb/TW5eRwuKlZ5mOJcuee
NW4323E=
-----END CERTIFICATE-----
Generated at Sat Nov 23 05:02:48 2024 by rpki-client on console-fra.rpki-client.org