Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/1605F9B6169E11EC9D259855C4F9AE02.roa
File:                     1605F9B6169E11EC9D259855C4F9AE02.roa (raw, json)
Hash identifier:          naxs7ew7s0PkoZdXBSG0ypM8gV7BBZM5t7A8Bm0sDT4=
Subject key identifier:   78:A4:D2:89:E2:3B:91:AF:5D:6F:F7:21:6C:01:D1:F1:CA:C6:BB:8A
Certificate issuer:       /CN=A9158E3F/serialNumber=7E313AB7FF26E783E03C07851612751881AE4918
Certificate serial:       0B01
Authority key identifier: 7E:31:3A:B7:FF:26:E7:83:E0:3C:07:85:16:12:75:18:81:AE:49:18
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/1605F9B6169E11EC9D259855C4F9AE02.roa
Signing time:             Fri 16 Aug 2024 20:28:26 +0000
ROA not before:           Fri 16 Aug 2024 20:28:26 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     18382
IP address blocks:        202.167.233.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.crl
                          rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 19:26:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2817 (0xb01)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9158E3F/serialNumber=7E313AB7FF26E783E03C07851612751881AE4918
        Validity
            Not Before: Aug 16 20:28:26 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=66bfb66a-3a51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:c3:f3:0c:02:c6:8f:db:e6:db:2a:a9:e1:85:
                    74:25:57:dc:94:49:67:75:df:b9:96:f4:51:11:be:
                    64:21:8d:79:48:9a:dd:f0:e3:35:f6:70:41:13:29:
                    85:d5:89:14:59:21:c8:f0:c1:47:6a:7e:10:5d:7a:
                    28:06:4d:3c:0c:da:98:4a:b1:b6:36:af:62:9e:7d:
                    69:25:72:92:61:d5:44:26:ae:32:59:29:6c:a8:6e:
                    4d:95:df:0d:5e:08:1f:6c:6a:7f:76:58:49:df:32:
                    fe:de:00:32:e4:dd:da:87:64:0e:be:63:b1:de:4e:
                    8f:9a:5e:84:11:40:e6:6d:de:19:a3:41:a0:ab:c4:
                    30:3c:f9:ec:ce:22:50:09:5a:d3:77:3e:e4:e2:d5:
                    2d:e0:4c:bd:60:a7:e6:a5:6f:f3:81:da:d6:ea:7a:
                    88:dc:e8:b2:5b:39:da:8f:ec:8e:cc:fd:9f:b4:c9:
                    8f:e3:d7:f3:b2:21:ad:d2:cc:fa:33:b0:2d:20:ea:
                    f5:d0:ec:40:41:f7:69:e6:00:96:a4:84:22:57:a8:
                    c5:0a:1e:89:8e:11:86:5a:e6:4b:cd:a8:5e:14:20:
                    9d:91:6b:87:b2:9c:10:4e:c5:9c:d5:a6:45:ed:85:
                    cb:19:0f:8e:b0:6b:c7:96:59:82:eb:16:9c:fa:c7:
                    e3:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:A4:D2:89:E2:3B:91:AF:5D:6F:F7:21:6C:01:D1:F1:CA:C6:BB:8A
            X509v3 Authority Key Identifier:
                keyid:7E:31:3A:B7:FF:26:E7:83:E0:3C:07:85:16:12:75:18:81:AE:49:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/1605F9B6169E11EC9D259855C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.167.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:6c:94:83:10:8a:41:75:41:28:f9:87:29:db:cb:4b:64:f5:
         13:10:f3:e8:97:60:c3:93:c5:14:b9:da:53:d5:7b:15:ff:5b:
         94:dd:c6:cf:29:13:8d:ad:9b:fc:df:b3:c0:02:3c:5d:12:61:
         25:b7:de:6a:d1:4e:91:58:8a:9b:01:b4:8f:10:b1:40:b8:f0:
         99:9b:96:6a:47:3e:25:d8:1f:58:ae:0c:db:c5:ab:7e:2f:6c:
         90:62:d7:7b:56:65:58:7b:a3:7d:62:35:40:cb:6b:28:1d:01:
         39:06:86:96:c7:f5:29:36:aa:62:e2:bb:39:a1:38:11:50:a8:
         02:a7:97:9f:d6:d9:20:d3:db:b1:81:e3:52:1a:81:d3:08:01:
         2a:7d:46:ce:4f:10:39:81:95:10:f5:71:69:47:65:e3:d7:3b:
         73:4e:0a:c2:27:bf:f0:74:71:53:1a:11:3f:b1:f3:cf:9e:48:
         55:ec:58:2d:d1:1c:1b:b0:71:27:60:b4:a8:b8:2d:a8:31:0b:
         e1:fe:51:29:16:af:fc:22:78:e7:ec:00:42:54:b3:eb:ee:a7:
         54:12:58:6f:85:62:46:f6:5e:75:df:cc:1b:be:91:2c:3e:7a:
         82:bc:10:7b:cb:cf:e8:92:10:b0:af:38:ef:2e:4b:3d:f9:89:
         e5:61:97:b8
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICCwEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NThFM0YxMTAvBgNVBAUTKDdFMzEzQUI3RkYyNkU3ODNFMDNDMDc4NTE2MTI3NTE4
ODFBRTQ5MTgwHhcNMjQwODE2MjAyODI2WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmJmYjY2YS0zYTUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0sPzDALGj9vm2yqp4YV0JVfclElndd+5lvRREb5kIY15SJrd8OM19nBBEymF
1YkUWSHI8MFHan4QXXooBk08DNqYSrG2Nq9inn1pJXKSYdVEJq4yWSlsqG5Nld8N
XggfbGp/dlhJ3zL+3gAy5N3ah2QOvmOx3k6Pml6EEUDmbd4Zo0Ggq8QwPPnsziJQ
CVrTdz7k4tUt4Ey9YKfmpW/zgdrW6nqI3OiyWznaj+yOzP2ftMmP49fzsiGt0sz6
M7AtIOr10OxAQfdp5gCWpIQiV6jFCh6JjhGGWuZLzaheFCCdkWuHspwQTsWc1aZF
7YXLGQ+OsGvHllmC6xac+sfjWQIDAQABo4IClTCCApEwHQYDVR0OBBYEFHik0oni
O5GvXW/3IWwB0fHKxruKMB8GA1UdIwQYMBaAFH4xOrf/JueD4DwHhRYSdRiBrkkY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OEUzRi9DMjQzMjJCQTU0
NDYxMUVBOEMwNTY1MURDNEY5QUUwMi9makU2dF84bTU0UGdQQWVGRmhKMUdJR3VT
UmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2ZqRTZ0XzhtNTRQZ1BBZUZGaEoxR0lHdVNSZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NThFM0YvQzI0MzIyQkE1NDQ2MTFFQThDMDU2NTFEQzRGOUFFMDIvMTYwNUY5QjYx
NjlFMTFFQzlEMjU5ODU1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADKp+kwDQYJKoZIhvcNAQELBQADggEBAGdslIMQikF1QSj5
hynby0tk9RMQ8+iXYMOTxRS52lPVexX/W5Tdxs8pE42tm/zfs8ACPF0SYSW33mrR
TpFYipsBtI8QsUC48JmblmpHPiXYH1iuDNvFq34vbJBi13tWZVh7o31iNUDLaygd
ATkGhpbH9Sk2qmLiuzmhOBFQqAKnl5/W2SDT27GB41IagdMIASp9Rs5PEDmBlRD1
cWlHZePXO3NOCsInv/B0cVMaET+x88+eSFXsWC3RHBuwcSdgtKi4LagxC+H+USkW
r/wieOfsAEJUs+vup1QSWG+FYkb2XnXfzBu+kSw+eoK8EHvLz+iSELCvOO8uSz35
ieVhl7g=
-----END CERTIFICATE-----
Generated at Wed Nov 20 21:34:49 2024 by rpki-client on console-ams.rpki-client.org