Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915A247/B1FC645C6F4A11EEA89F3363C4F9AE02/B4350DCC6F4B11EEA062D464C4F9AE02.roa
File:                     B4350DCC6F4B11EEA062D464C4F9AE02.roa (raw, json)
Hash identifier:          jl2fw6z4yQ9tjBtzQlIosdj1rXSh7BuyLIDg4TMeLq4=
Subject key identifier:   FB:60:B9:B7:21:C2:98:9F:74:C1:CF:0E:10:3E:AD:17:0A:DB:59:47
Certificate issuer:       /CN=A915A247/serialNumber=FBD4B43B5678F1A06CC907C4ED04BDA211D9DD2B
Certificate serial:       02
Authority key identifier: FB:D4:B4:3B:56:78:F1:A0:6C:C9:07:C4:ED:04:BD:A2:11:D9:DD:2B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-9S0O1Z48aBsyQfE7QS9ohHZ3Ss.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A247/B1FC645C6F4A11EEA89F3363C4F9AE02/B4350DCC6F4B11EEA062D464C4F9AE02.roa
Signing time:             Fri 20 Oct 2023 13:22:23 +0000
ROA not before:           Fri 20 Oct 2023 13:22:23 +0000
ROA not after:            Thu 31 Oct 2024 00:00:00 +0000
asID:                     38177
IP address blocks:        2407:4c0:ffff::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A247/B1FC645C6F4A11EEA89F3363C4F9AE02/-9S0O1Z48aBsyQfE7QS9ohHZ3Ss.crl
                          rsync://rpki.apnic.net/member_repository/A915A247/B1FC645C6F4A11EEA89F3363C4F9AE02/-9S0O1Z48aBsyQfE7QS9ohHZ3Ss.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-9S0O1Z48aBsyQfE7QS9ohHZ3Ss.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 22 Jun 2024 02:50:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A247/serialNumber=FBD4B43B5678F1A06CC907C4ED04BDA211D9DD2B
        Validity
            Not Before: Oct 20 13:22:23 2023 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=65327f0f-0f6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:6f:74:ca:6a:a5:35:c7:51:58:9b:18:94:6c:
                    c1:bd:d4:17:41:3b:a8:3d:eb:ce:0e:c1:6a:88:e1:
                    c7:bc:07:fc:5f:63:39:b6:82:2d:98:1c:a5:9b:cd:
                    4b:d9:5c:b9:61:2c:85:aa:97:ea:34:23:c6:81:f8:
                    89:b5:92:fc:28:8e:38:14:7e:4e:4e:e8:ee:80:46:
                    33:64:6c:57:56:6c:c9:1f:ba:1b:f5:cd:dc:00:af:
                    dc:68:0c:07:8b:d0:54:7c:21:95:77:70:32:bf:50:
                    66:a0:95:14:01:5a:ff:b6:0c:53:c6:29:d8:ef:99:
                    b4:94:4e:63:f5:48:18:b9:5b:c0:48:77:7c:12:dd:
                    66:38:28:6a:4c:ed:3d:44:25:a9:92:d9:07:51:8d:
                    e0:98:93:5f:94:5f:0c:33:07:ef:27:60:4f:c2:c9:
                    bc:a7:5f:26:44:85:59:6a:b3:e6:ae:52:40:79:bc:
                    2e:e9:6f:cc:f7:81:d6:33:9f:eb:20:d0:06:28:71:
                    c6:1e:72:f8:72:4f:fc:cc:78:47:6a:bb:fb:71:b9:
                    86:7e:52:4e:c0:de:0e:30:d8:19:d0:cd:36:a4:98:
                    e3:0e:3c:26:54:95:89:40:20:bb:5c:28:de:4a:4a:
                    4c:51:db:cd:4e:6a:8e:1c:8a:39:6f:fc:af:3d:e5:
                    d2:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:60:B9:B7:21:C2:98:9F:74:C1:CF:0E:10:3E:AD:17:0A:DB:59:47
            X509v3 Authority Key Identifier:
                keyid:FB:D4:B4:3B:56:78:F1:A0:6C:C9:07:C4:ED:04:BD:A2:11:D9:DD:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A247/B1FC645C6F4A11EEA89F3363C4F9AE02/-9S0O1Z48aBsyQfE7QS9ohHZ3Ss.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-9S0O1Z48aBsyQfE7QS9ohHZ3Ss.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A247/B1FC645C6F4A11EEA89F3363C4F9AE02/B4350DCC6F4B11EEA062D464C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:4c0:ffff::/48

    Signature Algorithm: sha256WithRSAEncryption
         c2:d6:c8:e1:95:85:24:5c:55:6e:58:0b:72:8b:79:b3:26:57:
         bb:79:da:70:b0:7b:54:52:4a:91:ab:7f:9f:76:4c:83:b2:a2:
         f0:3e:c0:23:1a:9b:f6:10:5c:ee:cb:a5:9a:ee:43:79:02:35:
         ec:45:57:a2:8e:19:2a:22:ed:d2:c0:5d:e2:30:a2:3e:65:b1:
         af:f9:7e:1e:a5:71:71:7e:90:a1:b7:3c:dd:03:8c:08:2e:e6:
         97:71:60:f7:14:ee:9f:e7:36:8b:d5:36:12:ae:0b:e4:2b:c7:
         8a:85:d0:78:6f:c9:c2:73:48:94:0a:14:50:23:f7:25:4b:32:
         67:3b:8d:95:bb:dd:69:bd:b9:dd:78:18:ad:8e:db:96:cc:0f:
         3a:30:f4:9a:02:b2:7a:cc:71:6f:4c:39:a1:b9:de:89:d5:f7:
         f8:06:4a:d6:ee:05:5a:23:6c:4c:91:aa:6e:a2:76:2c:cc:33:
         33:75:49:6e:12:ae:5f:3e:4e:50:7b:e3:c1:3f:ae:16:9f:6a:
         79:9f:96:5f:d0:c3:e6:e3:b6:52:85:2b:e7:c9:df:28:53:a5:
         b0:fe:07:52:44:42:27:cf:c2:26:c4:01:9f:ed:60:f6:66:ec:
         f3:c4:c3:e7:9a:d7:fe:cf:67:d3:52:dc:d3:e0:d5:65:fa:87:
         47:c5:c2:7e
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1
QTI0NzExMC8GA1UEBRMoRkJENEI0M0I1Njc4RjFBMDZDQzkwN0M0RUQwNEJEQTIx
MUQ5REQyQjAeFw0yMzEwMjAxMzIyMjNaFw0yNDEwMzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY1MzI3ZjBmLTBmNmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDxb3TKaqU1x1FYmxiUbMG91BdBO6g9684OwWqI4ce8B/xfYzm2gi2YHKWbzUvZ
XLlhLIWql+o0I8aB+Im1kvwojjgUfk5O6O6ARjNkbFdWbMkfuhv1zdwAr9xoDAeL
0FR8IZV3cDK/UGaglRQBWv+2DFPGKdjvmbSUTmP1SBi5W8BId3wS3WY4KGpM7T1E
JamS2QdRjeCYk1+UXwwzB+8nYE/CybynXyZEhVlqs+auUkB5vC7pb8z3gdYzn+sg
0AYoccYecvhyT/zMeEdqu/txuYZ+Uk7A3g4w2BnQzTakmOMOPCZUlYlAILtcKN5K
SkxR281Oao4cijlv/K895dKDAgMBAAGjggKYMIIClDAdBgNVHQ4EFgQU+2C5tyHC
mJ90wc8OED6tFwrbWUcwHwYDVR0jBBgwFoAU+9S0O1Z48aBsyQfE7QS9ohHZ3Ssw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVBMjQ3L0IxRkM2NDVDNkY0
QTExRUVBODlGMzM2M0M0RjlBRTAyLy05UzBPMVo0OGFCc3lRZkU3UVM5b2hIWjNT
cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvLTlTME8xWjQ4YUJzeVFmRTdRUzlvaEhaM1NzLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
QTI0Ny9CMUZDNjQ1QzZGNEExMUVFQTg5RjMzNjNDNEY5QUUwMi9CNDM1MERDQzZG
NEIxMUVFQTA2MkQ0NjRDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHACQHBMD//zANBgkqhkiG9w0BAQsFAAOCAQEAwtbI4ZWFJFxV
blgLcot5syZXu3nacLB7VFJKkat/n3ZMg7Ki8D7AIxqb9hBc7sulmu5DeQI17EVX
oo4ZKiLt0sBd4jCiPmWxr/l+HqVxcX6Qobc83QOMCC7ml3Fg9xTun+c2i9U2Eq4L
5CvHioXQeG/JwnNIlAoUUCP3JUsyZzuNlbvdab253XgYrY7blswPOjD0mgKyesxx
b0w5obneidX3+AZK1u4FWiNsTJGqbqJ2LMwzM3VJbhKuXz5OUHvjwT+uFp9qeZ+W
X9DD5uO2UoUr58nfKFOlsP4HUkRCJ8/CJsQBn+1g9mbs88TD55rX/s9n01Lc0+DV
ZfqHR8XCfg==
-----END CERTIFICATE-----
Generated at Sat Jun 15 10:27:17 2024 by rpki-client on console-ams.rpki-client.org