Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915B2EC/842759562B0911EC851B980EC4F9AE02/C6E67CEACB0911ECA16E4A19C4F9AE02.roa
File:                     C6E67CEACB0911ECA16E4A19C4F9AE02.roa (raw, json)
Hash identifier:          eSOO4OZJq9oAUGzG+Jm/RF9DAg/VCtKcVYa1dGAc4zo=
Subject key identifier:   96:AC:1F:03:3F:C4:5F:50:F4:9C:05:C4:A1:0D:CE:93:6B:5F:01:74
Certificate issuer:       /CN=A915B2EC/serialNumber=46922C565440040BD99AFD4E329ED9DEB6F92573
Certificate serial:       04AE
Authority key identifier: 46:92:2C:56:54:40:04:0B:D9:9A:FD:4E:32:9E:D9:DE:B6:F9:25:73
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RpIsVlRABAvZmv1OMp7Z3rb5JXM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915B2EC/842759562B0911EC851B980EC4F9AE02/C6E67CEACB0911ECA16E4A19C4F9AE02.roa
Signing time:             Fri 22 Nov 2024 23:43:44 +0000
ROA not before:           Fri 22 Nov 2024 23:43:44 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     149767
IP address blocks:        2407:d840:2::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915B2EC/842759562B0911EC851B980EC4F9AE02/RpIsVlRABAvZmv1OMp7Z3rb5JXM.crl
                          rsync://rpki.apnic.net/member_repository/A915B2EC/842759562B0911EC851B980EC4F9AE02/RpIsVlRABAvZmv1OMp7Z3rb5JXM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RpIsVlRABAvZmv1OMp7Z3rb5JXM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1198 (0x4ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915B2EC/serialNumber=46922C565440040BD99AFD4E329ED9DEB6F92573
        Validity
            Not Before: Nov 22 23:43:44 2024 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=67411730-6fb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:44:a3:95:9f:2a:e7:d8:8c:d2:e7:f9:d0:ca:
                    4c:34:20:8c:59:e9:a1:b5:2b:04:60:50:ce:fe:86:
                    02:fd:43:6a:ea:76:a3:57:3c:13:ee:8b:0e:c5:3b:
                    15:f4:6c:15:4f:57:98:94:c4:05:87:e9:07:d1:49:
                    71:17:f9:88:3c:c2:6e:53:62:ed:82:dc:c8:ba:d7:
                    cc:20:45:5f:5c:a6:f3:41:e4:34:62:2a:bc:43:8c:
                    bd:d6:c4:44:6c:78:59:73:a1:e7:60:59:6a:8d:62:
                    5c:e1:fa:1d:ab:aa:15:f4:e8:ea:14:21:47:28:b0:
                    ab:29:66:79:79:71:e8:66:86:fa:2f:ef:03:3a:e2:
                    99:e2:7f:4a:f0:26:cc:a2:c7:15:98:86:5b:b0:6f:
                    f4:bc:97:eb:e9:bd:70:3f:aa:08:91:c4:d0:b8:b7:
                    0e:62:b1:e5:ab:4c:e3:64:cf:2f:b3:fd:e7:f5:83:
                    01:cc:7a:09:5c:05:c2:3d:6f:2b:9e:29:70:2f:6e:
                    4f:da:64:a6:40:a1:8a:09:85:94:b0:03:0b:32:96:
                    45:09:37:f5:84:e0:f5:8f:7d:18:08:b9:49:e0:76:
                    03:53:5c:d0:ae:29:db:06:68:2f:dd:f6:6e:ac:f8:
                    41:bc:11:fe:8c:c9:f4:f7:db:ac:cf:a0:fc:c5:fa:
                    cf:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:AC:1F:03:3F:C4:5F:50:F4:9C:05:C4:A1:0D:CE:93:6B:5F:01:74
            X509v3 Authority Key Identifier:
                keyid:46:92:2C:56:54:40:04:0B:D9:9A:FD:4E:32:9E:D9:DE:B6:F9:25:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915B2EC/842759562B0911EC851B980EC4F9AE02/RpIsVlRABAvZmv1OMp7Z3rb5JXM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RpIsVlRABAvZmv1OMp7Z3rb5JXM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B2EC/842759562B0911EC851B980EC4F9AE02/C6E67CEACB0911ECA16E4A19C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:d840:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         08:76:a6:6c:3f:50:eb:6c:ef:32:a4:de:df:fd:e0:39:7c:e2:
         c5:94:22:a8:d6:21:f0:ef:71:ed:8c:79:9b:62:e1:63:7e:97:
         37:e7:33:77:9a:1e:c9:ca:9f:28:c5:8f:f9:7b:72:5f:52:93:
         06:eb:8c:f7:ef:15:d2:b7:a1:9b:fc:07:62:04:20:a3:5f:f3:
         f2:7f:12:82:c5:8d:20:34:01:b7:b6:4f:3c:2e:e2:07:b3:96:
         12:4b:cd:58:87:9a:99:df:96:90:27:73:9d:1a:4f:7c:51:49:
         82:37:1b:65:5a:35:eb:66:25:1c:9d:15:1f:44:57:8a:ae:c5:
         0b:f0:c7:b0:ec:ff:32:d4:da:ba:30:fe:dc:9d:60:e1:ff:41:
         5d:93:0b:53:ff:d0:93:5b:74:cc:ea:13:84:83:4f:0f:93:61:
         45:cd:d3:e1:05:fe:14:37:b0:5a:e2:3a:4c:66:65:0a:60:b3:
         15:0b:55:85:90:19:f0:3d:09:39:70:46:a3:55:d2:35:62:54:
         cc:59:d5:b6:05:c7:09:46:7c:67:19:e8:69:0a:1f:8f:56:f3:
         ce:c5:1e:94:ef:0e:7e:6a:e5:19:f3:02:12:be:78:c8:14:4f:
         21:40:0a:3d:db:ce:f1:01:63:3a:39:74:76:a0:c3:00:4e:cd:
         44:9d:63:48
-----BEGIN CERTIFICATE-----
MIIFdDCCBFygAwIBAgICBK4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUIyRUMxMTAvBgNVBAUTKDQ2OTIyQzU2NTQ0MDA0MEJEOTlBRkQ0RTMyOUVEOURF
QjZGOTI1NzMwHhcNMjQxMTIyMjM0MzQ0WhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzQxMTczMC02ZmIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxESjlZ8q59iM0uf50MpMNCCMWemhtSsEYFDO/oYC/UNq6najVzwT7osOxTsV
9GwVT1eYlMQFh+kH0UlxF/mIPMJuU2LtgtzIutfMIEVfXKbzQeQ0Yiq8Q4y91sRE
bHhZc6HnYFlqjWJc4fodq6oV9OjqFCFHKLCrKWZ5eXHoZob6L+8DOuKZ4n9K8CbM
oscVmIZbsG/0vJfr6b1wP6oIkcTQuLcOYrHlq0zjZM8vs/3n9YMBzHoJXAXCPW8r
nilwL25P2mSmQKGKCYWUsAMLMpZFCTf1hOD1j30YCLlJ4HYDU1zQrinbBmgv3fZu
rPhBvBH+jMn099usz6D8xfrPOQIDAQABo4ICmDCCApQwHQYDVR0OBBYEFJasHwM/
xF9Q9JwFxKENzpNrXwF0MB8GA1UdIwQYMBaAFEaSLFZUQAQL2Zr9TjKe2d62+SVz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjJFQy84NDI3NTk1NjJC
MDkxMUVDODUxQjk4MEVDNEY5QUUwMi9ScElzVmxSQUJBdlptdjFPTXA3WjNyYjVK
WE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1JwSXNWbFJBQkF2Wm12MU9NcDdaM3JiNUpYTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NUIyRUMvODQyNzU5NTYyQjA5MTFFQzg1MUI5ODBFQzRGOUFFMDIvQzZFNjdDRUFD
QjA5MTFFQ0ExNkU0QTE5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E
EzARMA8EAgACMAkDBwAkB9hAAAIwDQYJKoZIhvcNAQELBQADggEBAAh2pmw/UOts
7zKk3t/94Dl84sWUIqjWIfDvce2MeZti4WN+lzfnM3eaHsnKnyjFj/l7cl9Skwbr
jPfvFdK3oZv8B2IEIKNf8/J/EoLFjSA0Abe2Tzwu4gezlhJLzViHmpnflpAnc50a
T3xRSYI3G2VaNetmJRydFR9EV4quxQvwx7Ds/zLU2row/tydYOH/QV2TC1P/0JNb
dMzqE4SDTw+TYUXN0+EF/hQ3sFriOkxmZQpgsxULVYWQGfA9CTlwRqNV0jViVMxZ
1bYFxwlGfGcZ6GkKH49W887FHpTvDn5q5RnzAhK+eMgUTyFACj3bzvEBYzo5dHag
wwBOzUSdY0g=
-----END CERTIFICATE-----
Generated at Sat Nov 23 00:49:34 2024 by rpki-client on console-fra.rpki-client.org