Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/EC0E245CF74211EEA182A952C4F9AE02.roa
File:                     EC0E245CF74211EEA182A952C4F9AE02.roa (raw, json)
Hash identifier:          zsMcFfP0meZMnf/henB7u90yQRc/M+tNv5iHh7MurxU=
Subject key identifier:   ED:F3:1D:D7:99:A7:D7:43:66:E9:CD:24:18:8F:DD:77:18:A8:20:A8
Certificate issuer:       /CN=A915D03A/serialNumber=615ED84C44E657F7095E0212AFEA052C542A0D91
Certificate serial:       18A4
Authority key identifier: 61:5E:D8:4C:44:E6:57:F7:09:5E:02:12:AF:EA:05:2C:54:2A:0D:91
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YV7YTETmV_cJXgISr-oFLFQqDZE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/EC0E245CF74211EEA182A952C4F9AE02.roa
Signing time:             Wed 10 Apr 2024 14:02:10 +0000
ROA not before:           Wed 10 Apr 2024 14:02:10 +0000
ROA not after:            Sun 02 Mar 2025 00:00:00 +0000
asID:                     45758
IP address blocks:        118.214.5.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/YV7YTETmV_cJXgISr-oFLFQqDZE.crl
                          rsync://rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/YV7YTETmV_cJXgISr-oFLFQqDZE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YV7YTETmV_cJXgISr-oFLFQqDZE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 16:27:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6308 (0x18a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915D03A/serialNumber=615ED84C44E657F7095E0212AFEA052C542A0D91
        Validity
            Not Before: Apr 10 14:02:10 2024 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=66169be1-4dec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:1c:73:17:f9:44:86:20:58:bf:bc:d7:fb:1c:
                    27:89:ee:66:6f:42:82:29:73:86:32:e4:85:a5:eb:
                    da:72:ec:d0:8e:19:79:4f:4b:fc:57:4c:d6:fb:68:
                    d8:75:4e:7b:91:0e:59:f0:99:14:05:85:3a:44:60:
                    27:a2:98:a2:ec:18:03:b5:74:06:c2:5e:93:74:43:
                    40:f3:69:25:d4:ec:92:17:b4:e6:b5:06:50:57:6e:
                    0c:97:82:61:46:9b:57:9e:d4:c3:b2:b2:04:28:51:
                    8d:29:a3:50:b3:af:47:d4:96:c6:69:6e:83:15:9c:
                    20:02:d9:56:62:ea:2c:16:1f:50:4f:c3:49:74:b6:
                    1d:d5:fa:e3:36:1c:8c:04:a8:20:19:8d:7d:00:38:
                    e6:0f:b2:87:8d:d2:45:db:d8:00:06:2d:85:5d:72:
                    0a:e9:8b:17:25:9b:0b:81:7c:40:84:55:b7:6b:55:
                    35:c4:9b:51:14:ff:cc:c0:f8:a6:f8:4d:70:4a:0e:
                    14:78:12:5e:d1:65:09:84:05:55:ea:c5:ef:fb:d8:
                    0d:50:be:fd:4a:97:93:21:4f:8a:7a:d1:0c:d0:74:
                    2d:a9:fa:d1:be:1d:c6:d5:94:cf:68:9b:58:9a:cc:
                    05:16:58:ea:97:37:08:f4:cf:2e:50:19:e5:45:1a:
                    90:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:F3:1D:D7:99:A7:D7:43:66:E9:CD:24:18:8F:DD:77:18:A8:20:A8
            X509v3 Authority Key Identifier:
                keyid:61:5E:D8:4C:44:E6:57:F7:09:5E:02:12:AF:EA:05:2C:54:2A:0D:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/YV7YTETmV_cJXgISr-oFLFQqDZE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YV7YTETmV_cJXgISr-oFLFQqDZE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/EC0E245CF74211EEA182A952C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.214.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:a8:af:e8:20:78:0a:f5:ed:fb:b9:7a:5a:27:7f:32:b5:41:
         1c:a7:94:29:73:38:ba:11:ba:2f:ef:ff:a6:1b:ec:0e:3f:2c:
         56:30:fb:b9:9d:da:d7:4c:29:4f:4f:60:bb:f7:aa:09:f3:90:
         aa:d7:a6:79:09:e1:bd:ca:eb:c7:43:8c:93:30:68:43:bc:c5:
         eb:cb:48:71:91:82:c8:de:e0:79:c6:1f:c3:0d:2e:ef:b4:00:
         5b:08:30:a5:c7:34:fb:d8:f9:f3:6c:a1:40:8e:40:5e:c8:86:
         2f:ab:84:19:3c:40:c1:cc:f7:87:54:f9:91:98:99:e6:8f:be:
         56:12:5d:18:b9:73:08:7e:0f:78:6b:01:a6:88:80:de:79:30:
         cc:10:f2:6f:c1:5f:cf:0f:54:d5:9d:67:52:b8:6d:03:c3:15:
         cc:ce:e1:a9:78:34:1e:64:25:4d:02:cd:4d:fb:b1:d4:1e:20:
         cc:e0:b4:b9:f5:df:bb:5d:7f:74:4a:c3:00:bc:4e:96:23:8f:
         55:24:ae:b8:dc:83:84:ea:bf:52:e8:2c:99:20:91:f8:2d:ea:
         ea:40:82:b9:36:1b:c2:46:eb:ed:da:bc:50:35:0c:8a:5e:cc:
         59:1e:e9:99:d9:a7:62:cc:08:cd:3b:45:af:44:4d:95:81:45:
         20:9f:19:12
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICGKQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUQwM0ExMTAvBgNVBAUTKDYxNUVEODRDNDRFNjU3RjcwOTVFMDIxMkFGRUEwNTJD
NTQyQTBEOTEwHhcNMjQwNDEwMTQwMjEwWhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02NjE2OWJlMS00ZGVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsxxzF/lEhiBYv7zX+xwnie5mb0KCKXOGMuSFpevacuzQjhl5T0v8V0zW+2jY
dU57kQ5Z8JkUBYU6RGAnopii7BgDtXQGwl6TdENA82kl1OySF7TmtQZQV24Ml4Jh
RptXntTDsrIEKFGNKaNQs69H1JbGaW6DFZwgAtlWYuosFh9QT8NJdLYd1frjNhyM
BKggGY19ADjmD7KHjdJF29gABi2FXXIK6YsXJZsLgXxAhFW3a1U1xJtRFP/MwPim
+E1wSg4UeBJe0WUJhAVV6sXv+9gNUL79SpeTIU+KetEM0HQtqfrRvh3G1ZTPaJtY
mswFFljqlzcI9M8uUBnlRRqQqwIDAQABo4IClTCCApEwHQYDVR0OBBYEFO3zHdeZ
p9dDZunNJBiP3XcYqCCoMB8GA1UdIwQYMBaAFGFe2ExE5lf3CV4CEq/qBSxUKg2R
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDAzQS8xQjY0NzcxMDky
NDYxMUU3OUFBRUJFMTBDNEY5QUUwMi9ZVjdZVEVUbVZfY0pYZ0lTci1vRkxGUXFE
WkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1lWN1lURVRtVl9jSlhnSVNyLW9GTEZRcURaRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NUQwM0EvMUI2NDc3MTA5MjQ2MTFFNzlBQUVCRTEwQzRGOUFFMDIvRUMwRTI0NUNG
NzQyMTFFRUExODJBOTUyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAB21gUwDQYJKoZIhvcNAQELBQADggEBAAOor+ggeAr17fu5
elonfzK1QRynlClzOLoRui/v/6Yb7A4/LFYw+7md2tdMKU9PYLv3qgnzkKrXpnkJ
4b3K68dDjJMwaEO8xevLSHGRgsje4HnGH8MNLu+0AFsIMKXHNPvY+fNsoUCOQF7I
hi+rhBk8QMHM94dU+ZGYmeaPvlYSXRi5cwh+D3hrAaaIgN55MMwQ8m/BX88PVNWd
Z1K4bQPDFczO4al4NB5kJU0CzU37sdQeIMzgtLn137tdf3RKwwC8TpYjj1Ukrrjc
g4Tqv1LoLJkgkfgt6upAgrk2G8JG6+3avFA1DIpezFke6ZnZp2LMCM07Ra9ETZWB
RSCfGRI=
-----END CERTIFICATE-----
Generated at Wed Nov 20 19:05:19 2024 by rpki-client on console-ams.rpki-client.org