Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915E575/F0B242148FA611EC9C397762C4F9AE02/D86008008FAA11ECB0728B0FC4F9AE02.roa
File:                     D86008008FAA11ECB0728B0FC4F9AE02.roa (raw, json)
Hash identifier:          RsMIAFkbpydCDPohis69ldhzmBpnzB7IY6eRBCKfLas=
Subject key identifier:   5C:CB:1D:02:49:0B:20:F1:B1:EF:A9:CA:4D:C6:F1:F6:B2:65:F4:AA
Certificate issuer:       /CN=A915E575/serialNumber=05F8419AF9AA3184EAB1FF87424A6AE33CF732C4
Certificate serial:       0336
Authority key identifier: 05:F8:41:9A:F9:AA:31:84:EA:B1:FF:87:42:4A:6A:E3:3C:F7:32:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfhBmvmqMYTqsf-HQkpq4zz3MsQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915E575/F0B242148FA611EC9C397762C4F9AE02/D86008008FAA11ECB0728B0FC4F9AE02.roa
Signing time:             Wed 11 Sep 2024 03:35:33 +0000
ROA not before:           Wed 11 Sep 2024 03:35:33 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     18017
IP address blocks:        202.65.160.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915E575/F0B242148FA611EC9C397762C4F9AE02/BfhBmvmqMYTqsf-HQkpq4zz3MsQ.crl
                          rsync://rpki.apnic.net/member_repository/A915E575/F0B242148FA611EC9C397762C4F9AE02/BfhBmvmqMYTqsf-HQkpq4zz3MsQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfhBmvmqMYTqsf-HQkpq4zz3MsQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 822 (0x336)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915E575/serialNumber=05F8419AF9AA3184EAB1FF87424A6AE33CF732C4
        Validity
            Not Before: Sep 11 03:35:33 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=66e11005-4f6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:92:bf:f4:b4:9b:9c:47:c1:9d:94:8c:bb:0f:
                    63:f9:39:05:5d:ab:50:5f:8c:b9:e5:6e:0f:91:16:
                    ca:54:f6:93:3b:39:b3:e5:b6:e0:a6:9a:1f:99:f5:
                    ea:29:ec:ff:fc:60:41:44:17:db:90:8a:e7:0f:c9:
                    b5:02:c5:ee:f8:ee:c7:c1:be:63:2f:0b:d8:a5:19:
                    66:64:c1:e3:89:88:ad:0e:6d:8a:4a:0d:5f:30:e6:
                    12:32:b9:7c:7f:f2:d8:65:29:d8:f2:14:1d:7d:eb:
                    ac:76:4b:5a:42:86:8e:66:c1:1e:3d:11:2f:24:05:
                    5b:b4:5c:17:d4:eb:ba:45:3e:09:f7:f4:49:c5:d2:
                    ac:56:af:60:7e:d2:96:e1:e2:aa:b8:61:70:a3:a8:
                    ba:2a:eb:b1:2a:1f:29:e9:6a:4b:29:d5:15:2b:bc:
                    80:ab:17:a1:48:ea:c8:e8:45:60:5d:e8:13:f8:23:
                    a1:72:4e:17:e9:58:30:2d:a8:96:c2:37:f8:6b:86:
                    50:1c:68:2f:ef:e6:6c:17:a5:2f:b1:e5:ca:ea:f0:
                    81:7a:57:9a:8f:3e:db:04:4a:6d:0c:38:63:71:8d:
                    fb:48:28:82:60:ad:ba:5a:03:81:75:72:04:b2:3d:
                    7d:15:7e:5e:da:1d:68:6b:78:f7:fe:ed:ea:ab:dd:
                    26:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:CB:1D:02:49:0B:20:F1:B1:EF:A9:CA:4D:C6:F1:F6:B2:65:F4:AA
            X509v3 Authority Key Identifier:
                keyid:05:F8:41:9A:F9:AA:31:84:EA:B1:FF:87:42:4A:6A:E3:3C:F7:32:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915E575/F0B242148FA611EC9C397762C4F9AE02/BfhBmvmqMYTqsf-HQkpq4zz3MsQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfhBmvmqMYTqsf-HQkpq4zz3MsQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E575/F0B242148FA611EC9C397762C4F9AE02/D86008008FAA11ECB0728B0FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.65.160.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c9:c9:e5:8f:a3:dc:85:23:ae:ef:7e:be:a6:c1:06:04:23:ff:
         65:b4:4e:99:a6:cf:a1:51:c6:fb:a6:d1:9d:8f:35:05:da:d1:
         68:a7:28:ce:70:af:31:83:b4:fa:c0:e4:21:a1:13:ed:f6:67:
         a4:16:4d:4f:c0:bf:4e:c5:e5:1b:9e:b6:63:ab:e0:ce:bf:d8:
         0b:f2:a2:f4:2a:fb:78:9a:fc:ff:3c:83:47:a2:fc:e3:bc:fc:
         e9:5b:01:bb:a2:2c:be:50:2e:80:b2:a1:3d:91:c8:11:f1:c8:
         f4:6e:be:7a:91:a2:9c:35:6d:c8:53:d6:da:4c:28:bb:7b:53:
         e4:8c:ac:45:4f:2c:a1:91:31:55:36:e0:4b:68:68:3d:af:78:
         85:46:5f:07:ae:99:d0:35:66:91:35:4d:62:dd:08:28:ef:f9:
         b8:0b:47:92:70:5d:a8:0f:e8:21:8a:a5:9b:a1:3b:9c:9a:a8:
         d1:e1:d6:34:ae:f7:52:e9:6b:c9:0c:a1:d9:4d:e0:fa:5b:02:
         3c:aa:6d:f1:48:60:7f:aa:b1:b3:b0:bb:c1:1f:58:19:95:18:
         d2:4f:cd:38:f7:bf:4f:17:07:72:e7:2a:1b:86:87:c5:3d:a8:
         5a:48:d2:25:f9:75:80:4b:37:f2:24:8e:80:86:5b:65:94:0b:
         db:ed:24:4b
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAzYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUU1NzUxMTAvBgNVBAUTKDA1Rjg0MTlBRjlBQTMxODRFQUIxRkY4NzQyNEE2QUUz
M0NGNzMyQzQwHhcNMjQwOTExMDMzNTMzWhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmUxMTAwNS00ZjZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1pK/9LSbnEfBnZSMuw9j+TkFXatQX4y55W4PkRbKVPaTOzmz5bbgppofmfXq
Kez//GBBRBfbkIrnD8m1AsXu+O7Hwb5jLwvYpRlmZMHjiYitDm2KSg1fMOYSMrl8
f/LYZSnY8hQdfeusdktaQoaOZsEePREvJAVbtFwX1Ou6RT4J9/RJxdKsVq9gftKW
4eKquGFwo6i6KuuxKh8p6WpLKdUVK7yAqxehSOrI6EVgXegT+COhck4X6VgwLaiW
wjf4a4ZQHGgv7+ZsF6UvseXK6vCBeleajz7bBEptDDhjcY37SCiCYK26WgOBdXIE
sj19FX5e2h1oa3j3/u3qq90mcQIDAQABo4IClTCCApEwHQYDVR0OBBYEFFzLHQJJ
CyDxse+pyk3G8fayZfSqMB8GA1UdIwQYMBaAFAX4QZr5qjGE6rH/h0JKauM89zLE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RTU3NS9GMEIyNDIxNDhG
QTYxMUVDOUMzOTc3NjJDNEY5QUUwMi9CZmhCbXZtcU1ZVHFzZi1IUWtwcTR6ejNN
c1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0JmaEJtdm1xTVlUcXNmLUhRa3BxNHp6M01zUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NUU1NzUvRjBCMjQyMTQ4RkE2MTFFQzlDMzk3NzYyQzRGOUFFMDIvRDg2MDA4MDA4
RkFBMTFFQ0IwNzI4QjBGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAHKQaAwDQYJKoZIhvcNAQELBQADggEBAMnJ5Y+j3IUjru9+
vqbBBgQj/2W0Tpmmz6FRxvum0Z2PNQXa0WinKM5wrzGDtPrA5CGhE+32Z6QWTU/A
v07F5RuetmOr4M6/2AvyovQq+3ia/P88g0ei/OO8/OlbAbuiLL5QLoCyoT2RyBHx
yPRuvnqRopw1bchT1tpMKLt7U+SMrEVPLKGRMVU24EtoaD2veIVGXweumdA1ZpE1
TWLdCCjv+bgLR5JwXagP6CGKpZuhO5yaqNHh1jSu91Lpa8kModlN4PpbAjyqbfFI
YH+qsbOwu8EfWBmVGNJPzTj3v08XB3LnKhuGh8U9qFpI0iX5dYBLN/IkjoCGW2WU
C9vtJEs=
-----END CERTIFICATE-----
Generated at Sat Nov 23 02:33:37 2024 by rpki-client on console-fra.rpki-client.org