Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/661CE74E912511EE9FB03869C4F9AE02.roa
File:                     661CE74E912511EE9FB03869C4F9AE02.roa (raw, json)
Hash identifier:          l5zELZnKpH74R1B+8WNSgBmcpadb1lt0ypTuBIWkizg=
Subject key identifier:   80:94:F2:6A:A8:2C:75:CD:48:33:C5:CC:86:7D:CD:BA:C5:2E:52:4F
Certificate issuer:       /CN=A91618BC/serialNumber=1AEBCD82D7028343B745AD406739CDB92D4DFB77
Certificate serial:       03B6
Authority key identifier: 1A:EB:CD:82:D7:02:83:43:B7:45:AD:40:67:39:CD:B9:2D:4D:FB:77
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GuvNgtcCg0O3Ra1AZznNuS1N-3c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/661CE74E912511EE9FB03869C4F9AE02.roa
Signing time:             Wed 31 Jan 2024 03:05:31 +0000
ROA not before:           Wed 31 Jan 2024 03:05:30 +0000
ROA not after:            Mon 31 Mar 2025 00:00:00 +0000
asID:                     945
IP address blocks:        2407:9240:4000::/39 maxlen: 39

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/GuvNgtcCg0O3Ra1AZznNuS1N-3c.crl
                          rsync://rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/GuvNgtcCg0O3Ra1AZznNuS1N-3c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GuvNgtcCg0O3Ra1AZznNuS1N-3c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 May 2024 02:50:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 950 (0x3b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91618BC/serialNumber=1AEBCD82D7028343B745AD406739CDB92D4DFB77
        Validity
            Not Before: Jan 31 03:05:30 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=65b9b8fa-5f5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:c7:95:e2:6c:14:3d:20:b6:ed:66:23:aa:db:
                    5c:3c:a9:da:0d:a9:e3:97:6d:c1:b3:9b:82:2c:c0:
                    d4:9d:d0:25:ba:01:72:3e:2c:df:01:ba:5f:22:a8:
                    cd:d6:00:9d:50:a9:2f:08:a9:af:b2:71:4b:6e:d2:
                    3c:1f:97:81:9b:99:ab:3f:06:ba:51:2f:c7:5b:10:
                    61:77:96:8f:d3:c4:d0:ad:28:57:34:2a:69:a8:79:
                    85:a2:a5:1b:6d:3f:eb:2c:f2:33:ee:66:5c:a0:20:
                    2b:8d:8f:3c:e8:f9:3b:00:b6:65:b4:6d:bf:88:af:
                    61:8a:61:5d:7e:51:d9:b0:7e:4c:97:bf:c7:c5:53:
                    8d:cd:0f:e6:d6:c4:5f:f3:ac:16:98:b5:74:a1:9c:
                    84:27:3a:41:06:69:c8:b3:5c:84:49:0b:2b:7a:02:
                    61:81:f3:c7:9a:e8:d7:a5:71:69:03:e7:0f:25:70:
                    45:fe:88:af:7d:c1:ae:14:85:a2:a3:76:b8:58:31:
                    28:85:2a:e4:cd:27:ca:c9:21:90:a8:1b:93:7c:4c:
                    7a:59:b1:b4:18:62:98:d9:83:3a:92:8f:a8:f0:aa:
                    50:73:5e:6e:6a:32:e8:f6:0e:11:66:f0:31:6c:1f:
                    85:63:ef:67:cb:1e:7b:b5:78:ba:87:6b:4f:b5:07:
                    fb:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:94:F2:6A:A8:2C:75:CD:48:33:C5:CC:86:7D:CD:BA:C5:2E:52:4F
            X509v3 Authority Key Identifier:
                keyid:1A:EB:CD:82:D7:02:83:43:B7:45:AD:40:67:39:CD:B9:2D:4D:FB:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/GuvNgtcCg0O3Ra1AZznNuS1N-3c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GuvNgtcCg0O3Ra1AZznNuS1N-3c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/661CE74E912511EE9FB03869C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:9240:4000::/39

    Signature Algorithm: sha256WithRSAEncryption
         09:c9:54:84:18:2b:e9:a5:32:62:7c:92:65:3c:78:14:db:e0:
         9c:51:24:c9:fe:b3:3d:66:6a:29:dc:3a:40:68:f6:8c:01:8a:
         86:d0:56:22:8c:10:1a:80:55:b3:63:5a:98:5b:af:f8:d3:12:
         4e:58:1d:8a:07:12:83:8c:75:a1:39:29:e1:2c:df:48:1a:ed:
         33:31:58:cf:26:b3:8b:88:ca:1f:fc:80:21:46:a5:3d:cf:93:
         74:27:11:57:de:2f:82:5f:ad:cb:c0:9b:9c:c5:ec:4e:92:1e:
         96:b2:18:b9:e1:a5:93:c3:25:b6:79:fb:38:02:a8:26:94:c2:
         7a:5b:bd:f5:8e:90:48:16:6f:58:42:d0:c7:47:a7:93:54:f8:
         59:1b:aa:45:69:b8:45:10:8d:3c:73:7f:22:4a:14:b7:46:5f:
         86:ef:7f:38:83:37:cf:da:ca:60:58:bf:3a:2a:72:c6:7a:b0:
         0f:ab:9e:bd:6e:a7:d6:51:9f:69:0e:63:f5:f6:52:f8:2f:8a:
         1b:88:ce:c1:97:48:0e:a9:cf:ae:02:8d:0f:5b:54:b0:92:d9:
         01:5f:cd:1b:50:9e:40:43:18:b3:04:bd:b6:00:02:9a:51:53:
         6c:af:b8:05:53:70:c6:9e:27:0f:68:f3:cb:03:eb:07:48:f9:
         de:7b:5d:5f
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgICA7YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjE4QkMxMTAvBgNVBAUTKDFBRUJDRDgyRDcwMjgzNDNCNzQ1QUQ0MDY3MzlDREI5
MkQ0REZCNzcwHhcNMjQwMTMxMDMwNTMwWhcNMjUwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NWI5YjhmYS01ZjVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApceV4mwUPSC27WYjqttcPKnaDanjl23Bs5uCLMDUndAlugFyPizfAbpfIqjN
1gCdUKkvCKmvsnFLbtI8H5eBm5mrPwa6US/HWxBhd5aP08TQrShXNCppqHmFoqUb
bT/rLPIz7mZcoCArjY886Pk7ALZltG2/iK9himFdflHZsH5Ml7/HxVONzQ/m1sRf
86wWmLV0oZyEJzpBBmnIs1yESQsregJhgfPHmujXpXFpA+cPJXBF/oivfcGuFIWi
o3a4WDEohSrkzSfKySGQqBuTfEx6WbG0GGKY2YM6ko+o8KpQc15uajLo9g4RZvAx
bB+FY+9nyx57tXi6h2tPtQf7lQIDAQABo4IClzCCApMwHQYDVR0OBBYEFICU8mqo
LHXNSDPFzIZ9zbrFLlJPMB8GA1UdIwQYMBaAFBrrzYLXAoNDt0WtQGc5zbktTft3
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MThCQy9FRDdCNjJBQzVE
ODcxMUVDOUMxRDcwMkNDNEY5QUUwMi9HdXZOZ3RjQ2cwTzNSYTFBWnpuTnVTMU4t
M2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0d1dk5ndGNDZzBPM1JhMUFaem5OdVMxTi0zYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NjE4QkMvRUQ3QjYyQUM1RDg3MTFFQzlDMUQ3MDJDQzRGOUFFMDIvNjYxQ0U3NEU5
MTI1MTFFRTlGQjAzODY5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIQYIKwYBBQUHAQcBAf8E
EjAQMA4EAgACMAgDBgEkB5JAQDANBgkqhkiG9w0BAQsFAAOCAQEACclUhBgr6aUy
YnySZTx4FNvgnFEkyf6zPWZqKdw6QGj2jAGKhtBWIowQGoBVs2NamFuv+NMSTlgd
igcSg4x1oTkp4SzfSBrtMzFYzyazi4jKH/yAIUalPc+TdCcRV94vgl+ty8CbnMXs
TpIelrIYueGlk8Mltnn7OAKoJpTCelu99Y6QSBZvWELQx0enk1T4WRuqRWm4RRCN
PHN/IkoUt0Zfhu9/OIM3z9rKYFi/OipyxnqwD6uevW6n1lGfaQ5j9fZS+C+KG4jO
wZdIDqnPrgKND1tUsJLZAV/NG1CeQEMYswS9tgACmlFTbK+4BVNwxp4nD2jzywPr
B0j53ntdXw==
-----END CERTIFICATE-----
Generated at Sun May 5 03:52:18 2024 by rpki-client on console-ams.rpki-client.org