Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916423B/DC49A5FA0AB211EE80B35537C4F9AE02/593888C40AB811EE97CC7A32C4F9AE02.roa
File:                     593888C40AB811EE97CC7A32C4F9AE02.roa (raw, json)
Hash identifier:          YBTJyFDQVecrTFPkPy4W2Dd55PMCXx4820zaNKR8/1Q=
Subject key identifier:   42:E2:74:8D:1F:AE:37:35:99:4C:85:7C:8E:35:15:12:0B:CC:B6:18
Certificate issuer:       /CN=A916423B/serialNumber=F80A17E18E3F3A12F75233672E8AC67F80E52FDF
Certificate serial:       7B
Authority key identifier: F8:0A:17:E1:8E:3F:3A:12:F7:52:33:67:2E:8A:C6:7F:80:E5:2F:DF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-AoX4Y4_OhL3UjNnLorGf4DlL98.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916423B/DC49A5FA0AB211EE80B35537C4F9AE02/593888C40AB811EE97CC7A32C4F9AE02.roa
Signing time:             Sat 03 Feb 2024 06:18:24 +0000
ROA not before:           Sat 03 Feb 2024 06:18:24 +0000
ROA not after:            Thu 01 May 2025 00:00:00 +0000
asID:                     53871
IP address blocks:        203.28.155.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916423B/DC49A5FA0AB211EE80B35537C4F9AE02/-AoX4Y4_OhL3UjNnLorGf4DlL98.crl
                          rsync://rpki.apnic.net/member_repository/A916423B/DC49A5FA0AB211EE80B35537C4F9AE02/-AoX4Y4_OhL3UjNnLorGf4DlL98.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-AoX4Y4_OhL3UjNnLorGf4DlL98.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123 (0x7b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916423B/serialNumber=F80A17E18E3F3A12F75233672E8AC67F80E52FDF
        Validity
            Not Before: Feb  3 06:18:24 2024 GMT
            Not After : May  1 00:00:00 2025 GMT
        Subject: CN=65bddab0-4e4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:53:9c:42:31:de:f5:88:7d:04:77:31:05:9c:
                    da:44:bb:07:ab:80:07:8c:db:f8:b3:67:55:c2:b0:
                    34:bf:62:c7:46:62:1a:58:54:ba:1f:1f:59:95:23:
                    1e:47:2d:2f:6b:7f:0c:68:c6:ff:20:96:cf:c8:25:
                    e2:b7:d9:4e:ac:be:fb:64:d3:ec:a6:62:df:54:e0:
                    91:b4:a3:fa:00:55:95:3b:8b:cd:e8:3a:e4:10:e5:
                    e3:32:39:32:3c:94:bc:2e:63:71:c4:64:93:79:ad:
                    ba:fd:e6:f5:41:95:89:b7:a5:0d:da:b0:bb:45:69:
                    16:e0:ae:08:85:2c:5c:22:f4:9a:3b:43:67:00:fa:
                    c7:a7:d0:38:32:31:53:29:8d:8a:f2:c6:ed:1a:42:
                    89:0c:f6:87:51:a9:86:ad:3c:af:9c:dd:35:56:6d:
                    fa:79:35:e5:5a:f0:00:85:bd:b4:f6:51:01:18:52:
                    e1:b0:e3:4e:06:82:6a:1d:de:b6:bd:3e:cb:95:a7:
                    9e:33:fb:94:6b:81:1a:e8:b9:5c:de:bf:92:c2:be:
                    22:9d:2f:0a:2d:50:23:9b:25:aa:14:68:79:23:85:
                    7c:a0:25:26:c9:5c:d8:0e:e9:eb:c3:fc:d8:61:25:
                    a6:b7:a8:a4:be:98:7d:b5:07:2e:49:6a:2b:fc:19:
                    64:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:E2:74:8D:1F:AE:37:35:99:4C:85:7C:8E:35:15:12:0B:CC:B6:18
            X509v3 Authority Key Identifier:
                keyid:F8:0A:17:E1:8E:3F:3A:12:F7:52:33:67:2E:8A:C6:7F:80:E5:2F:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916423B/DC49A5FA0AB211EE80B35537C4F9AE02/-AoX4Y4_OhL3UjNnLorGf4DlL98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-AoX4Y4_OhL3UjNnLorGf4DlL98.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916423B/DC49A5FA0AB211EE80B35537C4F9AE02/593888C40AB811EE97CC7A32C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.28.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:02:46:e4:e5:ae:49:6f:26:97:53:22:86:1c:fc:26:b9:f9:
         b8:81:e5:ee:f0:9d:21:80:69:06:b5:c8:3a:34:8b:86:fd:4b:
         74:e8:40:df:04:a2:7b:30:ff:bd:a5:12:56:a1:49:3d:3e:6e:
         8f:9c:a9:35:8f:3b:a6:20:d2:b1:46:22:5c:31:87:e1:87:89:
         d0:34:11:18:61:7d:51:6e:63:7c:c4:27:63:ca:fb:64:a6:31:
         57:07:c8:31:78:89:fb:50:c9:16:d0:74:6a:d9:13:de:d3:3b:
         eb:bb:5d:8c:4c:ac:3b:06:ad:2f:dc:1f:a3:66:7e:e3:c9:e4:
         67:73:87:3a:3b:9d:77:b4:e1:1f:43:58:31:d6:6a:e6:2d:cb:
         e7:55:38:8c:51:ff:7c:cb:73:fd:07:63:65:14:83:89:94:c4:
         33:2e:dd:b1:33:02:2a:4b:cd:9b:57:c7:12:fd:02:01:6f:80:
         4f:13:b1:f8:e4:c1:7b:c1:18:57:ea:e0:90:ad:6d:cb:c8:7b:
         60:8a:fb:b5:1d:f1:83:20:3a:8a:a5:dd:1e:e8:38:89:aa:7b:
         c6:b3:e4:68:d9:68:32:a5:7b:88:bd:99:c6:a9:fd:02:92:89:
         a2:7c:7e:65:29:95:ea:c7:14:c8:f8:18:36:e2:10:20:78:63:
         3c:7c:b4:f5
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBezANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2
NDIzQjExMC8GA1UEBRMoRjgwQTE3RTE4RTNGM0ExMkY3NTIzMzY3MkU4QUM2N0Y4
MEU1MkZERjAeFw0yNDAyMDMwNjE4MjRaFw0yNTA1MDEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY1YmRkYWIwLTRlNGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQClU5xCMd71iH0EdzEFnNpEuwergAeM2/izZ1XCsDS/YsdGYhpYVLofH1mVIx5H
LS9rfwxoxv8gls/IJeK32U6svvtk0+ymYt9U4JG0o/oAVZU7i83oOuQQ5eMyOTI8
lLwuY3HEZJN5rbr95vVBlYm3pQ3asLtFaRbgrgiFLFwi9Jo7Q2cA+sen0DgyMVMp
jYryxu0aQokM9odRqYatPK+c3TVWbfp5NeVa8ACFvbT2UQEYUuGw404Ggmod3ra9
PsuVp54z+5RrgRrouVzev5LCviKdLwotUCObJaoUaHkjhXygJSbJXNgO6evD/Nhh
Jaa3qKS+mH21By5Jaiv8GWQlAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUQuJ0jR+u
NzWZTIV8jjUVEgvMthgwHwYDVR0jBBgwFoAU+AoX4Y4/OhL3UjNnLorGf4DlL98w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY0MjNCL0RDNDlBNUZBMEFC
MjExRUU4MEIzNTUzN0M0RjlBRTAyLy1Bb1g0WTRfT2hMM1VqTm5Mb3JHZjREbEw5
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvLUFvWDRZNF9PaEwzVWpObkxvckdmNERsTDk4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
NDIzQi9EQzQ5QTVGQTBBQjIxMUVFODBCMzU1MzdDNEY5QUUwMi81OTM4ODhDNDBB
QjgxMUVFOTdDQzdBMzJDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMscmzANBgkqhkiG9w0BAQsFAAOCAQEAXwJG5OWuSW8ml1Mi
hhz8Jrn5uIHl7vCdIYBpBrXIOjSLhv1LdOhA3wSiezD/vaUSVqFJPT5uj5ypNY87
piDSsUYiXDGH4YeJ0DQRGGF9UW5jfMQnY8r7ZKYxVwfIMXiJ+1DJFtB0atkT3tM7
67tdjEysOwatL9wfo2Z+48nkZ3OHOjudd7ThH0NYMdZq5i3L51U4jFH/fMtz/Qdj
ZRSDiZTEMy7dsTMCKkvNm1fHEv0CAW+ATxOx+OTBe8EYV+rgkK1ty8h7YIr7tR3x
gyA6iqXdHug4iap7xrPkaNloMqV7iL2Zxqn9ApKJonx+ZSmV6scUyPgYNuIQIHhj
PHy09Q==
-----END CERTIFICATE-----
Generated at Sat Nov 23 05:02:50 2024 by rpki-client on console-fra.rpki-client.org