Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9165456/2378E0805EE511EAAA52DE47C4F9AE02/5ABD5A320D7A11EB9D346C48C4F9AE02.roa
File:                     5ABD5A320D7A11EB9D346C48C4F9AE02.roa (raw, json)
Hash identifier:          Y/AEd7QcGK8AQ/rzAT1eLLkzS1RzAMBe2UpxIF9eV6E=
Subject key identifier:   B1:AA:DE:ED:33:A3:F0:00:8D:47:D2:A1:EA:6B:4D:5B:02:10:47:CC
Certificate issuer:       /CN=A9165456/serialNumber=2CE11008D2E03FEB3E637AD4F7E7272EDC60D53B
Certificate serial:       0934
Authority key identifier: 2C:E1:10:08:D2:E0:3F:EB:3E:63:7A:D4:F7:E7:27:2E:DC:60:D5:3B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9165456/2378E0805EE511EAAA52DE47C4F9AE02/5ABD5A320D7A11EB9D346C48C4F9AE02.roa
Signing time:             Sat 12 Aug 2023 20:37:31 +0000
ROA not before:           Sat 12 Aug 2023 20:37:31 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     15169
IP address blocks:        2404:f340::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9165456/2378E0805EE511EAAA52DE47C4F9AE02/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.crl
                          rsync://rpki.apnic.net/member_repository/A9165456/2378E0805EE511EAAA52DE47C4F9AE02/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 May 2024 20:05:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2356 (0x934)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9165456/serialNumber=2CE11008D2E03FEB3E637AD4F7E7272EDC60D53B
        Validity
            Not Before: Aug 12 20:37:31 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=64d7ed8b-ddc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:47:d8:a4:8a:42:a6:54:47:89:18:13:6c:92:
                    cc:bb:78:33:0c:fe:ba:15:e4:aa:03:ee:2a:d8:99:
                    b1:4d:be:01:6e:f6:60:df:72:b7:1d:af:6f:60:99:
                    5d:2b:b9:cf:33:5b:8f:a3:8e:2e:c5:e0:8e:50:74:
                    a7:cb:4b:99:56:bf:6f:f4:63:85:aa:52:44:f9:c4:
                    7d:27:9f:38:ba:25:cd:93:11:22:72:8f:6c:b1:a7:
                    2a:e0:55:d7:04:78:b1:4e:cd:3f:9a:bb:af:17:0c:
                    13:96:90:d0:5a:38:71:c0:be:d2:40:72:ed:c0:00:
                    e7:cf:82:55:2a:f0:cc:73:9e:fd:18:53:c2:a1:b4:
                    f2:85:c0:8b:4d:31:41:fd:e7:55:9a:13:d9:73:f0:
                    11:c5:7d:ac:bd:0f:6b:2e:8d:68:14:51:93:9e:7d:
                    38:01:f9:09:5a:53:1a:4b:b3:bf:86:2c:ae:5d:fe:
                    c4:95:de:e0:20:e8:fc:0c:04:c0:1e:33:4f:c2:34:
                    a4:aa:95:82:65:30:2d:87:ed:b1:fb:ec:f9:9b:79:
                    c6:14:24:c8:0e:20:34:70:c9:ce:b0:4f:63:f6:83:
                    b7:2a:78:e0:01:19:a7:be:e4:10:58:f2:26:b7:3f:
                    92:68:98:aa:fa:28:74:89:a2:3c:7d:96:c1:96:e7:
                    fb:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:AA:DE:ED:33:A3:F0:00:8D:47:D2:A1:EA:6B:4D:5B:02:10:47:CC
            X509v3 Authority Key Identifier:
                keyid:2C:E1:10:08:D2:E0:3F:EB:3E:63:7A:D4:F7:E7:27:2E:DC:60:D5:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9165456/2378E0805EE511EAAA52DE47C4F9AE02/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165456/2378E0805EE511EAAA52DE47C4F9AE02/5ABD5A320D7A11EB9D346C48C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:f340::/32

    Signature Algorithm: sha256WithRSAEncryption
         49:66:2b:45:68:fb:97:72:67:3b:8a:14:f8:8d:1e:8f:6d:64:
         e9:91:78:c6:30:a9:c8:b4:11:5e:7f:ab:ba:3b:ee:4a:9b:53:
         1f:92:dc:d9:47:4f:6a:ac:e5:a9:f6:70:2f:aa:de:c3:83:e1:
         36:e8:1f:b9:c3:61:31:2d:6e:22:16:52:1d:98:6c:f3:a8:aa:
         7b:ae:7a:10:b5:86:9a:31:5a:c4:49:9b:83:87:1a:a2:32:af:
         79:39:6a:bc:7a:25:0d:3a:e0:3d:90:ee:2a:5d:79:bb:e0:f6:
         e0:27:17:82:28:99:41:ae:81:65:b1:08:c2:14:7f:cc:41:10:
         69:6c:48:d6:e0:96:0e:90:33:95:62:5c:e9:cd:2e:02:0b:44:
         25:65:de:a2:65:1e:86:82:eb:44:63:68:75:69:70:b4:b4:87:
         db:8b:29:3f:b9:dd:90:ae:4f:46:01:95:87:2b:5d:44:41:57:
         e7:21:02:fd:ab:62:7a:50:92:a2:39:87:ec:06:19:8d:65:f6:
         70:fc:3c:67:8a:18:2f:1f:43:a4:cd:de:fe:77:3e:fe:68:29:
         37:29:02:40:3b:23:93:ee:f9:82:bb:63:4a:79:53:8e:93:c2:
         3d:99:2d:81:d3:2c:c7:ef:ec:40:9b:51:a6:73:de:f9:f0:4b:
         2a:89:48:dd
-----BEGIN CERTIFICATE-----
MIIFcjCCBFqgAwIBAgICCTQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjU0NTYxMTAvBgNVBAUTKDJDRTExMDA4RDJFMDNGRUIzRTYzN0FENEY3RTcyNzJF
REM2MEQ1M0IwHhcNMjMwODEyMjAzNzMxWhcNMjQwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NGQ3ZWQ4Yi1kZGMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAy0fYpIpCplRHiRgTbJLMu3gzDP66FeSqA+4q2JmxTb4BbvZg33K3Ha9vYJld
K7nPM1uPo44uxeCOUHSny0uZVr9v9GOFqlJE+cR9J584uiXNkxEico9ssacq4FXX
BHixTs0/mruvFwwTlpDQWjhxwL7SQHLtwADnz4JVKvDMc579GFPCobTyhcCLTTFB
/edVmhPZc/ARxX2svQ9rLo1oFFGTnn04AfkJWlMaS7O/hiyuXf7Eld7gIOj8DATA
HjNPwjSkqpWCZTAth+2x++z5m3nGFCTIDiA0cMnOsE9j9oO3KnjgARmnvuQQWPIm
tz+SaJiq+ih0iaI8fZbBluf7TwIDAQABo4ICljCCApIwHQYDVR0OBBYEFLGq3u0z
o/AAjUfSoeprTVsCEEfMMB8GA1UdIwQYMBaAFCzhEAjS4D/rPmN61PfnJy7cYNU7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTQ1Ni8yMzc4RTA4MDVF
RTUxMUVBQUE1MkRFNDdDNEY5QUUwMi9MT0VRQ05MZ1Atcy1ZM3JVOS1jbkx0eGcx
VHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0xPRVFDTkxnUC1zLVkzclU5LWNuTHR4ZzFUcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NjU0NTYvMjM3OEUwODA1RUU1MTFFQUFBNTJERTQ3QzRGOUFFMDIvNUFCRDVBMzIw
RDdBMTFFQjlEMzQ2QzQ4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8E
ETAPMA0EAgACMAcDBQAkBPNAMA0GCSqGSIb3DQEBCwUAA4IBAQBJZitFaPuXcmc7
ihT4jR6PbWTpkXjGMKnItBFef6u6O+5Km1MfktzZR09qrOWp9nAvqt7Dg+E26B+5
w2ExLW4iFlIdmGzzqKp7rnoQtYaaMVrESZuDhxqiMq95OWq8eiUNOuA9kO4qXXm7
4PbgJxeCKJlBroFlsQjCFH/MQRBpbEjW4JYOkDOVYlzpzS4CC0QlZd6iZR6GgutE
Y2h1aXC0tIfbiyk/ud2Qrk9GAZWHK11EQVfnIQL9q2J6UJKiOYfsBhmNZfZw/Dxn
ihgvH0Okzd7+dz7+aCk3KQJAOyOT7vmCu2NKeVOOk8I9mS2B0yzH7+xAm1Gmc975
8EsqiUjd
-----END CERTIFICATE-----
Generated at Thu May 16 21:45:27 2024 by rpki-client on console-fra.rpki-client.org