Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/47A6C8E08DB811E98ACC9F7EC4F9AE02.roa
File:                     47A6C8E08DB811E98ACC9F7EC4F9AE02.roa (raw, json)
Hash identifier:          TGN+p1ofbtkEaQ7GXRuZyKCw4vYy+9mP3K55Olf1oRk=
Subject key identifier:   92:42:35:62:1C:D2:44:81:90:4A:11:4F:86:B1:49:7A:FC:42:A6:BA
Certificate issuer:       /CN=A91697FA/serialNumber=9F82DBC9466312C5BA2E921279302400956A982A
Certificate serial:       34E8
Authority key identifier: 9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/47A6C8E08DB811E98ACC9F7EC4F9AE02.roa
Signing time:             Mon 22 Jul 2024 14:40:36 +0000
ROA not before:           Mon 22 Jul 2024 14:40:36 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     46079
IP address blocks:        203.107.177.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.crl
                          rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:22:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13544 (0x34e8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91697FA/serialNumber=9F82DBC9466312C5BA2E921279302400956A982A
        Validity
            Not Before: Jul 22 14:40:36 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=669e6f63-d39c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:f5:84:68:64:b3:e4:52:74:ee:0d:72:e8:8e:
                    c8:82:ba:cc:fb:b8:f1:66:c6:65:74:58:9b:18:ac:
                    a0:d0:cf:71:28:cc:02:05:08:f5:7c:ba:3b:5e:8f:
                    55:fd:7e:15:00:ac:b4:3b:fb:f0:0b:99:1c:3d:66:
                    ea:39:97:b6:97:71:70:81:db:c3:f4:c1:fa:35:06:
                    5a:89:50:77:64:ef:c2:7f:2c:3a:db:8f:88:77:d1:
                    fd:02:c9:b4:da:5c:13:59:cd:e9:ff:93:99:63:e2:
                    42:05:55:7b:be:74:a1:04:52:be:18:4e:1c:9a:6b:
                    47:47:e1:bd:b7:a5:9a:71:a9:34:6f:e5:d2:4b:84:
                    10:cb:eb:56:ae:a0:7a:7f:7f:e7:44:be:c6:fe:63:
                    b4:32:dc:9e:2c:74:ff:41:94:95:d9:cd:97:c1:aa:
                    83:d4:0a:49:89:e9:2a:c1:f5:e2:e0:f2:f4:a9:e8:
                    9d:88:ff:04:fa:3b:be:06:f1:27:9c:9a:3c:13:4f:
                    85:0b:18:7b:6a:66:68:23:89:a4:07:f9:3a:60:ef:
                    e9:a4:69:56:96:eb:2e:8b:62:03:86:8f:2f:32:b5:
                    ef:e8:7b:5f:69:2e:38:0e:de:fb:c9:34:d0:b0:bd:
                    57:56:a1:a3:c1:19:8c:38:17:14:42:dc:b5:ba:21:
                    11:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:42:35:62:1C:D2:44:81:90:4A:11:4F:86:B1:49:7A:FC:42:A6:BA
            X509v3 Authority Key Identifier:
                keyid:9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/47A6C8E08DB811E98ACC9F7EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.107.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:f0:eb:87:81:70:7d:95:d3:77:f9:c3:ab:66:26:0c:bc:b5:
         ed:97:ca:cf:9f:73:dd:ba:c2:19:2d:29:f5:ff:79:d6:44:ed:
         6a:e3:aa:c8:10:96:b9:8c:35:c8:2a:9f:bf:c8:f2:eb:fb:17:
         26:60:49:e6:4e:b4:c2:54:d2:59:5c:0f:d3:85:47:c9:26:41:
         3a:8d:cb:df:71:ec:e6:e0:0a:da:18:04:0c:0d:73:3e:d5:3c:
         4f:b6:46:b7:c7:ad:b7:fd:0e:21:b0:90:b4:54:2f:cb:2a:49:
         62:33:a4:3d:7d:4a:88:c6:55:f8:dd:4f:c2:8a:6f:00:dd:f7:
         f6:ce:4e:71:b5:2d:2f:dc:c1:16:84:19:b8:85:b3:5e:fd:ae:
         aa:f2:21:15:21:2d:f3:ef:93:21:65:d8:0c:7a:ae:ac:66:56:
         ae:65:66:97:c9:b9:f5:a6:11:e8:a9:c7:ff:2e:5d:e7:b5:76:
         d2:52:5b:2d:65:cc:ac:11:5f:38:36:b5:2a:a5:c3:7b:fd:b5:
         92:fe:fe:28:2c:11:40:4e:0e:16:cb:96:d7:cb:72:40:15:f3:
         35:93:7b:00:b9:db:0c:e2:32:c7:0c:d6:cd:aa:1f:6d:f4:9b:
         d1:1c:d7:d5:49:91:07:10:f9:9c:90:e7:64:3a:eb:40:c5:a2:
         e9:12:80:a2
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICNOgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Njk3RkExMTAvBgNVBAUTKDlGODJEQkM5NDY2MzEyQzVCQTJFOTIxMjc5MzAyNDAw
OTU2QTk4MkEwHhcNMjQwNzIyMTQ0MDM2WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NjllNmY2My1kMzljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2fWEaGSz5FJ07g1y6I7IgrrM+7jxZsZldFibGKyg0M9xKMwCBQj1fLo7Xo9V
/X4VAKy0O/vwC5kcPWbqOZe2l3FwgdvD9MH6NQZaiVB3ZO/Cfyw624+Id9H9Asm0
2lwTWc3p/5OZY+JCBVV7vnShBFK+GE4cmmtHR+G9t6Wacak0b+XSS4QQy+tWrqB6
f3/nRL7G/mO0MtyeLHT/QZSV2c2XwaqD1ApJiekqwfXi4PL0qeidiP8E+ju+BvEn
nJo8E0+FCxh7amZoI4mkB/k6YO/ppGlWlusui2IDho8vMrXv6HtfaS44Dt77yTTQ
sL1XVqGjwRmMOBcUQty1uiERUwIDAQABo4IClTCCApEwHQYDVR0OBBYEFJJCNWIc
0kSBkEoRT4axSXr8Qqa6MB8GA1UdIwQYMBaAFJ+C28lGYxLFui6SEnkwJACVapgq
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OTdGQS8yN0Y4M0I3MDFE
ODMxMUUyOTMyOTIxRDgwOEIwMkNEMi9uNExieVVaakVzVzZMcElTZVRBa0FKVnFt
Q28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL240TGJ5VVpqRXNXNkxwSVNlVEFrQUpWcW1Dby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Njk3RkEvMjdGODNCNzAxRDgzMTFFMjkzMjkyMUQ4MDhCMDJDRDIvNDdBNkM4RTA4
REI4MTFFOThBQ0M5RjdFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADLa7EwDQYJKoZIhvcNAQELBQADggEBAFzw64eBcH2V03f5
w6tmJgy8te2Xys+fc926whktKfX/edZE7WrjqsgQlrmMNcgqn7/I8uv7FyZgSeZO
tMJU0llcD9OFR8kmQTqNy99x7ObgCtoYBAwNcz7VPE+2RrfHrbf9DiGwkLRUL8sq
SWIzpD19SojGVfjdT8KKbwDd9/bOTnG1LS/cwRaEGbiFs179rqryIRUhLfPvkyFl
2Ax6rqxmVq5lZpfJufWmEeipx/8uXee1dtJSWy1lzKwRXzg2tSqlw3v9tZL+/igs
EUBODhbLltfLckAV8zWTewC52wziMscM1s2qH230m9Ec19VJkQcQ+ZyQ52Q660DF
oukSgKI=
-----END CERTIFICATE-----
Generated at Fri Nov 22 16:49:21 2024 by rpki-client on console-ams.rpki-client.org