Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916C4A5/C73A3894A23411EF978C8D6DC4F9AE02/FB82BBA0A24B11EFA8802F31C4F9AE02.roa
File:                     FB82BBA0A24B11EFA8802F31C4F9AE02.roa (raw, json)
Hash identifier:          FNLMkJsV83Bt0X7SmIILDAhrnYAAJNH2tKMHd6lYZGE=
Subject key identifier:   5F:9F:F4:B9:8D:8B:AB:89:D4:C7:50:48:54:F4:75:23:21:DA:14:B9
Certificate issuer:       /CN=A916C4A5/serialNumber=79E923D506957FD30DD26D62793B9B40F8FE8956
Certificate serial:       03
Authority key identifier: 79:E9:23:D5:06:95:7F:D3:0D:D2:6D:62:79:3B:9B:40:F8:FE:89:56
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eekj1QaVf9MN0m1ieTubQPj-iVY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916C4A5/C73A3894A23411EF978C8D6DC4F9AE02/FB82BBA0A24B11EFA8802F31C4F9AE02.roa
Signing time:             Thu 14 Nov 2024 05:47:50 +0000
ROA not before:           Thu 14 Nov 2024 05:47:50 +0000
ROA not after:            Sat 31 Jan 2026 00:00:00 +0000
asID:                     153355
IP address blocks:        2401:c9a0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916C4A5/C73A3894A23411EF978C8D6DC4F9AE02/eekj1QaVf9MN0m1ieTubQPj-iVY.crl
                          rsync://rpki.apnic.net/member_repository/A916C4A5/C73A3894A23411EF978C8D6DC4F9AE02/eekj1QaVf9MN0m1ieTubQPj-iVY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eekj1QaVf9MN0m1ieTubQPj-iVY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 05:18:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916C4A5/serialNumber=79E923D506957FD30DD26D62793B9B40F8FE8956
        Validity
            Not Before: Nov 14 05:47:50 2024 GMT
            Not After : Jan 31 00:00:00 2026 GMT
        Subject: CN=67358f06-c492
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e4:b9:02:d7:99:e8:fe:7a:2c:a8:74:d7:8c:
                    7e:4b:12:8d:6e:e4:4a:2a:ff:a3:b2:d0:ac:bd:50:
                    e3:b5:5b:a2:ad:a5:db:81:28:bf:23:35:5f:01:af:
                    14:de:0b:ce:6e:e9:d6:21:dd:7b:88:cd:3b:97:19:
                    ca:33:98:38:0b:1e:2c:80:0e:ed:52:4e:49:c4:08:
                    0e:75:94:13:80:69:b5:3b:0b:f6:6e:62:e9:72:1f:
                    a2:19:02:d2:5d:fc:c9:c7:36:4e:a0:16:a3:d1:47:
                    6a:90:fe:18:17:25:80:1b:68:25:8f:ca:c1:02:aa:
                    31:fb:4a:19:7b:9b:3a:ee:df:06:2c:f7:22:68:e5:
                    51:23:e9:a6:4f:35:1a:97:c6:28:64:7c:c5:c7:2c:
                    76:6f:80:88:bb:0d:c6:04:d2:c6:1d:50:56:65:cd:
                    58:df:bb:b7:51:4c:70:7e:fd:a2:75:d0:da:e3:84:
                    93:19:a6:53:77:9f:f2:fd:58:eb:0f:13:35:57:bd:
                    2f:31:3c:98:88:fd:d3:3d:be:a7:4c:51:74:8a:cc:
                    3c:77:a1:6c:78:30:55:af:59:b4:37:c3:00:cd:ab:
                    c3:32:59:fe:dc:b1:08:2d:27:34:f4:8d:9a:bb:2b:
                    cc:44:ce:d5:50:19:d8:c9:4d:73:66:00:f8:f5:00:
                    ee:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:9F:F4:B9:8D:8B:AB:89:D4:C7:50:48:54:F4:75:23:21:DA:14:B9
            X509v3 Authority Key Identifier:
                keyid:79:E9:23:D5:06:95:7F:D3:0D:D2:6D:62:79:3B:9B:40:F8:FE:89:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916C4A5/C73A3894A23411EF978C8D6DC4F9AE02/eekj1QaVf9MN0m1ieTubQPj-iVY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eekj1QaVf9MN0m1ieTubQPj-iVY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C4A5/C73A3894A23411EF978C8D6DC4F9AE02/FB82BBA0A24B11EFA8802F31C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:c9a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         6b:35:70:96:29:83:a6:c0:a8:e3:3c:38:59:0f:c2:a4:92:74:
         4b:d7:d5:ea:31:59:93:43:dd:29:5d:8f:66:5e:e1:8b:6e:8a:
         26:3a:19:68:b2:55:e9:93:58:2e:61:22:72:25:a2:50:90:52:
         34:8b:ae:d4:e9:71:ea:d6:1b:54:8c:9d:59:8e:17:2a:c4:c2:
         04:56:2f:8d:5d:20:d1:2d:51:18:a7:b3:0e:dc:80:34:83:ce:
         ec:85:83:11:03:a9:a8:f2:72:b1:57:31:33:fb:cc:0c:c6:3e:
         7b:3e:43:e9:1e:67:65:29:7f:b7:9e:82:5d:84:02:00:f3:6c:
         be:f7:de:cc:db:51:77:86:73:c3:fd:d3:b1:35:74:6e:12:f1:
         26:62:9e:a7:36:2a:ab:68:55:94:04:f5:df:f4:b2:ef:69:43:
         18:1d:9b:40:b5:a4:ec:cb:d4:fd:ba:80:4a:5d:0d:0c:da:27:
         03:6b:31:58:0f:1f:b1:29:05:f2:3a:21:d9:67:b8:5a:8c:73:
         6b:e6:e7:f4:12:4f:fb:9b:67:bc:ea:27:27:0a:14:49:5d:a8:
         22:a7:b7:f4:36:21:c6:c4:71:ac:3b:30:4b:f3:2f:8f:cf:3e:
         27:05:36:d5:03:a5:cc:b8:7f:a1:57:ab:fe:7f:08:3a:9e:b4:
         cd:39:f6:c8
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgIBAzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2
QzRBNTExMC8GA1UEBRMoNzlFOTIzRDUwNjk1N0ZEMzBERDI2RDYyNzkzQjlCNDBG
OEZFODk1NjAeFw0yNDExMTQwNTQ3NTBaFw0yNjAxMzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY3MzU4ZjA2LWM0OTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC+5LkC15no/nosqHTXjH5LEo1u5Eoq/6Oy0Ky9UOO1W6KtpduBKL8jNV8BrxTe
C85u6dYh3XuIzTuXGcozmDgLHiyADu1STknECA51lBOAabU7C/ZuYulyH6IZAtJd
/MnHNk6gFqPRR2qQ/hgXJYAbaCWPysECqjH7Shl7mzru3wYs9yJo5VEj6aZPNRqX
xihkfMXHLHZvgIi7DcYE0sYdUFZlzVjfu7dRTHB+/aJ10NrjhJMZplN3n/L9WOsP
EzVXvS8xPJiI/dM9vqdMUXSKzDx3oWx4MFWvWbQ3wwDNq8MyWf7csQgtJzT0jZq7
K8xEztVQGdjJTXNmAPj1AO5hAgMBAAGjggKWMIICkjAdBgNVHQ4EFgQUX5/0uY2L
q4nUx1BIVPR1IyHaFLkwHwYDVR0jBBgwFoAUeekj1QaVf9MN0m1ieTubQPj+iVYw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZDNEE1L0M3M0EzODk0QTIz
NDExRUY5NzhDOEQ2REM0RjlBRTAyL2Vla2oxUWFWZjlNTjBtMWllVHViUVBqLWlW
WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvZWVrajFRYVZmOU1OMG0xaWVUdWJRUGotaVZZLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
QzRBNS9DNzNBMzg5NEEyMzQxMUVGOTc4QzhENkRDNEY5QUUwMi9GQjgyQkJBMEEy
NEIxMUVGQTg4MDJGMzFDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACQByaAwDQYJKoZIhvcNAQELBQADggEBAGs1cJYpg6bAqOM8
OFkPwqSSdEvX1eoxWZND3Sldj2Ze4YtuiiY6GWiyVemTWC5hInIlolCQUjSLrtTp
cerWG1SMnVmOFyrEwgRWL41dINEtURinsw7cgDSDzuyFgxEDqajycrFXMTP7zAzG
Pns+Q+keZ2Upf7eegl2EAgDzbL733szbUXeGc8P907E1dG4S8SZinqc2KqtoVZQE
9d/0su9pQxgdm0C1pOzL1P26gEpdDQzaJwNrMVgPH7EpBfI6IdlnuFqMc2vm5/QS
T/ubZ7zqJycKFEldqCKnt/Q2IcbEcaw7MEvzL4/PPicFNtUDpcy4f6FXq/5/CDqe
tM059sg=
-----END CERTIFICATE-----
Generated at Thu Nov 21 07:40:05 2024 by rpki-client on console-ams.rpki-client.org