Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91705D7/A0816ED016D811EFBF901E5FC4F9AE02/FDC5FC0C232411EF868B873EC4F9AE02.roa
File:                     FDC5FC0C232411EF868B873EC4F9AE02.roa (raw, json)
Hash identifier:          ollqUlHXEfXQhQfDGC+/77xh3ifYmQTxENHBKgBxBPw=
Subject key identifier:   B1:DD:C3:7B:E5:5C:59:D4:3E:89:4C:53:55:0C:42:46:AE:A0:90:60
Certificate issuer:       /CN=A91705D7/serialNumber=0A8BD2B02FF695171DC01E8C7E4AA2D988DA3B9A
Certificate serial:       0B
Authority key identifier: 0A:8B:D2:B0:2F:F6:95:17:1D:C0:1E:8C:7E:4A:A2:D9:88:DA:3B:9A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CovSsC_2lRcdwB6Mfkqi2YjaO5o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91705D7/A0816ED016D811EFBF901E5FC4F9AE02/FDC5FC0C232411EF868B873EC4F9AE02.roa
Signing time:             Wed 05 Jun 2024 10:18:45 +0000
ROA not before:           Wed 05 Jun 2024 10:18:45 +0000
ROA not after:            Sun 31 Aug 2025 00:00:00 +0000
asID:                     135663
IP address blocks:        2401:a0e0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91705D7/A0816ED016D811EFBF901E5FC4F9AE02/CovSsC_2lRcdwB6Mfkqi2YjaO5o.crl
                          rsync://rpki.apnic.net/member_repository/A91705D7/A0816ED016D811EFBF901E5FC4F9AE02/CovSsC_2lRcdwB6Mfkqi2YjaO5o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CovSsC_2lRcdwB6Mfkqi2YjaO5o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 05:06:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11 (0xb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91705D7/serialNumber=0A8BD2B02FF695171DC01E8C7E4AA2D988DA3B9A
        Validity
            Not Before: Jun  5 10:18:45 2024 GMT
            Not After : Aug 31 00:00:00 2025 GMT
        Subject: CN=66603b85-ecc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:94:47:4d:4b:a1:15:bd:3d:28:f5:7f:aa:93:
                    fd:39:d7:80:09:5c:d6:bc:51:d3:04:3b:1b:54:36:
                    5d:c5:65:5f:ed:a0:a3:aa:0d:0b:46:85:30:50:1f:
                    8e:92:b3:6b:63:8e:26:fb:5d:3c:ce:22:52:64:ab:
                    6f:4c:86:4c:a8:18:84:09:f9:d5:8e:4a:c2:6c:ff:
                    46:da:e6:15:3c:54:f4:56:12:d3:41:d8:48:f1:ba:
                    9d:12:80:38:fe:c5:57:0c:47:3b:4c:9d:83:e3:76:
                    a4:dc:80:83:96:2a:81:49:40:c3:5c:55:14:c8:73:
                    18:64:79:47:5f:f3:2e:9c:ec:7b:a6:98:da:d2:d3:
                    8d:8b:7e:f8:10:02:d7:e7:54:33:98:cf:18:a7:f2:
                    37:09:8a:3d:70:18:aa:22:0f:0e:d5:52:ad:16:6c:
                    df:cc:fd:ab:42:44:82:fc:dc:7d:60:81:2f:a5:ab:
                    6d:58:e4:32:1d:e1:d2:fc:63:2d:ce:db:1d:de:42:
                    d4:ef:1f:5b:9c:de:41:bd:a8:33:dc:c2:f1:8c:ed:
                    60:d3:f5:c8:60:dd:06:9e:2d:48:63:d5:7f:06:84:
                    4d:bb:e8:19:07:f0:40:0c:39:5e:25:80:be:45:21:
                    8b:80:52:1d:fb:90:76:f5:ba:dc:10:b8:5f:bc:27:
                    e6:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:DD:C3:7B:E5:5C:59:D4:3E:89:4C:53:55:0C:42:46:AE:A0:90:60
            X509v3 Authority Key Identifier:
                keyid:0A:8B:D2:B0:2F:F6:95:17:1D:C0:1E:8C:7E:4A:A2:D9:88:DA:3B:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91705D7/A0816ED016D811EFBF901E5FC4F9AE02/CovSsC_2lRcdwB6Mfkqi2YjaO5o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CovSsC_2lRcdwB6Mfkqi2YjaO5o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91705D7/A0816ED016D811EFBF901E5FC4F9AE02/FDC5FC0C232411EF868B873EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:a0e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         95:df:4a:a9:e5:3d:a3:89:e5:80:20:e8:47:87:8c:5b:0e:81:
         c3:7b:2b:15:3d:97:5c:e8:51:4e:cf:81:c9:38:b6:e9:c2:7f:
         01:01:6d:df:0d:a2:b9:07:c9:a2:bc:e8:17:37:80:e6:74:13:
         f3:be:d8:ee:b2:35:fa:31:31:97:ec:d9:b0:17:48:d4:cf:d1:
         b4:01:83:5b:d4:46:b4:c7:37:f8:15:4c:a9:a1:ff:09:00:f4:
         61:47:57:27:62:9f:4c:68:00:4f:3d:ad:40:ff:ad:3f:70:04:
         af:77:8a:a0:f0:cc:02:12:24:ea:b7:6d:a9:5e:e4:09:fa:ab:
         5d:1c:39:c5:26:73:0a:f5:e1:31:93:97:c6:49:d8:c0:9f:e9:
         4d:b9:38:4d:f9:3b:d4:9c:5d:ce:9a:f2:fa:63:a5:13:36:4b:
         85:d6:d4:08:4f:69:e2:78:99:34:34:85:71:c8:1b:7d:f3:2f:
         ed:5e:a0:e3:e1:83:7c:08:f8:83:4b:f1:01:bf:f9:bc:fc:38:
         99:8b:e8:51:f2:64:4f:4e:6e:8f:77:1b:53:39:51:a6:a0:88:
         49:37:5a:2e:ed:c2:e1:f6:33:44:27:4a:c3:4c:c3:20:a1:57:
         53:34:f6:4f:47:07:20:28:7f:3b:98:e2:60:bd:b6:e5:9a:33:
         56:d3:eb:8d
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgIBCzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3
MDVENzExMC8GA1UEBRMoMEE4QkQyQjAyRkY2OTUxNzFEQzAxRThDN0U0QUEyRDk4
OERBM0I5QTAeFw0yNDA2MDUxMDE4NDVaFw0yNTA4MzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY2NjAzYjg1LWVjYzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC+lEdNS6EVvT0o9X+qk/0514AJXNa8UdMEOxtUNl3FZV/toKOqDQtGhTBQH46S
s2tjjib7XTzOIlJkq29MhkyoGIQJ+dWOSsJs/0ba5hU8VPRWEtNB2Ejxup0SgDj+
xVcMRztMnYPjdqTcgIOWKoFJQMNcVRTIcxhkeUdf8y6c7HummNrS042LfvgQAtfn
VDOYzxin8jcJij1wGKoiDw7VUq0WbN/M/atCRIL83H1ggS+lq21Y5DId4dL8Yy3O
2x3eQtTvH1uc3kG9qDPcwvGM7WDT9chg3QaeLUhj1X8GhE276BkH8EAMOV4lgL5F
IYuAUh37kHb1utwQuF+8J+bpAgMBAAGjggKWMIICkjAdBgNVHQ4EFgQUsd3De+Vc
WdQ+iUxTVQxCRq6gkGAwHwYDVR0jBBgwFoAUCovSsC/2lRcdwB6Mfkqi2YjaO5ow
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcwNUQ3L0EwODE2RUQwMTZE
ODExRUZCRjkwMUU1RkM0RjlBRTAyL0NvdlNzQ18ybFJjZHdCNk1ma3FpMllqYU81
by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvQ292U3NDXzJsUmNkd0I2TWZrcWkyWWphTzVvLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MDVENy9BMDgxNkVEMDE2RDgxMUVGQkY5MDFFNUZDNEY5QUUwMi9GREM1RkMwQzIz
MjQxMUVGODY4Qjg3M0VDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACQBoOAwDQYJKoZIhvcNAQELBQADggEBAJXfSqnlPaOJ5YAg
6EeHjFsOgcN7KxU9l1zoUU7Pgck4tunCfwEBbd8NorkHyaK86Bc3gOZ0E/O+2O6y
NfoxMZfs2bAXSNTP0bQBg1vURrTHN/gVTKmh/wkA9GFHVydin0xoAE89rUD/rT9w
BK93iqDwzAISJOq3bale5An6q10cOcUmcwr14TGTl8ZJ2MCf6U25OE35O9ScXc6a
8vpjpRM2S4XW1AhPaeJ4mTQ0hXHIG33zL+1eoOPhg3wI+INL8QG/+bz8OJmL6FHy
ZE9Obo93G1M5UaagiEk3Wi7twuH2M0QnSsNMwyChV1M09k9HByAofzuY4mC9tuWa
M1bT640=
-----END CERTIFICATE-----
Generated at Thu Nov 21 06:50:17 2024 by rpki-client on console-fra.rpki-client.org