Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/7A180DFACEB611ED8850A727C4F9AE02.roa
File:                     7A180DFACEB611ED8850A727C4F9AE02.roa (raw, json)
Hash identifier:          h+i7d4l1n6vcg20ldi1OzleaWsx0vPPuUjmVScWRXXI=
Subject key identifier:   81:08:6C:89:22:EC:FF:81:17:69:29:C6:50:E6:85:FC:92:F7:F3:72
Certificate issuer:       /CN=A9173CE6/serialNumber=33195F96C46D4D285D5BDE4B0B030E38314E8FCB
Certificate serial:       05F7
Authority key identifier: 33:19:5F:96:C4:6D:4D:28:5D:5B:DE:4B:0B:03:0E:38:31:4E:8F:CB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxlflsRtTShdW95LCwMOODFOj8s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/7A180DFACEB611ED8850A727C4F9AE02.roa
Signing time:             Thu 04 Jul 2024 23:41:21 +0000
ROA not before:           Thu 04 Jul 2024 23:41:21 +0000
ROA not after:            Sun 31 Aug 2025 00:00:00 +0000
asID:                     38055
IP address blocks:        210.215.78.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/MxlflsRtTShdW95LCwMOODFOj8s.crl
                          rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/MxlflsRtTShdW95LCwMOODFOj8s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxlflsRtTShdW95LCwMOODFOj8s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1527 (0x5f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9173CE6/serialNumber=33195F96C46D4D285D5BDE4B0B030E38314E8FCB
        Validity
            Not Before: Jul  4 23:41:21 2024 GMT
            Not After : Aug 31 00:00:00 2025 GMT
        Subject: CN=66873321-05f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:86:b2:67:99:a0:2f:c8:b1:b6:aa:c9:2a:5c:
                    5e:7a:78:ff:83:02:91:d2:65:8f:85:cc:af:04:76:
                    a8:31:fb:0b:3f:2b:6e:6a:2d:48:cd:d0:f0:ea:23:
                    bb:77:1b:79:02:59:e5:a1:4b:9f:43:37:3c:18:0f:
                    f0:68:d2:00:02:00:ae:df:29:b5:80:c5:c1:35:de:
                    14:76:c5:41:21:7e:33:f3:10:1b:4c:f0:6f:a7:98:
                    84:fe:23:14:50:e2:32:9d:73:e4:61:dd:fc:04:57:
                    8c:50:b9:30:15:1c:59:59:f9:67:cf:4c:b8:71:1a:
                    31:01:c8:9d:c2:56:ab:ab:e2:0c:98:57:81:a0:01:
                    cb:65:2f:72:37:1a:b8:0f:96:0d:c8:83:08:9b:d1:
                    2e:41:5c:30:ca:12:f7:0c:b4:52:ea:9f:e1:68:99:
                    fa:f3:05:b2:cd:35:f9:98:5d:f4:79:3c:33:fe:4d:
                    f2:04:72:f4:c6:b9:60:30:25:4e:00:9f:00:76:97:
                    e0:33:4e:f2:ee:a6:05:07:84:d5:b9:c8:fe:eb:6e:
                    2d:e1:f4:81:78:a2:e0:9a:01:b9:ad:f9:01:65:af:
                    ce:50:59:6b:3d:27:ff:81:d6:bb:85:bb:c1:43:0d:
                    c0:86:57:14:7c:d3:5f:91:e6:73:d1:84:0f:ae:a5:
                    12:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:08:6C:89:22:EC:FF:81:17:69:29:C6:50:E6:85:FC:92:F7:F3:72
            X509v3 Authority Key Identifier:
                keyid:33:19:5F:96:C4:6D:4D:28:5D:5B:DE:4B:0B:03:0E:38:31:4E:8F:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/MxlflsRtTShdW95LCwMOODFOj8s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxlflsRtTShdW95LCwMOODFOj8s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/7A180DFACEB611ED8850A727C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.215.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:79:01:a9:38:0b:bd:ce:d0:f1:b2:4a:fe:11:11:0d:6f:01:
         e2:9f:8e:ca:96:ed:1c:f8:8a:e6:38:d7:31:58:98:8d:9f:1d:
         6d:e6:8e:40:f7:69:5d:00:08:19:aa:c8:4d:1e:41:bb:09:ff:
         e4:ab:4c:de:c7:d1:30:77:ea:e8:60:1d:b7:f7:dd:d7:55:90:
         c9:75:bf:ba:5e:21:8c:ad:23:60:9b:fe:e7:de:be:63:4d:e1:
         4e:6c:a0:10:91:20:c3:1a:1d:19:a3:2f:af:40:e9:a3:d8:cd:
         c5:ca:3a:2d:ef:56:ea:91:fc:87:26:03:85:c6:e4:18:16:e7:
         d3:8a:7d:a9:d0:07:cd:ae:d0:d0:8a:6c:38:dc:5b:f8:41:86:
         f1:db:7d:07:43:e4:a4:59:32:49:e6:e9:49:54:03:8f:a7:9d:
         47:bc:1f:14:a3:b7:c1:54:de:78:b9:92:f5:a5:9e:98:8c:8d:
         96:aa:75:1b:7d:80:b4:e2:12:f7:ba:3b:2f:34:e7:aa:e5:87:
         66:a9:4c:48:8d:16:8c:df:8b:ad:e0:7b:df:6b:a0:c1:d0:45:
         62:9d:08:4e:01:fb:99:f3:68:8d:af:66:cc:27:dd:92:2e:77:
         dc:e5:9e:af:9d:66:1a:1f:48:e5:1c:3e:f7:74:f8:7b:3b:89:
         d2:4f:fa:cd
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBfcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzNDRTYxMTAvBgNVBAUTKDMzMTk1Rjk2QzQ2RDREMjg1RDVCREU0QjBCMDMwRTM4
MzE0RThGQ0IwHhcNMjQwNzA0MjM0MTIxWhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02Njg3MzMyMS0wNWY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAx4ayZ5mgL8ixtqrJKlxeenj/gwKR0mWPhcyvBHaoMfsLPytuai1IzdDw6iO7
dxt5AlnloUufQzc8GA/waNIAAgCu3ym1gMXBNd4UdsVBIX4z8xAbTPBvp5iE/iMU
UOIynXPkYd38BFeMULkwFRxZWflnz0y4cRoxAcidwlarq+IMmFeBoAHLZS9yNxq4
D5YNyIMIm9EuQVwwyhL3DLRS6p/haJn68wWyzTX5mF30eTwz/k3yBHL0xrlgMCVO
AJ8AdpfgM07y7qYFB4TVucj+624t4fSBeKLgmgG5rfkBZa/OUFlrPSf/gda7hbvB
Qw3AhlcUfNNfkeZz0YQPrqUSCwIDAQABo4IClTCCApEwHQYDVR0OBBYEFIEIbIki
7P+BF2kpxlDmhfyS9/NyMB8GA1UdIwQYMBaAFDMZX5bEbU0oXVveSwsDDjgxTo/L
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3M0NFNi8wRThFMjc4MDdC
RDAxMUVCODVBNjY5ODBDNEY5QUUwMi9NeGxmbHNSdFRTaGRXOTVMQ3dNT09ERk9q
OHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL014bGZsc1J0VFNoZFc5NUxDd01PT0RGT2o4cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NzNDRTYvMEU4RTI3ODA3QkQwMTFFQjg1QTY2OTgwQzRGOUFFMDIvN0ExODBERkFD
RUI2MTFFRDg4NTBBNzI3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADS104wDQYJKoZIhvcNAQELBQADggEBABp5Aak4C73O0PGy
Sv4REQ1vAeKfjsqW7Rz4iuY41zFYmI2fHW3mjkD3aV0ACBmqyE0eQbsJ/+SrTN7H
0TB36uhgHbf33ddVkMl1v7peIYytI2Cb/ufevmNN4U5soBCRIMMaHRmjL69A6aPY
zcXKOi3vVuqR/IcmA4XG5BgW59OKfanQB82u0NCKbDjcW/hBhvHbfQdD5KRZMknm
6UlUA4+nnUe8HxSjt8FU3ni5kvWlnpiMjZaqdRt9gLTiEve6Oy8056rlh2apTEiN
Fozfi63ge99roMHQRWKdCE4B+5nzaI2vZswn3ZIud9zlnq+dZhofSOUcPvd0+Hs7
idJP+s0=
-----END CERTIFICATE-----
Generated at Fri Nov 22 23:39:29 2024 by rpki-client on console-fra.rpki-client.org