Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91774FB/816972C6343911EF9C3D213EC4F9AE02/671EAC66343D11EFB36ED310C4F9AE02.roa
File:                     671EAC66343D11EFB36ED310C4F9AE02.roa (raw, json)
Hash identifier:          BGWFxC/B5z+W4syYv1KrB6WI1JIbx5pNt/4UAlcwzEA=
Subject key identifier:   B5:E6:C0:4B:96:40:DF:89:FD:D6:1C:A0:EB:FE:A6:8B:F6:8A:90:30
Certificate issuer:       /CN=A91774FB/serialNumber=922416659558217C93627B96D9C9EAFAC1FAA3EE
Certificate serial:       03
Authority key identifier: 92:24:16:65:95:58:21:7C:93:62:7B:96:D9:C9:EA:FA:C1:FA:A3:EE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kiQWZZVYIXyTYnuW2cnq-sH6o-4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91774FB/816972C6343911EF9C3D213EC4F9AE02/671EAC66343D11EFB36ED310C4F9AE02.roa
Signing time:             Thu 27 Jun 2024 04:26:20 +0000
ROA not before:           Thu 27 Jun 2024 04:26:20 +0000
ROA not after:            Sun 31 Aug 2025 00:00:00 +0000
asID:                     152916
IP address blocks:        2001:df3:eec0::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91774FB/816972C6343911EF9C3D213EC4F9AE02/kiQWZZVYIXyTYnuW2cnq-sH6o-4.crl
                          rsync://rpki.apnic.net/member_repository/A91774FB/816972C6343911EF9C3D213EC4F9AE02/kiQWZZVYIXyTYnuW2cnq-sH6o-4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kiQWZZVYIXyTYnuW2cnq-sH6o-4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 04:55:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91774FB/serialNumber=922416659558217C93627B96D9C9EAFAC1FAA3EE
        Validity
            Not Before: Jun 27 04:26:20 2024 GMT
            Not After : Aug 31 00:00:00 2025 GMT
        Subject: CN=667ce9ec-a6e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:0d:6f:c3:fa:24:bd:a3:3f:31:00:5a:a4:52:
                    0c:88:9d:9e:a0:0e:2b:4e:06:01:59:dc:27:fe:21:
                    80:8e:d1:5d:59:a6:46:aa:23:43:d9:93:81:d6:0b:
                    2e:f9:e2:ac:3a:2f:03:08:1a:9d:18:63:6e:62:12:
                    ff:9b:13:7c:d7:a4:8a:b9:28:9b:d7:2b:d7:6f:bb:
                    b6:06:d7:9b:1f:f7:76:9f:9d:d4:fb:65:5c:86:bf:
                    0b:e6:54:b0:fe:16:a7:d7:e0:a3:36:ff:de:8d:20:
                    c9:24:dc:79:f7:b6:e9:f6:f9:9c:99:cc:11:99:fe:
                    ec:52:03:cc:58:f2:73:e2:56:21:21:80:2d:99:de:
                    dd:b1:f4:96:1f:0f:1a:62:c0:fc:bb:ee:de:a8:95:
                    39:f1:41:1e:57:65:5e:2c:dc:bc:16:9c:c3:a0:0f:
                    0c:53:cf:f5:01:76:b8:1e:9e:74:42:72:12:f2:50:
                    53:6d:07:30:ac:2f:a1:db:82:89:47:d2:75:6f:7c:
                    03:e8:0e:ac:50:55:53:d2:ba:5a:44:7c:92:c5:36:
                    ab:c2:45:90:b5:5c:70:b2:c2:7f:43:7c:70:77:59:
                    a5:8e:1e:05:0c:4b:e1:19:e5:0a:45:67:e6:fa:8e:
                    3c:57:82:38:bd:eb:7e:52:0c:ef:75:20:ff:1f:17:
                    17:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:E6:C0:4B:96:40:DF:89:FD:D6:1C:A0:EB:FE:A6:8B:F6:8A:90:30
            X509v3 Authority Key Identifier:
                keyid:92:24:16:65:95:58:21:7C:93:62:7B:96:D9:C9:EA:FA:C1:FA:A3:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91774FB/816972C6343911EF9C3D213EC4F9AE02/kiQWZZVYIXyTYnuW2cnq-sH6o-4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kiQWZZVYIXyTYnuW2cnq-sH6o-4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91774FB/816972C6343911EF9C3D213EC4F9AE02/671EAC66343D11EFB36ED310C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df3:eec0::/48

    Signature Algorithm: sha256WithRSAEncryption
         a0:aa:6b:0e:7a:74:94:20:bd:34:93:04:21:aa:b3:40:d4:00:
         16:97:c2:24:66:42:94:2c:9f:dc:47:f1:d8:ae:60:22:e0:e8:
         dc:ee:a1:6d:cd:38:ec:be:3f:09:a8:cb:23:79:1f:f2:ae:f5:
         28:2e:12:77:5d:34:c9:eb:db:2f:e7:af:d6:19:32:44:e2:27:
         a1:6e:3e:47:ae:1b:23:56:ae:eb:bf:60:be:c5:d3:0a:2e:76:
         58:75:0a:df:fb:c5:55:16:ee:af:21:63:a5:58:49:14:e9:ac:
         0f:d0:cb:8f:b3:55:4d:ce:e4:5f:0a:5b:27:20:8a:e5:e6:f7:
         85:72:7a:29:ed:18:48:fb:ad:a5:a1:5e:99:c3:cf:00:f2:1d:
         b9:06:6a:3b:41:76:85:68:59:a9:f5:07:ac:82:d7:7f:04:d9:
         72:fd:c6:7f:92:56:fd:12:5a:b2:16:6f:d0:5f:7a:25:6d:51:
         2a:59:8b:31:15:a5:b1:67:d0:82:7c:eb:a6:5a:e3:77:47:9b:
         21:47:0d:21:1d:37:39:ca:ff:51:6c:b0:2c:45:0c:ce:1f:cd:
         e8:57:ef:75:52:04:cf:36:17:bf:67:8d:38:24:85:b0:97:66:
         c0:13:58:a8:30:32:0b:b6:09:13:ae:0d:84:f3:0e:5d:3e:88:
         98:49:6d:43
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgIBAzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3
NzRGQjExMC8GA1UEBRMoOTIyNDE2NjU5NTU4MjE3QzkzNjI3Qjk2RDlDOUVBRkFD
MUZBQTNFRTAeFw0yNDA2MjcwNDI2MjBaFw0yNTA4MzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY2N2NlOWVjLWE2ZTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCtDW/D+iS9oz8xAFqkUgyInZ6gDitOBgFZ3Cf+IYCO0V1ZpkaqI0PZk4HWCy75
4qw6LwMIGp0YY25iEv+bE3zXpIq5KJvXK9dvu7YG15sf93afndT7ZVyGvwvmVLD+
FqfX4KM2/96NIMkk3Hn3tun2+ZyZzBGZ/uxSA8xY8nPiViEhgC2Z3t2x9JYfDxpi
wPy77t6olTnxQR5XZV4s3LwWnMOgDwxTz/UBdrgennRCchLyUFNtBzCsL6HbgolH
0nVvfAPoDqxQVVPSulpEfJLFNqvCRZC1XHCywn9DfHB3WaWOHgUMS+EZ5QpFZ+b6
jjxXgji9635SDO91IP8fFxdfAgMBAAGjggKYMIIClDAdBgNVHQ4EFgQUtebAS5ZA
34n91hyg6/6mi/aKkDAwHwYDVR0jBBgwFoAUkiQWZZVYIXyTYnuW2cnq+sH6o+4w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc3NEZCLzgxNjk3MkM2MzQz
OTExRUY5QzNEMjEzRUM0RjlBRTAyL2tpUVdaWlZZSVh5VFludVcyY25xLXNINm8t
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIva2lRV1paVllJWHlUWW51VzJjbnEtc0g2by00LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
NzRGQi84MTY5NzJDNjM0MzkxMUVGOUMzRDIxM0VDNEY5QUUwMi82NzFFQUM2NjM0
M0QxMUVGQjM2RUQzMTBDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHACABDfPuwDANBgkqhkiG9w0BAQsFAAOCAQEAoKprDnp0lCC9
NJMEIaqzQNQAFpfCJGZClCyf3Efx2K5gIuDo3O6hbc047L4/CajLI3kf8q71KC4S
d100yevbL+ev1hkyROInoW4+R64bI1au679gvsXTCi52WHUK3/vFVRburyFjpVhJ
FOmsD9DLj7NVTc7kXwpbJyCK5eb3hXJ6Ke0YSPutpaFemcPPAPIduQZqO0F2hWhZ
qfUHrILXfwTZcv3Gf5JW/RJashZv0F96JW1RKlmLMRWlsWfQgnzrplrjd0ebIUcN
IR03Ocr/UWywLEUMzh/N6FfvdVIEzzYXv2eNOCSFsJdmwBNYqDAyC7YJE64NhPMO
XT6ImEltQw==
-----END CERTIFICATE-----
Generated at Mon Nov 25 06:05:07 2024 by rpki-client on console-fra.rpki-client.org