Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/CC57C044E84911EE9947A115C4F9AE02.roa
File:                     CC57C044E84911EE9947A115C4F9AE02.roa (raw, json)
Hash identifier:          l7QhCqZ0xOa/l0d6Ux5Cam1TFwRUXE7fvVtBWXcf7TY=
Subject key identifier:   3C:58:33:82:23:84:C8:F8:74:85:55:6B:66:20:1F:6A:09:74:24:C0
Certificate issuer:       /CN=A917E1FE/serialNumber=EDEB96F04C8D3EDCCBEEBA40C4242922A8136B53
Certificate serial:       063E
Authority key identifier: ED:EB:96:F0:4C:8D:3E:DC:CB:EE:BA:40:C4:24:29:22:A8:13:6B:53
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7euW8EyNPtzL7rpAxCQpIqgTa1M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/CC57C044E84911EE9947A115C4F9AE02.roa
Signing time:             Sat 22 Jun 2024 23:57:56 +0000
ROA not before:           Sat 22 Jun 2024 23:57:56 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     61112
IP address blocks:        36.255.199.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/7euW8EyNPtzL7rpAxCQpIqgTa1M.crl
                          rsync://rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/7euW8EyNPtzL7rpAxCQpIqgTa1M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7euW8EyNPtzL7rpAxCQpIqgTa1M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 20:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1598 (0x63e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917E1FE/serialNumber=EDEB96F04C8D3EDCCBEEBA40C4242922A8136B53
        Validity
            Not Before: Jun 22 23:57:56 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=66776504-55c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e4:eb:5b:ab:82:fb:e9:f4:75:72:67:22:5a:
                    31:9d:11:70:01:57:20:0f:45:a6:28:6b:67:a1:91:
                    3d:ac:ee:81:95:54:a3:b4:08:d8:85:9e:c2:14:43:
                    3d:6b:aa:67:67:a4:ab:46:b8:b7:0b:87:c7:e1:c0:
                    62:11:96:ce:5f:39:20:03:30:01:cd:89:a4:68:27:
                    f9:76:3a:2d:ff:22:90:d7:cb:13:6b:27:68:2e:8a:
                    25:f6:f3:33:08:7d:c6:a5:8b:96:da:dc:a5:76:79:
                    79:8c:64:e7:d8:ee:59:16:f5:ae:16:ec:7d:21:a9:
                    0a:4d:fd:b0:08:aa:b0:83:5e:1b:d3:36:30:d1:7d:
                    b9:39:e6:c9:f5:73:21:48:d8:a5:dd:1d:56:fc:60:
                    d0:1e:cf:bb:44:86:f1:b1:90:91:6b:52:ac:22:d7:
                    7a:97:11:c1:70:7c:ac:cd:32:1d:4b:68:9b:77:cf:
                    1e:7c:d7:25:04:52:02:d7:8c:78:56:1c:25:53:ba:
                    d0:9b:1b:57:87:cc:71:31:4c:f5:bc:e9:ca:8b:2e:
                    60:ce:ae:77:02:bd:0c:9c:f6:55:ac:7f:29:fa:00:
                    b7:4d:45:60:76:bb:17:e0:d2:dc:c5:50:ca:24:30:
                    11:ac:1a:a8:df:21:28:0c:4b:ca:e7:f0:58:b2:07:
                    bf:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:58:33:82:23:84:C8:F8:74:85:55:6B:66:20:1F:6A:09:74:24:C0
            X509v3 Authority Key Identifier:
                keyid:ED:EB:96:F0:4C:8D:3E:DC:CB:EE:BA:40:C4:24:29:22:A8:13:6B:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/7euW8EyNPtzL7rpAxCQpIqgTa1M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7euW8EyNPtzL7rpAxCQpIqgTa1M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/CC57C044E84911EE9947A115C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.255.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:78:a3:1b:54:fe:61:fc:3f:cc:07:e7:22:52:ae:bf:a6:c3:
         c7:f2:f5:fc:97:a2:4f:a7:ec:db:68:40:25:c0:c3:6e:e8:81:
         3b:eb:48:29:5c:a0:bb:5a:87:19:66:4b:91:4b:9a:4c:32:38:
         6a:57:da:78:a9:fa:18:3c:c7:79:79:b3:58:51:37:b1:87:0f:
         e4:51:8e:62:fd:2f:bd:5b:ff:5f:b5:b0:55:97:c7:0e:0f:9b:
         7b:ff:e8:91:de:13:9c:35:af:7d:a6:6f:ac:9b:c4:95:9d:89:
         87:96:4e:d8:2a:75:bf:50:62:a2:79:63:5f:ba:4d:bb:c8:90:
         7d:7c:eb:ee:16:21:9c:11:4b:8d:4c:8e:fd:1a:37:fe:41:62:
         70:04:1a:66:84:90:1e:06:2e:39:64:27:b3:c3:ab:46:e7:33:
         5f:c7:4b:ca:69:3c:0f:13:13:16:64:a2:3f:b0:35:2a:65:d6:
         15:40:d0:e6:ea:09:6a:10:8d:f0:df:5e:a6:7c:f8:86:96:1f:
         f9:01:63:6b:0d:c1:af:51:af:9e:e3:05:cf:e6:84:af:d5:d1:
         8d:a0:a9:2b:61:89:64:d5:1e:ce:56:79:b3:1a:8c:aa:a3:b4:
         b8:f3:e1:7a:d9:8b:53:76:5d:c7:ca:99:cc:ff:a1:0b:8f:cd:
         4e:69:5c:b3
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBj4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0UxRkUxMTAvBgNVBAUTKEVERUI5NkYwNEM4RDNFRENDQkVFQkE0MEM0MjQyOTIy
QTgxMzZCNTMwHhcNMjQwNjIyMjM1NzU2WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02Njc3NjUwNC01NWM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAweTrW6uC++n0dXJnIloxnRFwAVcgD0WmKGtnoZE9rO6BlVSjtAjYhZ7CFEM9
a6pnZ6SrRri3C4fH4cBiEZbOXzkgAzABzYmkaCf5djot/yKQ18sTaydoLool9vMz
CH3GpYuW2tyldnl5jGTn2O5ZFvWuFux9IakKTf2wCKqwg14b0zYw0X25OebJ9XMh
SNil3R1W/GDQHs+7RIbxsZCRa1KsItd6lxHBcHyszTIdS2ibd88efNclBFIC14x4
VhwlU7rQmxtXh8xxMUz1vOnKiy5gzq53Ar0MnPZVrH8p+gC3TUVgdrsX4NLcxVDK
JDARrBqo3yEoDEvK5/BYsge/7QIDAQABo4IClTCCApEwHQYDVR0OBBYEFDxYM4Ij
hMj4dIVVa2YgH2oJdCTAMB8GA1UdIwQYMBaAFO3rlvBMjT7cy+66QMQkKSKoE2tT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTFGRS8zODYyMzVGMDZG
ODgxMUVCQTg2QkY2NEFDNEY5QUUwMi83ZXVXOEV5TlB0ekw3cnBBeENRcElxZ1Rh
MU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzdldVc4RXlOUHR6TDdycEF4Q1FwSXFnVGExTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
N0UxRkUvMzg2MjM1RjA2Rjg4MTFFQkE4NkJGNjRBQzRGOUFFMDIvQ0M1N0MwNDRF
ODQ5MTFFRTk5NDdBMTE1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAAk/8cwDQYJKoZIhvcNAQELBQADggEBADN4oxtU/mH8P8wH
5yJSrr+mw8fy9fyXok+n7NtoQCXAw27ogTvrSClcoLtahxlmS5FLmkwyOGpX2nip
+hg8x3l5s1hRN7GHD+RRjmL9L71b/1+1sFWXxw4Pm3v/6JHeE5w1r32mb6ybxJWd
iYeWTtgqdb9QYqJ5Y1+6TbvIkH186+4WIZwRS41Mjv0aN/5BYnAEGmaEkB4GLjlk
J7PDq0bnM1/HS8ppPA8TExZkoj+wNSpl1hVA0ObqCWoQjfDfXqZ8+IaWH/kBY2sN
wa9Rr57jBc/mhK/V0Y2gqSthiWTVHs5WebMajKqjtLjz4XrZi1N2XcfKmcz/oQuP
zU5pXLM=
-----END CERTIFICATE-----
Generated at Wed Nov 20 23:55:45 2024 by rpki-client on console-ams.rpki-client.org