Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/02FCD35C768211EFBDB6F121C4F9AE02.roa
File:                     02FCD35C768211EFBDB6F121C4F9AE02.roa (raw, json)
Hash identifier:          l/QOC6SFGsKwIsmEe8oZ5gyeS3a9x/Qb2lQQHs88kWs=
Subject key identifier:   C1:FB:0E:52:A4:1A:48:C0:F3:38:74:FC:82:F6:54:6A:E5:39:54:7D
Certificate issuer:       /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial:       0D83
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/02FCD35C768211EFBDB6F121C4F9AE02.roa
Signing time:             Thu 19 Sep 2024 12:23:44 +0000
ROA not before:           Thu 19 Sep 2024 12:23:44 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     214495
IP address blocks:        2406:840:9690::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
                          rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 19:56:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3459 (0xd83)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
        Validity
            Not Before: Sep 19 12:23:44 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=66ec17d0-48a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:78:15:74:97:60:6f:11:df:96:af:a5:e2:ea:
                    ca:0f:18:38:ef:25:d7:43:ce:12:46:7c:ba:57:f2:
                    ed:98:1a:27:eb:0d:3b:7e:be:1f:bc:70:f8:aa:30:
                    a8:5d:e4:14:3e:05:3c:a4:c3:fc:c6:cf:7e:94:d1:
                    51:90:c8:0d:d5:a5:a0:a1:9d:ea:4e:a0:62:c2:c9:
                    eb:9c:38:7c:2e:d8:eb:cf:08:a7:5a:69:32:7d:dc:
                    5a:b3:91:0b:b2:1f:c0:cb:54:93:65:fb:e5:c4:f9:
                    01:1d:70:31:50:33:a0:11:26:b6:61:0c:56:9f:80:
                    ee:29:2a:5f:2c:f0:19:60:87:e0:8f:ab:e7:f2:80:
                    a7:3d:9f:ba:8b:b8:e2:24:f4:ad:64:7b:c2:80:43:
                    75:3c:50:52:f6:45:ef:0c:8e:ee:92:d9:dd:b1:5c:
                    d5:e0:86:2d:50:68:76:de:ed:5d:55:71:24:d7:74:
                    e4:20:30:5d:96:ec:9f:6a:22:39:1a:32:86:5a:d7:
                    8e:6d:ea:d5:1b:83:99:8b:a9:25:9d:5c:4e:18:1d:
                    49:55:10:a2:59:f9:18:b4:a4:13:ed:78:bc:c9:72:
                    b7:36:66:35:a3:a8:97:32:02:1f:43:f2:9e:dc:81:
                    ce:e1:ef:7b:e5:53:db:e3:35:46:34:e7:57:40:e3:
                    67:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:FB:0E:52:A4:1A:48:C0:F3:38:74:FC:82:F6:54:6A:E5:39:54:7D
            X509v3 Authority Key Identifier:
                keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/02FCD35C768211EFBDB6F121C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:840:9690::/44

    Signature Algorithm: sha256WithRSAEncryption
         88:0a:04:66:bf:c4:32:41:4b:44:e0:10:57:34:bc:18:4f:df:
         f3:58:a6:fd:90:61:b2:36:c9:2d:10:eb:ec:42:90:67:cd:e1:
         55:9b:a7:02:0d:7b:e2:4f:5e:ab:9e:88:4c:0c:58:c7:ed:39:
         6f:ba:d0:b1:07:20:9c:ce:ab:99:1e:bd:82:73:b2:43:d6:8f:
         63:99:33:1d:57:bc:4b:e5:0e:49:3d:dc:57:ca:72:de:0b:b4:
         42:e2:b4:28:c4:eb:3c:00:a6:b7:7f:20:0b:93:25:ca:7e:a0:
         83:24:81:6b:a1:0b:c0:e9:9a:ee:b3:ff:d8:20:f3:32:16:00:
         83:b7:61:3f:34:e4:54:ef:e9:a2:7b:55:c4:2a:0d:17:f7:ea:
         41:28:68:39:d5:8c:36:41:e4:69:07:8b:46:99:e0:20:85:77:
         60:49:ab:ef:85:69:0a:81:3a:3a:bc:7d:2c:a5:84:b3:16:7d:
         1a:cf:c0:d7:1d:76:97:3a:51:ac:2a:2e:b4:69:fb:6f:d8:77:
         0e:57:dc:4e:9e:70:58:e7:ea:4a:fe:cb:7c:19:70:5f:96:b9:
         2f:a1:d6:a4:92:8a:a7:e6:10:28:fc:29:a7:a9:0b:38:c4:b1:
         e3:c5:a3:ed:fd:08:0b:27:2d:76:1c:81:87:61:ab:57:8a:e9:
         24:84:f7:42
-----BEGIN CERTIFICATE-----
MIIFdDCCBFygAwIBAgICDYMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0VENUMxMTAvBgNVBAUTKDZGRDJFMUZFMDRFQUZGOTAyN0NFNTMxMzE1MEJFODRE
RTExQ0ExQTUwHhcNMjQwOTE5MTIyMzQ0WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmVjMTdkMC00OGE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsngVdJdgbxHflq+l4urKDxg47yXXQ84SRny6V/LtmBon6w07fr4fvHD4qjCo
XeQUPgU8pMP8xs9+lNFRkMgN1aWgoZ3qTqBiwsnrnDh8LtjrzwinWmkyfdxas5EL
sh/Ay1STZfvlxPkBHXAxUDOgESa2YQxWn4DuKSpfLPAZYIfgj6vn8oCnPZ+6i7ji
JPStZHvCgEN1PFBS9kXvDI7uktndsVzV4IYtUGh23u1dVXEk13TkIDBdluyfaiI5
GjKGWteOberVG4OZi6klnVxOGB1JVRCiWfkYtKQT7Xi8yXK3NmY1o6iXMgIfQ/Ke
3IHO4e975VPb4zVGNOdXQONnNQIDAQABo4ICmDCCApQwHQYDVR0OBBYEFMH7DlKk
GkjA8zh0/IL2VGrlOVR9MB8GA1UdIwQYMBaAFG/S4f4E6v+QJ85TExUL6E3hHKGl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUQ1Qy9CNTY0MjJEMDg2
MDgxMUVBOTI5OTk1NzFDNEY5QUUwMi9iOUxoX2dUcV81QW56bE1URlF2b1RlRWNv
YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2I5TGhfZ1RxXzVBbnpsTVRGUXZvVGVFY29hVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
N0VENUMvQjU2NDIyRDA4NjA4MTFFQTkyOTk5NTcxQzRGOUFFMDIvMDJGQ0QzNUM3
NjgyMTFFRkJEQjZGMTIxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E
EzARMA8EAgACMAkDBwQkBghAlpAwDQYJKoZIhvcNAQELBQADggEBAIgKBGa/xDJB
S0TgEFc0vBhP3/NYpv2QYbI2yS0Q6+xCkGfN4VWbpwINe+JPXqueiEwMWMftOW+6
0LEHIJzOq5kevYJzskPWj2OZMx1XvEvlDkk93FfKct4LtELitCjE6zwAprd/IAuT
Jcp+oIMkgWuhC8Dpmu6z/9gg8zIWAIO3YT805FTv6aJ7VcQqDRf36kEoaDnVjDZB
5GkHi0aZ4CCFd2BJq++FaQqBOjq8fSylhLMWfRrPwNcddpc6UawqLrRp+2/Ydw5X
3E6ecFjn6kr+y3wZcF+WuS+h1qSSiqfmECj8KaepCzjEsePFo+39CAsnLXYcgYdh
q1eK6SSE90I=
-----END CERTIFICATE-----
Generated at Wed Nov 20 21:52:41 2024 by rpki-client on console-fra.rpki-client.org