Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/F9637F56BDC411E981D8F753C4F9AE02.roa
File:                     F9637F56BDC411E981D8F753C4F9AE02.roa (raw, json)
Hash identifier:          ld5qjsviRKARXfOZluc1WUSjWqlncSGWbtF3KplFU6k=
Subject key identifier:   4A:54:34:39:E5:44:DE:DC:2F:C1:E8:1B:FC:7B:C3:DF:58:3A:54:9D
Certificate issuer:       /CN=A91803DB/serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60
Certificate serial:       0F4B
Authority key identifier: 36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/F9637F56BDC411E981D8F753C4F9AE02.roa
Signing time:             Wed 16 Aug 2023 18:16:08 +0000
ROA not before:           Wed 16 Aug 2023 18:16:08 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     139589
IP address blocks:        2404:f4c0:f200::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.crl
                          rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 May 2024 18:30:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3915 (0xf4b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91803DB/serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60
        Validity
            Not Before: Aug 16 18:16:08 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=64dd1267-e09f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:8c:09:39:90:bb:69:27:13:b4:06:2d:83:65:
                    df:74:34:62:9f:db:ce:c3:f8:4b:48:4a:0f:e4:d4:
                    ee:1a:30:23:aa:c2:dc:45:07:b8:51:37:57:44:cd:
                    90:50:0f:a9:9c:0d:0d:9a:b6:20:7a:6e:86:9c:16:
                    85:6c:12:95:e8:78:67:64:ae:10:00:f5:80:d7:63:
                    6c:d7:e3:97:90:50:ae:17:77:69:8a:ff:f7:29:50:
                    b2:16:54:47:b6:7c:5a:4b:93:b4:6a:9b:02:d7:b1:
                    da:38:41:03:de:f7:42:aa:90:50:81:cd:a2:ce:43:
                    19:11:fc:00:7d:92:40:be:2b:ff:a8:1c:a6:9c:b6:
                    1f:9d:da:96:97:cb:f7:25:2f:95:0e:8e:bb:ec:ca:
                    9f:f0:3a:9b:77:e0:3f:48:d8:fb:bf:df:4b:e2:a6:
                    42:0f:ae:a6:6f:28:86:e2:4e:c7:fe:3d:b3:48:f6:
                    50:00:94:8b:30:6e:e8:b4:e7:81:b6:f4:31:8c:71:
                    24:c1:ce:59:84:4d:f1:97:44:95:ac:c8:fc:94:75:
                    d2:e4:d5:0b:23:56:7b:36:24:70:cb:de:bf:33:fd:
                    23:c8:d8:9a:e9:ee:4d:90:a7:f0:78:1e:32:7f:e9:
                    5f:77:b6:ca:da:f5:d9:e9:ec:11:cf:7f:65:4b:ce:
                    06:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:54:34:39:E5:44:DE:DC:2F:C1:E8:1B:FC:7B:C3:DF:58:3A:54:9D
            X509v3 Authority Key Identifier:
                keyid:36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/F9637F56BDC411E981D8F753C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:f4c0:f200::/44

    Signature Algorithm: sha256WithRSAEncryption
         7d:aa:e1:11:bd:26:59:34:f0:e6:c5:54:4a:d8:b8:9f:d1:bf:
         21:0d:42:2b:cb:6c:3f:e6:6e:3e:89:8a:1f:8b:9a:36:2a:20:
         e7:42:2c:f5:24:14:49:62:eb:f2:97:6c:e6:35:16:f0:ed:51:
         95:dc:80:97:d2:55:09:91:cb:61:9d:66:8f:b0:c7:b0:fd:c6:
         ab:ef:43:16:a5:5a:4c:30:14:91:9e:cc:83:fe:05:cb:14:1f:
         a8:e8:54:2f:ec:5b:a5:47:58:51:0d:2f:67:20:c7:0f:b8:e4:
         73:95:ef:5f:dd:66:5f:2d:d6:9d:1a:e9:ec:15:e6:d3:ae:87:
         a4:39:fc:82:e1:9c:0f:c8:31:73:63:67:f0:7d:44:eb:78:f0:
         01:df:9b:d0:fb:83:56:29:69:3f:62:a8:c9:70:ae:55:b3:e1:
         a5:e9:82:48:2d:c2:80:0b:b6:e6:c2:6b:60:ab:1c:06:a9:24:
         6f:1d:17:bd:60:78:ad:74:cd:b6:2a:92:a2:cb:5d:b9:a2:c8:
         c8:c5:d3:4c:8a:96:a9:d2:0c:7e:0b:4e:8a:0b:1d:10:7a:ab:
         50:c8:56:c2:22:21:15:d8:43:19:6a:33:b9:e8:74:c1:7d:23:
         44:f0:f9:d6:02:2e:46:0c:da:ab:00:a7:5d:b6:38:dc:9a:7d:
         fd:c4:3e:05
-----BEGIN CERTIFICATE-----
MIIFdDCCBFygAwIBAgICD0swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODAzREIxMTAvBgNVBAUTKDM2RUQ4QjY3NUVBNzIzODA4NUFGQTA2QzA5M0U1NEE5
RDNGRDdCNjAwHhcNMjMwODE2MTgxNjA4WhcNMjQwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NGRkMTI2Ny1lMDlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1IwJOZC7aScTtAYtg2XfdDRin9vOw/hLSEoP5NTuGjAjqsLcRQe4UTdXRM2Q
UA+pnA0NmrYgem6GnBaFbBKV6HhnZK4QAPWA12Ns1+OXkFCuF3dpiv/3KVCyFlRH
tnxaS5O0apsC17HaOEED3vdCqpBQgc2izkMZEfwAfZJAviv/qBymnLYfndqWl8v3
JS+VDo677Mqf8Dqbd+A/SNj7v99L4qZCD66mbyiG4k7H/j2zSPZQAJSLMG7otOeB
tvQxjHEkwc5ZhE3xl0SVrMj8lHXS5NULI1Z7NiRwy96/M/0jyNia6e5NkKfweB4y
f+lfd7bK2vXZ6ewRz39lS84G6wIDAQABo4ICmDCCApQwHQYDVR0OBBYEFEpUNDnl
RN7cL8HoG/x7w99YOlSdMB8GA1UdIwQYMBaAFDbti2depyOAha+gbAk+VKnT/Xtg
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDNEQi8wREMzNUQzRThE
RDQxMUU5QkZFMkM1NTZDNEY5QUUwMi9OdTJMWjE2bkk0Q0ZyNkJzQ1Q1VXFkUDll
MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL051MkxaMTZuSTRDRnI2QnNDVDVVcWRQOWUyQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODAzREIvMERDMzVEM0U4REQ0MTFFOUJGRTJDNTU2QzRGOUFFMDIvRjk2MzdGNTZC
REM0MTFFOTgxRDhGNzUzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E
EzARMA8EAgACMAkDBwQkBPTA8gAwDQYJKoZIhvcNAQELBQADggEBAH2q4RG9Jlk0
8ObFVErYuJ/RvyENQivLbD/mbj6Jih+LmjYqIOdCLPUkFEli6/KXbOY1FvDtUZXc
gJfSVQmRy2GdZo+wx7D9xqvvQxalWkwwFJGezIP+BcsUH6joVC/sW6VHWFENL2cg
xw+45HOV71/dZl8t1p0a6ewV5tOuh6Q5/ILhnA/IMXNjZ/B9ROt48AHfm9D7g1Yp
aT9iqMlwrlWz4aXpgkgtwoALtubCa2CrHAapJG8dF71geK10zbYqkqLLXbmiyMjF
00yKlqnSDH4LTooLHRB6q1DIVsIiIRXYQxlqM7nodMF9I0Tw+dYCLkYM2qsAp122
ONyaff3EPgU=
-----END CERTIFICATE-----
Generated at Wed May 22 20:08:10 2024 by rpki-client on console-ams.rpki-client.org