Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91846F6/F4A1B2D80C1811EF9FF70141C4F9AE02/21D692500C1E11EFBA32F937C4F9AE02.roa
File:                     21D692500C1E11EFBA32F937C4F9AE02.roa (raw, json)
Hash identifier:          SqF3faGShmfVPpXoXHL91JRHc62cO3NIyQXQDMCvuMY=
Subject key identifier:   AA:44:36:44:1A:6F:D3:D2:24:68:57:6C:2F:B6:96:1A:D6:23:36:40
Certificate issuer:       /CN=A91846F6/serialNumber=8DE82EFF6234D79B7A65FA60A053007DA8281FCC
Certificate serial:       78
Authority key identifier: 8D:E8:2E:FF:62:34:D7:9B:7A:65:FA:60:A0:53:00:7D:A8:28:1F:CC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jegu_2I015t6ZfpgoFMAfagoH8w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91846F6/F4A1B2D80C1811EF9FF70141C4F9AE02/21D692500C1E11EFBA32F937C4F9AE02.roa
Signing time:             Fri 01 Nov 2024 05:48:34 +0000
ROA not before:           Fri 01 Nov 2024 05:48:34 +0000
ROA not after:            Mon 01 Dec 2025 00:00:00 +0000
asID:                     17990
IP address blocks:        2001:df0:a300::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91846F6/F4A1B2D80C1811EF9FF70141C4F9AE02/jegu_2I015t6ZfpgoFMAfagoH8w.crl
                          rsync://rpki.apnic.net/member_repository/A91846F6/F4A1B2D80C1811EF9FF70141C4F9AE02/jegu_2I015t6ZfpgoFMAfagoH8w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jegu_2I015t6ZfpgoFMAfagoH8w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 05:02:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120 (0x78)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91846F6/serialNumber=8DE82EFF6234D79B7A65FA60A053007DA8281FCC
        Validity
            Not Before: Nov  1 05:48:34 2024 GMT
            Not After : Dec  1 00:00:00 2025 GMT
        Subject: CN=67246bb2-7fe4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:92:91:d9:c8:f2:81:e4:6b:18:2e:f8:d1:14:
                    df:f7:0a:76:72:49:0f:1a:5b:ce:54:b5:51:60:b6:
                    be:92:ca:8e:3e:44:c8:5c:c6:2c:35:3c:04:fd:28:
                    08:37:9a:23:4b:c1:e8:e0:69:cc:6d:b7:4e:2f:fc:
                    1b:d2:24:4a:3e:30:59:e9:3e:11:08:10:8b:eb:b4:
                    f9:65:06:df:bd:6f:b4:e3:bb:36:0b:0f:de:97:65:
                    be:54:c3:c0:6d:3a:00:d3:70:f8:1a:9c:09:c4:89:
                    78:73:2d:4b:7f:1c:0d:18:9e:31:40:ca:b2:07:8e:
                    f4:dd:99:41:76:6f:d6:fa:86:26:a3:c1:77:2b:21:
                    47:52:67:d5:66:cf:bc:9a:41:3f:28:9d:92:ae:e4:
                    3a:f3:4e:92:e8:e4:02:9f:0d:47:fc:8c:dc:e2:92:
                    9d:09:17:90:26:99:4c:07:02:ba:aa:89:9d:37:b1:
                    9c:c9:91:9e:43:92:82:59:f5:6d:79:8f:60:b8:9f:
                    f4:31:3b:d1:16:a3:9a:cc:22:e9:59:5e:93:dd:da:
                    f9:ba:81:d6:54:a6:c6:35:a7:f9:a7:11:dc:02:d1:
                    f0:f6:ee:f2:2d:a9:12:ee:07:d8:05:e9:23:3a:23:
                    b4:1b:a0:7a:e3:a1:79:12:e8:5e:c1:3b:a3:f2:7f:
                    de:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:44:36:44:1A:6F:D3:D2:24:68:57:6C:2F:B6:96:1A:D6:23:36:40
            X509v3 Authority Key Identifier:
                keyid:8D:E8:2E:FF:62:34:D7:9B:7A:65:FA:60:A0:53:00:7D:A8:28:1F:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91846F6/F4A1B2D80C1811EF9FF70141C4F9AE02/jegu_2I015t6ZfpgoFMAfagoH8w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jegu_2I015t6ZfpgoFMAfagoH8w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91846F6/F4A1B2D80C1811EF9FF70141C4F9AE02/21D692500C1E11EFBA32F937C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df0:a300::/48

    Signature Algorithm: sha256WithRSAEncryption
         83:b8:e0:81:fb:6c:b4:36:77:e3:32:1c:51:9b:d3:0e:b0:1e:
         35:45:f2:9d:9f:aa:52:8d:8a:ee:ec:b3:43:12:17:fc:d9:58:
         a1:5f:c5:b0:5e:68:bc:2b:51:55:af:e7:51:94:51:82:5a:cb:
         cd:03:1d:7e:d7:f9:fe:2a:11:23:69:77:00:27:1b:15:4f:89:
         0f:79:e5:7e:d6:46:95:bd:05:06:ff:7f:f7:28:09:79:67:d0:
         14:d7:cb:48:6a:ef:fb:83:2f:22:9d:b6:04:d3:29:d2:e4:c6:
         eb:c3:59:97:54:53:0a:2d:e9:f5:c8:c2:60:c4:6b:e2:b3:ac:
         e3:a6:1b:9d:e5:9f:6d:62:79:0b:15:46:d6:e2:35:e9:ee:f8:
         a8:fe:17:0f:da:04:d4:3f:39:b3:55:e9:2e:e3:6c:fd:b2:7b:
         29:fe:18:66:13:98:13:1f:ad:af:79:49:a7:d5:9c:83:b0:11:
         4d:b4:46:e2:13:60:23:fa:1f:78:66:d5:78:6d:f4:81:ae:5f:
         cf:ee:77:ae:dd:e3:58:19:9a:11:bb:6f:4e:36:d2:58:1b:43:
         38:06:e4:67:ac:58:91:7f:91:fe:52:4c:f0:66:01:7a:14:7a:
         b1:df:1d:b8:21:e7:25:56:93:b5:c7:6f:c1:cb:ac:ea:c3:2e:
         d9:46:98:fe
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgIBeDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4
NDZGNjExMC8GA1UEBRMoOERFODJFRkY2MjM0RDc5QjdBNjVGQTYwQTA1MzAwN0RB
ODI4MUZDQzAeFw0yNDExMDEwNTQ4MzRaFw0yNTEyMDEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY3MjQ2YmIyLTdmZTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCzkpHZyPKB5GsYLvjRFN/3CnZySQ8aW85UtVFgtr6Syo4+RMhcxiw1PAT9KAg3
miNLwejgacxtt04v/BvSJEo+MFnpPhEIEIvrtPllBt+9b7TjuzYLD96XZb5Uw8Bt
OgDTcPganAnEiXhzLUt/HA0YnjFAyrIHjvTdmUF2b9b6hiajwXcrIUdSZ9Vmz7ya
QT8onZKu5DrzTpLo5AKfDUf8jNzikp0JF5AmmUwHArqqiZ03sZzJkZ5DkoJZ9W15
j2C4n/QxO9EWo5rMIulZXpPd2vm6gdZUpsY1p/mnEdwC0fD27vItqRLuB9gF6SM6
I7QboHrjoXkS6F7BO6Pyf95pAgMBAAGjggKYMIIClDAdBgNVHQ4EFgQUqkQ2RBpv
09IkaFdsL7aWGtYjNkAwHwYDVR0jBBgwFoAUjegu/2I015t6ZfpgoFMAfagoH8ww
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg0NkY2L0Y0QTFCMkQ4MEMx
ODExRUY5RkY3MDE0MUM0RjlBRTAyL2plZ3VfMkkwMTV0NlpmcGdvRk1BZmFnb0g4
dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvamVndV8ySTAxNXQ2WmZwZ29GTUFmYWdvSDh3LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NDZGNi9GNEExQjJEODBDMTgxMUVGOUZGNzAxNDFDNEY5QUUwMi8yMUQ2OTI1MDBD
MUUxMUVGQkEzMkY5MzdDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHACABDfCjADANBgkqhkiG9w0BAQsFAAOCAQEAg7jggftstDZ3
4zIcUZvTDrAeNUXynZ+qUo2K7uyzQxIX/NlYoV/FsF5ovCtRVa/nUZRRglrLzQMd
ftf5/ioRI2l3ACcbFU+JD3nlftZGlb0FBv9/9ygJeWfQFNfLSGrv+4MvIp22BNMp
0uTG68NZl1RTCi3p9cjCYMRr4rOs46YbneWfbWJ5CxVG1uI16e74qP4XD9oE1D85
s1XpLuNs/bJ7Kf4YZhOYEx+tr3lJp9Wcg7ARTbRG4hNgI/ofeGbVeG30ga5fz+53
rt3jWBmaEbtvTjbSWBtDOAbkZ6xYkX+R/lJM8GYBehR6sd8duCHnJVaTtcdvwcus
6sMu2UaY/g==
-----END CERTIFICATE-----
Generated at Thu Nov 21 06:50:18 2024 by rpki-client on console-fra.rpki-client.org