Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/FDA89E2CA33511EBA984863CC4F9AE02.roa
File:                     FDA89E2CA33511EBA984863CC4F9AE02.roa (raw, json)
Hash identifier:          CepPiAbJAoxGCqiYtSDauOfwQTH3WoA/suUaMBW0GWU=
Subject key identifier:   E5:F2:13:0E:21:C3:A2:06:5F:60:0C:6F:6C:50:1D:D8:3D:A3:6C:AA
Certificate issuer:       /CN=A918495F/serialNumber=0C5A542A1E9B3FB5C8E49686EBEBCFC050CCE4A5
Certificate serial:       16AC
Authority key identifier: 0C:5A:54:2A:1E:9B:3F:B5:C8:E4:96:86:EB:EB:CF:C0:50:CC:E4:A5
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DFpUKh6bP7XI5JaG6-vPwFDM5KU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/FDA89E2CA33511EBA984863CC4F9AE02.roa
Signing time:             Thu 20 Jun 2024 17:26:34 +0000
ROA not before:           Thu 20 Jun 2024 17:26:34 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     4515
IP address blocks:        168.70.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.crl
                          rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DFpUKh6bP7XI5JaG6-vPwFDM5KU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 15:22:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5804 (0x16ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918495F/serialNumber=0C5A542A1E9B3FB5C8E49686EBEBCFC050CCE4A5
        Validity
            Not Before: Jun 20 17:26:34 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=6674664a-efef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:de:33:61:e2:bc:1e:01:01:07:2e:57:66:bc:
                    4d:b4:3b:06:b8:40:a9:e7:c8:f3:e8:e8:78:de:8c:
                    66:b8:a4:8a:da:da:e6:56:6a:7c:38:a5:dc:6e:d3:
                    4b:7b:4c:a6:31:db:aa:5d:0a:a3:b4:d0:86:d9:c6:
                    41:17:4a:ca:14:ae:f4:56:e1:ed:b1:7c:b1:37:2c:
                    26:98:22:38:20:08:37:47:af:b0:d4:0e:70:3c:e1:
                    b5:4a:f6:8c:d2:07:bb:b0:6d:c0:7f:a0:c3:15:ae:
                    67:2f:b9:6a:8a:7f:ac:bf:83:a5:ce:92:04:4e:14:
                    4c:cc:d6:a9:9a:f8:7d:34:b5:6b:f4:59:ee:f6:64:
                    1b:c3:f6:df:7f:98:a2:05:e1:33:fc:e8:29:d3:dd:
                    2c:2f:35:db:21:4d:6c:bf:0b:d7:6f:bc:c4:12:da:
                    77:05:d0:60:43:15:2b:27:d7:fa:23:27:bb:67:44:
                    4a:b4:e0:9d:98:58:e8:a7:c5:20:28:47:2b:89:9a:
                    45:f6:e6:ba:e7:d2:79:8e:ff:12:e2:90:05:27:32:
                    7d:c0:ad:f1:47:38:2e:9b:23:e2:32:f2:9d:d2:9a:
                    7b:dc:ca:9a:a7:27:72:68:a9:65:6a:cd:ae:f6:cf:
                    ee:c6:94:10:ff:e4:65:a9:22:a3:c0:98:7b:23:37:
                    df:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:F2:13:0E:21:C3:A2:06:5F:60:0C:6F:6C:50:1D:D8:3D:A3:6C:AA
            X509v3 Authority Key Identifier:
                keyid:0C:5A:54:2A:1E:9B:3F:B5:C8:E4:96:86:EB:EB:CF:C0:50:CC:E4:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DFpUKh6bP7XI5JaG6-vPwFDM5KU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/FDA89E2CA33511EBA984863CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.70.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         bc:75:e8:f0:d8:38:f7:d0:b4:3f:9b:2a:26:28:bc:b8:a7:50:
         73:be:be:a1:e4:15:dc:d2:6c:47:70:b7:49:fd:88:17:ce:8e:
         0b:37:ef:0e:13:2c:3f:2d:ff:03:8b:f1:d1:64:2d:f1:3b:da:
         1d:b1:ad:12:30:a1:b8:48:88:e6:2a:1e:2f:7b:95:4b:93:bc:
         fe:57:5b:87:29:c4:9e:3a:58:1a:a4:39:d0:cd:31:b6:4a:24:
         01:9a:d1:73:90:93:79:f4:34:3b:b2:4b:ec:ff:c3:4c:c7:ee:
         3c:b8:7e:0b:5e:ec:5a:dc:92:f4:c7:28:b6:66:2b:b9:74:f8:
         81:5b:36:88:2c:b8:79:ad:5e:38:e2:b4:12:85:e7:25:d0:4a:
         36:90:37:92:a5:a2:65:63:cf:af:41:d0:91:e0:a1:3a:39:84:
         5b:ba:17:85:8b:56:1f:8d:50:28:5d:5a:e8:c0:8a:cf:41:4e:
         68:11:2b:5e:2e:72:b9:f0:b0:c2:a0:a1:37:3d:68:b5:6b:46:
         b5:96:57:bd:2c:08:76:49:16:9a:3b:b9:50:e9:8e:23:10:18:
         1c:57:39:ea:25:18:a2:e5:65:fc:ca:c7:10:ab:14:d7:31:af:
         85:42:cc:72:08:c4:69:e4:3b:1f:12:d4:14:a2:73:e5:dd:f8:
         63:f7:3e:ee
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgICFqwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODQ5NUYxMTAvBgNVBAUTKDBDNUE1NDJBMUU5QjNGQjVDOEU0OTY4NkVCRUJDRkMw
NTBDQ0U0QTUwHhcNMjQwNjIwMTcyNjM0WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02Njc0NjY0YS1lZmVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAy94zYeK8HgEBBy5XZrxNtDsGuECp58jz6Oh43oxmuKSK2trmVmp8OKXcbtNL
e0ymMduqXQqjtNCG2cZBF0rKFK70VuHtsXyxNywmmCI4IAg3R6+w1A5wPOG1SvaM
0ge7sG3Af6DDFa5nL7lqin+sv4OlzpIEThRMzNapmvh9NLVr9Fnu9mQbw/bff5ii
BeEz/Ogp090sLzXbIU1svwvXb7zEEtp3BdBgQxUrJ9f6Iye7Z0RKtOCdmFjop8Ug
KEcriZpF9ua659J5jv8S4pAFJzJ9wK3xRzgumyPiMvKd0pp73MqapydyaKllas2u
9s/uxpQQ/+RlqSKjwJh7Izff+wIDAQABo4IClDCCApAwHQYDVR0OBBYEFOXyEw4h
w6IGX2AMb2xQHdg9o2yqMB8GA1UdIwQYMBaAFAxaVCoemz+1yOSWhuvrz8BQzOSl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDk1Ri83OEQ1RDg5NkRG
RUMxMUU3QTI3QTIyMTNDNEY5QUUwMi9ERnBVS2g2YlA3WEk1SmFHNi12UHdGRE01
S1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0RGcFVLaDZiUDdYSTVKYUc2LXZQd0ZETTVLVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODQ5NUYvNzhENUQ4OTZERkVDMTFFN0EyN0EyMjEzQzRGOUFFMDIvRkRBODlFMkNB
MzM1MTFFQkE5ODQ4NjNDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8E
DzANMAsEAgABMAUDAwCoRjANBgkqhkiG9w0BAQsFAAOCAQEAvHXo8Ng499C0P5sq
Jii8uKdQc76+oeQV3NJsR3C3Sf2IF86OCzfvDhMsPy3/A4vx0WQt8TvaHbGtEjCh
uEiI5ioeL3uVS5O8/ldbhynEnjpYGqQ50M0xtkokAZrRc5CTefQ0O7JL7P/DTMfu
PLh+C17sWtyS9McotmYruXT4gVs2iCy4ea1eOOK0EoXnJdBKNpA3kqWiZWPPr0HQ
keChOjmEW7oXhYtWH41QKF1a6MCKz0FOaBErXi5yufCwwqChNz1otWtGtZZXvSwI
dkkWmju5UOmOIxAYHFc56iUYouVl/MrHEKsU1zGvhULMcgjEaeQ7HxLUFKJz5d34
Y/c+7g==
-----END CERTIFICATE-----
Generated at Wed Nov 20 19:05:22 2024 by rpki-client on console-ams.rpki-client.org