Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/13702C3EE15B11ECA05C9236C4F9AE02.roa
File:                     13702C3EE15B11ECA05C9236C4F9AE02.roa (raw, json)
Hash identifier:          QPyPuuXiEoxMRcuvSgY9i0fqsHr66Z613AzBKY7x8bA=
Subject key identifier:   D2:DC:38:2A:5B:AE:1E:EC:0A:B7:44:FA:20:80:E3:BB:F5:53:2F:0F
Certificate issuer:       /CN=A91853D3/serialNumber=4E1B840F5C66016CED7E62EEC61B8322A321B6B6
Certificate serial:       0488
Authority key identifier: 4E:1B:84:0F:5C:66:01:6C:ED:7E:62:EE:C6:1B:83:22:A3:21:B6:B6
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ThuED1xmAWztfmLuxhuDIqMhtrY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/13702C3EE15B11ECA05C9236C4F9AE02.roa
Signing time:             Thu 23 May 2024 02:05:52 +0000
ROA not before:           Thu 23 May 2024 02:05:52 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     55824
IP address blocks:        144.16.112.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.crl
                          rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ThuED1xmAWztfmLuxhuDIqMhtrY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1160 (0x488)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91853D3/serialNumber=4E1B840F5C66016CED7E62EEC61B8322A321B6B6
        Validity
            Not Before: May 23 02:05:52 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=664ea47f-067a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:cf:31:4a:c5:28:13:64:8e:39:8d:46:6b:fb:
                    81:af:cb:06:38:55:46:28:7b:3b:18:90:ff:db:38:
                    c4:ec:67:6e:c9:08:9e:fc:d4:3f:6f:4d:61:a0:a4:
                    36:99:55:0d:b9:e3:96:83:c9:8d:26:a5:b1:0f:6d:
                    22:ef:a2:92:55:5d:3d:dc:fe:39:49:ee:a6:11:fd:
                    6b:4a:19:70:32:e4:64:79:e3:28:d3:5b:1e:19:c3:
                    00:7b:d7:43:46:66:6a:f6:4b:08:3c:91:c7:6d:10:
                    8f:e2:68:21:f9:3b:c4:9a:06:ae:86:01:04:ec:36:
                    2e:a8:26:90:a3:85:55:de:da:ec:51:a7:93:72:05:
                    9a:45:45:92:11:f4:ef:82:4f:5f:31:9f:a8:19:04:
                    a0:9b:5c:ce:cf:aa:52:84:91:de:3b:f4:6b:5f:8f:
                    7b:03:e4:c0:0f:ab:2a:4b:25:00:01:10:33:7e:c0:
                    20:66:d0:6d:c4:d6:35:83:cb:be:82:99:bd:50:0f:
                    a7:20:3d:67:8a:0d:fd:0c:6c:4d:55:92:38:58:b2:
                    1e:d3:55:3e:25:fb:48:06:6c:0e:d4:5f:36:f3:03:
                    e7:68:a6:65:0c:92:a9:28:04:29:1a:2a:24:88:62:
                    48:da:30:0e:87:42:74:ac:ec:c4:b0:d6:a2:95:ca:
                    24:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:DC:38:2A:5B:AE:1E:EC:0A:B7:44:FA:20:80:E3:BB:F5:53:2F:0F
            X509v3 Authority Key Identifier:
                keyid:4E:1B:84:0F:5C:66:01:6C:ED:7E:62:EE:C6:1B:83:22:A3:21:B6:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ThuED1xmAWztfmLuxhuDIqMhtrY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/13702C3EE15B11ECA05C9236C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.16.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:c4:7b:33:54:59:c4:bd:74:3d:ce:fb:c4:44:8d:69:71:51:
         c8:0b:23:d4:68:41:91:8c:81:30:7b:bd:11:cc:3a:ca:fc:c4:
         3d:ec:97:9d:e3:7d:1a:05:f2:23:8d:02:75:1a:19:cc:23:1d:
         89:62:a8:b9:04:c7:10:8f:cb:39:74:ce:1c:0b:77:57:6c:20:
         bc:c8:35:a7:c6:92:95:cf:f4:a4:95:38:3c:c5:a1:2f:8b:08:
         b5:dc:82:31:52:1a:cc:0c:17:f3:59:68:39:63:11:78:53:af:
         45:fe:16:32:08:dd:07:17:f4:00:34:83:87:2c:35:b5:5e:5f:
         05:82:5b:7b:c4:0f:c8:1f:70:85:fa:a8:00:0e:f5:c6:bd:9b:
         76:57:d7:f2:62:bf:99:ea:da:f4:c3:9f:2e:4b:13:d1:5d:02:
         dd:1b:81:8c:ca:3d:23:30:99:05:71:40:f1:11:45:23:e1:3d:
         31:d9:83:57:2f:78:12:cc:ea:64:d1:54:75:f5:6f:d5:2d:42:
         ab:13:d9:29:54:2f:e3:d1:70:c1:5e:63:36:2d:1d:10:53:a6:
         44:84:cc:7a:6a:a7:77:45:be:24:24:49:3d:2e:4a:be:0d:f0:
         4c:18:02:2f:a4:bb:79:08:dc:b5:98:3c:a6:26:7e:6c:84:e2:
         a8:c5:e3:ff
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBIgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODUzRDMxMTAvBgNVBAUTKDRFMUI4NDBGNUM2NjAxNkNFRDdFNjJFRUM2MUI4MzIy
QTMyMUI2QjYwHhcNMjQwNTIzMDIwNTUyWhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NjRlYTQ3Zi0wNjdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtM8xSsUoE2SOOY1Ga/uBr8sGOFVGKHs7GJD/2zjE7GduyQie/NQ/b01hoKQ2
mVUNueOWg8mNJqWxD20i76KSVV093P45Se6mEf1rShlwMuRkeeMo01seGcMAe9dD
RmZq9ksIPJHHbRCP4mgh+TvEmgauhgEE7DYuqCaQo4VV3trsUaeTcgWaRUWSEfTv
gk9fMZ+oGQSgm1zOz6pShJHeO/RrX497A+TAD6sqSyUAARAzfsAgZtBtxNY1g8u+
gpm9UA+nID1nig39DGxNVZI4WLIe01U+JftIBmwO1F828wPnaKZlDJKpKAQpGiok
iGJI2jAOh0J0rOzEsNailcok4QIDAQABo4IClTCCApEwHQYDVR0OBBYEFNLcOCpb
rh7sCrdE+iCA47v1Uy8PMB8GA1UdIwQYMBaAFE4bhA9cZgFs7X5i7sYbgyKjIba2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTNEMy82NDgyREI3QzAw
MEExMUVDOEMyODcyNTJDNEY5QUUwMi9UaHVFRDF4bUFXenRmbUx1eGh1RElxTWh0
clkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1RodUVEMXhtQVd6dGZtTHV4aHVESXFNaHRyWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODUzRDMvNjQ4MkRCN0MwMDBBMTFFQzhDMjg3MjUyQzRGOUFFMDIvMTM3MDJDM0VF
MTVCMTFFQ0EwNUM5MjM2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBACQEHAwDQYJKoZIhvcNAQELBQADggEBAArEezNUWcS9dD3O
+8REjWlxUcgLI9RoQZGMgTB7vRHMOsr8xD3sl53jfRoF8iONAnUaGcwjHYliqLkE
xxCPyzl0zhwLd1dsILzINafGkpXP9KSVODzFoS+LCLXcgjFSGswMF/NZaDljEXhT
r0X+FjII3QcX9AA0g4csNbVeXwWCW3vED8gfcIX6qAAO9ca9m3ZX1/Jiv5nq2vTD
ny5LE9FdAt0bgYzKPSMwmQVxQPERRSPhPTHZg1cveBLM6mTRVHX1b9UtQqsT2SlU
L+PRcMFeYzYtHRBTpkSEzHpqp3dFviQkST0uSr4N8EwYAi+ku3kI3LWYPKYmfmyE
4qjF4/8=
-----END CERTIFICATE-----
Generated at Sat Nov 23 00:49:35 2024 by rpki-client on console-fra.rpki-client.org