Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186A4B/5DA5C2763EEA11E997B79831C4F9AE02/0E37BE12773E11ECAD064E68C4F9AE02.roa
File:                     0E37BE12773E11ECAD064E68C4F9AE02.roa (raw, json)
Hash identifier:          UIDG4hidGjMCuqQe/KhvxpXKsRwNmql3jj/jGdPw3CQ=
Subject key identifier:   14:E1:B8:9E:03:20:87:AA:00:05:78:DD:8F:80:A5:76:C8:DE:9A:A7
Certificate issuer:       /CN=A9186A4B/serialNumber=1563CCE89C5BAC3C104DED362B39F3B2F259F010
Certificate serial:       0F6E
Authority key identifier: 15:63:CC:E8:9C:5B:AC:3C:10:4D:ED:36:2B:39:F3:B2:F2:59:F0:10
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWPM6JxbrDwQTe02KznzsvJZ8BA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186A4B/5DA5C2763EEA11E997B79831C4F9AE02/0E37BE12773E11ECAD064E68C4F9AE02.roa
Signing time:             Sat 06 Apr 2024 18:26:41 +0000
ROA not before:           Sat 06 Apr 2024 18:26:41 +0000
ROA not after:            Wed 28 May 2025 00:00:00 +0000
asID:                     32519
IP address blocks:        2404:8840::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186A4B/5DA5C2763EEA11E997B79831C4F9AE02/FWPM6JxbrDwQTe02KznzsvJZ8BA.crl
                          rsync://rpki.apnic.net/member_repository/A9186A4B/5DA5C2763EEA11E997B79831C4F9AE02/FWPM6JxbrDwQTe02KznzsvJZ8BA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWPM6JxbrDwQTe02KznzsvJZ8BA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 17:27:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3950 (0xf6e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186A4B/serialNumber=1563CCE89C5BAC3C104DED362B39F3B2F259F010
        Validity
            Not Before: Apr  6 18:26:41 2024 GMT
            Not After : May 28 00:00:00 2025 GMT
        Subject: CN=661193e1-6c3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:29:83:b9:87:85:dd:71:aa:2a:ff:4e:38:e9:
                    10:75:d0:62:4f:b3:4d:9f:be:6a:db:f8:3e:6c:6d:
                    d7:8f:18:8f:63:34:28:2a:99:e6:f6:a4:23:e6:3a:
                    aa:3b:a7:d3:22:67:ee:e6:d3:81:fa:5d:32:6f:5d:
                    a5:b4:21:b7:34:4b:0d:97:ec:38:c4:d8:c5:80:48:
                    ff:a6:5f:92:8c:45:19:65:ba:df:ea:fb:c1:71:86:
                    7a:9a:ad:a7:cc:ec:91:59:3e:d3:3c:ec:70:d1:33:
                    92:0c:b6:5c:32:05:38:35:f3:0a:74:3b:d5:55:d6:
                    a1:f0:e8:a7:58:c6:fb:46:ee:ac:f0:9d:36:ee:be:
                    33:f9:51:32:29:4d:52:de:20:5b:77:d4:c7:f2:bf:
                    cf:1a:ed:d0:3d:9c:ea:85:b1:a5:aa:b5:ce:7f:7a:
                    f8:b6:26:e0:32:10:6a:26:dd:ab:1f:09:cd:2c:04:
                    aa:ce:99:4d:14:54:47:82:c3:64:31:1b:42:91:b8:
                    fb:5c:6f:68:06:6b:c8:bc:53:d1:d5:fb:21:89:06:
                    04:ae:45:5b:b2:32:fd:15:88:89:54:b4:92:16:48:
                    ae:81:fe:7c:60:e3:54:fe:2f:34:9f:89:0c:ae:7f:
                    66:3f:f4:8a:3d:02:90:2f:0a:43:d7:06:53:ca:f7:
                    49:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:E1:B8:9E:03:20:87:AA:00:05:78:DD:8F:80:A5:76:C8:DE:9A:A7
            X509v3 Authority Key Identifier:
                keyid:15:63:CC:E8:9C:5B:AC:3C:10:4D:ED:36:2B:39:F3:B2:F2:59:F0:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186A4B/5DA5C2763EEA11E997B79831C4F9AE02/FWPM6JxbrDwQTe02KznzsvJZ8BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWPM6JxbrDwQTe02KznzsvJZ8BA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186A4B/5DA5C2763EEA11E997B79831C4F9AE02/0E37BE12773E11ECAD064E68C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:8840::/32

    Signature Algorithm: sha256WithRSAEncryption
         4c:3c:ea:e4:31:63:81:e6:b1:29:a7:f5:72:de:f1:fe:05:b8:
         19:65:a4:a9:89:81:fe:70:b2:7a:73:04:c2:76:c4:12:03:fa:
         01:41:0b:82:44:bb:48:6f:e4:32:4e:16:47:63:43:90:1a:dd:
         5b:ea:0b:9a:45:43:5b:e0:b1:9e:03:60:de:56:e1:eb:a1:c8:
         d3:05:17:0b:ed:eb:69:23:0a:d2:5a:da:10:a7:17:0a:b9:33:
         9b:e2:6a:d6:b4:5c:65:6d:c7:f3:16:da:39:34:9a:3b:d8:b7:
         3f:fe:83:aa:65:bf:13:08:e1:c2:95:9e:7b:79:d3:da:4d:6e:
         ad:0b:ad:07:ef:16:b2:1d:ae:3c:4e:0e:75:e7:aa:ca:90:4f:
         aa:a4:6b:c5:91:63:1a:88:79:f2:23:b6:06:9a:18:f7:58:db:
         5c:10:c9:74:68:33:75:5f:fb:b1:09:42:c9:35:70:84:56:70:
         3a:45:18:c1:0e:bd:70:d3:d2:4b:28:12:64:76:cb:0c:d9:07:
         9f:2f:c3:f7:b4:d7:39:af:84:5d:0d:1c:48:bf:85:60:99:76:
         92:bb:a6:19:0a:13:c2:f9:72:64:24:32:5a:21:83:00:6f:36:
         f7:62:b3:45:2c:98:2c:15:d0:f7:6f:50:5f:ee:6e:11:70:f9:
         f3:3a:38:ad
-----BEGIN CERTIFICATE-----
MIIFcjCCBFqgAwIBAgICD24wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODZBNEIxMTAvBgNVBAUTKDE1NjNDQ0U4OUM1QkFDM0MxMDRERUQzNjJCMzlGM0Iy
RjI1OUYwMTAwHhcNMjQwNDA2MTgyNjQxWhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02NjExOTNlMS02YzNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmymDuYeF3XGqKv9OOOkQddBiT7NNn75q2/g+bG3XjxiPYzQoKpnm9qQj5jqq
O6fTImfu5tOB+l0yb12ltCG3NEsNl+w4xNjFgEj/pl+SjEUZZbrf6vvBcYZ6mq2n
zOyRWT7TPOxw0TOSDLZcMgU4NfMKdDvVVdah8OinWMb7Ru6s8J027r4z+VEyKU1S
3iBbd9TH8r/PGu3QPZzqhbGlqrXOf3r4tibgMhBqJt2rHwnNLASqzplNFFRHgsNk
MRtCkbj7XG9oBmvIvFPR1fshiQYErkVbsjL9FYiJVLSSFkiugf58YONU/i80n4kM
rn9mP/SKPQKQLwpD1wZTyvdJFwIDAQABo4ICljCCApIwHQYDVR0OBBYEFBThuJ4D
IIeqAAV43Y+ApXbI3pqnMB8GA1UdIwQYMBaAFBVjzOicW6w8EE3tNis587LyWfAQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkE0Qi81REE1QzI3NjNF
RUExMUU5OTdCNzk4MzFDNEY5QUUwMi9GV1BNNkp4YnJEd1FUZTAyS3puenN2Slo4
QkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZXUE02SnhickR3UVRlMDJLem56c3ZKWjhCQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODZBNEIvNURBNUMyNzYzRUVBMTFFOTk3Qjc5ODMxQzRGOUFFMDIvMEUzN0JFMTI3
NzNFMTFFQ0FEMDY0RTY4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8E
ETAPMA0EAgACMAcDBQAkBIhAMA0GCSqGSIb3DQEBCwUAA4IBAQBMPOrkMWOB5rEp
p/Vy3vH+BbgZZaSpiYH+cLJ6cwTCdsQSA/oBQQuCRLtIb+QyThZHY0OQGt1b6gua
RUNb4LGeA2DeVuHrocjTBRcL7etpIwrSWtoQpxcKuTOb4mrWtFxlbcfzFto5NJo7
2Lc//oOqZb8TCOHClZ57edPaTW6tC60H7xayHa48Tg5156rKkE+qpGvFkWMaiHny
I7YGmhj3WNtcEMl0aDN1X/uxCULJNXCEVnA6RRjBDr1w09JLKBJkdssM2QefL8P3
tNc5r4RdDRxIv4VgmXaSu6YZChPC+XJkJDJaIYMAbzb3YrNFLJgsFdD3b1Bf7m4R
cPnzOjit
-----END CERTIFICATE-----
Generated at Fri Nov 22 19:50:06 2024 by rpki-client on console-ams.rpki-client.org