Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918C661/0BBD9EA2836D11EAB4A2D76DC4F9AE02/D42F0D06B51611EEADC7924BC4F9AE02.roa
File:                     D42F0D06B51611EEADC7924BC4F9AE02.roa (raw, json)
Hash identifier:          D1T9Bfamf9UqltMEygl5sAovw+mF2OoLNzo4zqrOvm4=
Subject key identifier:   DE:40:7F:9C:94:43:EF:3C:8F:A2:23:E8:14:A8:F3:EC:42:52:EF:86
Certificate issuer:       /CN=A918C661/serialNumber=1EC42C1B69E16F5F37C73D81BF9FAB1F4BA42329
Certificate serial:       091C
Authority key identifier: 1E:C4:2C:1B:69:E1:6F:5F:37:C7:3D:81:BF:9F:AB:1F:4B:A4:23:29
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HsQsG2nhb183xz2Bv5-rH0ukIyk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918C661/0BBD9EA2836D11EAB4A2D76DC4F9AE02/D42F0D06B51611EEADC7924BC4F9AE02.roa
Signing time:             Wed 17 Jan 2024 09:00:15 +0000
ROA not before:           Wed 17 Jan 2024 09:00:15 +0000
ROA not after:            Fri 31 Jan 2025 00:00:00 +0000
asID:                     209242
IP address blocks:        27.50.48.0/24 maxlen: 24
                          27.50.49.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918C661/0BBD9EA2836D11EAB4A2D76DC4F9AE02/HsQsG2nhb183xz2Bv5-rH0ukIyk.crl
                          rsync://rpki.apnic.net/member_repository/A918C661/0BBD9EA2836D11EAB4A2D76DC4F9AE02/HsQsG2nhb183xz2Bv5-rH0ukIyk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HsQsG2nhb183xz2Bv5-rH0ukIyk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 May 2024 20:40:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2332 (0x91c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918C661/serialNumber=1EC42C1B69E16F5F37C73D81BF9FAB1F4BA42329
        Validity
            Not Before: Jan 17 09:00:15 2024 GMT
            Not After : Jan 31 00:00:00 2025 GMT
        Subject: CN=65a7971f-6489
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:e0:dc:98:90:62:f4:99:9d:8c:1c:19:cf:84:
                    08:d2:31:da:3d:f5:9d:16:7b:51:e8:fb:fc:dc:ee:
                    23:f0:e2:4a:03:4f:9b:75:db:bb:1c:18:bd:c8:fe:
                    8d:13:36:37:fe:f1:1a:25:5c:c7:3a:5e:a4:83:6c:
                    25:e9:3d:5f:93:0c:5c:5b:bf:eb:cb:cb:94:f4:ba:
                    53:b0:18:33:5f:fa:6c:41:56:da:98:db:07:fb:1f:
                    5e:32:df:4a:34:30:fc:d1:bf:9e:15:99:23:99:e0:
                    cb:e7:78:84:9d:3f:0c:37:da:34:0d:e5:37:6a:94:
                    d1:23:02:8b:06:1a:da:5b:bc:24:99:e8:62:78:07:
                    c7:b7:c9:d5:d1:54:50:5b:56:0d:12:18:d5:54:55:
                    6b:75:0b:2d:59:be:42:5e:35:8e:bb:6b:53:39:b4:
                    fb:69:8a:de:9c:7a:a5:fc:fa:18:9a:46:9d:88:a1:
                    99:bb:73:a0:3e:5d:08:8e:96:6e:d1:93:e4:33:c5:
                    ca:0e:5c:2a:e8:84:d6:02:0f:72:0d:d3:05:04:f8:
                    c7:ef:98:66:e6:be:c4:8f:6b:6d:79:fa:02:98:69:
                    9a:9f:ba:d4:62:d4:65:5e:b4:95:01:2f:f2:94:c8:
                    de:eb:ba:a9:d4:50:ea:d4:c3:8c:da:08:ea:c2:ed:
                    7f:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:40:7F:9C:94:43:EF:3C:8F:A2:23:E8:14:A8:F3:EC:42:52:EF:86
            X509v3 Authority Key Identifier:
                keyid:1E:C4:2C:1B:69:E1:6F:5F:37:C7:3D:81:BF:9F:AB:1F:4B:A4:23:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918C661/0BBD9EA2836D11EAB4A2D76DC4F9AE02/HsQsG2nhb183xz2Bv5-rH0ukIyk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HsQsG2nhb183xz2Bv5-rH0ukIyk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C661/0BBD9EA2836D11EAB4A2D76DC4F9AE02/D42F0D06B51611EEADC7924BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.50.48.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b8:2a:b4:93:dc:d3:4f:75:bc:de:e4:ad:e1:ea:0f:5c:6d:1b:
         25:a7:dc:c7:05:32:62:86:90:a0:9a:1f:73:b5:97:c1:71:ce:
         ba:17:4f:91:8e:19:b1:88:72:85:58:56:1e:40:ca:54:e2:ee:
         8a:66:3d:59:69:8a:13:2e:27:83:f1:e4:99:26:df:c4:8a:cf:
         9b:31:03:14:cc:52:ab:3b:2a:af:35:40:34:02:40:21:9a:27:
         60:e7:54:20:1a:1d:f4:bb:63:71:e0:d7:0d:98:e0:92:cf:81:
         2a:c7:21:6d:73:b0:15:8b:05:7b:db:35:9e:4a:d1:9f:1f:37:
         5a:f1:d3:ab:f1:ce:5d:3c:4b:2f:d3:c7:ac:28:7d:eb:99:18:
         e6:c6:b1:95:98:10:5b:6d:e5:d8:6e:84:e4:c2:cd:02:bb:83:
         0f:e0:72:92:ab:99:b6:76:0d:e3:5c:61:c5:36:17:1d:f0:cd:
         de:e2:7e:fd:ca:03:b6:61:b0:19:15:ff:a5:ea:f2:79:d3:63:
         31:b6:6c:ac:f8:0f:33:95:dc:c1:b8:00:cc:4f:a3:c4:80:f3:
         31:65:2a:f7:0e:7f:05:17:46:71:98:df:e8:3d:68:8c:b4:71:
         87:0b:4b:7b:92:12:95:01:cc:a1:68:e1:91:76:de:ca:4d:fd:
         31:ab:9f:80
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICCRwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEM2NjExMTAvBgNVBAUTKDFFQzQyQzFCNjlFMTZGNUYzN0M3M0Q4MUJGOUZBQjFG
NEJBNDIzMjkwHhcNMjQwMTE3MDkwMDE1WhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NWE3OTcxZi02NDg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1eDcmJBi9JmdjBwZz4QI0jHaPfWdFntR6Pv83O4j8OJKA0+bddu7HBi9yP6N
EzY3/vEaJVzHOl6kg2wl6T1fkwxcW7/ry8uU9LpTsBgzX/psQVbamNsH+x9eMt9K
NDD80b+eFZkjmeDL53iEnT8MN9o0DeU3apTRIwKLBhraW7wkmehieAfHt8nV0VRQ
W1YNEhjVVFVrdQstWb5CXjWOu2tTObT7aYrenHql/PoYmkadiKGZu3OgPl0IjpZu
0ZPkM8XKDlwq6ITWAg9yDdMFBPjH75hm5r7Ej2ttefoCmGman7rUYtRlXrSVAS/y
lMje67qp1FDq1MOM2gjqwu1/NwIDAQABo4IClTCCApEwHQYDVR0OBBYEFN5Af5yU
Q+88j6Ij6BSo8+xCUu+GMB8GA1UdIwQYMBaAFB7ELBtp4W9fN8c9gb+fqx9LpCMp
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzY2MS8wQkJEOUVBMjgz
NkQxMUVBQjRBMkQ3NkRDNEY5QUUwMi9Ic1FzRzJuaGIxODN4ejJCdjUtckgwdWtJ
eWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0hzUXNHMm5oYjE4M3h6MkJ2NS1ySDB1a0l5ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEM2NjEvMEJCRDlFQTI4MzZEMTFFQUI0QTJENzZEQzRGOUFFMDIvRDQyRjBEMDZC
NTE2MTFFRUFEQzc5MjRCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAEbMjAwDQYJKoZIhvcNAQELBQADggEBALgqtJPc0091vN7k
reHqD1xtGyWn3McFMmKGkKCaH3O1l8FxzroXT5GOGbGIcoVYVh5AylTi7opmPVlp
ihMuJ4Px5Jkm38SKz5sxAxTMUqs7Kq81QDQCQCGaJ2DnVCAaHfS7Y3Hg1w2Y4JLP
gSrHIW1zsBWLBXvbNZ5K0Z8fN1rx06vxzl08Sy/Tx6wofeuZGObGsZWYEFtt5dhu
hOTCzQK7gw/gcpKrmbZ2DeNcYcU2Fx3wzd7ifv3KA7ZhsBkV/6Xq8nnTYzG2bKz4
DzOV3MG4AMxPo8SA8zFlKvcOfwUXRnGY3+g9aIy0cYcLS3uSEpUBzKFo4ZF23spN
/TGrn4A=
-----END CERTIFICATE-----
Generated at Mon May 6 22:40:59 2024 by rpki-client on console-ams.rpki-client.org