Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/EE826AB0C83311EEA202644EC4F9AE02.roa
File:                     EE826AB0C83311EEA202644EC4F9AE02.roa (raw, json)
Hash identifier:          CypTIf1EBegC6vfig2SSrdyROe9emX+5AHEvCIwSkVQ=
Subject key identifier:   73:30:B4:DE:40:55:86:23:DA:39:C5:31:CE:00:B7:CD:92:95:7A:3D
Certificate issuer:       /CN=A918D6BF/serialNumber=4E01F4FCA76DBF9295DEC61C1B32A4EE68ADFD23
Certificate serial:       17CD
Authority key identifier: 4E:01:F4:FC:A7:6D:BF:92:95:DE:C6:1C:1B:32:A4:EE:68:AD:FD:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TgH0_Kdtv5KV3sYcGzKk7mit_SM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/EE826AB0C83311EEA202644EC4F9AE02.roa
Signing time:             Wed 06 Mar 2024 17:04:52 +0000
ROA not before:           Wed 06 Mar 2024 17:04:52 +0000
ROA not after:            Tue 30 Jul 2024 00:00:00 +0000
asID:                     152472
IP address blocks:        175.111.178.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/TgH0_Kdtv5KV3sYcGzKk7mit_SM.crl
                          rsync://rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/TgH0_Kdtv5KV3sYcGzKk7mit_SM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TgH0_Kdtv5KV3sYcGzKk7mit_SM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 May 2024 17:03:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6093 (0x17cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918D6BF/serialNumber=4E01F4FCA76DBF9295DEC61C1B32A4EE68ADFD23
        Validity
            Not Before: Mar  6 17:04:52 2024 GMT
            Not After : Jul 30 00:00:00 2024 GMT
        Subject: CN=65e8a234-3d40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a3:14:87:21:2f:50:97:2f:ba:91:0c:da:fe:
                    85:7a:27:15:94:13:79:e3:9a:65:71:64:0b:8c:cf:
                    1f:18:0b:4e:24:e9:35:a8:0a:37:06:6b:d9:5e:d3:
                    9d:08:67:6a:01:44:36:94:6a:38:36:ee:b4:0b:3f:
                    3a:bf:0e:d0:58:09:f3:46:a1:6c:ef:58:f2:e3:08:
                    3e:bf:c3:8d:ee:4f:a7:28:db:83:bd:d3:4a:de:c8:
                    96:a2:8d:95:f4:7a:97:b0:e0:0d:8a:59:d0:f0:19:
                    55:15:a3:f0:d0:b3:29:38:e3:6b:a6:46:28:dd:92:
                    22:aa:c3:3d:b4:05:80:36:f4:5d:5b:9f:d5:f6:0a:
                    b2:77:91:91:d4:bb:7d:8e:aa:3e:80:ca:01:93:e6:
                    84:6e:96:b0:62:fc:87:e5:4e:cb:d4:43:76:66:cb:
                    45:75:2f:04:d4:d6:af:2c:12:c3:ae:46:50:73:22:
                    7e:d7:bf:b7:b5:a1:a4:bc:ee:64:fe:29:4e:e9:4f:
                    fe:26:a4:ff:40:03:44:f8:b2:01:45:9b:2a:59:1a:
                    85:6b:e6:af:80:4f:a7:3f:bb:5f:15:15:38:f0:25:
                    8d:05:fe:22:26:7c:d6:ba:78:44:01:f9:7c:c6:90:
                    36:2e:e3:5a:62:44:7a:63:22:b2:ca:18:46:a9:1d:
                    3d:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:30:B4:DE:40:55:86:23:DA:39:C5:31:CE:00:B7:CD:92:95:7A:3D
            X509v3 Authority Key Identifier:
                keyid:4E:01:F4:FC:A7:6D:BF:92:95:DE:C6:1C:1B:32:A4:EE:68:AD:FD:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/TgH0_Kdtv5KV3sYcGzKk7mit_SM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TgH0_Kdtv5KV3sYcGzKk7mit_SM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/EE826AB0C83311EEA202644EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.111.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d1:19:9a:86:71:0b:bc:de:e4:ce:5a:0e:1d:64:18:d7:15:61:
         75:88:6c:16:04:89:8c:c0:f4:e6:94:b7:1f:2e:2b:d9:0a:29:
         d9:18:c7:b9:39:fc:6a:89:24:52:a0:cb:ba:42:bd:95:9e:54:
         f5:51:10:a0:e6:26:72:eb:ea:8a:7e:2f:16:cb:cb:47:4d:28:
         24:e0:f8:10:eb:2d:95:ed:ee:cf:12:6b:a3:7d:5e:2f:de:59:
         1e:b0:8d:f2:3f:46:a3:82:85:5d:61:6b:c7:d3:8c:51:6b:e4:
         49:03:ed:23:9a:c8:e8:32:e0:61:a5:3b:67:66:c1:6f:b0:d3:
         78:46:ea:fc:ca:d5:b9:cc:8a:6a:65:d6:97:18:ff:89:f3:a0:
         c3:0a:96:7d:65:8c:80:ca:d4:91:cf:d1:c6:06:69:b7:39:b1:
         15:7f:4f:e5:51:08:b6:bd:69:6d:7e:8c:6d:e1:f8:bd:a7:d1:
         f9:68:df:eb:b0:4b:e8:5c:98:99:28:69:32:89:22:13:03:ea:
         9a:c3:e1:b3:f3:79:c7:61:be:69:c9:4d:d0:ba:99:28:f7:68:
         69:9a:6a:ab:b6:0f:26:f6:63:29:4c:a1:ba:8b:5c:84:05:a6:
         e5:b0:0d:70:98:00:04:be:13:b5:2c:51:fa:32:1a:c3:f6:5b:
         8f:99:f4:b1
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICF80wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEQ2QkYxMTAvBgNVBAUTKDRFMDFGNEZDQTc2REJGOTI5NURFQzYxQzFCMzJBNEVF
NjhBREZEMjMwHhcNMjQwMzA2MTcwNDUyWhcNMjQwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NWU4YTIzNC0zZDQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtaMUhyEvUJcvupEM2v6FeicVlBN545plcWQLjM8fGAtOJOk1qAo3BmvZXtOd
CGdqAUQ2lGo4Nu60Cz86vw7QWAnzRqFs71jy4wg+v8ON7k+nKNuDvdNK3siWoo2V
9HqXsOANilnQ8BlVFaPw0LMpOONrpkYo3ZIiqsM9tAWANvRdW5/V9gqyd5GR1Lt9
jqo+gMoBk+aEbpawYvyH5U7L1EN2ZstFdS8E1NavLBLDrkZQcyJ+17+3taGkvO5k
/ilO6U/+JqT/QANE+LIBRZsqWRqFa+avgE+nP7tfFRU48CWNBf4iJnzWunhEAfl8
xpA2LuNaYkR6YyKyyhhGqR09gQIDAQABo4IClTCCApEwHQYDVR0OBBYEFHMwtN5A
VYYj2jnFMc4At82SlXo9MB8GA1UdIwQYMBaAFE4B9Pynbb+Sld7GHBsypO5orf0j
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDZCRi9FMzYxQkEyMEE1
QTExMUU3QjNBMzEyN0RDNEY5QUUwMi9UZ0gwX0tkdHY1S1Yzc1ljR3pLazdtaXRf
U00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1RnSDBfS2R0djVLVjNzWWNHektrN21pdF9TTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEQ2QkYvRTM2MUJBMjBBNUExMTFFN0IzQTMxMjdEQzRGOUFFMDIvRUU4MjZBQjBD
ODMzMTFFRUEyMDI2NDRFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBACvb7IwDQYJKoZIhvcNAQELBQADggEBANEZmoZxC7ze5M5a
Dh1kGNcVYXWIbBYEiYzA9OaUtx8uK9kKKdkYx7k5/GqJJFKgy7pCvZWeVPVREKDm
JnLr6op+LxbLy0dNKCTg+BDrLZXt7s8Sa6N9Xi/eWR6wjfI/RqOChV1ha8fTjFFr
5EkD7SOayOgy4GGlO2dmwW+w03hG6vzK1bnMimpl1pcY/4nzoMMKln1ljIDK1JHP
0cYGabc5sRV/T+VRCLa9aW1+jG3h+L2n0flo3+uwS+hcmJkoaTKJIhMD6prD4bPz
ecdhvmnJTdC6mSj3aGmaaqu2Dyb2YylMobqLXIQFpuWwDXCYAAS+E7UsUfoyGsP2
W4+Z9LE=
-----END CERTIFICATE-----
Generated at Mon May 20 19:59:45 2024 by rpki-client on console-ams.rpki-client.org