Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/3848F884F23311EE97946A35C4F9AE02.roa
File:                     3848F884F23311EE97946A35C4F9AE02.roa (raw, json)
Hash identifier:          3yyD1jgucgucm90eBkzwGN8pA1GaVvywFk7br5+2pIo=
Subject key identifier:   48:DB:C3:B3:09:8B:7B:E8:29:CF:30:A2:30:3D:71:B1:88:CC:5B:9F
Certificate issuer:       /CN=A918E6B7/serialNumber=BE725484B8CD0D1D8D77ED87CCCEFADF793F4708
Certificate serial:       0F80
Authority key identifier: BE:72:54:84:B8:CD:0D:1D:8D:77:ED:87:CC:CE:FA:DF:79:3F:47:08
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vnJUhLjNDR2Nd-2HzM7633k_Rwg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/3848F884F23311EE97946A35C4F9AE02.roa
Signing time:             Thu 02 May 2024 18:36:47 +0000
ROA not before:           Thu 02 May 2024 18:36:47 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     7545
IP address blocks:        147.76.52.0/24 maxlen: 24
                          147.76.53.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.crl
                          rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vnJUhLjNDR2Nd-2HzM7633k_Rwg.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 15:22:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3968 (0xf80)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E6B7/serialNumber=BE725484B8CD0D1D8D77ED87CCCEFADF793F4708
        Validity
            Not Before: May  2 18:36:47 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=6633dd3e-7449
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b2:74:f6:93:21:97:d9:80:d6:de:69:e1:9d:
                    5f:62:87:3b:3a:1f:39:3b:a7:ea:3d:ac:d6:2a:8d:
                    25:49:a0:bb:71:53:77:16:41:40:9c:6b:0b:07:34:
                    d7:c6:44:c2:d1:02:29:a0:35:03:f6:7e:be:d5:20:
                    7f:68:87:10:1a:2b:69:3b:42:51:f5:db:db:ad:5e:
                    9f:8b:0b:3a:f9:e8:fe:fc:e7:a6:8a:e7:7c:f6:7f:
                    6d:43:29:fa:8e:0c:35:7d:81:8d:d8:a6:47:bf:ae:
                    e5:fc:b7:a3:7d:47:45:56:d7:4c:3f:3c:20:e6:9d:
                    e5:9a:1b:df:e2:0b:70:2e:18:be:5d:19:4e:e5:c6:
                    aa:88:a1:18:de:b2:bb:52:17:3c:7a:09:e7:4c:fd:
                    38:c3:c4:cb:f3:48:04:f8:b0:f8:bd:f1:28:99:5e:
                    46:4a:86:6c:46:6a:92:f8:97:61:cf:86:a5:b7:10:
                    05:a0:43:72:4a:60:af:95:be:4d:fd:fa:20:1c:f6:
                    92:67:16:b7:10:a3:9d:d7:93:c2:b7:97:35:0d:2f:
                    b8:77:16:ef:1e:12:1a:a8:76:1c:96:3e:35:c0:e1:
                    c2:0c:0d:a3:bd:2f:76:70:2e:2c:1e:58:8e:37:97:
                    97:0f:bd:f2:6f:5c:7a:5b:31:0f:50:18:86:31:29:
                    64:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:DB:C3:B3:09:8B:7B:E8:29:CF:30:A2:30:3D:71:B1:88:CC:5B:9F
            X509v3 Authority Key Identifier:
                keyid:BE:72:54:84:B8:CD:0D:1D:8D:77:ED:87:CC:CE:FA:DF:79:3F:47:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vnJUhLjNDR2Nd-2HzM7633k_Rwg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/3848F884F23311EE97946A35C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.76.52.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1d:70:c3:b6:c9:1d:bd:92:50:e9:53:57:37:61:99:4b:35:f0:
         da:45:fd:a8:c7:c4:42:1d:11:05:31:b4:14:9c:86:18:90:1b:
         40:f6:a4:02:db:78:91:14:b5:5e:38:bf:e9:51:df:ac:d5:7d:
         51:a5:cb:63:04:75:db:91:3a:3e:b3:3d:29:34:08:1b:ff:aa:
         4e:7f:3d:fd:f8:6b:58:22:4a:bb:9c:f7:10:d3:c9:53:e7:ed:
         f4:2b:22:44:12:29:16:29:46:dd:d1:10:d5:d8:26:e5:32:09:
         9f:71:de:d2:b3:e9:25:d9:42:c8:11:f9:44:03:ff:dc:ca:0d:
         59:00:f9:7d:88:89:4d:54:d7:ab:af:ba:36:7f:09:c2:94:0d:
         6a:fb:88:90:99:5e:5d:2d:bc:00:f2:49:a4:c7:75:01:b4:2d:
         1a:47:f2:23:a6:b7:26:e0:cb:d3:2a:43:8e:ff:ae:92:ef:93:
         c4:29:6c:2e:c8:7b:0b:b9:ab:05:4d:f3:29:63:2e:13:d6:82:
         4b:72:e1:05:7b:fa:89:ac:bd:99:d5:96:e5:b1:ad:5a:f0:5f:
         2a:e7:df:08:a1:13:dc:d9:da:29:b8:96:07:79:04:ec:37:d3:
         7d:ac:06:c9:5a:27:e0:11:a0:3c:52:7e:24:f2:f6:a0:52:37:
         27:29:fc:4b
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICD4AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEU2QjcxMTAvBgNVBAUTKEJFNzI1NDg0QjhDRDBEMUQ4RDc3RUQ4N0NDQ0VGQURG
NzkzRjQ3MDgwHhcNMjQwNTAyMTgzNjQ3WhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NjMzZGQzZS03NDQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAu7J09pMhl9mA1t5p4Z1fYoc7Oh85O6fqPazWKo0lSaC7cVN3FkFAnGsLBzTX
xkTC0QIpoDUD9n6+1SB/aIcQGitpO0JR9dvbrV6fiws6+ej+/Oemiud89n9tQyn6
jgw1fYGN2KZHv67l/LejfUdFVtdMPzwg5p3lmhvf4gtwLhi+XRlO5caqiKEY3rK7
Uhc8egnnTP04w8TL80gE+LD4vfEomV5GSoZsRmqS+Jdhz4altxAFoENySmCvlb5N
/fogHPaSZxa3EKOd15PCt5c1DS+4dxbvHhIaqHYclj41wOHCDA2jvS92cC4sHliO
N5eXD73yb1x6WzEPUBiGMSlkOwIDAQABo4IClTCCApEwHQYDVR0OBBYEFEjbw7MJ
i3voKc8wojA9cbGIzFufMB8GA1UdIwQYMBaAFL5yVIS4zQ0djXfth8zO+t95P0cI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTZCNy9BRTdENEQ0RTQ2
QUMxMUU5OTYwODgzNDhDNEY5QUUwMi92bkpVaExqTkRSMk5kLTJIek03NjMza19S
d2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3ZuSlVoTGpORFIyTmQtMkh6TTc2MzNrX1J3Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEU2QjcvQUU3RDRENEU0NkFDMTFFOTk2MDg4MzQ4QzRGOUFFMDIvMzg0OEY4ODRG
MjMzMTFFRTk3OTQ2QTM1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAGTTDQwDQYJKoZIhvcNAQELBQADggEBAB1ww7bJHb2SUOlT
VzdhmUs18NpF/ajHxEIdEQUxtBSchhiQG0D2pALbeJEUtV44v+lR36zVfVGly2ME
dduROj6zPSk0CBv/qk5/Pf34a1giSruc9xDTyVPn7fQrIkQSKRYpRt3RENXYJuUy
CZ9x3tKz6SXZQsgR+UQD/9zKDVkA+X2IiU1U16uvujZ/CcKUDWr7iJCZXl0tvADy
SaTHdQG0LRpH8iOmtybgy9MqQ47/rpLvk8QpbC7Iewu5qwVN8yljLhPWgkty4QV7
+omsvZnVluWxrVrwXyrn3wihE9zZ2im4lgd5BOw3032sBslaJ+ARoDxSfiTy9qBS
Nycp/Es=
-----END CERTIFICATE-----
Generated at Wed Nov 20 19:05:23 2024 by rpki-client on console-ams.rpki-client.org