Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/41F47786ECC611EEA533BC59C4F9AE02.roa
File:                     41F47786ECC611EEA533BC59C4F9AE02.roa (raw, json)
Hash identifier:          4v9Xuk4ZisopA4oJ/9QPSjPKaYDftUq/xlBPue8Zp3E=
Subject key identifier:   B1:1E:01:73:B3:29:C7:DE:E6:71:60:FC:51:9F:C9:69:27:39:3D:21
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       1A06
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/41F47786ECC611EEA533BC59C4F9AE02.roa
Signing time:             Thu 30 May 2024 15:52:56 +0000
ROA not before:           Thu 30 May 2024 15:52:56 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     151730
IP address blocks:        157.15.17.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 05:23:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6662 (0x1a06)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: May 30 15:52:56 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=6658a0d8-6120
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:48:f7:d0:fe:15:0b:a5:38:63:0c:99:32:2b:
                    b0:2a:86:4a:aa:b9:c1:fb:ff:4a:3b:46:f4:a4:74:
                    bf:a1:86:15:3e:fe:54:5b:92:e9:ba:5a:8c:9a:bd:
                    1b:19:61:09:f1:a9:cd:c1:7e:30:78:55:a9:4f:36:
                    35:e8:ce:d0:1f:3a:16:c5:36:90:4d:d7:89:c1:79:
                    1e:10:ef:95:61:2e:38:88:53:10:b8:84:66:a8:1f:
                    19:63:8b:be:db:c1:02:10:15:6a:9e:44:1c:42:bd:
                    8b:d3:f4:ae:f5:82:90:36:e2:48:6f:5d:1f:3c:3d:
                    db:c4:59:70:c0:66:94:2c:36:1f:1e:82:74:e0:f1:
                    8a:fc:ca:a2:05:28:e9:f0:31:c7:98:ce:37:4b:86:
                    34:2a:32:dd:e4:ab:d9:c2:b2:55:65:86:4c:ce:44:
                    5d:b3:be:8b:7c:77:18:f5:cd:21:a1:3f:af:d9:88:
                    87:1b:fe:3b:8f:ea:33:50:9b:63:df:57:bc:6b:85:
                    3d:5f:65:b6:db:f6:39:aa:39:8a:9d:72:37:03:d2:
                    52:6e:a5:da:a8:17:66:db:e0:b5:69:aa:1d:53:fa:
                    c4:47:eb:27:57:e2:bd:41:27:9a:a9:7f:40:6f:d9:
                    29:f5:3c:c7:72:d7:1e:01:68:68:c5:39:08:14:17:
                    fb:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:1E:01:73:B3:29:C7:DE:E6:71:60:FC:51:9F:C9:69:27:39:3D:21
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/41F47786ECC611EEA533BC59C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.15.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:8b:54:7b:fc:33:6f:53:6a:a9:f7:bc:65:fb:3a:2d:c8:6d:
         c5:99:77:06:13:b0:09:14:07:77:b2:2f:05:70:65:7f:ff:6a:
         f1:a2:85:dd:57:77:65:1e:96:d6:5c:e5:56:27:28:91:87:71:
         d1:fd:9d:f6:fa:f0:93:3e:51:f7:fc:56:0c:c1:dd:f8:e5:9f:
         c4:64:17:13:1e:5e:6d:0d:5d:1e:57:0c:a7:fd:50:b4:63:35:
         9e:14:20:94:90:ce:a6:70:f0:26:e5:5d:7a:5d:3c:8a:cf:5a:
         e2:41:57:b1:c3:6d:94:31:a1:4a:f7:11:38:55:81:ad:87:04:
         72:47:95:65:7a:3a:d0:ee:23:7c:87:03:76:33:44:20:2f:a2:
         0f:5e:04:5c:9a:2d:93:90:83:5a:a2:fa:1b:86:a8:8f:ed:71:
         28:9f:5c:a3:10:b7:51:33:a4:68:8c:e9:85:2b:64:02:50:1f:
         ad:c7:3c:a9:a4:b9:41:68:72:70:6f:a7:07:11:0a:4d:24:2e:
         e0:3b:84:97:c2:64:4c:cf:1f:59:94:95:9e:5a:a6:6b:4a:41:
         c0:42:ff:19:88:ea:40:01:bb:64:db:6e:d3:b8:85:30:ab:a9:
         a3:81:84:13:0a:56:c8:09:49:64:c5:f6:10:d5:d4:0e:42:05:
         54:da:45:22
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICGgYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF
QkU2OTczRjkwHhcNMjQwNTMwMTU1MjU2WhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NjU4YTBkOC02MTIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0Ej30P4VC6U4YwyZMiuwKoZKqrnB+/9KO0b0pHS/oYYVPv5UW5LpulqMmr0b
GWEJ8anNwX4weFWpTzY16M7QHzoWxTaQTdeJwXkeEO+VYS44iFMQuIRmqB8ZY4u+
28ECEBVqnkQcQr2L0/Su9YKQNuJIb10fPD3bxFlwwGaULDYfHoJ04PGK/MqiBSjp
8DHHmM43S4Y0KjLd5KvZwrJVZYZMzkRds76LfHcY9c0hoT+v2YiHG/47j+ozUJtj
31e8a4U9X2W22/Y5qjmKnXI3A9JSbqXaqBdm2+C1aaodU/rER+snV+K9QSeaqX9A
b9kp9TzHctceAWhoxTkIFBf7RQIDAQABo4IClTCCApEwHQYDVR0OBBYEFLEeAXOz
Kcfe5nFg/FGfyWknOT0hMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj
X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNDFGNDc3ODZF
Q0M2MTFFRUE1MzNCQzU5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBACdDxEwDQYJKoZIhvcNAQELBQADggEBAHOLVHv8M29Taqn3
vGX7Oi3IbcWZdwYTsAkUB3eyLwVwZX//avGihd1Xd2UeltZc5VYnKJGHcdH9nfb6
8JM+Uff8VgzB3fjln8RkFxMeXm0NXR5XDKf9ULRjNZ4UIJSQzqZw8CblXXpdPIrP
WuJBV7HDbZQxoUr3EThVga2HBHJHlWV6OtDuI3yHA3YzRCAvog9eBFyaLZOQg1qi
+huGqI/tcSifXKMQt1EzpGiM6YUrZAJQH63HPKmkuUFocnBvpwcRCk0kLuA7hJfC
ZEzPH1mUlZ5apmtKQcBC/xmI6kABu2TbbtO4hTCrqaOBhBMKVsgJSWTF9hDV1A5C
BVTaRSI=
-----END CERTIFICATE-----
Generated at Fri Nov 22 06:57:52 2024 by rpki-client on console-fra.rpki-client.org