Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9194C67/C2A761908E8911EEBC286358C4F9AE02/E830A74E71ED11EF9D592D1AC4F9AE02.roa
File:                     E830A74E71ED11EF9D592D1AC4F9AE02.roa (raw, json)
Hash identifier:          PQD258TcGdjz5AmI6aacrqHcQHd0HimnmVUM2EF0jo8=
Subject key identifier:   37:17:52:02:F2:82:E0:56:01:0C:5D:CD:FC:B7:F4:7F:B6:29:6F:F4
Certificate issuer:       /CN=A9194C67/serialNumber=22D021488AE1317FC95C74A38825254AB7926137
Certificate serial:       B8
Authority key identifier: 22:D0:21:48:8A:E1:31:7F:C9:5C:74:A3:88:25:25:4A:B7:92:61:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ItAhSIrhMX_JXHSjiCUlSreSYTc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9194C67/C2A761908E8911EEBC286358C4F9AE02/E830A74E71ED11EF9D592D1AC4F9AE02.roa
Signing time:             Fri 13 Sep 2024 16:33:29 +0000
ROA not before:           Fri 13 Sep 2024 16:33:29 +0000
ROA not after:            Sun 02 Mar 2025 00:00:00 +0000
asID:                     149311
IP address blocks:        2001:df3:2fc0::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9194C67/C2A761908E8911EEBC286358C4F9AE02/ItAhSIrhMX_JXHSjiCUlSreSYTc.crl
                          rsync://rpki.apnic.net/member_repository/A9194C67/C2A761908E8911EEBC286358C4F9AE02/ItAhSIrhMX_JXHSjiCUlSreSYTc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ItAhSIrhMX_JXHSjiCUlSreSYTc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 184 (0xb8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9194C67/serialNumber=22D021488AE1317FC95C74A38825254AB7926137
        Validity
            Not Before: Sep 13 16:33:29 2024 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=66e46959-3673
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:76:65:58:d0:c1:65:34:c5:66:42:f6:37:c1:
                    ec:a8:97:58:31:3f:9a:d7:d4:e1:83:1c:a1:a6:d4:
                    d6:e8:b1:83:3a:15:96:55:24:3d:fe:ed:de:10:bb:
                    f5:65:db:fd:a5:84:aa:66:0f:21:7c:e2:9e:e4:47:
                    07:a1:08:88:34:c0:8c:35:3e:9d:f2:2a:a7:e2:34:
                    87:9b:ee:0c:6e:71:0d:97:f6:b7:72:35:dd:36:e9:
                    70:ef:b3:0e:20:f0:7e:a9:6b:33:be:b2:5c:fa:43:
                    57:19:c6:1f:2a:5f:1e:e5:54:b4:ad:c7:03:87:9c:
                    6e:0e:88:17:70:ca:f7:b9:21:04:a2:47:95:6c:b6:
                    9e:be:d9:ff:68:68:99:30:a9:30:c0:a5:92:67:23:
                    3d:07:64:01:bd:fd:c4:18:02:7a:07:bf:1b:35:b9:
                    65:85:ec:3f:e8:50:e3:3b:5b:76:52:7e:e5:96:3e:
                    8f:e7:bd:5d:14:88:fa:05:cb:c3:a7:bd:be:be:90:
                    49:3b:81:ed:2b:97:f8:97:26:c9:d6:d1:3a:93:ba:
                    48:01:e4:be:7d:62:38:8b:e2:57:66:cb:05:76:4a:
                    09:5e:bc:c7:fd:8a:ee:cc:77:70:77:26:88:7c:ff:
                    30:76:8a:22:36:1f:9b:dd:ff:fd:92:05:d4:b3:8a:
                    fa:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:17:52:02:F2:82:E0:56:01:0C:5D:CD:FC:B7:F4:7F:B6:29:6F:F4
            X509v3 Authority Key Identifier:
                keyid:22:D0:21:48:8A:E1:31:7F:C9:5C:74:A3:88:25:25:4A:B7:92:61:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9194C67/C2A761908E8911EEBC286358C4F9AE02/ItAhSIrhMX_JXHSjiCUlSreSYTc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ItAhSIrhMX_JXHSjiCUlSreSYTc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194C67/C2A761908E8911EEBC286358C4F9AE02/E830A74E71ED11EF9D592D1AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df3:2fc0::/48

    Signature Algorithm: sha256WithRSAEncryption
         73:a3:0b:ef:bd:ba:b9:71:96:ab:8c:31:d6:eb:f9:d4:d2:aa:
         40:4a:34:4c:0a:7e:40:65:ef:76:a2:86:78:f9:0e:6e:95:b9:
         00:da:00:0a:bb:90:63:79:21:b4:2d:53:a7:e8:10:23:fa:3f:
         46:fa:60:36:5f:0e:ed:24:46:07:eb:ec:96:21:fd:66:79:77:
         51:57:66:4c:5e:ce:97:53:0e:9e:0d:5b:21:bd:87:af:24:b9:
         de:62:80:82:6e:00:4f:12:50:97:24:ae:fe:94:46:f9:e7:5f:
         04:4a:b5:5f:04:f5:05:d1:96:b3:95:87:99:35:85:48:96:1b:
         a2:f6:3d:d2:84:b9:d7:a9:5f:41:fa:0c:5b:ba:1b:61:1a:50:
         02:23:07:de:31:00:41:3c:00:8d:11:b0:43:0e:ad:fd:c6:07:
         d8:6f:b5:6f:1e:56:fd:af:31:00:c1:bb:4d:c2:9e:c5:b7:5e:
         c6:34:b0:aa:1f:97:90:21:a7:a5:a6:e0:87:e0:47:b9:fd:cb:
         96:fa:6f:2f:b5:7e:de:da:54:c2:1f:e4:41:a3:3c:ff:09:d8:
         7a:bd:eb:dc:d7:b6:39:d8:5f:30:f3:54:41:dc:e2:46:ac:43:
         af:04:94:52:9a:b8:9b:ec:ea:cd:a2:a9:17:d3:24:50:29:eb:
         4a:9b:af:5d
-----BEGIN CERTIFICATE-----
MIIFdDCCBFygAwIBAgICALgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTRDNjcxMTAvBgNVBAUTKDIyRDAyMTQ4OEFFMTMxN0ZDOTVDNzRBMzg4MjUyNTRB
Qjc5MjYxMzcwHhcNMjQwOTEzMTYzMzI5WhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmU0Njk1OS0zNjczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnHZlWNDBZTTFZkL2N8HsqJdYMT+a19ThgxyhptTW6LGDOhWWVSQ9/u3eELv1
Zdv9pYSqZg8hfOKe5EcHoQiINMCMNT6d8iqn4jSHm+4MbnENl/a3cjXdNulw77MO
IPB+qWszvrJc+kNXGcYfKl8e5VS0rccDh5xuDogXcMr3uSEEokeVbLaevtn/aGiZ
MKkwwKWSZyM9B2QBvf3EGAJ6B78bNbllhew/6FDjO1t2Un7llj6P571dFIj6BcvD
p72+vpBJO4HtK5f4lybJ1tE6k7pIAeS+fWI4i+JXZssFdkoJXrzH/YruzHdwdyaI
fP8wdooiNh+b3f/9kgXUs4r6uwIDAQABo4ICmDCCApQwHQYDVR0OBBYEFDcXUgLy
guBWAQxdzfy39H+2KW/0MB8GA1UdIwQYMBaAFCLQIUiK4TF/yVx0o4glJUq3kmE3
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEM2Ny9DMkE3NjE5MDhF
ODkxMUVFQkMyODYzNThDNEY5QUUwMi9JdEFoU0lyaE1YX0pYSFNqaUNVbFNyZVNZ
VGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0l0QWhTSXJoTVhfSlhIU2ppQ1VsU3JlU1lUYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTRDNjcvQzJBNzYxOTA4RTg5MTFFRUJDMjg2MzU4QzRGOUFFMDIvRTgzMEE3NEU3
MUVEMTFFRjlENTkyRDFBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E
EzARMA8EAgACMAkDBwAgAQ3zL8AwDQYJKoZIhvcNAQELBQADggEBAHOjC++9urlx
lquMMdbr+dTSqkBKNEwKfkBl73aihnj5Dm6VuQDaAAq7kGN5IbQtU6foECP6P0b6
YDZfDu0kRgfr7JYh/WZ5d1FXZkxezpdTDp4NWyG9h68kud5igIJuAE8SUJckrv6U
RvnnXwRKtV8E9QXRlrOVh5k1hUiWG6L2PdKEudepX0H6DFu6G2EaUAIjB94xAEE8
AI0RsEMOrf3GB9hvtW8eVv2vMQDBu03CnsW3XsY0sKofl5Ahp6Wm4IfgR7n9y5b6
by+1ft7aVMIf5EGjPP8J2Hq969zXtjnYXzDzVEHc4kasQ68ElFKauJvs6s2iqRfT
JFAp60qbr10=
-----END CERTIFICATE-----
Generated at Sat Nov 23 06:13:15 2024 by rpki-client on console-ams.rpki-client.org