Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919536C/7E4D8460366011EE88E0F530C4F9AE02/627A2B5C6E8211EFA8F9497EC4F9AE02.roa
File:                     627A2B5C6E8211EFA8F9497EC4F9AE02.roa (raw, json)
Hash identifier:          a1k8mJ/GvhTBKXIx+Vgbx313f3BdveRAqnCagHHoibU=
Subject key identifier:   D0:AC:0B:56:B1:CD:68:C2:70:30:E0:82:83:0E:8D:24:85:42:02:C8
Certificate issuer:       /CN=A919536C/serialNumber=488970506264EF96D81EC12E6ABD256DB30FDCFA
Certificate serial:       FF
Authority key identifier: 48:89:70:50:62:64:EF:96:D8:1E:C1:2E:6A:BD:25:6D:B3:0F:DC:FA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SIlwUGJk75bYHsEuar0lbbMP3Po.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919536C/7E4D8460366011EE88E0F530C4F9AE02/627A2B5C6E8211EFA8F9497EC4F9AE02.roa
Signing time:             Mon 09 Sep 2024 08:06:15 +0000
ROA not before:           Mon 09 Sep 2024 08:06:15 +0000
ROA not after:            Sun 31 Aug 2025 00:00:00 +0000
asID:                     133956
IP address blocks:        2400:6280:194::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919536C/7E4D8460366011EE88E0F530C4F9AE02/SIlwUGJk75bYHsEuar0lbbMP3Po.crl
                          rsync://rpki.apnic.net/member_repository/A919536C/7E4D8460366011EE88E0F530C4F9AE02/SIlwUGJk75bYHsEuar0lbbMP3Po.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SIlwUGJk75bYHsEuar0lbbMP3Po.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 03:27:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 255 (0xff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919536C/serialNumber=488970506264EF96D81EC12E6ABD256DB30FDCFA
        Validity
            Not Before: Sep  9 08:06:15 2024 GMT
            Not After : Aug 31 00:00:00 2025 GMT
        Subject: CN=66deac77-274e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:0b:b2:93:df:ea:2c:c8:28:ec:48:32:59:c3:
                    35:1f:34:55:97:24:a5:ce:42:e3:61:24:56:66:5d:
                    df:eb:d2:0e:3a:27:a2:f6:b4:9e:aa:e4:85:34:1e:
                    c9:eb:91:f7:9c:ce:98:6a:bc:8f:b0:28:8a:5f:6e:
                    9e:11:3b:e8:3c:1c:4e:1a:b6:b7:c8:1c:ba:1c:f8:
                    c0:8e:59:1a:51:be:f6:d8:c8:d9:2e:ca:61:b0:13:
                    7f:ba:11:6e:6a:6c:ab:a0:8d:4c:e6:a8:17:f7:6a:
                    66:5a:14:fc:09:22:97:37:19:9d:0b:25:ec:27:dd:
                    cb:5b:13:ed:fe:48:b9:6a:63:cb:75:5d:62:0f:c2:
                    b6:51:23:d6:f7:c9:9c:10:60:df:34:a4:fc:0a:46:
                    17:0f:9c:77:82:42:af:ff:b2:a4:ff:11:2e:81:18:
                    24:a1:82:61:f0:89:de:c1:57:1e:16:5b:4f:b7:65:
                    5c:aa:5f:54:1e:88:f2:be:19:92:bc:1d:96:fa:34:
                    2e:05:f5:e7:f8:92:4a:5a:2f:1a:65:d8:ba:1c:47:
                    ba:7b:1e:e3:3a:2f:40:af:d2:9d:a3:f1:bb:42:58:
                    97:ca:bd:4f:d8:a5:e4:ee:f9:9d:48:03:2f:fb:aa:
                    c0:51:72:4a:5e:b4:3f:9d:78:15:d7:58:f8:73:70:
                    33:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:AC:0B:56:B1:CD:68:C2:70:30:E0:82:83:0E:8D:24:85:42:02:C8
            X509v3 Authority Key Identifier:
                keyid:48:89:70:50:62:64:EF:96:D8:1E:C1:2E:6A:BD:25:6D:B3:0F:DC:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919536C/7E4D8460366011EE88E0F530C4F9AE02/SIlwUGJk75bYHsEuar0lbbMP3Po.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SIlwUGJk75bYHsEuar0lbbMP3Po.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919536C/7E4D8460366011EE88E0F530C4F9AE02/627A2B5C6E8211EFA8F9497EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:6280:194::/48

    Signature Algorithm: sha256WithRSAEncryption
         27:fc:fc:ec:bb:29:16:8b:6a:78:e5:2f:e3:c9:75:52:4b:66:
         99:c2:dd:e7:88:01:c3:3f:20:a1:0e:8f:e8:c1:6e:8e:c7:10:
         2a:50:c8:ef:6b:90:f4:9d:dd:19:be:7e:ba:b3:61:af:ed:a0:
         05:da:ad:63:9c:a9:e5:d8:8f:81:36:91:81:b6:7c:d2:0d:19:
         28:18:2e:0d:fb:34:d0:7a:7e:e3:ad:5f:f7:15:78:1d:32:6a:
         77:9d:aa:71:93:8e:f8:03:d2:67:0d:14:27:25:b2:08:78:29:
         5a:dc:7f:23:93:49:18:20:f1:92:04:f8:dc:b4:d1:43:91:50:
         92:8c:15:c6:89:25:0a:51:27:63:be:e8:4a:da:a1:d9:19:aa:
         9f:97:52:7b:59:80:76:61:23:a7:7f:8a:c7:d9:e8:67:77:d0:
         fb:4b:69:f1:6f:a6:dc:9d:20:d5:41:48:cf:e9:f7:70:e3:62:
         e0:c1:83:37:da:92:2f:1a:d8:22:74:af:31:ce:0d:55:52:ef:
         fb:df:4b:8d:9b:71:f6:e9:77:b7:cd:68:63:3b:64:45:8a:95:
         1a:72:32:7c:66:8d:e3:cf:d8:31:92:ab:28:2e:a6:e4:b5:dc:
         06:86:55:50:79:72:aa:c6:fd:5b:5b:69:8c:b3:91:ed:f5:4a:
         5b:9d:99:ef
-----BEGIN CERTIFICATE-----
MIIFdDCCBFygAwIBAgICAP8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTUzNkMxMTAvBgNVBAUTKDQ4ODk3MDUwNjI2NEVGOTZEODFFQzEyRTZBQkQyNTZE
QjMwRkRDRkEwHhcNMjQwOTA5MDgwNjE1WhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmRlYWM3Ny0yNzRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7Quyk9/qLMgo7EgyWcM1HzRVlySlzkLjYSRWZl3f69IOOiei9rSequSFNB7J
65H3nM6YaryPsCiKX26eETvoPBxOGra3yBy6HPjAjlkaUb722MjZLsphsBN/uhFu
amyroI1M5qgX92pmWhT8CSKXNxmdCyXsJ93LWxPt/ki5amPLdV1iD8K2USPW98mc
EGDfNKT8CkYXD5x3gkKv/7Kk/xEugRgkoYJh8InewVceFltPt2Vcql9UHojyvhmS
vB2W+jQuBfXn+JJKWi8aZdi6HEe6ex7jOi9Ar9Kdo/G7QliXyr1P2KXk7vmdSAMv
+6rAUXJKXrQ/nXgV11j4c3AzaQIDAQABo4ICmDCCApQwHQYDVR0OBBYEFNCsC1ax
zWjCcDDggoMOjSSFQgLIMB8GA1UdIwQYMBaAFEiJcFBiZO+W2B7BLmq9JW2zD9z6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTM2Qy83RTREODQ2MDM2
NjAxMUVFODhFMEY1MzBDNEY5QUUwMi9TSWx3VUdKazc1YllIc0V1YXIwbGJiTVAz
UG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1NJbHdVR0prNzViWUhzRXVhcjBsYmJNUDNQby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTUzNkMvN0U0RDg0NjAzNjYwMTFFRTg4RTBGNTMwQzRGOUFFMDIvNjI3QTJCNUM2
RTgyMTFFRkE4Rjk0OTdFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E
EzARMA8EAgACMAkDBwAkAGKAAZQwDQYJKoZIhvcNAQELBQADggEBACf8/Oy7KRaL
anjlL+PJdVJLZpnC3eeIAcM/IKEOj+jBbo7HECpQyO9rkPSd3Rm+frqzYa/toAXa
rWOcqeXYj4E2kYG2fNINGSgYLg37NNB6fuOtX/cVeB0yanedqnGTjvgD0mcNFCcl
sgh4KVrcfyOTSRgg8ZIE+Ny00UORUJKMFcaJJQpRJ2O+6EraodkZqp+XUntZgHZh
I6d/isfZ6Gd30PtLafFvptydINVBSM/p93DjYuDBgzfaki8a2CJ0rzHODVVS7/vf
S42bcfbpd7fNaGM7ZEWKlRpyMnxmjePP2DGSqygupuS13AaGVVB5cqrG/VtbaYyz
ke31Sludme8=
-----END CERTIFICATE-----
Generated at Thu Nov 21 05:37:13 2024 by rpki-client on console-ams.rpki-client.org