Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9197277/43A7E894B56011EE911C5D4FC4F9AE02/6F5F30B8B56111EE91C72951C4F9AE02.roa
File:                     6F5F30B8B56111EE91C72951C4F9AE02.roa (raw, json)
Hash identifier:          g33ewG8+stt2H8q9hyzT5GDP+B5N5luEGnz8BVmfPXs=
Subject key identifier:   54:7A:98:A3:87:A4:D2:3C:93:E0:5D:1C:5E:D9:47:C1:2C:89:3D:35
Certificate issuer:       /CN=A9197277/serialNumber=D83B93E31E939937D8CB15FE39CA5E6E8FEAFA9B
Certificate serial:       69
Authority key identifier: D8:3B:93:E3:1E:93:99:37:D8:CB:15:FE:39:CA:5E:6E:8F:EA:FA:9B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2DuT4x6TmTfYyxX-Ocpebo_q-ps.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9197277/43A7E894B56011EE911C5D4FC4F9AE02/6F5F30B8B56111EE91C72951C4F9AE02.roa
Signing time:             Sat 27 Jul 2024 06:56:51 +0000
ROA not before:           Sat 27 Jul 2024 06:56:51 +0000
ROA not after:            Sun 31 Aug 2025 00:00:00 +0000
asID:                     13517
IP address blocks:        64.124.189.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9197277/43A7E894B56011EE911C5D4FC4F9AE02/2DuT4x6TmTfYyxX-Ocpebo_q-ps.crl
                          rsync://rpki.apnic.net/member_repository/A9197277/43A7E894B56011EE911C5D4FC4F9AE02/2DuT4x6TmTfYyxX-Ocpebo_q-ps.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2DuT4x6TmTfYyxX-Ocpebo_q-ps.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 02:50:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 105 (0x69)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9197277/serialNumber=D83B93E31E939937D8CB15FE39CA5E6E8FEAFA9B
        Validity
            Not Before: Jul 27 06:56:51 2024 GMT
            Not After : Aug 31 00:00:00 2025 GMT
        Subject: CN=66a49a33-b66b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:56:02:05:59:4d:f8:c7:30:c8:8d:15:09:04:
                    26:30:2d:3b:bd:1b:03:dd:77:d1:19:6e:69:14:bc:
                    67:f4:50:97:07:43:71:16:a1:ac:1b:33:0e:92:fa:
                    b7:34:e0:31:10:67:12:b8:29:bf:7b:34:95:a9:b0:
                    91:8d:53:18:c2:21:ed:f8:7c:07:62:c3:01:33:61:
                    d4:47:b0:18:8a:34:ed:10:f4:c9:ef:12:41:03:93:
                    38:43:8b:d7:13:d5:ba:5e:f5:f8:7a:65:b6:01:ae:
                    e9:cd:59:5a:65:dd:98:cd:f6:aa:b0:91:d2:a9:d7:
                    30:9f:ff:99:22:0a:19:63:53:da:b7:fc:15:9a:77:
                    c7:af:44:c2:b9:b4:d7:1c:38:ae:87:0d:6e:9f:e8:
                    ab:60:be:69:1f:42:d1:f3:da:8e:00:85:a8:b4:90:
                    ec:49:ef:07:0b:2d:71:05:0d:cc:cd:a5:c8:64:68:
                    05:25:b1:4f:20:bb:14:2a:d5:7f:2f:3c:76:16:e9:
                    a3:ae:d0:2a:e5:27:6c:51:26:c4:a8:b3:41:3d:2e:
                    e2:1d:28:9f:9f:c3:89:d9:68:bc:48:96:d5:bd:12:
                    2a:7c:fa:31:5c:f9:16:4f:20:b9:9c:bf:5d:cb:2c:
                    bd:46:92:91:8a:82:75:e0:a6:d9:49:3a:5a:92:ed:
                    24:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:7A:98:A3:87:A4:D2:3C:93:E0:5D:1C:5E:D9:47:C1:2C:89:3D:35
            X509v3 Authority Key Identifier:
                keyid:D8:3B:93:E3:1E:93:99:37:D8:CB:15:FE:39:CA:5E:6E:8F:EA:FA:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9197277/43A7E894B56011EE911C5D4FC4F9AE02/2DuT4x6TmTfYyxX-Ocpebo_q-ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2DuT4x6TmTfYyxX-Ocpebo_q-ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197277/43A7E894B56011EE911C5D4FC4F9AE02/6F5F30B8B56111EE91C72951C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.124.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:e0:39:0e:2b:e1:ac:19:15:cd:e2:c4:55:6f:ad:ec:20:f2:
         88:73:af:a1:aa:6d:56:33:ce:af:0d:64:22:ed:ec:d2:69:a6:
         fb:d7:0f:42:32:f8:91:b9:8a:72:29:4b:15:9e:2e:9b:69:c2:
         01:14:0d:ea:a9:d6:bd:8c:25:be:3a:23:76:02:05:40:6a:7e:
         f6:c6:1c:85:70:d1:8c:37:53:78:9d:a3:e6:d8:cb:bd:88:c0:
         49:a7:2c:b2:fa:81:4b:ac:e7:bb:db:77:67:0c:65:12:ee:a7:
         1b:ad:75:5f:7e:77:c6:89:4e:5f:0d:65:ce:4c:39:fd:d8:8f:
         3c:21:64:45:9d:76:e4:31:51:9a:10:0d:e4:35:69:c5:0b:1d:
         83:b8:f2:d9:8d:c0:44:cf:3d:b9:a0:07:3d:a2:b8:e7:cb:42:
         00:f3:be:ea:a1:02:27:a7:42:e6:20:17:1c:e1:e2:dc:d3:49:
         cb:05:db:e8:d2:bd:5e:ac:67:75:fc:9a:5b:fb:9c:ef:2f:df:
         0a:7c:2e:fd:b3:49:c8:56:a5:0a:9d:85:b2:9d:3a:fd:47:6c:
         e4:bf:37:d3:3e:c7:2d:36:2a:2c:13:24:db:3d:07:4a:a2:ab:
         e2:ee:f6:0a:68:b2:af:91:f7:7a:82:6f:6d:8e:24:38:2c:89:
         70:ce:2f:f7
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBaTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5
NzI3NzExMC8GA1UEBRMoRDgzQjkzRTMxRTkzOTkzN0Q4Q0IxNUZFMzlDQTVFNkU4
RkVBRkE5QjAeFw0yNDA3MjcwNjU2NTFaFw0yNTA4MzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY2YTQ5YTMzLWI2NmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDbVgIFWU34xzDIjRUJBCYwLTu9GwPdd9EZbmkUvGf0UJcHQ3EWoawbMw6S+rc0
4DEQZxK4Kb97NJWpsJGNUxjCIe34fAdiwwEzYdRHsBiKNO0Q9MnvEkEDkzhDi9cT
1bpe9fh6ZbYBrunNWVpl3ZjN9qqwkdKp1zCf/5kiChljU9q3/BWad8evRMK5tNcc
OK6HDW6f6KtgvmkfQtHz2o4Ahai0kOxJ7wcLLXEFDczNpchkaAUlsU8guxQq1X8v
PHYW6aOu0CrlJ2xRJsSos0E9LuIdKJ+fw4nZaLxIltW9Eip8+jFc+RZPILmcv13L
LL1GkpGKgnXgptlJOlqS7STPAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUVHqYo4ek
0jyT4F0cXtlHwSyJPTUwHwYDVR0jBBgwFoAU2DuT4x6TmTfYyxX+Ocpebo/q+psw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk3Mjc3LzQzQTdFODk0QjU2
MDExRUU5MTFDNUQ0RkM0RjlBRTAyLzJEdVQ0eDZUbVRmWXl4WC1PY3BlYm9fcS1w
cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvMkR1VDR4NlRtVGZZeXhYLU9jcGVib19xLXBzLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
NzI3Ny80M0E3RTg5NEI1NjAxMUVFOTExQzVENEZDNEY5QUUwMi82RjVGMzBCOEI1
NjExMUVFOTFDNzI5NTFDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAEB8vTANBgkqhkiG9w0BAQsFAAOCAQEAQOA5DivhrBkVzeLE
VW+t7CDyiHOvoaptVjPOrw1kIu3s0mmm+9cPQjL4kbmKcilLFZ4um2nCARQN6qnW
vYwlvjojdgIFQGp+9sYchXDRjDdTeJ2j5tjLvYjASacssvqBS6znu9t3ZwxlEu6n
G611X353xolOXw1lzkw5/diPPCFkRZ125DFRmhAN5DVpxQsdg7jy2Y3ARM89uaAH
PaK458tCAPO+6qECJ6dC5iAXHOHi3NNJywXb6NK9XqxndfyaW/uc7y/fCnwu/bNJ
yFalCp2Fsp06/Uds5L830z7HLTYqLBMk2z0HSqKr4u72Cmiyr5H3eoJvbY4kOCyJ
cM4v9w==
-----END CERTIFICATE-----
Generated at Thu Nov 21 05:37:13 2024 by rpki-client on console-ams.rpki-client.org