Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2265/9A66AADE508511EEBA3EFC11C4F9AE02/FCD162AE508511EEBA4C0E2BC4F9AE02.roa
File:                     FCD162AE508511EEBA4C0E2BC4F9AE02.roa (raw, json)
Hash identifier:          aCNtxlW0MshwMMlV+N563xkNmlCQdXbxR/lNk+drIlA=
Subject key identifier:   D1:1D:09:03:33:21:57:50:E9:63:D9:F5:F0:67:65:A7:1C:6F:22:B2
Certificate issuer:       /CN=A91A2265/serialNumber=BBEC210E7529FD397F1338FFAC1DDD783C0FAA32
Certificate serial:       A9
Authority key identifier: BB:EC:21:0E:75:29:FD:39:7F:13:38:FF:AC:1D:DD:78:3C:0F:AA:32
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-whDnUp_Tl_Ezj_rB3deDwPqjI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A2265/9A66AADE508511EEBA3EFC11C4F9AE02/FCD162AE508511EEBA4C0E2BC4F9AE02.roa
Signing time:             Wed 31 Jul 2024 06:17:15 +0000
ROA not before:           Wed 31 Jul 2024 06:17:15 +0000
ROA not after:            Tue 30 Sep 2025 00:00:00 +0000
asID:                     32613
IP address blocks:        203.167.7.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A2265/9A66AADE508511EEBA3EFC11C4F9AE02/u-whDnUp_Tl_Ezj_rB3deDwPqjI.crl
                          rsync://rpki.apnic.net/member_repository/A91A2265/9A66AADE508511EEBA3EFC11C4F9AE02/u-whDnUp_Tl_Ezj_rB3deDwPqjI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-whDnUp_Tl_Ezj_rB3deDwPqjI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 03:27:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 169 (0xa9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A2265/serialNumber=BBEC210E7529FD397F1338FFAC1DDD783C0FAA32
        Validity
            Not Before: Jul 31 06:17:15 2024 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=66a9d6eb-c7ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:24:92:d6:c5:68:35:b9:20:2c:e2:94:64:cd:
                    31:fb:2b:c6:25:87:06:db:98:40:a0:a0:89:90:ee:
                    4a:99:b3:91:6d:55:7c:e4:fe:45:97:cf:96:04:e7:
                    45:54:9f:a0:08:43:62:8e:d3:b4:79:77:e8:96:4a:
                    19:b4:6e:c8:f0:a7:2a:31:c4:2a:00:a3:11:e3:ab:
                    9b:11:d2:60:4d:6a:59:68:96:86:ba:5e:82:a7:d9:
                    d4:35:c4:69:97:6c:4f:b9:05:cb:5d:57:67:41:c8:
                    2a:58:eb:b6:04:8a:bd:bf:7a:12:b7:47:80:97:b5:
                    03:e9:aa:1e:57:20:f7:8a:dd:4b:1d:ad:cc:e5:ba:
                    7e:63:a3:ab:06:6c:be:10:eb:a2:0a:ac:34:a2:7f:
                    2d:38:56:70:78:e9:42:3f:75:5d:cd:af:50:57:3c:
                    7e:93:92:de:c9:10:76:81:03:9a:58:78:10:a8:96:
                    e2:99:b0:ed:86:e7:e7:73:08:1a:12:aa:5f:6f:55:
                    82:be:35:14:c2:af:fb:11:21:e4:11:f0:21:0e:c4:
                    0f:1e:7f:3e:07:09:b0:0e:d7:b9:98:79:da:87:7e:
                    6a:f5:a1:bf:92:79:da:73:55:90:18:1b:41:e0:19:
                    31:bc:dc:19:52:ad:3b:bf:36:0e:aa:83:a7:49:00:
                    0a:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:1D:09:03:33:21:57:50:E9:63:D9:F5:F0:67:65:A7:1C:6F:22:B2
            X509v3 Authority Key Identifier:
                keyid:BB:EC:21:0E:75:29:FD:39:7F:13:38:FF:AC:1D:DD:78:3C:0F:AA:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A2265/9A66AADE508511EEBA3EFC11C4F9AE02/u-whDnUp_Tl_Ezj_rB3deDwPqjI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-whDnUp_Tl_Ezj_rB3deDwPqjI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2265/9A66AADE508511EEBA3EFC11C4F9AE02/FCD162AE508511EEBA4C0E2BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.167.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bd:45:b8:0c:4d:42:49:ec:96:87:b8:09:03:c1:1e:5a:07:53:
         2e:bf:f9:7d:9f:c7:42:21:4d:95:81:bf:6a:30:03:e8:52:04:
         a5:67:c4:21:74:99:dc:54:a0:40:de:6d:d1:70:f8:b8:f3:04:
         db:76:6e:ce:b8:94:78:82:79:be:34:cf:67:10:7b:8f:59:d0:
         b9:df:20:9d:6a:5c:e1:f5:cc:b0:ac:35:6b:81:b3:f5:7b:84:
         5d:d2:3a:21:dd:8d:a8:18:65:17:d4:a2:9b:a9:a0:c1:cf:05:
         09:41:82:e7:c7:d8:27:3f:68:0a:cd:04:65:de:29:d6:97:61:
         3a:19:33:4f:7b:f6:fb:57:b2:2c:2b:ea:7c:64:11:f7:3f:22:
         fb:3c:da:76:c4:08:14:e5:a6:75:79:38:95:49:c7:2c:1f:c8:
         65:b4:bf:9f:e9:95:be:10:a2:fc:53:38:60:c9:d8:e7:0f:e0:
         03:d0:88:96:b7:9e:5e:f1:7d:c4:b3:ea:ca:7c:52:13:02:2d:
         39:0f:49:65:ec:91:42:e5:64:c8:b8:4e:4c:6a:4c:40:23:a9:
         94:ea:5f:dc:0e:a8:25:a8:2f:9e:67:53:d9:eb:59:04:5e:70:
         5d:88:90:db:af:71:78:3a:d7:83:d6:60:e2:39:05:04:6e:ae:
         e6:28:52:35
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAKkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTIyNjUxMTAvBgNVBAUTKEJCRUMyMTBFNzUyOUZEMzk3RjEzMzhGRkFDMURERDc4
M0MwRkFBMzIwHhcNMjQwNzMxMDYxNzE1WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmE5ZDZlYi1jN2FlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtySS1sVoNbkgLOKUZM0x+yvGJYcG25hAoKCJkO5KmbORbVV85P5Fl8+WBOdF
VJ+gCENijtO0eXfolkoZtG7I8KcqMcQqAKMR46ubEdJgTWpZaJaGul6Cp9nUNcRp
l2xPuQXLXVdnQcgqWOu2BIq9v3oSt0eAl7UD6aoeVyD3it1LHa3M5bp+Y6OrBmy+
EOuiCqw0on8tOFZweOlCP3Vdza9QVzx+k5LeyRB2gQOaWHgQqJbimbDthufncwga
Eqpfb1WCvjUUwq/7ESHkEfAhDsQPHn8+BwmwDte5mHnah35q9aG/knnac1WQGBtB
4BkxvNwZUq07vzYOqoOnSQAKBQIDAQABo4IClTCCApEwHQYDVR0OBBYEFNEdCQMz
IVdQ6WPZ9fBnZaccbyKyMB8GA1UdIwQYMBaAFLvsIQ51Kf05fxM4/6wd3Xg8D6oy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMjI2NS85QTY2QUFERTUw
ODUxMUVFQkEzRUZDMTFDNEY5QUUwMi91LXdoRG5VcF9UbF9FempfckIzZGVEd1Bx
akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3Utd2hEblVwX1RsX0V6al9yQjNkZUR3UHFqSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTIyNjUvOUE2NkFBREU1MDg1MTFFRUJBM0VGQzExQzRGOUFFMDIvRkNEMTYyQUU1
MDg1MTFFRUJBNEMwRTJCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADLpwcwDQYJKoZIhvcNAQELBQADggEBAL1FuAxNQknsloe4
CQPBHloHUy6/+X2fx0IhTZWBv2owA+hSBKVnxCF0mdxUoEDebdFw+LjzBNt2bs64
lHiCeb40z2cQe49Z0LnfIJ1qXOH1zLCsNWuBs/V7hF3SOiHdjagYZRfUopupoMHP
BQlBgufH2Cc/aArNBGXeKdaXYToZM0979vtXsiwr6nxkEfc/Ivs82nbECBTlpnV5
OJVJxywfyGW0v5/plb4QovxTOGDJ2OcP4APQiJa3nl7xfcSz6sp8UhMCLTkPSWXs
kULlZMi4TkxqTEAjqZTqX9wOqCWoL55nU9nrWQRecF2IkNuvcXg614PWYOI5BQRu
ruYoUjU=
-----END CERTIFICATE-----
Generated at Mon Nov 25 04:54:35 2024 by rpki-client on console-fra.rpki-client.org