Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/E64A79F07FF711EBBDDF9359C4F9AE02.roa
File:                     E64A79F07FF711EBBDDF9359C4F9AE02.roa (raw, json)
Hash identifier:          7f3lmnMlaEhIof74CuWe6o741+nNWHoGcxF+uUgVFes=
Subject key identifier:   51:7E:59:3C:A9:23:77:0D:1F:1C:66:F2:7D:70:B0:24:A2:CF:4F:E9
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       4650
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/E64A79F07FF711EBBDDF9359C4F9AE02.roa
Signing time:             Thu 05 Sep 2024 03:35:54 +0000
ROA not before:           Thu 05 Sep 2024 03:35:54 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     38735
IP address blocks:        49.246.128.0/18 maxlen: 24
                          49.246.192.0/19 maxlen: 24
                          113.52.32.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 11:15:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18000 (0x4650)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Sep  5 03:35:54 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=66d92719-b7f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:1c:1d:fc:f5:27:d1:97:35:26:1b:7c:e3:ee:
                    72:6b:a7:8d:43:b0:2c:46:0d:1d:55:14:48:ef:68:
                    53:68:8a:4e:17:3e:cc:8d:ef:76:af:ac:ef:ce:89:
                    a0:b0:df:8c:66:c4:bf:6b:e2:50:35:ea:59:7e:f5:
                    a1:60:1c:b8:4a:1b:b0:2f:86:7a:12:d5:7e:db:01:
                    16:22:60:e3:f2:6b:96:03:c7:7b:e2:87:dd:76:b8:
                    7d:b9:dd:a3:65:1f:b7:41:6d:1b:19:b9:71:65:29:
                    ce:46:6f:4f:f7:66:f1:dd:f2:89:7f:d7:0b:c0:4c:
                    9c:fe:e4:45:c8:7b:0a:32:d7:e0:18:35:cc:4c:6a:
                    49:8a:5d:1a:d4:fb:c7:58:5a:91:ae:40:27:2a:88:
                    d0:0f:88:d2:1b:5e:da:00:43:e1:70:0d:7c:0c:0d:
                    3e:89:17:a7:e3:ae:2b:7a:5b:6e:bf:7b:d9:ba:8a:
                    d8:dc:f7:d8:bd:a9:0f:6c:26:ec:b7:cc:ce:e9:c8:
                    9b:ff:b3:89:fa:96:42:a6:83:c5:47:ab:14:fb:54:
                    60:8b:05:04:b8:96:2d:d0:98:bb:4e:93:16:21:0f:
                    ab:68:45:79:24:04:b1:04:46:85:6b:8c:14:ad:67:
                    f8:1b:f8:f2:d1:46:d5:80:36:f8:20:9c:48:e0:95:
                    57:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:7E:59:3C:A9:23:77:0D:1F:1C:66:F2:7D:70:B0:24:A2:CF:4F:E9
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/E64A79F07FF711EBBDDF9359C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.246.128.0-49.246.223.255
                  113.52.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         a5:02:ef:7f:80:13:e0:dc:5d:19:02:96:bf:74:e7:fb:37:ca:
         e6:e3:72:6e:9e:1a:74:42:1c:df:36:a9:e3:76:c2:76:d3:93:
         d9:2f:e6:33:e8:fc:69:28:94:8a:e6:18:b9:2a:93:1a:c6:be:
         5e:73:68:d6:e4:38:6e:29:f9:be:0b:72:87:bb:81:d6:66:20:
         9c:8d:2c:b3:ba:71:21:3d:28:a2:7f:7e:4d:30:4f:52:d9:83:
         0a:df:81:a3:04:30:ad:64:08:79:03:cd:db:48:41:bb:87:8d:
         7f:91:9c:09:ae:23:d2:d5:7a:f4:d1:a1:32:45:f7:ce:7d:7d:
         2f:8c:70:72:be:9b:4a:28:42:f4:3d:42:49:34:5c:10:30:a5:
         70:c8:ec:47:ba:0a:21:86:b3:7c:90:0e:64:a5:56:e3:4f:73:
         7f:03:01:c8:be:98:48:c2:f4:d8:50:40:0e:42:5d:ec:02:d7:
         fb:fb:63:a7:c9:3b:a2:47:76:39:7b:94:2d:fa:e9:b9:d9:41:
         eb:76:de:37:a0:ec:ed:6f:4b:c3:59:2f:48:22:f2:bc:80:c2:
         0b:7d:60:75:89:d0:45:6f:b9:67:16:e9:1e:79:a4:75:99:1c:
         99:74:a1:55:bc:0c:3b:c6:3f:ed:92:02:4a:75:2e:ec:4e:03:
         d3:34:9d:3a
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgICRlAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3
NTZBQzZGMEEwHhcNMjQwOTA1MDMzNTU0WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmQ5MjcxOS1iN2Y5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvBwd/PUn0Zc1Jht84+5ya6eNQ7AsRg0dVRRI72hTaIpOFz7Mje92r6zvzomg
sN+MZsS/a+JQNepZfvWhYBy4ShuwL4Z6EtV+2wEWImDj8muWA8d74ofddrh9ud2j
ZR+3QW0bGblxZSnORm9P92bx3fKJf9cLwEyc/uRFyHsKMtfgGDXMTGpJil0a1PvH
WFqRrkAnKojQD4jSG17aAEPhcA18DA0+iRen464reltuv3vZuorY3PfYvakPbCbs
t8zO6cib/7OJ+pZCpoPFR6sU+1RgiwUEuJYt0Ji7TpMWIQ+raEV5JASxBEaFa4wU
rWf4G/jy0UbVgDb4IJxI4JVXCwIDAQABo4ICozCCAp8wHQYDVR0OBBYEFFF+WTyp
I3cNHxxm8n1wsCSiz0/pMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE
OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi
d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvRTY0QTc5RjA3
RkY3MTFFQkJEREY5MzU5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLQYIKwYBBQUHAQcBAf8E
HjAcMBoEAgABMBQwDAMEBzH2gAMEBTH2wAMEBXE0IDANBgkqhkiG9w0BAQsFAAOC
AQEApQLvf4AT4NxdGQKWv3Tn+zfK5uNybp4adEIc3zap43bCdtOT2S/mM+j8aSiU
iuYYuSqTGsa+XnNo1uQ4bin5vgtyh7uB1mYgnI0ss7pxIT0oon9+TTBPUtmDCt+B
owQwrWQIeQPN20hBu4eNf5GcCa4j0tV69NGhMkX3zn19L4xwcr6bSihC9D1CSTRc
EDClcMjsR7oKIYazfJAOZKVW409zfwMByL6YSML02FBADkJd7ALX+/tjp8k7okd2
OXuULfrpudlB63beN6Ds7W9Lw1kvSCLyvIDCC31gdYnQRW+5ZxbpHnmkdZkcmXSh
VbwMO8Y/7ZICSnUu7E4D0zSdOg==
-----END CERTIFICATE-----
Generated at Mon Nov 25 13:17:33 2024 by rpki-client on console-ams.rpki-client.org