Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A60A9/6BA8061A1D8411E2B3A54FDA08B02CD2/8F368BEEF9C411EB9F9E645DC4F9AE02.roa
File:                     8F368BEEF9C411EB9F9E645DC4F9AE02.roa (raw, json)
Hash identifier:          boIl8qij5jUmYTPH63CpeAQqWEz64efivFVAHG/Uz5o=
Subject key identifier:   E6:13:AC:DD:00:3C:CB:A7:A1:CF:26:22:06:B7:85:25:E7:41:AB:C0
Certificate issuer:       /CN=A91A60A9/serialNumber=7787F1E53E9B78132DE9A78711088316DD6055B3
Certificate serial:       338F
Authority key identifier: 77:87:F1:E5:3E:9B:78:13:2D:E9:A7:87:11:08:83:16:DD:60:55:B3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d4fx5T6beBMt6aeHEQiDFt1gVbM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A60A9/6BA8061A1D8411E2B3A54FDA08B02CD2/8F368BEEF9C411EB9F9E645DC4F9AE02.roa
Signing time:             Tue 28 Nov 2023 14:40:19 +0000
ROA not before:           Tue 28 Nov 2023 14:40:19 +0000
ROA not after:            Fri 31 Jan 2025 00:00:00 +0000
asID:                     7532
IP address blocks:        210.208.80.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A60A9/6BA8061A1D8411E2B3A54FDA08B02CD2/d4fx5T6beBMt6aeHEQiDFt1gVbM.crl
                          rsync://rpki.apnic.net/member_repository/A91A60A9/6BA8061A1D8411E2B3A54FDA08B02CD2/d4fx5T6beBMt6aeHEQiDFt1gVbM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d4fx5T6beBMt6aeHEQiDFt1gVbM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:23:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13199 (0x338f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A60A9/serialNumber=7787F1E53E9B78132DE9A78711088316DD6055B3
        Validity
            Not Before: Nov 28 14:40:19 2023 GMT
            Not After : Jan 31 00:00:00 2025 GMT
        Subject: CN=6565fbd3-8430
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:11:db:f3:63:bc:a0:15:d1:fd:0a:3f:f1:73:
                    89:c4:5d:dc:df:76:31:13:e6:8c:c5:06:e5:a6:a1:
                    68:bb:ca:b8:cf:b0:28:6d:81:49:bc:72:97:8b:c1:
                    79:69:07:f6:b1:d7:24:81:a7:bb:e3:8b:8c:16:47:
                    5b:8e:23:3d:0c:d6:23:6f:3f:25:6a:ec:14:2d:df:
                    44:c7:09:4a:f4:17:c8:b9:e4:b9:8e:3e:cd:88:c4:
                    aa:6b:44:87:1b:5e:22:4b:52:dd:64:cb:2a:64:2c:
                    49:cf:e5:da:18:cc:a8:0d:b2:7d:f0:6a:30:0f:3c:
                    0b:91:19:97:0c:0a:d9:16:f8:e7:e3:75:07:ff:23:
                    54:03:47:53:0f:a8:09:a2:d8:e7:0f:51:81:ae:af:
                    2c:44:38:9e:12:ee:c8:a1:08:88:76:5c:6c:4d:18:
                    da:48:f2:2d:f8:f1:3b:fd:91:6f:70:91:85:4a:e3:
                    4e:c9:a6:29:ad:d1:30:d0:ed:4b:0c:a8:05:86:49:
                    6f:85:4b:6e:75:ae:07:2d:e6:72:55:67:5c:1d:41:
                    69:c5:a4:9d:f1:bb:35:3c:77:f0:c3:e2:32:46:10:
                    35:b7:b0:58:33:e3:cc:d2:02:4f:46:95:0d:b3:26:
                    dc:83:f4:bc:21:4b:e2:fb:67:28:b9:43:f8:af:29:
                    47:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:13:AC:DD:00:3C:CB:A7:A1:CF:26:22:06:B7:85:25:E7:41:AB:C0
            X509v3 Authority Key Identifier:
                keyid:77:87:F1:E5:3E:9B:78:13:2D:E9:A7:87:11:08:83:16:DD:60:55:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A60A9/6BA8061A1D8411E2B3A54FDA08B02CD2/d4fx5T6beBMt6aeHEQiDFt1gVbM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d4fx5T6beBMt6aeHEQiDFt1gVbM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A60A9/6BA8061A1D8411E2B3A54FDA08B02CD2/8F368BEEF9C411EB9F9E645DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.208.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         71:12:88:08:7c:c8:1d:dd:e3:ce:eb:8c:d4:18:67:6d:06:5b:
         76:65:3f:ae:cf:d4:f3:b3:d6:c3:f2:d5:0f:18:e0:b1:b8:d7:
         1d:6f:ff:bb:1b:d3:d0:a1:c2:87:51:9d:36:3a:77:d8:c5:c6:
         76:26:49:25:2a:ba:0f:2c:1a:ad:52:a2:24:e4:dd:d9:3e:65:
         f9:85:a9:55:b2:b2:b8:1c:e3:e9:a1:21:3a:a5:4c:04:3c:ea:
         39:35:fa:46:b3:c2:b0:10:e8:51:f6:65:d4:89:e3:5b:75:ee:
         4c:f0:87:e1:96:1b:91:60:06:1f:72:52:7d:fd:8c:28:f9:1a:
         10:36:a5:c6:fb:76:9d:8f:c8:ab:24:48:23:5f:1a:fe:ca:5f:
         aa:8c:71:8b:48:5b:ff:39:20:aa:3d:e7:6b:5d:ac:0d:1d:cd:
         06:7a:c1:99:7c:81:19:d5:e0:8d:0c:55:4f:0b:c9:50:3a:cf:
         6b:fa:2e:11:ed:45:64:7b:88:b9:5e:23:56:01:54:51:f5:93:
         ed:32:44:d3:b8:00:a9:43:43:55:26:ab:e1:e5:42:f8:5b:86:
         29:06:02:73:d8:c4:02:eb:0c:00:dc:b9:55:e2:00:f0:99:3e:
         a0:e2:33:a9:70:6a:17:f3:52:ee:ec:c9:b8:9c:7f:90:ff:22:
         86:71:a1:61
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICM48wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTYwQTkxMTAvBgNVBAUTKDc3ODdGMUU1M0U5Qjc4MTMyREU5QTc4NzExMDg4MzE2
REQ2MDU1QjMwHhcNMjMxMTI4MTQ0MDE5WhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NTY1ZmJkMy04NDMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4BHb82O8oBXR/Qo/8XOJxF3c33YxE+aMxQblpqFou8q4z7AobYFJvHKXi8F5
aQf2sdckgae744uMFkdbjiM9DNYjbz8lauwULd9ExwlK9BfIueS5jj7NiMSqa0SH
G14iS1LdZMsqZCxJz+XaGMyoDbJ98GowDzwLkRmXDArZFvjn43UH/yNUA0dTD6gJ
otjnD1GBrq8sRDieEu7IoQiIdlxsTRjaSPIt+PE7/ZFvcJGFSuNOyaYprdEw0O1L
DKgFhklvhUtuda4HLeZyVWdcHUFpxaSd8bs1PHfww+IyRhA1t7BYM+PM0gJPRpUN
sybcg/S8IUvi+2couUP4rylHxQIDAQABo4IClTCCApEwHQYDVR0OBBYEFOYTrN0A
PMunoc8mIga3hSXnQavAMB8GA1UdIwQYMBaAFHeH8eU+m3gTLemnhxEIgxbdYFWz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNjBBOS82QkE4MDYxQTFE
ODQxMUUyQjNBNTRGREEwOEIwMkNEMi9kNGZ4NVQ2YmVCTXQ2YWVIRVFpREZ0MWdW
Yk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2Q0Zng1VDZiZUJNdDZhZUhFUWlERnQxZ1ZiTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTYwQTkvNkJBODA2MUExRDg0MTFFMkIzQTU0RkRBMDhCMDJDRDIvOEYzNjhCRUVG
OUM0MTFFQjlGOUU2NDVEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBATS0FAwDQYJKoZIhvcNAQELBQADggEBAHESiAh8yB3d487r
jNQYZ20GW3ZlP67P1POz1sPy1Q8Y4LG41x1v/7sb09ChwodRnTY6d9jFxnYmSSUq
ug8sGq1SoiTk3dk+ZfmFqVWysrgc4+mhITqlTAQ86jk1+kazwrAQ6FH2ZdSJ41t1
7kzwh+GWG5FgBh9yUn39jCj5GhA2pcb7dp2PyKskSCNfGv7KX6qMcYtIW/85IKo9
52tdrA0dzQZ6wZl8gRnV4I0MVU8LyVA6z2v6LhHtRWR7iLleI1YBVFH1k+0yRNO4
AKlDQ1Umq+HlQvhbhikGAnPYxALrDADcuVXiAPCZPqDiM6lwahfzUu7sybicf5D/
IoZxoWE=
-----END CERTIFICATE-----
Generated at Fri Nov 22 15:25:43 2024 by rpki-client on console-fra.rpki-client.org