Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/6A6FBBFE16C111ECB341F934C4F9AE02.roa
File:                     6A6FBBFE16C111ECB341F934C4F9AE02.roa (raw, json)
Hash identifier:          3x+5sbyRU2aCiCZ6M1S/W1BfRFMabVIxvtBAxXel6XU=
Subject key identifier:   41:30:35:7E:36:7C:43:12:AA:50:8F:68:B0:50:53:43:96:89:03:0E
Certificate issuer:       /CN=A91AABB1/serialNumber=EB7FE9892DF000255FCF3AC0B2B4D12AEA6FF806
Certificate serial:       3404
Authority key identifier: EB:7F:E9:89:2D:F0:00:25:5F:CF:3A:C0:B2:B4:D1:2A:EA:6F:F8:06
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/63_piS3wACVfzzrAsrTRKupv-AY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/6A6FBBFE16C111ECB341F934C4F9AE02.roa
Signing time:             Thu 08 Jun 2023 15:20:57 +0000
ROA not before:           Thu 08 Jun 2023 15:20:57 +0000
ROA not after:            Tue 30 Jul 2024 00:00:00 +0000
asID:                     58732
IP address blocks:        114.130.248.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.crl
                          rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/63_piS3wACVfzzrAsrTRKupv-AY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 May 2024 15:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13316 (0x3404)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AABB1/serialNumber=EB7FE9892DF000255FCF3AC0B2B4D12AEA6FF806
        Validity
            Not Before: Jun  8 15:20:57 2023 GMT
            Not After : Jul 30 00:00:00 2024 GMT
        Subject: CN=6481f1d9-9be1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:0e:59:9e:48:c6:ae:ef:8b:00:0f:77:77:7a:
                    59:4c:9a:86:93:f4:5f:12:12:de:fa:55:ad:19:b9:
                    fc:51:72:47:24:6f:ca:6e:a7:bc:61:1c:47:dc:fe:
                    37:61:72:6e:0d:b6:33:9d:53:cd:c6:12:5a:85:67:
                    2f:d4:0d:b7:9a:7d:75:cb:50:66:48:85:e0:a0:6b:
                    13:43:71:ca:42:7e:4f:72:42:71:af:8e:b5:93:fb:
                    74:dc:7e:09:4f:f5:7d:9f:d2:47:33:d8:8d:4b:08:
                    36:27:71:aa:08:fd:7c:ef:3d:45:f1:60:9f:c7:b2:
                    ce:d1:34:66:1f:5c:2d:ce:6b:e1:8e:1a:98:52:85:
                    b6:3f:43:0c:63:32:37:c2:b2:ae:7c:31:5d:41:53:
                    d8:bc:c1:5b:11:2f:28:84:a4:bb:3f:a6:c0:b0:b9:
                    4c:9e:1e:a4:c0:d9:7a:0b:01:2f:94:d2:9d:1a:8c:
                    12:88:b5:90:e0:1d:b9:0b:46:74:16:7e:f7:f6:4c:
                    bb:b9:3a:9e:d5:58:d0:d9:9c:20:54:81:28:ed:6d:
                    1a:f9:9d:fe:91:19:8f:54:48:7d:d3:57:4b:33:b5:
                    19:c9:3b:e8:a9:e8:89:e1:6f:ee:c1:c6:f6:dc:e9:
                    ab:58:ae:b0:e9:2d:8d:45:2c:be:93:a4:7a:6b:c0:
                    5a:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:30:35:7E:36:7C:43:12:AA:50:8F:68:B0:50:53:43:96:89:03:0E
            X509v3 Authority Key Identifier:
                keyid:EB:7F:E9:89:2D:F0:00:25:5F:CF:3A:C0:B2:B4:D1:2A:EA:6F:F8:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/63_piS3wACVfzzrAsrTRKupv-AY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/6A6FBBFE16C111ECB341F934C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.130.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3a:75:50:59:47:d8:1b:d7:c2:d6:70:4a:5c:ab:0e:ec:cc:cd:
         23:72:ed:7f:a6:ce:ac:62:d8:1b:60:53:d8:dc:b8:83:bc:23:
         90:a5:65:24:d3:7f:ed:3f:45:92:02:00:5b:18:cc:30:7a:28:
         47:d6:c7:85:cf:32:49:0b:af:39:9f:03:98:21:af:8f:ef:a8:
         e6:6e:5b:d8:08:c0:83:53:18:43:05:09:a3:32:1a:b1:b7:d5:
         42:35:43:44:24:77:df:8b:0b:3c:a3:5e:a5:7b:87:ec:8e:e7:
         56:e1:77:c0:27:b6:dd:a1:f0:32:2c:49:f1:03:63:51:c6:2c:
         d9:bf:02:4c:c6:1b:d9:f1:18:49:d2:d2:9d:2d:aa:fd:1d:c0:
         b3:3c:5a:31:20:81:c5:67:a7:0b:ea:71:c5:90:0f:e3:28:0d:
         3d:aa:f4:34:9f:3d:62:88:29:e1:a2:b0:7b:8f:e1:1c:75:9c:
         42:24:fd:30:59:01:62:85:22:e5:53:16:f8:a9:81:52:70:97:
         66:92:b1:03:65:69:81:43:02:d5:3f:31:64:b5:7d:8f:9b:b7:
         87:80:32:a4:84:f7:6d:ec:bc:8a:f7:49:40:3d:6c:c6:8f:a8:
         af:ae:1b:3d:63:79:a6:b3:2d:ef:fe:e7:27:02:84:55:27:b5:
         75:56:62:c9
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICNAQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUFCQjExMTAvBgNVBAUTKEVCN0ZFOTg5MkRGMDAwMjU1RkNGM0FDMEIyQjREMTJB
RUE2RkY4MDYwHhcNMjMwNjA4MTUyMDU3WhcNMjQwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NDgxZjFkOS05YmUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyQ5ZnkjGru+LAA93d3pZTJqGk/RfEhLe+lWtGbn8UXJHJG/Kbqe8YRxH3P43
YXJuDbYznVPNxhJahWcv1A23mn11y1BmSIXgoGsTQ3HKQn5PckJxr461k/t03H4J
T/V9n9JHM9iNSwg2J3GqCP187z1F8WCfx7LO0TRmH1wtzmvhjhqYUoW2P0MMYzI3
wrKufDFdQVPYvMFbES8ohKS7P6bAsLlMnh6kwNl6CwEvlNKdGowSiLWQ4B25C0Z0
Fn739ky7uTqe1VjQ2ZwgVIEo7W0a+Z3+kRmPVEh901dLM7UZyTvoqeiJ4W/uwcb2
3OmrWK6w6S2NRSy+k6R6a8Ba2wIDAQABo4IClTCCApEwHQYDVR0OBBYEFEEwNX42
fEMSqlCPaLBQU0OWiQMOMB8GA1UdIwQYMBaAFOt/6Ykt8AAlX886wLK00Srqb/gG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUJCMS84ODc0RTlFODFE
OTgxMUUyOTc4OEE5ODIwOEIwMkNEMi82M19waVMzd0FDVmZ6enJBc3JUUkt1cHYt
QVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzYzX3BpUzN3QUNWZnp6ckFzclRSS3Vwdi1BWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QUFCQjEvODg3NEU5RTgxRDk4MTFFMjk3ODhBOTgyMDhCMDJDRDIvNkE2RkJCRkUx
NkMxMTFFQ0IzNDFGOTM0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAJygvgwDQYJKoZIhvcNAQELBQADggEBADp1UFlH2BvXwtZw
SlyrDuzMzSNy7X+mzqxi2BtgU9jcuIO8I5ClZSTTf+0/RZICAFsYzDB6KEfWx4XP
MkkLrzmfA5ghr4/vqOZuW9gIwINTGEMFCaMyGrG31UI1Q0Qkd9+LCzyjXqV7h+yO
51bhd8Antt2h8DIsSfEDY1HGLNm/AkzGG9nxGEnS0p0tqv0dwLM8WjEggcVnpwvq
ccWQD+MoDT2q9DSfPWKIKeGisHuP4Rx1nEIk/TBZAWKFIuVTFvipgVJwl2aSsQNl
aYFDAtU/MWS1fY+bt4eAMqSE923svIr3SUA9bMaPqK+uGz1jeaazLe/+5ycChFUn
tXVWYsk=
-----END CERTIFICATE-----
Generated at Mon May 20 17:22:32 2024 by rpki-client on console-fra.rpki-client.org