Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/D630A6B206D511EFB6CFDF2DC4F9AE02.roa
File:                     D630A6B206D511EFB6CFDF2DC4F9AE02.roa (raw, json)
Hash identifier:          21j5VuSiIiFcZKr6TSvSPHqlTOFdzYbVC1rBUAH1qbI=
Subject key identifier:   78:F1:E9:E7:BC:28:FC:57:01:C7:69:43:EE:97:CD:79:B2:67:82:D0
Certificate issuer:       /CN=A91B5D7E/serialNumber=4CAE3AEFB1AC8ABDDB99BCCEE4FA5A916D157B34
Certificate serial:       34EC
Authority key identifier: 4C:AE:3A:EF:B1:AC:8A:BD:DB:99:BC:CE:E4:FA:5A:91:6D:15:7B:34
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/D630A6B206D511EFB6CFDF2DC4F9AE02.roa
Signing time:             Tue 30 Apr 2024 09:41:36 +0000
ROA not before:           Tue 30 Apr 2024 09:41:36 +0000
ROA not after:            Sun 02 Mar 2025 00:00:00 +0000
asID:                     151636
IP address blocks:        116.90.116.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.crl
                          rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 13:40:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13548 (0x34ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B5D7E/serialNumber=4CAE3AEFB1AC8ABDDB99BCCEE4FA5A916D157B34
        Validity
            Not Before: Apr 30 09:41:36 2024 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=6630bcd0-ca00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:18:bb:55:e9:db:55:ee:78:62:f3:c4:46:2c:
                    50:de:b5:72:e9:34:84:db:b7:c2:f0:c2:9f:39:89:
                    3f:5c:b8:85:22:9c:a1:97:9b:ae:f6:a8:8d:23:2d:
                    b8:ce:cf:8d:f1:1c:eb:71:0a:c2:39:30:5c:95:68:
                    ed:2a:a9:fe:06:5f:17:b3:75:ef:01:05:90:56:41:
                    44:b9:df:da:fd:6b:78:f2:32:cc:1c:a1:bd:43:84:
                    6c:83:2e:21:54:f6:74:56:93:04:83:66:15:56:0a:
                    39:1c:50:a0:5d:c4:26:7d:d0:4a:a0:cd:d3:7a:d6:
                    7d:47:2a:f8:ea:58:76:ae:2d:d0:85:03:59:cf:8c:
                    a4:b1:c4:29:af:32:b7:fd:6d:22:5c:b1:05:f1:03:
                    5b:8a:77:77:a4:53:86:ad:60:f1:8a:05:b0:ea:bf:
                    d0:ea:b9:59:44:3b:73:03:b4:c6:09:08:c9:26:b6:
                    2f:30:a1:d9:65:6a:1a:bc:43:15:b4:fc:07:76:bf:
                    35:d0:6c:38:5e:05:29:37:42:5a:95:f0:42:8b:51:
                    9e:60:83:c2:a1:66:53:d4:93:73:40:6d:20:0a:5e:
                    4c:eb:cc:4c:b9:1d:cb:d5:9e:27:ee:b3:c9:06:ea:
                    9e:e8:d6:98:00:0c:db:ea:b8:b5:52:47:af:62:bd:
                    cc:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:F1:E9:E7:BC:28:FC:57:01:C7:69:43:EE:97:CD:79:B2:67:82:D0
            X509v3 Authority Key Identifier:
                keyid:4C:AE:3A:EF:B1:AC:8A:BD:DB:99:BC:CE:E4:FA:5A:91:6D:15:7B:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/D630A6B206D511EFB6CFDF2DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.90.116.0/23

    Signature Algorithm: sha256WithRSAEncryption
         48:f5:a1:29:69:18:5f:cc:79:ed:a2:5a:15:13:34:42:90:60:
         dd:2a:05:11:3e:01:d8:19:c8:71:b2:b1:4d:ed:32:b1:f9:64:
         33:c6:fd:de:f7:55:49:40:23:cc:bc:75:90:05:54:f6:c9:c0:
         7a:ef:36:f5:0c:5c:02:50:be:9d:1b:4b:ea:5d:9e:89:b3:2d:
         b1:ea:54:f3:37:23:28:3b:61:7c:31:60:86:8c:58:48:0e:a5:
         97:6e:85:90:d7:7e:3b:dc:eb:85:15:bb:7a:aa:7f:16:55:1d:
         72:bc:58:45:0a:29:5e:68:9c:52:8b:18:3e:a7:e3:ec:e7:70:
         12:26:8e:8c:17:4d:8d:d6:17:59:41:3e:4c:c6:ed:d6:01:3d:
         21:4e:41:34:aa:a3:15:d1:ce:9a:86:18:a2:c5:36:7d:6c:4d:
         04:e2:3e:5b:1d:69:12:07:9b:b9:b7:72:c6:8a:bb:c1:09:9c:
         fb:e9:c6:3b:6b:e8:bd:64:83:af:96:6a:e8:e7:e4:39:25:15:
         86:96:81:bf:3f:41:5f:bd:6b:b4:f8:c6:03:55:5b:2f:3e:8c:
         1e:62:9a:86:49:87:00:d1:57:ef:57:3b:18:10:f2:2d:82:e3:
         67:71:89:db:b8:08:9c:68:4b:16:55:6a:85:8b:d4:f9:52:52:
         5b:84:e0:7f
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICNOwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjVEN0UxMTAvBgNVBAUTKDRDQUUzQUVGQjFBQzhBQkREQjk5QkNDRUU0RkE1QTkx
NkQxNTdCMzQwHhcNMjQwNDMwMDk0MTM2WhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02NjMwYmNkMC1jYTAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0hi7VenbVe54YvPERixQ3rVy6TSE27fC8MKfOYk/XLiFIpyhl5uu9qiNIy24
zs+N8RzrcQrCOTBclWjtKqn+Bl8Xs3XvAQWQVkFEud/a/Wt48jLMHKG9Q4Rsgy4h
VPZ0VpMEg2YVVgo5HFCgXcQmfdBKoM3TetZ9Ryr46lh2ri3QhQNZz4ykscQprzK3
/W0iXLEF8QNbind3pFOGrWDxigWw6r/Q6rlZRDtzA7TGCQjJJrYvMKHZZWoavEMV
tPwHdr810Gw4XgUpN0JalfBCi1GeYIPCoWZT1JNzQG0gCl5M68xMuR3L1Z4n7rPJ
Buqe6NaYAAzb6ri1UkevYr3MJQIDAQABo4IClTCCApEwHQYDVR0OBBYEFHjx6ee8
KPxXAcdpQ+6XzXmyZ4LQMB8GA1UdIwQYMBaAFEyuOu+xrIq925m8zuT6WpFtFXs0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNUQ3RS9FQ0E2ODIzNDFE
ODcxMUUyOTgzMjJERTAwOEIwMkNEMi9USzQ2NzdHc2lyM2JtYnpPNVBwYWtXMFZl
elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1RLNDY3N0dzaXIzYm1iek81UHBha1cwVmV6US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QjVEN0UvRUNBNjgyMzQxRDg3MTFFMjk4MzIyREUwMDhCMDJDRDIvRDYzMEE2QjIw
NkQ1MTFFRkI2Q0ZERjJEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAF0WnQwDQYJKoZIhvcNAQELBQADggEBAEj1oSlpGF/Mee2i
WhUTNEKQYN0qBRE+AdgZyHGysU3tMrH5ZDPG/d73VUlAI8y8dZAFVPbJwHrvNvUM
XAJQvp0bS+pdnomzLbHqVPM3Iyg7YXwxYIaMWEgOpZduhZDXfjvc64UVu3qqfxZV
HXK8WEUKKV5onFKLGD6n4+zncBImjowXTY3WF1lBPkzG7dYBPSFOQTSqoxXRzpqG
GKLFNn1sTQTiPlsdaRIHm7m3csaKu8EJnPvpxjtr6L1kg6+Waujn5DklFYaWgb8/
QV+9a7T4xgNVWy8+jB5imoZJhwDRV+9XOxgQ8i2C42dxidu4CJxoSxZVaoWL1PlS
UluE4H8=
-----END CERTIFICATE-----
Generated at Tue May 28 15:19:47 2024 by rpki-client on console-ams.rpki-client.org