Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/92F5E790172E11EA9CCC934DC4F9AE02.roa
File:                     92F5E790172E11EA9CCC934DC4F9AE02.roa (raw, json)
Hash identifier:          l4uHSTMAHvz3K39iQ1N6BJocMGP4W2EFJHrCsRCiw/k=
Subject key identifier:   1D:EA:8B:63:0E:74:88:E1:0A:31:F4:A8:88:14:E4:3B:FB:65:01:F5
Certificate issuer:       /CN=A91BC847/serialNumber=79D66C64A6165A2E4CB37D49700E6C761841C39A
Certificate serial:       1365
Authority key identifier: 79:D6:6C:64:A6:16:5A:2E:4C:B3:7D:49:70:0E:6C:76:18:41:C3:9A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/edZsZKYWWi5Ms31JcA5sdhhBw5o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/92F5E790172E11EA9CCC934DC4F9AE02.roa
Signing time:             Tue 10 Sep 2024 17:55:08 +0000
ROA not before:           Tue 10 Sep 2024 17:55:08 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     63932
IP address blocks:        180.211.213.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.crl
                          rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/edZsZKYWWi5Ms31JcA5sdhhBw5o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 17:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4965 (0x1365)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BC847/serialNumber=79D66C64A6165A2E4CB37D49700E6C761841C39A
        Validity
            Not Before: Sep 10 17:55:08 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=66e087fc-01bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:cc:19:40:42:f0:21:b0:3e:72:5a:31:be:68:
                    b8:b9:18:6c:ce:d4:a8:f0:4f:d7:c9:2e:59:1f:6a:
                    7d:a4:5f:ac:ef:52:96:5f:b5:dc:ca:43:5b:77:17:
                    43:0b:2e:43:c1:c0:77:e1:6b:7e:1f:e6:7d:71:fd:
                    ca:fa:17:e7:c3:e8:c6:25:2a:63:28:05:86:fd:e7:
                    cc:ac:80:51:eb:ae:1d:b7:0f:75:1e:00:76:c0:75:
                    3d:97:56:92:80:31:de:46:83:8d:a0:f4:45:92:b6:
                    9a:f7:e3:44:7f:42:1f:d9:4e:73:c2:ce:e3:28:30:
                    fc:22:da:c2:b6:05:54:09:94:4e:81:4e:3c:d9:96:
                    84:f7:ae:be:4b:a1:a6:2b:70:76:6b:88:80:f2:af:
                    25:0a:e7:5e:20:2b:62:9b:49:e0:bd:31:e8:50:cc:
                    df:f3:03:ea:e0:c9:c5:36:d2:e2:40:61:c9:92:6f:
                    1c:ab:76:6c:a1:c0:91:85:d4:44:e8:eb:5f:05:ca:
                    a3:39:de:ea:59:01:c8:3f:3d:aa:a4:08:41:31:d5:
                    80:6b:58:89:31:01:ff:6e:d8:cf:80:a1:15:ad:88:
                    a3:62:f0:db:f3:89:86:b5:d4:99:14:e0:d3:f7:28:
                    b9:bd:d3:df:43:b4:e8:c5:e2:dc:e2:c8:ef:c4:37:
                    93:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:EA:8B:63:0E:74:88:E1:0A:31:F4:A8:88:14:E4:3B:FB:65:01:F5
            X509v3 Authority Key Identifier:
                keyid:79:D6:6C:64:A6:16:5A:2E:4C:B3:7D:49:70:0E:6C:76:18:41:C3:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/edZsZKYWWi5Ms31JcA5sdhhBw5o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/92F5E790172E11EA9CCC934DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.211.213.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:b9:47:24:df:19:8d:8c:43:23:c2:26:c6:4b:87:f3:48:3c:
         2d:e6:93:13:e1:9c:a3:39:aa:c9:d4:78:0b:f1:df:58:8f:f9:
         4c:1a:46:b3:f1:60:61:e6:f6:7e:41:73:03:b7:ee:a9:56:b3:
         3f:1d:ce:57:72:58:7c:43:aa:c9:97:8a:71:94:d5:15:ce:3a:
         62:62:df:05:83:f2:7e:29:25:35:b9:03:e8:2d:2f:2a:90:26:
         91:d3:32:7e:77:e1:fc:e0:3c:a3:64:67:30:8d:0a:84:0f:53:
         54:50:13:84:04:96:3a:3f:1d:85:60:60:0a:1c:a3:ba:c6:f5:
         17:64:af:60:15:a6:d1:d7:9e:25:85:f4:63:31:db:11:fa:7d:
         0f:8a:ac:00:41:e9:42:32:f4:c3:ab:34:84:47:b6:ab:74:79:
         2a:43:ce:95:1f:2b:b7:96:fa:cc:8a:22:3f:38:cb:d8:8b:69:
         e4:a9:e1:e6:09:b6:cb:5c:54:1b:e5:a3:a8:58:c7:3c:d4:51:
         a0:e8:50:f1:9d:c9:e6:ef:8b:0b:53:4f:6f:e9:72:47:bd:f5:
         df:e3:66:5a:4b:99:29:d1:c1:1c:67:0b:7c:ee:a1:c4:16:4e:
         f2:ed:69:57:85:33:b6:f3:49:8e:c4:16:e1:96:8a:a0:92:2d:
         49:20:ca:bc
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICE2UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkM4NDcxMTAvBgNVBAUTKDc5RDY2QzY0QTYxNjVBMkU0Q0IzN0Q0OTcwMEU2Qzc2
MTg0MUMzOUEwHhcNMjQwOTEwMTc1NTA4WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmUwODdmYy0wMWJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAp8wZQELwIbA+cloxvmi4uRhsztSo8E/XyS5ZH2p9pF+s71KWX7XcykNbdxdD
Cy5DwcB34Wt+H+Z9cf3K+hfnw+jGJSpjKAWG/efMrIBR664dtw91HgB2wHU9l1aS
gDHeRoONoPRFkraa9+NEf0If2U5zws7jKDD8ItrCtgVUCZROgU482ZaE966+S6Gm
K3B2a4iA8q8lCudeICtim0ngvTHoUMzf8wPq4MnFNtLiQGHJkm8cq3ZsocCRhdRE
6OtfBcqjOd7qWQHIPz2qpAhBMdWAa1iJMQH/btjPgKEVrYijYvDb84mGtdSZFODT
9yi5vdPfQ7ToxeLc4sjvxDeTFQIDAQABo4IClTCCApEwHQYDVR0OBBYEFB3qi2MO
dIjhCjH0qIgU5Dv7ZQH1MB8GA1UdIwQYMBaAFHnWbGSmFlouTLN9SXAObHYYQcOa
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzg0Ny9BQ0Y5NDM1MjlB
RjMxMUU4QUFCNEQ1NURDNEY5QUUwMi9lZFpzWktZV1dpNU1zMzFKY0E1c2RoaEJ3
NW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2VkWnNaS1lXV2k1TXMzMUpjQTVzZGhoQnc1by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QkM4NDcvQUNGOTQzNTI5QUYzMTFFOEFBQjRENTVEQzRGOUFFMDIvOTJGNUU3OTAx
NzJFMTFFQTlDQ0M5MzREQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAC009UwDQYJKoZIhvcNAQELBQADggEBAKy5RyTfGY2MQyPC
JsZLh/NIPC3mkxPhnKM5qsnUeAvx31iP+UwaRrPxYGHm9n5BcwO37qlWsz8dzldy
WHxDqsmXinGU1RXOOmJi3wWD8n4pJTW5A+gtLyqQJpHTMn534fzgPKNkZzCNCoQP
U1RQE4QEljo/HYVgYAoco7rG9Rdkr2AVptHXniWF9GMx2xH6fQ+KrABB6UIy9MOr
NIRHtqt0eSpDzpUfK7eW+syKIj84y9iLaeSp4eYJtstcVBvlo6hYxzzUUaDoUPGd
yebviwtTT2/pcke99d/jZlpLmSnRwRxnC3zuocQWTvLtaVeFM7bzSY7EFuGWiqCS
LUkgyrw=
-----END CERTIFICATE-----
Generated at Fri Nov 22 19:50:16 2024 by rpki-client on console-ams.rpki-client.org