Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/005C56227B2411EEBB6FC444C4F9AE02.roa
File:                     005C56227B2411EEBB6FC444C4F9AE02.roa (raw, json)
Hash identifier:          T0JzURgbPQAyxXByhNfsj9TRUNcqqPprlp5/NvrciCE=
Subject key identifier:   F5:CF:E0:58:E5:C0:0F:21:21:14:A3:7B:B0:39:B3:03:CD:95:58:D8
Certificate issuer:       /CN=A91C6550/serialNumber=456EEA0692C6A4F26F53D2D237D1CB4DCD783305
Certificate serial:       0149
Authority key identifier: 45:6E:EA:06:92:C6:A4:F2:6F:53:D2:D2:37:D1:CB:4D:CD:78:33:05
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/005C56227B2411EEBB6FC444C4F9AE02.roa
Signing time:             Mon 03 Jun 2024 06:55:25 +0000
ROA not before:           Mon 03 Jun 2024 06:55:25 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     399641
IP address blocks:        125.62.78.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.crl
                          rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Aug 2024 04:51:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 329 (0x149)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C6550/serialNumber=456EEA0692C6A4F26F53D2D237D1CB4DCD783305
        Validity
            Not Before: Jun  3 06:55:25 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=665d68dd-797c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:41:3d:c2:98:cb:65:60:1b:90:9b:2d:0d:21:
                    89:a9:9b:5a:1b:2e:47:1d:82:3c:6b:a7:b6:68:c7:
                    8f:bb:f9:b1:61:a3:38:d2:26:eb:a8:ca:76:ea:61:
                    eb:4d:bd:24:c6:57:c3:39:76:06:6f:05:c2:23:85:
                    da:2e:fa:8e:31:44:f4:59:ef:a9:c1:82:60:2e:11:
                    6d:62:58:9f:05:45:c3:24:33:f7:4f:34:72:af:53:
                    08:e0:8d:14:f5:50:96:5d:1e:75:03:7d:21:c1:e0:
                    e7:28:25:00:33:5f:89:cb:91:c9:72:6c:dd:a5:94:
                    15:3c:21:3b:85:d6:71:fa:fe:22:33:af:a2:d5:4b:
                    93:d7:15:2f:30:5f:14:81:49:15:7d:7c:6e:11:bd:
                    62:f7:b2:7b:f0:78:8f:1b:6a:bf:a2:4e:f3:32:e0:
                    ca:9a:bf:0c:80:41:bc:2f:80:ed:15:4b:73:ce:ed:
                    80:49:b5:e2:a7:12:81:92:75:67:0c:b3:78:67:b6:
                    1f:a9:de:b7:fe:cc:80:09:38:04:6a:b9:67:62:56:
                    c8:fd:c4:25:e6:88:9f:fe:87:48:cd:cf:b1:a3:18:
                    c7:28:4a:9a:54:4d:22:ad:73:34:b1:03:cb:ea:b8:
                    bc:33:e1:c5:9c:21:0e:a6:bf:59:54:3e:99:be:41:
                    c2:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:CF:E0:58:E5:C0:0F:21:21:14:A3:7B:B0:39:B3:03:CD:95:58:D8
            X509v3 Authority Key Identifier:
                keyid:45:6E:EA:06:92:C6:A4:F2:6F:53:D2:D2:37:D1:CB:4D:CD:78:33:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/005C56227B2411EEBB6FC444C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  125.62.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:d6:fe:32:8b:6f:3b:ee:4f:21:98:f1:40:02:40:7a:2e:4c:
         10:19:f9:c0:46:cd:b2:67:63:a2:34:5a:c1:5a:84:8f:3c:7d:
         b9:22:b2:4c:9a:0a:b3:8e:01:2d:77:98:6b:38:9b:df:5d:52:
         1b:58:0e:4a:13:98:77:70:41:d5:88:f3:a0:89:4b:61:d2:0b:
         9e:4f:34:86:02:b4:82:56:44:3d:ef:db:3b:ed:00:bb:33:af:
         7d:8c:55:19:1d:12:31:37:2a:cd:2f:11:aa:a9:52:29:0b:2d:
         9d:92:2c:e6:29:c1:40:bf:29:e0:7f:a1:21:a1:d2:65:7b:4b:
         0a:15:4d:eb:06:06:d5:0a:88:d5:26:79:89:6a:b1:a1:af:3d:
         6d:72:49:73:49:f9:94:f1:da:65:34:81:ed:8a:c2:f0:a4:83:
         37:92:df:1b:e5:a4:af:fe:1f:4a:96:01:c1:a7:ea:b4:34:d4:
         9f:6c:ad:ac:e3:bc:47:f6:45:c2:67:a7:b2:0e:fb:00:e2:5a:
         74:d2:aa:77:e1:cc:18:17:9b:45:ba:be:fa:44:e0:d0:74:bc:
         62:c1:25:85:0e:de:fd:3e:71:42:94:b9:51:e5:54:34:d5:e7:
         90:af:98:18:43:e5:f1:55:72:d6:82:a0:54:e0:f0:9a:93:4b:
         52:29:e4:5a
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAUkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzY1NTAxMTAvBgNVBAUTKDQ1NkVFQTA2OTJDNkE0RjI2RjUzRDJEMjM3RDFDQjRE
Q0Q3ODMzMDUwHhcNMjQwNjAzMDY1NTI1WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NjVkNjhkZC03OTdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsEE9wpjLZWAbkJstDSGJqZtaGy5HHYI8a6e2aMePu/mxYaM40ibrqMp26mHr
Tb0kxlfDOXYGbwXCI4XaLvqOMUT0We+pwYJgLhFtYlifBUXDJDP3TzRyr1MI4I0U
9VCWXR51A30hweDnKCUAM1+Jy5HJcmzdpZQVPCE7hdZx+v4iM6+i1UuT1xUvMF8U
gUkVfXxuEb1i97J78HiPG2q/ok7zMuDKmr8MgEG8L4DtFUtzzu2ASbXipxKBknVn
DLN4Z7Yfqd63/syACTgEarlnYlbI/cQl5oif/odIzc+xoxjHKEqaVE0irXM0sQPL
6ri8M+HFnCEOpr9ZVD6ZvkHCcwIDAQABo4IClTCCApEwHQYDVR0OBBYEFPXP4Fjl
wA8hIRSje7A5swPNlVjYMB8GA1UdIwQYMBaAFEVu6gaSxqTyb1PS0jfRy03NeDMF
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjU1MC84NDAwOTU0QUNF
QzQxMUVEOEE4M0ZCMTFDNEY5QUUwMi9SVzdxQnBMR3BQSnZVOUxTTjlITFRjMTRN
d1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1JXN3FCcExHcFBKdlU5TFNOOUhMVGMxNE13VS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QzY1NTAvODQwMDk1NEFDRUM0MTFFRDhBODNGQjExQzRGOUFFMDIvMDA1QzU2MjI3
QjI0MTFFRUJCNkZDNDQ0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAB9Pk4wDQYJKoZIhvcNAQELBQADggEBACTW/jKLbzvuTyGY
8UACQHouTBAZ+cBGzbJnY6I0WsFahI88fbkiskyaCrOOAS13mGs4m99dUhtYDkoT
mHdwQdWI86CJS2HSC55PNIYCtIJWRD3v2zvtALszr32MVRkdEjE3Ks0vEaqpUikL
LZ2SLOYpwUC/KeB/oSGh0mV7SwoVTesGBtUKiNUmeYlqsaGvPW1ySXNJ+ZTx2mU0
ge2KwvCkgzeS3xvlpK/+H0qWAcGn6rQ01J9srazjvEf2RcJnp7IO+wDiWnTSqnfh
zBgXm0W6vvpE4NB0vGLBJYUO3v0+cUKUuVHlVDTV55CvmBhD5fFVctaCoFTg8JqT
S1Ip5Fo=
-----END CERTIFICATE-----
Generated at Thu Jul 25 06:41:28 2024 by rpki-client on console-fra.rpki-client.org