Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9945/BC00C8F2F09E11ECAEE73E19C4F9AE02/D40753E8F6C411EEAFF62079C4F9AE02.roa
File:                     D40753E8F6C411EEAFF62079C4F9AE02.roa (raw, json)
Hash identifier:          7rGtfoGtmNjkgpBebj5AN23TDyFs8EyElxm7Ay6opxU=
Subject key identifier:   3C:13:C9:A3:36:B1:45:14:0B:73:B2:98:90:F0:5E:B5:D6:A3:88:10
Certificate issuer:       /CN=A91C9945/serialNumber=868ECB6425DA83328892E57BB0DF644E1AEB73B3
Certificate serial:       0228
Authority key identifier: 86:8E:CB:64:25:DA:83:32:88:92:E5:7B:B0:DF:64:4E:1A:EB:73:B3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ho7LZCXagzKIkuV7sN9kThrrc7M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C9945/BC00C8F2F09E11ECAEE73E19C4F9AE02/D40753E8F6C411EEAFF62079C4F9AE02.roa
Signing time:             Sat 11 May 2024 04:39:54 +0000
ROA not before:           Sat 11 May 2024 04:39:53 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     262287
IP address blocks:        2404:f980:8::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C9945/BC00C8F2F09E11ECAEE73E19C4F9AE02/ho7LZCXagzKIkuV7sN9kThrrc7M.crl
                          rsync://rpki.apnic.net/member_repository/A91C9945/BC00C8F2F09E11ECAEE73E19C4F9AE02/ho7LZCXagzKIkuV7sN9kThrrc7M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ho7LZCXagzKIkuV7sN9kThrrc7M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 20:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 552 (0x228)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C9945/serialNumber=868ECB6425DA83328892E57BB0DF644E1AEB73B3
        Validity
            Not Before: May 11 04:39:53 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=663ef699-ab69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:0f:ad:45:1d:e7:cf:62:88:bd:04:60:4f:17:
                    36:3f:c5:bf:bf:2b:e0:a4:83:9f:f1:f5:e8:52:4e:
                    58:6a:b5:22:08:5a:e4:2e:8d:5f:32:5c:30:e2:02:
                    40:84:1a:b0:73:27:70:23:a9:11:5f:0f:c9:ce:00:
                    a7:f9:bf:cf:97:00:7a:7f:15:89:c9:f6:62:43:73:
                    4c:02:5d:9b:2a:74:d4:99:f1:b0:01:4a:58:4e:4e:
                    60:c4:6a:bb:68:b9:f3:dd:a6:4b:28:fc:2b:ff:68:
                    b3:7e:ad:a5:55:15:0d:dc:63:86:83:05:98:82:f8:
                    b8:c0:18:7a:d7:2d:c3:a7:d5:a7:e5:31:4f:64:df:
                    73:fe:30:c5:71:6e:ce:59:54:c1:50:a8:c3:0d:35:
                    77:67:bf:57:90:64:70:1b:52:27:6c:5d:e2:0a:13:
                    56:c1:da:5c:2d:79:fc:cf:37:1e:f3:7d:84:7f:31:
                    8e:64:a1:63:36:70:c7:82:c7:59:3b:41:ce:5a:42:
                    be:39:5a:d7:7c:4c:05:29:1f:00:40:63:25:51:68:
                    cb:ce:dd:46:b6:70:72:7f:a0:1b:12:f0:27:52:15:
                    35:a3:01:52:f2:1e:10:ec:67:8f:d5:83:21:52:04:
                    4b:6a:27:57:b3:75:d3:c5:a9:6b:57:f1:60:cf:74:
                    79:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:13:C9:A3:36:B1:45:14:0B:73:B2:98:90:F0:5E:B5:D6:A3:88:10
            X509v3 Authority Key Identifier:
                keyid:86:8E:CB:64:25:DA:83:32:88:92:E5:7B:B0:DF:64:4E:1A:EB:73:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C9945/BC00C8F2F09E11ECAEE73E19C4F9AE02/ho7LZCXagzKIkuV7sN9kThrrc7M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ho7LZCXagzKIkuV7sN9kThrrc7M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9945/BC00C8F2F09E11ECAEE73E19C4F9AE02/D40753E8F6C411EEAFF62079C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:f980:8::/48

    Signature Algorithm: sha256WithRSAEncryption
         8f:c8:0f:4f:f9:75:75:7e:dd:fa:c6:2d:24:b5:13:c6:30:c5:
         37:2d:b6:15:6d:2f:ea:4a:ad:c1:5a:8b:e4:34:f0:7d:68:b2:
         8e:13:72:72:f2:c5:6d:e0:b6:5c:32:5d:3d:9a:fc:c5:27:a7:
         c9:a0:75:de:c7:2a:aa:2d:71:20:2f:0c:ae:62:0c:bd:83:86:
         f0:01:fa:87:98:79:48:d8:10:3e:64:ec:20:c5:34:bd:11:6d:
         cf:93:43:78:6f:50:41:83:41:72:43:23:25:a1:49:a5:9d:8b:
         3f:02:80:c5:d5:f2:d2:65:ca:6e:6c:0c:08:6a:cb:86:d8:e2:
         88:5a:1d:ca:6e:d4:33:f2:85:71:94:f9:7a:e2:73:ab:67:e9:
         78:b1:0c:58:28:a4:a3:25:51:3e:d4:67:13:da:cb:54:06:31:
         87:ab:8e:51:de:33:0c:77:f3:30:31:28:ba:16:9c:5c:21:00:
         d1:fd:1f:f6:ca:88:66:db:5f:0a:fc:eb:a2:f3:29:e1:db:0b:
         d6:5d:8e:de:99:6c:54:76:64:13:1e:96:32:d9:57:e0:f6:b1:
         a8:d3:da:d2:fd:bd:42:8f:95:77:1d:9d:47:62:51:eb:0f:a5:
         84:67:ca:10:11:2e:ed:eb:c9:9a:2e:d1:8a:85:83:fc:d0:9c:
         1a:ed:85:b1
-----BEGIN CERTIFICATE-----
MIIFdDCCBFygAwIBAgICAigwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Qzk5NDUxMTAvBgNVBAUTKDg2OEVDQjY0MjVEQTgzMzI4ODkyRTU3QkIwREY2NDRF
MUFFQjczQjMwHhcNMjQwNTExMDQzOTUzWhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NjNlZjY5OS1hYjY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtg+tRR3nz2KIvQRgTxc2P8W/vyvgpIOf8fXoUk5YarUiCFrkLo1fMlww4gJA
hBqwcydwI6kRXw/JzgCn+b/PlwB6fxWJyfZiQ3NMAl2bKnTUmfGwAUpYTk5gxGq7
aLnz3aZLKPwr/2izfq2lVRUN3GOGgwWYgvi4wBh61y3Dp9Wn5TFPZN9z/jDFcW7O
WVTBUKjDDTV3Z79XkGRwG1InbF3iChNWwdpcLXn8zzce832EfzGOZKFjNnDHgsdZ
O0HOWkK+OVrXfEwFKR8AQGMlUWjLzt1GtnByf6AbEvAnUhU1owFS8h4Q7GeP1YMh
UgRLaidXs3XTxalrV/Fgz3R5kQIDAQABo4ICmDCCApQwHQYDVR0OBBYEFDwTyaM2
sUUUC3OymJDwXrXWo4gQMB8GA1UdIwQYMBaAFIaOy2Ql2oMyiJLle7DfZE4a63Oz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTk0NS9CQzAwQzhGMkYw
OUUxMUVDQUVFNzNFMTlDNEY5QUUwMi9obzdMWkNYYWd6S0lrdVY3c045a1RocnJj
N00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2hvN0xaQ1hhZ3pLSWt1VjdzTjlrVGhycmM3TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Qzk5NDUvQkMwMEM4RjJGMDlFMTFFQ0FFRTczRTE5QzRGOUFFMDIvRDQwNzUzRThG
NkM0MTFFRUFGRjYyMDc5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E
EzARMA8EAgACMAkDBwAkBPmAAAgwDQYJKoZIhvcNAQELBQADggEBAI/ID0/5dXV+
3frGLSS1E8YwxTctthVtL+pKrcFai+Q08H1oso4TcnLyxW3gtlwyXT2a/MUnp8mg
dd7HKqotcSAvDK5iDL2DhvAB+oeYeUjYED5k7CDFNL0Rbc+TQ3hvUEGDQXJDIyWh
SaWdiz8CgMXV8tJlym5sDAhqy4bY4ohaHcpu1DPyhXGU+Xric6tn6XixDFgopKMl
UT7UZxPay1QGMYerjlHeMwx38zAxKLoWnFwhANH9H/bKiGbbXwr866LzKeHbC9Zd
jt6ZbFR2ZBMeljLZV+D2sajT2tL9vUKPlXcdnUdiUesPpYRnyhARLu3ryZou0YqF
g/zQnBrthbE=
-----END CERTIFICATE-----
Generated at Thu Nov 21 03:12:05 2024 by rpki-client on console-fra.rpki-client.org