Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE978/5DB555AAB8DA11EEBC4BEC2DC4F9AE02/30EAE110B9AD11EE83063243C4F9AE02.roa
File:                     30EAE110B9AD11EE83063243C4F9AE02.roa (raw, json)
Hash identifier:          5N+f2t+l19je3pcCt5hEaTL3vroVIGjp7rNbmODsUvM=
Subject key identifier:   47:AC:D6:18:D6:BF:5F:28:C8:E5:6F:34:8C:20:AB:DB:D0:28:9E:01
Certificate issuer:       /CN=A91CE978/serialNumber=4594F2EC17DF56C3D06540F366D2AF118B317F1E
Certificate serial:       3C
Authority key identifier: 45:94:F2:EC:17:DF:56:C3:D0:65:40:F3:66:D2:AF:11:8B:31:7F:1E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RZTy7BffVsPQZUDzZtKvEYsxfx4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CE978/5DB555AAB8DA11EEBC4BEC2DC4F9AE02/30EAE110B9AD11EE83063243C4F9AE02.roa
Signing time:             Sat 04 May 2024 15:20:56 +0000
ROA not before:           Sat 04 May 2024 15:20:56 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     45459
IP address blocks:        67.215.112.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CE978/5DB555AAB8DA11EEBC4BEC2DC4F9AE02/RZTy7BffVsPQZUDzZtKvEYsxfx4.crl
                          rsync://rpki.apnic.net/member_repository/A91CE978/5DB555AAB8DA11EEBC4BEC2DC4F9AE02/RZTy7BffVsPQZUDzZtKvEYsxfx4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RZTy7BffVsPQZUDzZtKvEYsxfx4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 14:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 60 (0x3c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CE978/serialNumber=4594F2EC17DF56C3D06540F366D2AF118B317F1E
        Validity
            Not Before: May  4 15:20:56 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=66365258-df62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:d2:65:cd:08:2a:b8:01:8d:d6:75:2f:3d:80:
                    e6:fe:15:a8:99:52:c2:d8:55:6d:18:1b:e4:73:0b:
                    6c:81:77:53:29:03:3b:29:79:77:b2:de:ef:41:31:
                    6f:cd:e2:95:66:b7:e3:ed:f1:33:4d:35:9d:53:42:
                    db:d6:88:aa:1b:29:c2:8a:74:7f:6a:1f:de:5b:e4:
                    cf:3b:34:dc:33:47:09:86:25:54:e7:b1:8b:f9:28:
                    b9:b2:27:1e:25:b6:ed:c7:1b:fc:64:5c:ec:0c:c5:
                    92:17:ac:8b:ac:5e:f4:6f:a3:ee:e9:fa:d8:dc:02:
                    5e:0c:36:32:46:b8:62:ab:bb:a1:52:b0:e9:36:87:
                    c2:fa:e1:b7:45:c3:83:a5:ac:65:76:15:38:2e:53:
                    2e:3f:59:e5:a4:d9:ac:39:47:bc:f8:b5:dc:34:92:
                    49:dd:e0:6b:74:4b:5a:5c:2a:e3:a2:87:b2:d4:36:
                    31:ab:98:d0:7a:d6:7c:72:53:a3:c7:0f:ac:da:20:
                    00:ca:0b:74:2a:46:18:d7:00:99:71:c3:f5:7d:e1:
                    b9:e7:6e:d9:e5:56:ff:1f:36:88:91:61:c6:bb:42:
                    2b:5e:f5:5f:7d:2d:70:f7:aa:8b:a6:22:1c:90:36:
                    7a:78:5a:8b:e4:9a:68:fa:10:d8:43:e7:ec:a0:e4:
                    7e:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:AC:D6:18:D6:BF:5F:28:C8:E5:6F:34:8C:20:AB:DB:D0:28:9E:01
            X509v3 Authority Key Identifier:
                keyid:45:94:F2:EC:17:DF:56:C3:D0:65:40:F3:66:D2:AF:11:8B:31:7F:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CE978/5DB555AAB8DA11EEBC4BEC2DC4F9AE02/RZTy7BffVsPQZUDzZtKvEYsxfx4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RZTy7BffVsPQZUDzZtKvEYsxfx4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE978/5DB555AAB8DA11EEBC4BEC2DC4F9AE02/30EAE110B9AD11EE83063243C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.215.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         63:db:7a:98:ed:b7:c4:83:9a:f6:45:62:8a:d2:99:87:e4:16:
         18:f2:00:d5:b4:f3:af:05:52:56:66:f9:b8:7e:db:6a:b4:10:
         c9:61:3a:0e:7d:f8:36:73:e5:03:ac:73:c0:22:27:de:2d:df:
         a4:7f:32:cc:39:c9:10:ce:43:0f:0d:e8:b3:57:3d:3e:2a:49:
         2c:39:34:c3:6d:37:c9:aa:99:82:4f:bc:d8:01:49:44:ba:f6:
         00:4a:fb:99:c7:25:54:be:1e:0e:d3:31:b9:9a:86:9c:0f:0e:
         59:ee:59:16:35:1f:f6:e5:4a:a7:28:7e:eb:e5:7e:62:34:7c:
         f0:0f:15:0b:2d:ba:9b:91:4a:d1:0b:34:ba:db:c4:b0:f2:e1:
         43:1b:81:47:0f:fa:cb:70:db:11:a2:73:e6:25:ce:d9:cc:41:
         43:61:cc:25:8a:7a:cf:ca:b2:1f:e3:7f:87:5c:20:18:9d:1b:
         66:ac:4e:6c:3d:28:cb:57:dc:4a:d6:d5:69:70:75:b7:02:5f:
         35:b7:1d:e4:8b:15:65:56:e6:f3:48:27:5a:f9:b3:a7:f5:0c:
         9e:b0:a1:90:34:1d:33:e6:da:c8:c2:70:5e:de:bd:fa:39:61:
         25:ff:78:8d:39:ea:ee:c3:18:11:7d:3b:13:12:9c:07:1a:9f:
         97:3b:8e:95
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBPDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD
RTk3ODExMC8GA1UEBRMoNDU5NEYyRUMxN0RGNTZDM0QwNjU0MEYzNjZEMkFGMTE4
QjMxN0YxRTAeFw0yNDA1MDQxNTIwNTZaFw0yNTA3MDEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY2MzY1MjU4LWRmNjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDc0mXNCCq4AY3WdS89gOb+FaiZUsLYVW0YG+RzC2yBd1MpAzspeXey3u9BMW/N
4pVmt+Pt8TNNNZ1TQtvWiKobKcKKdH9qH95b5M87NNwzRwmGJVTnsYv5KLmyJx4l
tu3HG/xkXOwMxZIXrIusXvRvo+7p+tjcAl4MNjJGuGKru6FSsOk2h8L64bdFw4Ol
rGV2FTguUy4/WeWk2aw5R7z4tdw0kknd4Gt0S1pcKuOih7LUNjGrmNB61nxyU6PH
D6zaIADKC3QqRhjXAJlxw/V94bnnbtnlVv8fNoiRYca7Qite9V99LXD3qoumIhyQ
Nnp4Wovkmmj6ENhD5+yg5H5fAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUR6zWGNa/
XyjI5W80jCCr29AongEwHwYDVR0jBBgwFoAURZTy7BffVsPQZUDzZtKvEYsxfx4w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNFOTc4LzVEQjU1NUFBQjhE
QTExRUVCQzRCRUMyREM0RjlBRTAyL1JaVHk3QmZmVnNQUVpVRHpadEt2RVlzeGZ4
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvUlpUeTdCZmZWc1BRWlVEelp0S3ZFWXN4Zng0LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
RTk3OC81REI1NTVBQUI4REExMUVFQkM0QkVDMkRDNEY5QUUwMi8zMEVBRTExMEI5
QUQxMUVFODMwNjMyNDNDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEA0PXcDANBgkqhkiG9w0BAQsFAAOCAQEAY9t6mO23xIOa9kVi
itKZh+QWGPIA1bTzrwVSVmb5uH7barQQyWE6Dn34NnPlA6xzwCIn3i3fpH8yzDnJ
EM5DDw3os1c9PipJLDk0w203yaqZgk+82AFJRLr2AEr7mcclVL4eDtMxuZqGnA8O
We5ZFjUf9uVKpyh+6+V+YjR88A8VCy26m5FK0Qs0utvEsPLhQxuBRw/6y3DbEaJz
5iXO2cxBQ2HMJYp6z8qyH+N/h1wgGJ0bZqxObD0oy1fcStbVaXB1twJfNbcd5IsV
ZVbm80gnWvmzp/UMnrChkDQdM+bayMJwXt69+jlhJf94jTnq7sMYEX07ExKcBxqf
lzuOlQ==
-----END CERTIFICATE-----
Generated at Wed Nov 20 16:00:18 2024 by rpki-client on console-ams.rpki-client.org