Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/B2306182F3F911EAB9D11D26C4F9AE02.roa
File:                     B2306182F3F911EAB9D11D26C4F9AE02.roa (raw, json)
Hash identifier:          XuAw72l1y8+xZhjG02bLa91Tpql6DxMPw1rT8RJ+tTY=
Subject key identifier:   F3:AF:16:6D:0E:4D:81:1E:50:FB:48:EB:7D:D8:01:33:E3:33:5A:98
Certificate issuer:       /CN=A91CEAA2/serialNumber=FF495293CB5F15E5D14BACC2DB1052B2E2C825C8
Certificate serial:       3426
Authority key identifier: FF:49:52:93:CB:5F:15:E5:D1:4B:AC:C2:DB:10:52:B2:E2:C8:25:C8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/B2306182F3F911EAB9D11D26C4F9AE02.roa
Signing time:             Fri 30 Aug 2024 15:20:56 +0000
ROA not before:           Fri 30 Aug 2024 15:20:56 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     14618
IP address blocks:        116.214.100.0/24 maxlen: 24
                          116.214.101.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.crl
                          rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 14:50:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13350 (0x3426)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CEAA2/serialNumber=FF495293CB5F15E5D14BACC2DB1052B2E2C825C8
        Validity
            Not Before: Aug 30 15:20:56 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=66d1e358-7f62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:d3:60:28:9f:9e:d4:5a:99:29:5d:5a:09:51:
                    14:9c:de:f8:cc:67:2d:d5:33:dd:b8:75:d8:70:9c:
                    6c:44:3c:f5:0a:1d:e9:b5:c7:6e:01:62:1e:76:50:
                    61:c5:e8:e7:38:e0:4e:79:f9:53:d8:d1:33:c2:51:
                    ab:f5:5d:4b:46:39:c0:31:78:8f:0a:92:ca:1c:63:
                    51:9d:6b:bc:f3:73:aa:01:d3:fd:3c:9b:ee:49:c0:
                    02:60:af:8f:3f:29:cb:e9:c2:94:c9:a5:2f:99:b7:
                    cf:55:64:03:bf:13:82:b2:7e:85:f1:da:48:43:fb:
                    f6:7a:56:d3:56:42:33:87:d4:37:7c:9d:a6:0e:7d:
                    9e:37:0b:b4:39:64:aa:ee:a8:d5:da:17:7a:1e:c1:
                    26:59:bc:96:e0:15:f9:8e:fa:00:c2:3a:70:86:44:
                    4a:40:9f:9d:01:0d:21:86:19:d5:ac:06:69:3e:88:
                    a1:69:16:4f:a4:d5:41:03:42:f2:b3:54:94:67:63:
                    51:bd:f2:c5:3d:51:77:42:44:d5:81:69:03:f3:6a:
                    f6:95:fd:03:ed:ec:9b:1c:df:a6:d4:46:07:35:a4:
                    01:65:29:29:02:36:11:71:d7:3c:02:6e:9c:c4:a9:
                    8c:f6:6f:b1:5c:e4:86:c7:4f:7d:48:3d:d4:ac:d5:
                    1c:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:AF:16:6D:0E:4D:81:1E:50:FB:48:EB:7D:D8:01:33:E3:33:5A:98
            X509v3 Authority Key Identifier:
                keyid:FF:49:52:93:CB:5F:15:E5:D1:4B:AC:C2:DB:10:52:B2:E2:C8:25:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/B2306182F3F911EAB9D11D26C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.214.100.0/23

    Signature Algorithm: sha256WithRSAEncryption
         87:39:1f:44:72:01:9b:fe:9e:14:ca:02:0c:90:8d:4a:ab:a5:
         89:98:a0:0a:4c:0d:bf:82:9d:c0:fc:bf:9e:cc:4a:f4:8d:a5:
         a9:90:56:33:aa:55:36:f1:f3:70:ec:a5:51:68:d0:11:c3:38:
         93:43:99:31:52:ea:bc:38:30:04:56:ad:ff:93:72:fd:01:73:
         76:da:6f:f8:db:d3:54:c5:8f:f5:60:25:49:9d:9c:bd:19:09:
         1a:a4:e3:eb:ee:d9:4d:ec:9c:16:68:4f:04:ad:d0:6a:10:7a:
         40:f4:36:93:f7:96:47:5d:2e:ff:0c:b1:a5:e1:b0:f2:c6:a1:
         6d:b9:68:a4:0b:78:33:92:fd:99:ff:ba:6a:16:9b:51:18:6f:
         a0:0c:19:b9:07:1b:24:e6:b1:b5:1d:69:2c:cd:63:91:2f:de:
         8e:b8:bd:7e:f4:81:ac:5f:ba:d4:cf:f8:29:e0:c2:5a:7a:72:
         80:af:d8:6b:36:df:14:82:93:32:85:21:3f:25:f9:77:16:b9:
         86:da:ee:fb:14:32:ab:d7:49:77:de:51:2f:96:96:b8:5b:34:
         46:b5:26:14:da:48:e8:02:74:b7:ed:ed:ff:38:ed:6c:9d:b1:
         92:e5:68:17:bb:09:4c:95:1d:c5:b8:66:70:4c:4a:35:85:5b:
         98:d7:06:67
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICNCYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0VBQTIxMTAvBgNVBAUTKEZGNDk1MjkzQ0I1RjE1RTVEMTRCQUNDMkRCMTA1MkIy
RTJDODI1QzgwHhcNMjQwODMwMTUyMDU2WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmQxZTM1OC03ZjYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA29NgKJ+e1FqZKV1aCVEUnN74zGct1TPduHXYcJxsRDz1Ch3ptcduAWIedlBh
xejnOOBOeflT2NEzwlGr9V1LRjnAMXiPCpLKHGNRnWu883OqAdP9PJvuScACYK+P
PynL6cKUyaUvmbfPVWQDvxOCsn6F8dpIQ/v2elbTVkIzh9Q3fJ2mDn2eNwu0OWSq
7qjV2hd6HsEmWbyW4BX5jvoAwjpwhkRKQJ+dAQ0hhhnVrAZpPoihaRZPpNVBA0Ly
s1SUZ2NRvfLFPVF3QkTVgWkD82r2lf0D7eybHN+m1EYHNaQBZSkpAjYRcdc8Am6c
xKmM9m+xXOSGx099SD3UrNUc2QIDAQABo4IClTCCApEwHQYDVR0OBBYEFPOvFm0O
TYEeUPtI633YATPjM1qYMB8GA1UdIwQYMBaAFP9JUpPLXxXl0UuswtsQUrLiyCXI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUFBMi9EMkFCMjkyQzFE
OTkxMUUyQkE1MjlBODYwOEIwMkNEMi9fMGxTazh0ZkZlWFJTNnpDMnhCU3N1TElK
Y2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL18wbFNrOHRmRmVYUlM2ekMyeEJTc3VMSUpjZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Q0VBQTIvRDJBQjI5MkMxRDk5MTFFMkJBNTI5QTg2MDhCMDJDRDIvQjIzMDYxODJG
M0Y5MTFFQUI5RDExRDI2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAF01mQwDQYJKoZIhvcNAQELBQADggEBAIc5H0RyAZv+nhTK
AgyQjUqrpYmYoApMDb+CncD8v57MSvSNpamQVjOqVTbx83DspVFo0BHDOJNDmTFS
6rw4MARWrf+Tcv0Bc3bab/jb01TFj/VgJUmdnL0ZCRqk4+vu2U3snBZoTwSt0GoQ
ekD0NpP3lkddLv8MsaXhsPLGoW25aKQLeDOS/Zn/umoWm1EYb6AMGbkHGyTmsbUd
aSzNY5Ev3o64vX70gaxfutTP+Cngwlp6coCv2Gs23xSCkzKFIT8l+XcWuYba7vsU
MqvXSXfeUS+WlrhbNEa1JhTaSOgCdLft7f847WydsZLlaBe7CUyVHcW4ZnBMSjWF
W5jXBmc=
-----END CERTIFICATE-----
Generated at Wed Nov 20 16:00:18 2024 by rpki-client on console-ams.rpki-client.org