Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/706D3EA4140211EB87D7320FC4F9AE02.roa
File:                     706D3EA4140211EB87D7320FC4F9AE02.roa (raw, json)
Hash identifier:          OR4FotIF7u5M2RKgTvF/yMCSACYQcBm42uVHareeY0s=
Subject key identifier:   F7:3C:40:D3:1F:D1:36:90:ED:08:CA:88:8C:A0:6C:41:78:FC:45:09
Certificate issuer:       /CN=A91CFFA0/serialNumber=ADD9418F0F9B55F3B7376A093DB11DBAD3AEFEC8
Certificate serial:       0DC0
Authority key identifier: AD:D9:41:8F:0F:9B:55:F3:B7:37:6A:09:3D:B1:1D:BA:D3:AE:FE:C8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdlBjw-bVfO3N2oJPbEdutOu_sg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/706D3EA4140211EB87D7320FC4F9AE02.roa
Signing time:             Thu 28 Dec 2023 18:56:49 +0000
ROA not before:           Thu 28 Dec 2023 18:56:49 +0000
ROA not after:            Mon 31 Mar 2025 00:00:00 +0000
asID:                     36224
IP address blocks:        210.57.44.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/rdlBjw-bVfO3N2oJPbEdutOu_sg.crl
                          rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/rdlBjw-bVfO3N2oJPbEdutOu_sg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdlBjw-bVfO3N2oJPbEdutOu_sg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 17:13:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3520 (0xdc0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CFFA0/serialNumber=ADD9418F0F9B55F3B7376A093DB11DBAD3AEFEC8
        Validity
            Not Before: Dec 28 18:56:49 2023 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=658dc4f1-fc42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:ce:59:a0:0f:d5:77:40:b2:8e:1e:07:23:7f:
                    20:08:33:49:97:3b:6c:13:c7:a7:57:6b:c0:9f:e6:
                    57:fa:36:14:60:8d:d5:6a:ed:1c:d3:85:af:ea:ff:
                    dd:96:51:de:b5:26:3c:71:5c:df:ab:6b:69:24:8e:
                    d2:05:cb:97:6e:ec:7d:c9:04:4c:af:20:69:3b:03:
                    c1:5f:83:3b:2d:98:66:40:3a:a5:f8:92:9e:e9:02:
                    e1:13:07:3f:18:2c:e7:c6:b1:fe:70:06:9b:b3:dd:
                    f9:b4:45:09:ca:4b:67:35:8a:f1:9e:f2:8e:bf:61:
                    8f:89:d6:39:f3:33:e1:98:e5:75:b1:7d:fe:09:a3:
                    15:cc:b2:15:c3:e1:73:88:27:b6:31:49:25:92:3e:
                    61:78:09:c4:81:27:d6:13:9b:f0:84:c6:28:7d:6f:
                    4e:f6:c0:66:38:b7:8e:0f:52:95:88:01:b6:ee:70:
                    ff:69:9c:cc:1c:7f:77:46:10:0e:68:d1:53:e6:a3:
                    c9:0e:29:e1:bb:83:5a:8a:01:5e:10:6b:c9:96:10:
                    76:30:8a:9e:45:6f:12:1d:c9:de:cc:87:29:97:95:
                    e9:0d:42:12:98:25:ed:ab:b4:3d:e4:30:74:6c:5b:
                    6b:ab:f7:e8:5b:39:3e:58:b2:0a:48:b5:28:46:69:
                    0b:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:3C:40:D3:1F:D1:36:90:ED:08:CA:88:8C:A0:6C:41:78:FC:45:09
            X509v3 Authority Key Identifier:
                keyid:AD:D9:41:8F:0F:9B:55:F3:B7:37:6A:09:3D:B1:1D:BA:D3:AE:FE:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/rdlBjw-bVfO3N2oJPbEdutOu_sg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdlBjw-bVfO3N2oJPbEdutOu_sg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/706D3EA4140211EB87D7320FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.57.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:ea:1d:04:00:a7:ee:0d:b3:ab:76:90:1e:bd:ca:55:95:46:
         a8:71:17:03:1d:09:7d:9f:62:76:a4:09:4c:5e:da:05:7c:3b:
         49:df:bc:09:e1:ef:9a:d9:cd:eb:bd:34:dc:eb:c9:4c:ee:d9:
         8c:73:af:6b:35:d1:40:07:8d:ca:2f:f3:83:1a:a3:fe:7f:dc:
         80:21:ab:23:f0:eb:1e:df:3d:7f:e3:4c:e3:b6:37:10:fa:b6:
         f5:a3:4e:2a:07:aa:94:db:38:79:21:5a:80:17:db:cc:80:e7:
         72:4e:34:27:1f:aa:42:92:e5:02:c4:99:c1:a9:00:cb:76:95:
         64:3f:48:1c:41:6a:cc:6b:1e:d8:05:e2:c7:81:46:cf:f0:42:
         95:5f:f5:37:d2:6b:72:a2:7b:80:f1:fa:b9:12:d9:5a:17:b5:
         a5:0a:10:15:8f:17:d4:62:3a:85:bc:15:7b:68:b3:2f:09:12:
         73:b8:a8:63:c9:21:79:f8:cb:0a:c1:35:fa:f8:73:82:62:89:
         66:d1:cf:3d:c8:a6:4a:f6:ab:af:e0:c9:19:0c:76:de:d2:15:
         ac:1f:43:58:1b:9a:af:9a:23:cd:09:06:fe:43:6d:71:74:61:
         02:9d:dc:8c:db:e9:36:16:78:8b:55:10:68:40:19:87:16:de:
         2d:85:bc:f9
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICDcAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0ZGQTAxMTAvBgNVBAUTKEFERDk0MThGMEY5QjU1RjNCNzM3NkEwOTNEQjExREJB
RDNBRUZFQzgwHhcNMjMxMjI4MTg1NjQ5WhcNMjUwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NThkYzRmMS1mYzQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA9c5ZoA/Vd0Cyjh4HI38gCDNJlztsE8enV2vAn+ZX+jYUYI3Vau0c04Wv6v/d
llHetSY8cVzfq2tpJI7SBcuXbux9yQRMryBpOwPBX4M7LZhmQDql+JKe6QLhEwc/
GCznxrH+cAabs935tEUJyktnNYrxnvKOv2GPidY58zPhmOV1sX3+CaMVzLIVw+Fz
iCe2MUklkj5heAnEgSfWE5vwhMYofW9O9sBmOLeOD1KViAG27nD/aZzMHH93RhAO
aNFT5qPJDinhu4NaigFeEGvJlhB2MIqeRW8SHcnezIcpl5XpDUISmCXtq7Q95DB0
bFtrq/foWzk+WLIKSLUoRmkLOQIDAQABo4IClTCCApEwHQYDVR0OBBYEFPc8QNMf
0TaQ7QjKiIygbEF4/EUJMB8GA1UdIwQYMBaAFK3ZQY8Pm1XztzdqCT2xHbrTrv7I
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkZBMC8xRDY2RDQ4NkQ4
Q0IxMUU5QkFFMjREMjFDNEY5QUUwMi9yZGxCanctYlZmTzNOMm9KUGJFZHV0T3Vf
c2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3JkbEJqdy1iVmZPM04yb0pQYkVkdXRPdV9zZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Q0ZGQTAvMUQ2NkQ0ODZEOENCMTFFOUJBRTI0RDIxQzRGOUFFMDIvNzA2RDNFQTQx
NDAyMTFFQjg3RDczMjBGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADSOSwwDQYJKoZIhvcNAQELBQADggEBAELqHQQAp+4Ns6t2
kB69ylWVRqhxFwMdCX2fYnakCUxe2gV8O0nfvAnh75rZzeu9NNzryUzu2Yxzr2s1
0UAHjcov84Mao/5/3IAhqyPw6x7fPX/jTOO2NxD6tvWjTioHqpTbOHkhWoAX28yA
53JONCcfqkKS5QLEmcGpAMt2lWQ/SBxBasxrHtgF4seBRs/wQpVf9TfSa3Kie4Dx
+rkS2VoXtaUKEBWPF9RiOoW8FXtosy8JEnO4qGPJIXn4ywrBNfr4c4JiiWbRzz3I
pkr2q6/gyRkMdt7SFawfQ1gbmq+aI80JBv5DbXF0YQKd3Izb6TYWeItVEGhAGYcW
3i2FvPk=
-----END CERTIFICATE-----
Generated at Wed Nov 20 19:06:07 2024 by rpki-client on console-ams.rpki-client.org