Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D318A/ECFF2AF887E611EE97E6C746C4F9AE02/67CB8C7287E711EEAC6C0B48C4F9AE02.roa
File:                     67CB8C7287E711EEAC6C0B48C4F9AE02.roa (raw, json)
Hash identifier:          F1mmz33PgwMDoRRZC6GtV9seLtgQSAErXHweDotrVWA=
Subject key identifier:   3C:6F:E7:EB:0E:5C:AC:A1:56:8F:2C:60:50:71:C0:49:56:E6:64:A0
Certificate issuer:       /CN=A91D318A/serialNumber=3A1543BDF3772A98D294EB90023803DDDDF11E62
Certificate serial:       C7
Authority key identifier: 3A:15:43:BD:F3:77:2A:98:D2:94:EB:90:02:38:03:DD:DD:F1:1E:62
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OhVDvfN3KpjSlOuQAjgD3d3xHmI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D318A/ECFF2AF887E611EE97E6C746C4F9AE02/67CB8C7287E711EEAC6C0B48C4F9AE02.roa
Signing time:             Tue 19 Nov 2024 04:19:06 +0000
ROA not before:           Tue 19 Nov 2024 04:19:06 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     4768
IP address blocks:        156.69.30.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D318A/ECFF2AF887E611EE97E6C746C4F9AE02/OhVDvfN3KpjSlOuQAjgD3d3xHmI.crl
                          rsync://rpki.apnic.net/member_repository/A91D318A/ECFF2AF887E611EE97E6C746C4F9AE02/OhVDvfN3KpjSlOuQAjgD3d3xHmI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OhVDvfN3KpjSlOuQAjgD3d3xHmI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 02:50:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 199 (0xc7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D318A/serialNumber=3A1543BDF3772A98D294EB90023803DDDDF11E62
        Validity
            Not Before: Nov 19 04:19:06 2024 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=673c11ba-b37c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:6f:4c:6e:84:51:04:8f:a1:73:8f:3f:58:fe:
                    90:7a:bb:b4:0a:fb:00:5a:e1:3a:9f:e6:93:46:1b:
                    41:b9:4d:53:22:ba:2c:72:8c:2a:d7:9d:e6:82:58:
                    39:ca:53:4a:08:82:b7:df:19:3d:17:da:1f:00:51:
                    32:e0:61:66:2d:dc:82:2a:68:f7:2a:1c:26:19:7a:
                    cb:0f:4a:65:e9:37:1f:07:10:88:1f:72:d4:92:92:
                    08:75:5b:ef:0f:71:a6:a9:e0:fe:cd:21:4b:59:75:
                    1f:a3:63:bf:d7:eb:27:40:93:73:8e:08:71:ef:83:
                    92:4a:2b:d5:67:a0:46:cf:69:92:5d:c2:4a:d3:e5:
                    81:44:ab:df:a0:33:d2:59:b6:87:53:c8:28:30:8a:
                    97:a7:63:69:0c:86:28:b9:27:7e:50:0e:4a:62:b8:
                    7f:45:a7:0c:cc:df:97:1a:fa:48:ef:ce:5f:2a:e1:
                    59:10:72:39:34:8a:ae:0a:e1:0e:ca:66:d0:c1:42:
                    44:f0:74:09:81:1f:ab:a5:90:6d:53:2a:d6:56:0a:
                    9c:4a:85:a2:44:31:ea:f2:e9:ba:65:9b:ec:57:87:
                    d0:ea:82:aa:77:df:1b:33:e7:c7:83:72:f0:61:cf:
                    da:fb:93:dd:2e:c3:6d:78:60:21:b7:11:fd:ec:be:
                    25:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:6F:E7:EB:0E:5C:AC:A1:56:8F:2C:60:50:71:C0:49:56:E6:64:A0
            X509v3 Authority Key Identifier:
                keyid:3A:15:43:BD:F3:77:2A:98:D2:94:EB:90:02:38:03:DD:DD:F1:1E:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D318A/ECFF2AF887E611EE97E6C746C4F9AE02/OhVDvfN3KpjSlOuQAjgD3d3xHmI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OhVDvfN3KpjSlOuQAjgD3d3xHmI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D318A/ECFF2AF887E611EE97E6C746C4F9AE02/67CB8C7287E711EEAC6C0B48C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.69.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:95:29:4b:0d:30:ce:5e:4f:c6:bd:a1:1c:4e:e1:e6:58:01:
         36:f8:66:f8:07:f9:57:bf:40:40:28:28:25:dd:ea:9e:fa:e7:
         cd:83:3b:be:e1:d5:bc:c9:d0:7c:29:17:fc:89:77:04:38:3a:
         27:df:d5:65:c5:17:c9:01:e6:8d:90:af:45:a3:71:5d:b5:bf:
         12:8e:c6:2e:45:33:af:66:d7:3a:25:e5:01:29:38:8f:24:b9:
         46:2b:d3:d4:36:67:c7:f5:a6:e9:07:34:a6:7c:07:87:c5:35:
         ae:68:a0:33:75:7d:36:2f:75:af:61:6c:d5:b2:1e:c8:62:60:
         1b:be:5a:c4:ad:ad:57:1f:1a:9a:1b:5c:9e:44:5e:dd:90:33:
         b2:32:c1:f2:34:51:b0:eb:91:0b:44:36:96:0c:5f:9f:4a:0c:
         a7:21:6a:26:d0:ca:59:f4:6f:26:d8:f3:10:5a:d1:da:f6:f7:
         7c:95:a5:d6:fd:b3:b0:15:38:c1:55:31:3d:c6:db:4f:34:94:
         e4:66:eb:3a:25:f2:15:75:d8:71:78:f2:43:25:93:ef:ea:61:
         1c:ac:05:43:09:d8:0f:dd:7a:37:23:9c:ed:ef:3b:45:cb:a9:
         38:4c:e3:55:bc:f0:74:74:40:cb:7b:40:a2:a7:22:cc:30:43:
         38:74:94:c2
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAMcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDMxOEExMTAvBgNVBAUTKDNBMTU0M0JERjM3NzJBOThEMjk0RUI5MDAyMzgwM0RE
RERGMTFFNjIwHhcNMjQxMTE5MDQxOTA2WhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzNjMTFiYS1iMzdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApG9MboRRBI+hc48/WP6Qeru0CvsAWuE6n+aTRhtBuU1TIroscowq153mglg5
ylNKCIK33xk9F9ofAFEy4GFmLdyCKmj3KhwmGXrLD0pl6TcfBxCIH3LUkpIIdVvv
D3GmqeD+zSFLWXUfo2O/1+snQJNzjghx74OSSivVZ6BGz2mSXcJK0+WBRKvfoDPS
WbaHU8goMIqXp2NpDIYouSd+UA5KYrh/RacMzN+XGvpI785fKuFZEHI5NIquCuEO
ymbQwUJE8HQJgR+rpZBtUyrWVgqcSoWiRDHq8um6ZZvsV4fQ6oKqd98bM+fHg3Lw
Yc/a+5PdLsNteGAhtxH97L4ltwIDAQABo4IClTCCApEwHQYDVR0OBBYEFDxv5+sO
XKyhVo8sYFBxwElW5mSgMB8GA1UdIwQYMBaAFDoVQ73zdyqY0pTrkAI4A93d8R5i
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzE4QS9FQ0ZGMkFGODg3
RTYxMUVFOTdFNkM3NDZDNEY5QUUwMi9PaFZEdmZOM0twalNsT3VRQWpnRDNkM3hI
bUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL09oVkR2Zk4zS3BqU2xPdVFBamdEM2QzeEhtSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RDMxOEEvRUNGRjJBRjg4N0U2MTFFRTk3RTZDNzQ2QzRGOUFFMDIvNjdDQjhDNzI4
N0U3MTFFRUFDNkMwQjQ4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBACcRR4wDQYJKoZIhvcNAQELBQADggEBAKWVKUsNMM5eT8a9
oRxO4eZYATb4ZvgH+Ve/QEAoKCXd6p76582DO77h1bzJ0HwpF/yJdwQ4Oiff1WXF
F8kB5o2Qr0WjcV21vxKOxi5FM69m1zol5QEpOI8kuUYr09Q2Z8f1pukHNKZ8B4fF
Na5ooDN1fTYvda9hbNWyHshiYBu+WsStrVcfGpobXJ5EXt2QM7IywfI0UbDrkQtE
NpYMX59KDKchaibQyln0bybY8xBa0dr293yVpdb9s7AVOMFVMT3G2080lORm6zol
8hV12HF48kMlk+/qYRysBUMJ2A/dejcjnO3vO0XLqThM41W88HR0QMt7QKKnIsww
Qzh0lMI=
-----END CERTIFICATE-----
Generated at Thu Nov 21 05:37:17 2024 by rpki-client on console-ams.rpki-client.org