Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D615F/F312CA26A63F11EA8D06824AC4F9AE02/193128AAD15D11EE8BD5C02BC4F9AE02.roa
File:                     193128AAD15D11EE8BD5C02BC4F9AE02.roa (raw, json)
Hash identifier:          s7kmGV11LpR2uOYTQWsw6P4Bq6z4n3l1h0bh9iKPVCY=
Subject key identifier:   EE:75:EE:DD:28:1A:99:EA:D2:91:AF:1B:E8:70:CA:9C:D5:77:CF:E7
Certificate issuer:       /CN=A91D615F/serialNumber=4C70E02032EA59C2AFD541A1870D74B040D1B6A2
Certificate serial:       0822
Authority key identifier: 4C:70:E0:20:32:EA:59:C2:AF:D5:41:A1:87:0D:74:B0:40:D1:B6:A2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/THDgIDLqWcKv1UGhhw10sEDRtqI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D615F/F312CA26A63F11EA8D06824AC4F9AE02/193128AAD15D11EE8BD5C02BC4F9AE02.roa
Signing time:             Thu 22 Feb 2024 08:33:48 +0000
ROA not before:           Thu 22 Feb 2024 08:33:48 +0000
ROA not after:            Thu 01 May 2025 00:00:00 +0000
asID:                     45593
IP address blocks:        112.78.111.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D615F/F312CA26A63F11EA8D06824AC4F9AE02/THDgIDLqWcKv1UGhhw10sEDRtqI.crl
                          rsync://rpki.apnic.net/member_repository/A91D615F/F312CA26A63F11EA8D06824AC4F9AE02/THDgIDLqWcKv1UGhhw10sEDRtqI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/THDgIDLqWcKv1UGhhw10sEDRtqI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Jun 2024 22:03:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2082 (0x822)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D615F/serialNumber=4C70E02032EA59C2AFD541A1870D74B040D1B6A2
        Validity
            Not Before: Feb 22 08:33:48 2024 GMT
            Not After : May  1 00:00:00 2025 GMT
        Subject: CN=65d706ec-fa85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:07:46:1a:1c:c7:07:43:06:5e:14:21:e8:d9:
                    92:3b:1a:a6:9e:f6:2a:2a:5a:78:3b:07:b1:3f:a7:
                    f1:34:f1:c0:ee:74:e5:88:50:e1:95:89:e6:3a:d5:
                    13:f3:f2:d6:34:22:6d:81:75:92:18:2e:84:1f:c2:
                    94:2c:56:94:3b:9f:eb:54:9c:b7:f7:7a:f1:77:bc:
                    d4:f4:a2:08:56:93:ce:00:54:53:13:3c:aa:9b:b5:
                    5c:d4:b8:13:84:01:06:4d:97:07:65:84:5e:4f:5e:
                    8f:d9:fe:b4:a5:e7:e4:0f:ac:8a:92:44:24:cc:94:
                    b3:e7:77:06:c4:d4:b6:85:ef:d4:14:6f:5f:38:11:
                    75:1a:49:d4:7e:db:51:09:fb:37:bd:36:54:90:67:
                    26:0f:97:c3:ed:af:65:1d:ca:17:46:2a:55:f6:95:
                    17:04:34:92:65:37:9d:7a:94:18:49:be:c6:e4:f5:
                    49:a2:7e:14:ca:25:b2:af:89:a1:82:19:b6:d5:2e:
                    eb:aa:cd:31:cb:10:bd:12:5d:d1:ed:d2:a5:a9:ba:
                    e1:ac:da:c3:b5:3a:a4:f8:44:30:50:ab:36:1a:8d:
                    69:bb:35:34:88:f7:7f:66:3c:44:56:6b:94:33:60:
                    50:ec:03:77:a2:76:7c:61:a0:cd:ac:ef:67:89:cd:
                    b1:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:75:EE:DD:28:1A:99:EA:D2:91:AF:1B:E8:70:CA:9C:D5:77:CF:E7
            X509v3 Authority Key Identifier:
                keyid:4C:70:E0:20:32:EA:59:C2:AF:D5:41:A1:87:0D:74:B0:40:D1:B6:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D615F/F312CA26A63F11EA8D06824AC4F9AE02/THDgIDLqWcKv1UGhhw10sEDRtqI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/THDgIDLqWcKv1UGhhw10sEDRtqI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D615F/F312CA26A63F11EA8D06824AC4F9AE02/193128AAD15D11EE8BD5C02BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.78.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:e0:31:fb:db:aa:a6:d2:5b:76:14:fa:f8:27:0d:5e:7d:50:
         b1:43:de:c6:ae:60:ad:81:a6:7f:fe:62:d2:b1:13:9a:88:4b:
         39:ed:0a:ee:8b:55:25:d0:d8:04:71:77:3e:d2:4f:db:b6:e9:
         9c:18:ef:85:04:6f:c4:e2:25:e6:bc:fd:99:47:3f:bc:5c:75:
         69:a1:84:84:d5:a4:ea:f6:49:2f:b7:58:c4:00:4b:76:73:7e:
         0a:99:d7:bf:5f:f1:82:63:00:00:10:01:2c:9b:e6:a6:e1:ce:
         d1:52:6d:33:19:55:4c:7f:8f:89:2f:08:bd:41:4f:fd:8f:f6:
         3d:2f:a6:ca:03:24:a8:26:52:31:b2:23:e1:33:c4:ea:ad:ae:
         b5:03:50:7e:ec:f2:79:05:e3:57:c5:a0:d8:08:82:87:6c:8b:
         50:05:24:bc:31:f4:90:cf:c6:a4:e4:8c:fc:51:a9:86:db:c7:
         58:b6:c2:23:49:59:05:c0:ec:a3:6f:db:67:64:8e:67:e3:b3:
         3e:ea:e7:23:2a:df:bd:9b:b8:f7:31:23:06:20:2f:d8:5e:28:
         70:4d:df:c3:16:ff:9a:2b:94:86:5e:93:03:51:02:8d:9a:49:
         b6:49:6f:1a:6f:f9:55:f5:4e:23:0f:18:a2:58:23:24:49:b8:
         93:09:9c:49
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICCCIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDYxNUYxMTAvBgNVBAUTKDRDNzBFMDIwMzJFQTU5QzJBRkQ1NDFBMTg3MEQ3NEIw
NDBEMUI2QTIwHhcNMjQwMjIyMDgzMzQ4WhcNMjUwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NWQ3MDZlYy1mYTg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxgdGGhzHB0MGXhQh6NmSOxqmnvYqKlp4OwexP6fxNPHA7nTliFDhlYnmOtUT
8/LWNCJtgXWSGC6EH8KULFaUO5/rVJy393rxd7zU9KIIVpPOAFRTEzyqm7Vc1LgT
hAEGTZcHZYReT16P2f60pefkD6yKkkQkzJSz53cGxNS2he/UFG9fOBF1GknUfttR
Cfs3vTZUkGcmD5fD7a9lHcoXRipV9pUXBDSSZTedepQYSb7G5PVJon4UyiWyr4mh
ghm21S7rqs0xyxC9El3R7dKlqbrhrNrDtTqk+EQwUKs2Go1puzU0iPd/ZjxEVmuU
M2BQ7AN3onZ8YaDNrO9nic2xDQIDAQABo4IClTCCApEwHQYDVR0OBBYEFO517t0o
Gpnq0pGvG+hwypzVd8/nMB8GA1UdIwQYMBaAFExw4CAy6lnCr9VBoYcNdLBA0bai
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjE1Ri9GMzEyQ0EyNkE2
M0YxMUVBOEQwNjgyNEFDNEY5QUUwMi9USERnSURMcVdjS3YxVUdoaHcxMHNFRFJ0
cUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1RIRGdJRExxV2NLdjFVR2hodzEwc0VEUnRxSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RDYxNUYvRjMxMkNBMjZBNjNGMTFFQThEMDY4MjRBQzRGOUFFMDIvMTkzMTI4QUFE
MTVEMTFFRThCRDVDMDJCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABwTm8wDQYJKoZIhvcNAQELBQADggEBAGfgMfvbqqbSW3YU
+vgnDV59ULFD3sauYK2Bpn/+YtKxE5qISzntCu6LVSXQ2ARxdz7ST9u26ZwY74UE
b8TiJea8/ZlHP7xcdWmhhITVpOr2SS+3WMQAS3ZzfgqZ179f8YJjAAAQASyb5qbh
ztFSbTMZVUx/j4kvCL1BT/2P9j0vpsoDJKgmUjGyI+EzxOqtrrUDUH7s8nkF41fF
oNgIgodsi1AFJLwx9JDPxqTkjPxRqYbbx1i2wiNJWQXA7KNv22dkjmfjsz7q5yMq
372buPcxIwYgL9heKHBN38MW/5orlIZekwNRAo2aSbZJbxpv+VX1TiMPGKJYIyRJ
uJMJnEk=
-----END CERTIFICATE-----
Generated at Sun Jun 2 23:05:09 2024 by rpki-client on console-fra.rpki-client.org