Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA5FD/8BDAFEF4528611EE89B00D87C4F9AE02/76817340537011EEB43BD523C4F9AE02.roa
File:                     76817340537011EEB43BD523C4F9AE02.roa (raw, json)
Hash identifier:          fjAiqnZlzJ6N7JpVTeNJ3lQrGwwMm27mRWaT0nsMz+8=
Subject key identifier:   E6:1A:D0:AC:F7:22:30:59:80:18:0A:F2:DE:E3:49:3F:E7:69:34:15
Certificate issuer:       /CN=A91DA5FD/serialNumber=0760CAEF5B72DFE5B04B76DADFFAB867C30A98C7
Certificate serial:       08
Authority key identifier: 07:60:CA:EF:5B:72:DF:E5:B0:4B:76:DA:DF:FA:B8:67:C3:0A:98:C7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B2DK71ty3-WwS3ba3_q4Z8MKmMc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DA5FD/8BDAFEF4528611EE89B00D87C4F9AE02/76817340537011EEB43BD523C4F9AE02.roa
Signing time:             Fri 15 Sep 2023 02:34:58 +0000
ROA not before:           Fri 15 Sep 2023 02:34:58 +0000
ROA not after:            Thu 31 Oct 2024 00:00:00 +0000
asID:                     4768
IP address blocks:        202.36.231.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DA5FD/8BDAFEF4528611EE89B00D87C4F9AE02/B2DK71ty3-WwS3ba3_q4Z8MKmMc.crl
                          rsync://rpki.apnic.net/member_repository/A91DA5FD/8BDAFEF4528611EE89B00D87C4F9AE02/B2DK71ty3-WwS3ba3_q4Z8MKmMc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B2DK71ty3-WwS3ba3_q4Z8MKmMc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Jun 2024 07:47:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8 (0x8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DA5FD/serialNumber=0760CAEF5B72DFE5B04B76DADFFAB867C30A98C7
        Validity
            Not Before: Sep 15 02:34:58 2023 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=6503c2d2-24db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:0b:eb:16:50:4a:ec:d4:1c:a6:e3:57:fc:d1:
                    94:d3:5c:ec:7c:e2:c6:34:6a:e7:58:c0:89:ca:3a:
                    f9:13:f3:71:75:b3:c9:39:c9:92:41:46:ba:52:5b:
                    ee:53:01:d3:6e:02:d4:16:c8:8e:f0:ce:f4:43:b4:
                    ca:8e:aa:fa:c1:63:b4:31:34:36:a5:60:aa:fe:4d:
                    71:84:cd:94:88:9e:49:4b:c2:bc:e2:57:8c:7c:66:
                    65:84:6f:97:ce:a9:fc:26:81:68:cb:29:a6:35:57:
                    e2:05:b1:7b:49:c3:5b:e0:63:b8:bb:38:87:19:8e:
                    97:3e:41:92:ca:58:3d:e4:39:8f:d9:33:3d:d6:66:
                    e5:05:62:d4:f4:26:4a:58:32:c4:c9:5c:ea:6f:de:
                    fd:72:14:d8:88:a4:1c:2d:e2:ea:3e:1e:1a:e9:b1:
                    75:0c:0a:cf:6a:cd:82:d5:d9:73:d7:d2:e0:b8:ee:
                    21:94:32:65:d8:f9:90:59:3e:5f:ae:98:91:08:8b:
                    53:02:15:50:b7:82:02:e7:ee:13:5f:92:3e:bc:51:
                    84:6d:89:84:2f:af:15:b6:f6:f5:19:a8:23:f7:10:
                    55:24:c5:ca:e9:4f:b5:bc:8d:2c:37:2a:27:50:0a:
                    31:3c:4e:09:07:c4:12:d6:c2:c0:8d:f0:4e:a3:ef:
                    5d:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:1A:D0:AC:F7:22:30:59:80:18:0A:F2:DE:E3:49:3F:E7:69:34:15
            X509v3 Authority Key Identifier:
                keyid:07:60:CA:EF:5B:72:DF:E5:B0:4B:76:DA:DF:FA:B8:67:C3:0A:98:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DA5FD/8BDAFEF4528611EE89B00D87C4F9AE02/B2DK71ty3-WwS3ba3_q4Z8MKmMc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B2DK71ty3-WwS3ba3_q4Z8MKmMc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA5FD/8BDAFEF4528611EE89B00D87C4F9AE02/76817340537011EEB43BD523C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.36.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:b8:b7:3f:04:ac:9a:2e:69:66:59:26:f3:9e:2e:2d:a5:94:
         8f:a7:e8:fa:be:88:e2:49:64:ce:60:7e:af:61:06:68:4c:12:
         51:c5:f0:ab:43:f3:b9:54:c6:3e:8c:7f:57:11:8f:c4:02:bb:
         04:42:2e:57:e6:52:fe:9c:49:09:71:9b:26:d9:ac:bb:88:88:
         40:f8:14:81:ce:d8:b9:79:d3:86:8a:9c:62:66:a3:35:15:88:
         5e:bc:7c:c4:ed:a2:49:00:b6:b5:77:f7:bf:cf:52:9f:6f:b3:
         0b:76:19:f9:21:8c:55:fa:a7:3b:fa:ae:7f:e5:4a:ff:93:2c:
         30:40:2b:d9:8c:b3:ca:6c:5d:22:fc:6a:09:f9:b7:96:8b:63:
         cf:96:9c:5a:61:2f:b2:46:0b:4c:ee:5b:00:cd:31:cc:53:86:
         f7:e8:2f:5a:76:53:e3:04:82:24:29:03:50:8b:69:20:fd:8b:
         15:66:f6:7d:ab:cb:72:0a:d6:97:0d:db:3e:46:5e:ff:2d:e5:
         9d:37:82:c0:ea:e2:30:6a:7c:45:c9:57:31:00:29:09:66:60:
         17:71:34:bf:4f:a6:25:21:1c:c7:a8:38:81:00:98:73:e1:e3:
         e3:0b:86:7b:04:64:03:f7:9c:a5:3a:29:24:30:01:52:ab:07:
         31:ef:3a:5e
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBCDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE
QTVGRDExMC8GA1UEBRMoMDc2MENBRUY1QjcyREZFNUIwNEI3NkRBREZGQUI4NjdD
MzBBOThDNzAeFw0yMzA5MTUwMjM0NThaFw0yNDEwMzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY1MDNjMmQyLTI0ZGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDSC+sWUErs1Bym41f80ZTTXOx84sY0audYwInKOvkT83F1s8k5yZJBRrpSW+5T
AdNuAtQWyI7wzvRDtMqOqvrBY7QxNDalYKr+TXGEzZSInklLwrziV4x8ZmWEb5fO
qfwmgWjLKaY1V+IFsXtJw1vgY7i7OIcZjpc+QZLKWD3kOY/ZMz3WZuUFYtT0JkpY
MsTJXOpv3v1yFNiIpBwt4uo+HhrpsXUMCs9qzYLV2XPX0uC47iGUMmXY+ZBZPl+u
mJEIi1MCFVC3ggLn7hNfkj68UYRtiYQvrxW29vUZqCP3EFUkxcrpT7W8jSw3KidQ
CjE8TgkHxBLWwsCN8E6j713JAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQU5hrQrPci
MFmAGAry3uNJP+dpNBUwHwYDVR0jBBgwFoAUB2DK71ty3+WwS3ba3/q4Z8MKmMcw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURBNUZELzhCREFGRUY0NTI4
NjExRUU4OUIwMEQ4N0M0RjlBRTAyL0IyREs3MXR5My1Xd1MzYmEzX3E0WjhNS21N
Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvQjJESzcxdHkzLVd3UzNiYTNfcTRaOE1LbU1jLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
QTVGRC84QkRBRkVGNDUyODYxMUVFODlCMDBEODdDNEY5QUUwMi83NjgxNzM0MDUz
NzAxMUVFQjQzQkQ1MjNDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMok5zANBgkqhkiG9w0BAQsFAAOCAQEAc7i3PwSsmi5pZlkm
854uLaWUj6fo+r6I4klkzmB+r2EGaEwSUcXwq0PzuVTGPox/VxGPxAK7BEIuV+ZS
/pxJCXGbJtmsu4iIQPgUgc7YuXnThoqcYmajNRWIXrx8xO2iSQC2tXf3v89Sn2+z
C3YZ+SGMVfqnO/quf+VK/5MsMEAr2YyzymxdIvxqCfm3lotjz5acWmEvskYLTO5b
AM0xzFOG9+gvWnZT4wSCJCkDUItpIP2LFWb2favLcgrWlw3bPkZe/y3lnTeCwOri
MGp8RclXMQApCWZgF3E0v0+mJSEcx6g4gQCYc+Hj4wuGewRkA/ecpTopJDABUqsH
Me86Xg==
-----END CERTIFICATE-----
Generated at Wed May 29 10:44:02 2024 by rpki-client on console-ams.rpki-client.org