Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/BB9C14F6AA5511EB86F34077C4F9AE02.roa
File:                     BB9C14F6AA5511EB86F34077C4F9AE02.roa (raw, json)
Hash identifier:          Nm29k/y9vIV+vz0MYGZmxMrY5VCpZ8ev2AQsl+lZr3w=
Subject key identifier:   41:E6:10:FA:C3:08:4D:73:89:7E:D8:E7:64:8F:E3:67:11:9B:1E:AA
Certificate issuer:       /CN=A91DC31B/serialNumber=8B8AD5CA1C3E8B8CF468B5F496A91ABB0E48CFA8
Certificate serial:       05D3
Authority key identifier: 8B:8A:D5:CA:1C:3E:8B:8C:F4:68:B5:F4:96:A9:1A:BB:0E:48:CF:A8
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4rVyhw-i4z0aLX0lqkauw5Iz6g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/BB9C14F6AA5511EB86F34077C4F9AE02.roa
Signing time:             Sat 13 Jan 2024 00:11:49 +0000
ROA not before:           Sat 13 Jan 2024 00:11:49 +0000
ROA not after:            Mon 31 Mar 2025 00:00:00 +0000
asID:                     24112
IP address blocks:        166.81.6.0/24 maxlen: 24
                          166.81.62.0/24 maxlen: 24
                          166.81.63.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.crl
                          rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4rVyhw-i4z0aLX0lqkauw5Iz6g.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 19:51:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1491 (0x5d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DC31B/serialNumber=8B8AD5CA1C3E8B8CF468B5F496A91ABB0E48CFA8
        Validity
            Not Before: Jan 13 00:11:49 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=65a1d544-659d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:f7:c6:1f:b9:1a:b3:ac:53:35:63:2a:b2:af:
                    4b:6b:77:f2:ef:1d:36:10:b8:b0:e1:f8:cc:a4:b4:
                    1c:55:41:ee:d8:67:7c:87:e9:02:21:6e:eb:c6:6c:
                    4f:f8:8e:b3:9d:4d:a2:89:2b:47:93:df:f7:d7:2b:
                    02:fe:26:e5:c4:90:b1:46:7f:41:a6:0e:c4:20:6c:
                    0f:10:40:d4:c0:4f:b0:04:9e:a0:ce:e9:d5:a0:7f:
                    18:aa:62:7d:a8:b8:8f:6c:88:27:81:da:b3:85:de:
                    fd:ff:1a:50:42:a4:55:5c:c0:b6:0e:7a:96:de:89:
                    32:16:80:19:09:c8:37:a4:f3:fd:fb:49:45:4f:b5:
                    21:83:89:55:55:e0:47:73:6d:dd:c1:c3:09:90:b6:
                    7d:80:1a:a7:ff:7d:3b:c0:11:9c:b5:aa:61:f9:7b:
                    f1:48:90:ff:0f:82:6b:49:93:7f:e4:e1:67:96:23:
                    8b:44:f5:b8:0d:14:ea:3f:f4:b4:af:14:5f:7a:9d:
                    a1:2b:8b:a3:eb:63:73:1d:fd:e5:c2:d6:73:e9:e7:
                    f0:a6:23:3f:aa:7a:87:51:4f:8a:40:b6:aa:81:ae:
                    95:a9:3f:a7:55:39:94:36:33:73:40:37:33:51:fd:
                    3a:c9:32:b1:79:21:85:bb:26:9f:7f:a5:57:9a:ee:
                    4f:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:E6:10:FA:C3:08:4D:73:89:7E:D8:E7:64:8F:E3:67:11:9B:1E:AA
            X509v3 Authority Key Identifier:
                keyid:8B:8A:D5:CA:1C:3E:8B:8C:F4:68:B5:F4:96:A9:1A:BB:0E:48:CF:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4rVyhw-i4z0aLX0lqkauw5Iz6g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/BB9C14F6AA5511EB86F34077C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.81.6.0/24
                  166.81.62.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2b:9b:99:fd:26:8c:6d:8f:b9:6e:a1:df:e2:fb:c0:fa:78:db:
         cd:03:97:e4:21:6f:9a:08:6c:e0:4a:18:53:a3:9c:87:59:6c:
         4b:8a:46:bc:5d:4f:52:88:5e:2e:09:98:d3:eb:b5:6e:47:c5:
         6b:2a:b3:92:41:6b:e2:15:3d:33:2b:33:3a:9b:93:e6:b7:b2:
         37:c3:d0:6b:8c:66:e4:d0:27:c1:f8:92:dc:58:e2:b8:61:f7:
         80:86:3e:34:f3:03:26:b9:e3:32:71:e6:69:0e:c3:e8:cd:b9:
         1c:45:fb:56:ce:41:f1:a6:9d:fe:42:91:45:d2:0b:26:6d:da:
         7a:94:37:36:0b:10:05:3b:85:6c:ba:41:58:13:17:ab:af:7d:
         18:43:1d:92:ea:de:29:5e:6a:46:c3:e4:eb:59:d2:a0:5b:c3:
         58:16:22:a8:1a:e9:b9:ef:d7:cd:f2:89:29:38:3b:3c:e4:b0:
         1c:48:e2:0d:80:12:6b:21:33:65:c5:69:a7:13:3d:7b:55:de:
         6d:65:c6:5a:7f:48:a2:6b:0f:be:e5:2a:ca:6c:63:f9:86:d9:
         f7:a4:97:73:cd:c9:60:56:77:92:a5:08:db:d9:a9:73:31:6f:
         b0:f8:cb:aa:33:bb:fd:2f:f8:de:ea:d4:2c:8e:72:9c:49:31:
         f1:78:2c:d6
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICBdMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REMzMUIxMTAvBgNVBAUTKDhCOEFENUNBMUMzRThCOENGNDY4QjVGNDk2QTkxQUJC
MEU0OENGQTgwHhcNMjQwMTEzMDAxMTQ5WhcNMjUwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NWExZDU0NC02NTlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAo/fGH7kas6xTNWMqsq9La3fy7x02ELiw4fjMpLQcVUHu2Gd8h+kCIW7rxmxP
+I6znU2iiStHk9/31ysC/iblxJCxRn9Bpg7EIGwPEEDUwE+wBJ6gzunVoH8YqmJ9
qLiPbIgngdqzhd79/xpQQqRVXMC2DnqW3okyFoAZCcg3pPP9+0lFT7Uhg4lVVeBH
c23dwcMJkLZ9gBqn/307wBGctaph+XvxSJD/D4JrSZN/5OFnliOLRPW4DRTqP/S0
rxRfep2hK4uj62NzHf3lwtZz6efwpiM/qnqHUU+KQLaqga6VqT+nVTmUNjNzQDcz
Uf06yTKxeSGFuyaff6VXmu5PEwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFEHmEPrD
CE1ziX7Y52SP42cRmx6qMB8GA1UdIwQYMBaAFIuK1cocPouM9Gi19JapGrsOSM+o
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzMxQi9EMEVDQ0Q0ODg5
M0QxMUVCOTE2REYwMjJDNEY5QUUwMi9pNHJWeWh3LWk0ejBhTFgwbHFrYXV3NUl6
NmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2k0clZ5aHctaTR6MGFMWDBscWthdXc1SXo2Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
REMzMUIvRDBFQ0NENDg4OTNEMTFFQjkxNkRGMDIyQzRGOUFFMDIvQkI5QzE0RjZB
QTU1MTFFQjg2RjM0MDc3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBACmUQYDBAGmUT4wDQYJKoZIhvcNAQELBQADggEBACubmf0m
jG2PuW6h3+L7wPp4280Dl+Qhb5oIbOBKGFOjnIdZbEuKRrxdT1KIXi4JmNPrtW5H
xWsqs5JBa+IVPTMrMzqbk+a3sjfD0GuMZuTQJ8H4ktxY4rhh94CGPjTzAya54zJx
5mkOw+jNuRxF+1bOQfGmnf5CkUXSCyZt2nqUNzYLEAU7hWy6QVgTF6uvfRhDHZLq
3ileakbD5OtZ0qBbw1gWIqga6bnv183yiSk4OzzksBxI4g2AEmshM2XFaacTPXtV
3m1lxlp/SKJrD77lKspsY/mG2fekl3PNyWBWd5KlCNvZqXMxb7D4y6ozu/0v+N7q
1CyOcpxJMfF4LNY=
-----END CERTIFICATE-----
Generated at Sun May 19 01:47:16 2024 by rpki-client on console-ams.rpki-client.org