Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/1A7632424DA111ECA1180F87C4F9AE02.roa
File:                     1A7632424DA111ECA1180F87C4F9AE02.roa (raw, json)
Hash identifier:          uiQHUpFXfMyV6JWHHfyojaNEZ38IK1RSRYCfDGxO9D0=
Subject key identifier:   7E:DF:73:F1:86:67:E7:0E:94:1B:6B:20:74:63:6C:82:AE:B3:1F:5B
Certificate issuer:       /CN=A91DEDFD/serialNumber=F45321D8785B8897D5A834B90EAB910C55909D85
Certificate serial:       0805
Authority key identifier: F4:53:21:D8:78:5B:88:97:D5:A8:34:B9:0E:AB:91:0C:55:90:9D:85
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FMh2HhbiJfVqDS5DquRDFWQnYU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/1A7632424DA111ECA1180F87C4F9AE02.roa
Signing time:             Sun 02 Jun 2024 22:29:42 +0000
ROA not before:           Sun 02 Jun 2024 22:29:42 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     149030
IP address blocks:        2404:c140:210::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.crl
                          rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FMh2HhbiJfVqDS5DquRDFWQnYU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:29:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2053 (0x805)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DEDFD/serialNumber=F45321D8785B8897D5A834B90EAB910C55909D85
        Validity
            Not Before: Jun  2 22:29:42 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=665cf256-6387
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:0b:12:f1:e7:86:19:83:3e:b9:6b:48:13:ea:
                    59:21:e0:a6:2d:05:23:98:4a:01:05:dd:96:e7:ca:
                    ee:49:6f:23:f0:bc:b7:fe:44:96:c7:68:3d:95:d5:
                    3f:3f:96:ee:0a:ef:6a:c5:29:83:c6:34:1e:2a:e2:
                    6c:28:b0:13:80:5c:bd:06:4b:4d:8a:4b:e9:78:05:
                    23:fd:89:fa:5f:6d:01:08:ca:07:00:b3:19:80:64:
                    36:54:05:7a:51:cf:6e:9e:26:c0:7c:2f:f0:da:fd:
                    b1:74:dc:28:50:0a:8a:60:de:48:a8:38:53:cc:2c:
                    c4:78:8c:36:b1:18:38:8c:33:77:9b:2b:ab:51:2e:
                    89:6b:1f:18:3f:52:4a:bb:65:d6:99:c3:5e:84:25:
                    2d:4c:1e:bc:e9:b9:9d:19:1e:ff:12:36:b8:4e:eb:
                    83:b8:e7:5f:6a:9c:06:4a:9b:b7:b6:42:a2:92:a7:
                    df:c4:d8:85:a6:b4:48:a8:f5:49:5c:a3:c3:20:4e:
                    36:f8:3a:8e:23:ff:dd:8c:05:4d:db:11:7a:a1:bb:
                    97:72:11:b2:f5:bc:48:c2:de:8f:e0:3a:26:30:7b:
                    b7:25:eb:d4:cb:14:d8:20:cb:52:8d:4d:eb:78:b7:
                    13:fb:fe:f8:01:69:0e:d4:2f:2e:33:ee:b8:70:b2:
                    f5:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:DF:73:F1:86:67:E7:0E:94:1B:6B:20:74:63:6C:82:AE:B3:1F:5B
            X509v3 Authority Key Identifier:
                keyid:F4:53:21:D8:78:5B:88:97:D5:A8:34:B9:0E:AB:91:0C:55:90:9D:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FMh2HhbiJfVqDS5DquRDFWQnYU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/1A7632424DA111ECA1180F87C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:c140:210::/44

    Signature Algorithm: sha256WithRSAEncryption
         a0:31:24:3a:ee:54:eb:33:6e:d3:47:35:8e:56:dc:46:5a:db:
         a6:c8:4a:c3:d9:68:a7:75:2c:9b:32:93:7b:91:db:17:0b:1a:
         ee:f4:43:22:2e:91:b6:98:79:ab:fa:5d:21:79:30:d5:e5:97:
         08:20:58:2d:82:9d:b2:eb:96:9b:c1:c7:13:f9:27:59:2d:ae:
         8a:83:5b:0c:15:fc:42:d3:6a:74:77:ae:3d:df:29:6b:8c:a3:
         b2:2d:fc:26:f4:11:74:f6:8c:61:f7:01:35:2a:18:68:3b:5f:
         ef:6a:9d:4c:fc:4c:37:25:ba:8d:ca:7c:e2:1e:d1:1c:67:74:
         d4:07:33:2b:fe:7b:f1:cb:77:cd:e4:e7:e6:37:f1:8c:e0:11:
         e5:e7:33:21:e9:2f:40:5c:4e:0f:cf:0d:da:15:a8:28:eb:20:
         41:36:87:a1:13:6c:b7:a3:10:59:ff:dc:da:4f:8b:f5:a6:b4:
         5d:f4:54:f2:2b:c3:3f:1e:90:da:aa:c7:b1:db:5a:9a:dd:91:
         ce:f8:e0:90:05:50:b1:b5:61:0b:f5:4d:70:42:18:7f:0d:dd:
         de:ce:34:b0:2e:52:8b:b4:b5:5d:93:ce:92:45:52:8e:56:85:
         ce:25:5c:23:64:63:4c:21:91:f1:bd:6b:bb:65:84:91:72:ab:
         43:90:8a:b1
-----BEGIN CERTIFICATE-----
MIIFdDCCBFygAwIBAgICCAUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REVERkQxMTAvBgNVBAUTKEY0NTMyMUQ4Nzg1Qjg4OTdENUE4MzRCOTBFQUI5MTBD
NTU5MDlEODUwHhcNMjQwNjAyMjIyOTQyWhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NjVjZjI1Ni02Mzg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxAsS8eeGGYM+uWtIE+pZIeCmLQUjmEoBBd2W58ruSW8j8Ly3/kSWx2g9ldU/
P5buCu9qxSmDxjQeKuJsKLATgFy9BktNikvpeAUj/Yn6X20BCMoHALMZgGQ2VAV6
Uc9unibAfC/w2v2xdNwoUAqKYN5IqDhTzCzEeIw2sRg4jDN3myurUS6Jax8YP1JK
u2XWmcNehCUtTB686bmdGR7/Eja4TuuDuOdfapwGSpu3tkKikqffxNiFprRIqPVJ
XKPDIE42+DqOI//djAVN2xF6obuXchGy9bxIwt6P4DomMHu3JevUyxTYIMtSjU3r
eLcT+/74AWkO1C8uM+64cLL1YwIDAQABo4ICmDCCApQwHQYDVR0OBBYEFH7fc/GG
Z+cOlBtrIHRjbIKusx9bMB8GA1UdIwQYMBaAFPRTIdh4W4iX1ag0uQ6rkQxVkJ2F
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERURGRC81NDUzNkIzRUJD
ODgxMUVBODhFRjNENDlDNEY5QUUwMi85Rk1oMkhoYmlKZlZxRFM1RHF1UkRGV1Fu
WVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzlGTWgySGhiaUpmVnFEUzVEcXVSREZXUW5ZVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
REVERkQvNTQ1MzZCM0VCQzg4MTFFQTg4RUYzRDQ5QzRGOUFFMDIvMUE3NjMyNDI0
REExMTFFQ0ExMTgwRjg3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E
EzARMA8EAgACMAkDBwQkBMFAAhAwDQYJKoZIhvcNAQELBQADggEBAKAxJDruVOsz
btNHNY5W3EZa26bISsPZaKd1LJsyk3uR2xcLGu70QyIukbaYeav6XSF5MNXllwgg
WC2CnbLrlpvBxxP5J1ktroqDWwwV/ELTanR3rj3fKWuMo7It/Cb0EXT2jGH3ATUq
GGg7X+9qnUz8TDcluo3KfOIe0RxndNQHMyv+e/HLd83k5+Y38YzgEeXnMyHpL0Bc
Tg/PDdoVqCjrIEE2h6ETbLejEFn/3NpPi/WmtF30VPIrwz8ekNqqx7HbWprdkc74
4JAFULG1YQv1TXBCGH8N3d7ONLAuUou0tV2TzpJFUo5Whc4lXCNkY0whkfG9a7tl
hJFyq0OQirE=
-----END CERTIFICATE-----
Generated at Fri Nov 22 22:24:13 2024 by rpki-client on console-fra.rpki-client.org