Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/DB3E929E199611EF9EBFBF4AC4F9AE02.roa
File:                     DB3E929E199611EF9EBFBF4AC4F9AE02.roa (raw, json)
Hash identifier:          /wWuVpCPNe4CJwTIQ7NxUOlPcFrAGBgP0omithp9fcQ=
Subject key identifier:   2F:26:BC:A2:64:A1:4B:D9:40:BA:5C:3A:83:C0:D8:34:F1:1C:C3:B9
Certificate issuer:       /CN=A91DFB70/serialNumber=5D2DD154B5DCE21FB786C526DBDEF1B045928AB8
Certificate serial:       26C7
Authority key identifier: 5D:2D:D1:54:B5:DC:E2:1F:B7:86:C5:26:DB:DE:F1:B0:45:92:8A:B8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/DB3E929E199611EF9EBFBF4AC4F9AE02.roa
Signing time:             Fri 24 May 2024 06:28:39 +0000
ROA not before:           Fri 24 May 2024 06:28:39 +0000
ROA not after:            Wed 28 May 2025 00:00:00 +0000
asID:                     132716
IP address blocks:        203.213.201.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.crl
                          rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Dec 2024 15:45:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9927 (0x26c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DFB70/serialNumber=5D2DD154B5DCE21FB786C526DBDEF1B045928AB8
        Validity
            Not Before: May 24 06:28:39 2024 GMT
            Not After : May 28 00:00:00 2025 GMT
        Subject: CN=66503396-64c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:fb:29:aa:78:1c:2f:0f:d8:07:d4:4f:0e:ba:
                    b3:c5:a5:96:5c:ea:22:69:6e:0d:88:d2:d8:53:8d:
                    d8:77:6e:e8:c4:3f:6d:e4:09:ad:4d:18:67:38:0e:
                    4c:57:dd:6e:15:6e:39:c4:52:87:3a:54:eb:5b:88:
                    f3:f0:77:45:36:1f:23:2b:1d:5f:d7:c8:4a:8a:03:
                    11:4c:67:4f:f4:20:e0:38:97:af:6f:c2:a2:1c:58:
                    0b:2d:4a:5b:8f:17:cf:4c:c5:1c:a1:a6:1d:cc:8f:
                    ee:c6:c2:cd:bc:6b:cc:d7:bd:ba:a0:5a:87:87:79:
                    45:30:a2:44:08:1c:4b:c8:ec:22:ca:57:1c:3f:74:
                    fe:40:70:d2:17:35:1c:68:aa:70:5e:f6:8b:61:7e:
                    e5:98:00:42:83:8c:16:24:fb:31:20:5c:bf:41:75:
                    8e:32:0d:e6:67:0f:48:b7:2e:f9:e3:60:75:19:c4:
                    3c:84:2c:e7:cc:17:c1:e6:e7:28:e2:ee:e6:87:60:
                    26:f8:44:64:28:27:44:20:c0:f8:e5:6d:af:e0:fb:
                    ca:fe:ff:d4:0c:bf:93:89:56:70:72:01:2c:3c:7c:
                    70:72:d2:08:3f:d1:f1:32:96:20:30:b4:37:d9:be:
                    24:d7:25:e8:3f:ec:86:cf:e5:6d:f3:5f:c1:36:9c:
                    24:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:26:BC:A2:64:A1:4B:D9:40:BA:5C:3A:83:C0:D8:34:F1:1C:C3:B9
            X509v3 Authority Key Identifier:
                keyid:5D:2D:D1:54:B5:DC:E2:1F:B7:86:C5:26:DB:DE:F1:B0:45:92:8A:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/DB3E929E199611EF9EBFBF4AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.213.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         be:90:40:c7:70:cc:b3:d0:a9:f8:59:fa:20:3e:42:26:c8:d2:
         19:62:eb:70:ca:89:89:75:02:60:4f:42:b3:c1:f1:6c:21:12:
         04:cd:06:32:3c:06:3b:00:fb:55:f3:9d:f5:35:1e:37:0c:19:
         e9:5c:a8:b3:b9:4a:7f:cc:fe:ba:07:fb:f1:3d:da:2c:e1:ba:
         3c:d3:a9:5b:bf:76:a9:c4:51:11:4a:26:7e:3a:d4:b5:0d:d5:
         9a:c9:a3:c3:02:3f:ca:b3:a1:6f:59:d3:cd:c5:5d:42:47:4c:
         ae:ce:e0:bf:36:6c:7e:c8:01:1c:7c:25:4a:74:ba:57:72:e8:
         e8:cb:42:9c:e0:67:d3:9a:ab:8c:6f:33:97:b6:01:eb:52:b3:
         a6:da:da:37:b2:17:12:f1:97:fe:32:4c:e0:0c:13:dd:cf:f9:
         e9:34:3b:b1:06:8f:0d:66:45:0e:48:e0:2b:bc:2c:92:7b:97:
         88:fb:79:55:1a:44:4b:00:2f:e8:17:df:67:95:9d:ce:e7:a3:
         48:a7:67:94:78:5a:52:59:cb:a3:d0:67:19:f0:de:86:c2:46:
         36:bd:fb:d3:57:f9:be:bf:fc:a1:52:1c:d9:92:f4:e3:0b:d4:
         26:38:24:98:c5:ce:b3:9a:d4:f2:f5:b9:2c:ec:21:a0:ad:8e:
         7d:e4:09:07
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICJscwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REZCNzAxMTAvBgNVBAUTKDVEMkREMTU0QjVEQ0UyMUZCNzg2QzUyNkRCREVGMUIw
NDU5MjhBQjgwHhcNMjQwNTI0MDYyODM5WhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02NjUwMzM5Ni02NGMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwvspqngcLw/YB9RPDrqzxaWWXOoiaW4NiNLYU43Yd27oxD9t5AmtTRhnOA5M
V91uFW45xFKHOlTrW4jz8HdFNh8jKx1f18hKigMRTGdP9CDgOJevb8KiHFgLLUpb
jxfPTMUcoaYdzI/uxsLNvGvM1726oFqHh3lFMKJECBxLyOwiylccP3T+QHDSFzUc
aKpwXvaLYX7lmABCg4wWJPsxIFy/QXWOMg3mZw9Ity7542B1GcQ8hCznzBfB5uco
4u7mh2Am+ERkKCdEIMD45W2v4PvK/v/UDL+TiVZwcgEsPHxwctIIP9HxMpYgMLQ3
2b4k1yXoP+yGz+Vt81/BNpwk8wIDAQABo4IClTCCApEwHQYDVR0OBBYEFC8mvKJk
oUvZQLpcOoPA2DTxHMO5MB8GA1UdIwQYMBaAFF0t0VS13OIft4bFJtve8bBFkoq4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERkI3MC8yOTgzNjQ3Qzgz
OEYxMUU1ODZGQzU4MTJDNEY5QUUwMi9YUzNSVkxYYzRoLTNoc1VtMjk3eHNFV1Np
cmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1hTM1JWTFhjNGgtM2hzVW0yOTd4c0VXU2lyZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
REZCNzAvMjk4MzY0N0M4MzhGMTFFNTg2RkM1ODEyQzRGOUFFMDIvREIzRTkyOUUx
OTk2MTFFRjlFQkZCRjRBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADL1ckwDQYJKoZIhvcNAQELBQADggEBAL6QQMdwzLPQqfhZ
+iA+QibI0hli63DKiYl1AmBPQrPB8WwhEgTNBjI8BjsA+1XznfU1HjcMGelcqLO5
Sn/M/roH+/E92izhujzTqVu/dqnEURFKJn461LUN1ZrJo8MCP8qzoW9Z083FXUJH
TK7O4L82bH7IARx8JUp0uldy6OjLQpzgZ9Oaq4xvM5e2AetSs6ba2jeyFxLxl/4y
TOAME93P+ek0O7EGjw1mRQ5I4Cu8LJJ7l4j7eVUaREsAL+gX32eVnc7no0inZ5R4
WlJZy6PQZxnw3obCRja9+9NX+b6//KFSHNmS9OML1CY4JJjFzrOa1PL1uSzsIaCt
jn3kCQc=
-----END CERTIFICATE-----
Generated at Sun Nov 24 18:24:58 2024 by rpki-client on console-ams.rpki-client.org