Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/FCBF1666677C11EBB2A3F00CC4F9AE02.roa
File:                     FCBF1666677C11EBB2A3F00CC4F9AE02.roa (raw, json)
Hash identifier:          MXTujm5bxVtwRR2qRhwfBiQo+U60HZqoc/46+Q9rCqg=
Subject key identifier:   61:29:BD:0E:6E:5E:59:30:9A:70:2D:34:F8:C8:5D:5D:E8:23:AB:31
Certificate issuer:       /CN=A91E170B/serialNumber=6D38C5B4CF4BAD3D984871A7321A9D16960BE268
Certificate serial:       3442
Authority key identifier: 6D:38:C5:B4:CF:4B:AD:3D:98:48:71:A7:32:1A:9D:16:96:0B:E2:68
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/FCBF1666677C11EBB2A3F00CC4F9AE02.roa
Signing time:             Fri 21 Apr 2023 12:50:15 +0000
ROA not before:           Fri 21 Apr 2023 12:50:15 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     135540
IP address blocks:        61.45.255.0/24 maxlen: 24
                          2401:4601:255::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.crl
                          rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:17:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13378 (0x3442)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E170B/serialNumber=6D38C5B4CF4BAD3D984871A7321A9D16960BE268
        Validity
            Not Before: Apr 21 12:50:15 2023 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=64428687-ebcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:0d:c6:39:72:66:e3:75:35:c4:19:18:ee:84:
                    82:df:b8:c3:fe:7e:64:64:ce:0d:62:15:4a:2b:5d:
                    78:d6:1f:2b:9e:76:e4:0d:2b:ea:86:c3:b7:fa:82:
                    ac:0d:32:38:be:2b:d4:52:74:61:e0:35:8c:1c:77:
                    4e:b8:8b:2e:4a:ae:6e:fd:28:00:b3:c6:27:7c:dc:
                    b8:ca:67:1a:7c:a6:66:b1:06:24:d0:e6:14:3e:ea:
                    51:ca:59:b2:34:fa:f7:1d:9c:76:c3:e0:b7:68:1e:
                    52:81:16:a0:26:43:70:61:0a:9d:7d:28:c3:f1:63:
                    39:d1:80:5d:98:e8:2d:e3:45:3e:95:6b:b2:79:e6:
                    b0:0f:f5:fa:9a:50:8c:de:8c:1f:05:95:e0:d9:d4:
                    ba:bc:5d:da:e9:f5:11:ec:4b:0e:ed:9c:a8:5d:c3:
                    3e:23:3f:d9:ca:18:5f:24:06:eb:79:a1:99:98:36:
                    b4:7e:a1:cc:c2:bd:09:3a:86:1b:da:0f:e2:e6:ab:
                    69:90:a3:ee:28:8e:46:e3:99:c0:87:6a:a9:6b:60:
                    dd:02:47:04:59:71:b2:5a:96:70:a0:ba:7d:21:65:
                    fb:ac:a1:b4:92:a2:2b:5c:bf:07:3a:52:27:ca:93:
                    84:8f:ec:60:d6:39:72:21:fa:68:b3:c5:7f:3b:fb:
                    26:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:29:BD:0E:6E:5E:59:30:9A:70:2D:34:F8:C8:5D:5D:E8:23:AB:31
            X509v3 Authority Key Identifier:
                keyid:6D:38:C5:B4:CF:4B:AD:3D:98:48:71:A7:32:1A:9D:16:96:0B:E2:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/FCBF1666677C11EBB2A3F00CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.45.255.0/24
                IPv6:
                  2401:4601:255::/48

    Signature Algorithm: sha256WithRSAEncryption
         6e:23:8f:37:84:fb:02:67:4b:c5:1e:1f:5e:1c:90:23:43:2b:
         94:cc:bd:58:d6:31:fd:da:69:90:32:e8:30:a6:82:fd:6d:2e:
         a8:1e:2c:ba:89:f1:ce:d3:71:3c:d0:de:61:50:95:de:b5:24:
         58:4d:db:2a:d5:d3:81:52:a4:78:60:e7:d0:1e:97:b2:16:54:
         b2:2a:66:0b:9f:17:40:10:6f:b3:2e:89:db:45:68:05:49:6e:
         b1:66:fb:d3:67:ac:ba:b7:f7:7f:f1:1e:ad:95:ee:59:63:6b:
         53:f9:13:0e:4e:f6:3d:0a:df:47:9f:16:7f:40:e1:71:96:ec:
         8d:9f:ac:d2:01:82:e2:15:9c:d6:86:89:29:7b:4e:7c:0c:f8:
         3e:a8:7e:55:7a:1b:ce:35:a3:06:91:7e:9f:98:80:07:48:35:
         b6:ef:01:24:9a:43:f4:29:b3:d0:87:4d:74:e5:27:11:4d:40:
         41:8d:25:e8:56:8f:ed:32:93:96:71:26:bf:ee:dc:6a:c1:90:
         18:15:d1:08:aa:47:09:2a:55:3b:c4:0f:37:e1:d5:7b:af:c5:
         d7:f4:c6:68:a1:9b:e3:18:42:ef:02:85:4a:8a:5f:3b:94:c4:
         a2:f5:c7:ae:4a:bb:36:88:9c:85:02:d0:12:f4:29:8c:85:e7:
         cd:6c:0c:4f
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgICNEIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTE3MEIxMTAvBgNVBAUTKDZEMzhDNUI0Q0Y0QkFEM0Q5ODQ4NzFBNzMyMUE5RDE2
OTYwQkUyNjgwHhcNMjMwNDIxMTI1MDE1WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NDQyODY4Ny1lYmNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApg3GOXJm43U1xBkY7oSC37jD/n5kZM4NYhVKK1141h8rnnbkDSvqhsO3+oKs
DTI4vivUUnRh4DWMHHdOuIsuSq5u/SgAs8YnfNy4ymcafKZmsQYk0OYUPupRylmy
NPr3HZx2w+C3aB5SgRagJkNwYQqdfSjD8WM50YBdmOgt40U+lWuyeeawD/X6mlCM
3owfBZXg2dS6vF3a6fUR7EsO7ZyoXcM+Iz/ZyhhfJAbreaGZmDa0fqHMwr0JOoYb
2g/i5qtpkKPuKI5G45nAh2qpa2DdAkcEWXGyWpZwoLp9IWX7rKG0kqIrXL8HOlIn
ypOEj+xg1jlyIfpos8V/O/smDwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFGEpvQ5u
XlkwmnAtNPjIXV3oI6sxMB8GA1UdIwQYMBaAFG04xbTPS609mEhxpzIanRaWC+Jo
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTcwQi85N0FGNkRGMDFE
NkQxMUUyQTEyRDlFQUUwOEIwMkNEMi9iVGpGdE05THJUMllTSEduTWhxZEZwWUw0
bWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2JUakZ0TTlMclQyWVNIR25NaHFkRnBZTDRtZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTE3MEIvOTdBRjZERjAxRDZEMTFFMkExMkQ5RUFFMDhCMDJDRDIvRkNCRjE2NjY2
NzdDMTFFQkIyQTNGMDBDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E
ITAfMAwEAgABMAYDBAA9Lf8wDwQCAAIwCQMHACQBRgECVTANBgkqhkiG9w0BAQsF
AAOCAQEAbiOPN4T7AmdLxR4fXhyQI0MrlMy9WNYx/dppkDLoMKaC/W0uqB4suonx
ztNxPNDeYVCV3rUkWE3bKtXTgVKkeGDn0B6XshZUsipmC58XQBBvsy6J20VoBUlu
sWb702esurf3f/EerZXuWWNrU/kTDk72PQrfR58Wf0DhcZbsjZ+s0gGC4hWc1oaJ
KXtOfAz4Pqh+VXobzjWjBpF+n5iAB0g1tu8BJJpD9Cmz0IdNdOUnEU1AQY0l6FaP
7TKTlnEmv+7casGQGBXRCKpHCSpVO8QPN+HVe6/F1/TGaKGb4xhC7wKFSopfO5TE
ovXHrkq7NoichQLQEvQpjIXnzWwMTw==
-----END CERTIFICATE-----
Generated at Fri Nov 22 15:25:44 2024 by rpki-client on console-fra.rpki-client.org