Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4468/827524E88EE511EEA2EEDD12C4F9AE02/C608133C226F11EF8D24AD63C4F9AE02.roa
File:                     C608133C226F11EF8D24AD63C4F9AE02.roa (raw, json)
Hash identifier:          m9fLR89Tw4kZAzxnaD1Dqo4ULgUxV98XCLwCFu7/XIU=
Subject key identifier:   88:D8:2F:CB:BC:D7:81:9D:04:D7:3C:B2:B4:82:43:F3:A5:29:71:DE
Certificate issuer:       /CN=A91E4468/serialNumber=AFFCE637988165E6C51BFBFEBD1283D511240190
Certificate serial:       6E
Authority key identifier: AF:FC:E6:37:98:81:65:E6:C5:1B:FB:FE:BD:12:83:D5:11:24:01:90
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r_zmN5iBZebFG_v-vRKD1REkAZA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E4468/827524E88EE511EEA2EEDD12C4F9AE02/C608133C226F11EF8D24AD63C4F9AE02.roa
Signing time:             Tue 04 Jun 2024 12:41:33 +0000
ROA not before:           Tue 04 Jun 2024 12:41:33 +0000
ROA not after:            Sun 02 Mar 2025 00:00:00 +0000
asID:                     56264
IP address blocks:        210.79.181.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E4468/827524E88EE511EEA2EEDD12C4F9AE02/r_zmN5iBZebFG_v-vRKD1REkAZA.crl
                          rsync://rpki.apnic.net/member_repository/A91E4468/827524E88EE511EEA2EEDD12C4F9AE02/r_zmN5iBZebFG_v-vRKD1REkAZA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r_zmN5iBZebFG_v-vRKD1REkAZA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110 (0x6e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E4468/serialNumber=AFFCE637988165E6C51BFBFEBD1283D511240190
        Validity
            Not Before: Jun  4 12:41:33 2024 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=665f0b7d-c46c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:9b:4c:9d:1b:19:73:2a:f0:29:e7:79:4e:27:
                    f1:2b:90:f1:03:fc:aa:9a:29:f6:c0:86:53:41:26:
                    7d:b9:af:74:47:38:da:7b:b4:69:8c:54:04:b9:ff:
                    d3:86:42:12:57:1c:8c:b0:0a:09:30:e9:b0:e4:23:
                    75:f6:a2:4e:32:f3:d1:0c:0b:0f:23:fa:d4:fe:0b:
                    53:0b:27:d3:5b:32:e4:6a:1b:ef:2c:c2:ac:a6:2b:
                    4d:8f:65:2d:7c:a7:60:65:ee:f7:84:a0:82:f7:93:
                    4b:a5:62:03:e8:e2:2e:06:d8:4a:8a:10:fd:e8:03:
                    5a:7a:5f:c2:8f:b6:e4:56:fa:8e:2c:6c:44:2e:6d:
                    09:f4:11:81:45:b2:d1:21:12:8d:21:83:15:fb:1b:
                    2f:3a:0a:9a:02:7c:5d:b0:8c:8b:5a:13:8b:dc:60:
                    de:bd:79:e1:7f:86:0f:25:45:d8:66:2e:ab:c0:c5:
                    9a:03:66:e9:79:f2:f5:d8:b2:59:2e:d5:e4:39:92:
                    6b:74:1a:9f:b9:02:fa:05:6f:66:16:b1:7a:4e:14:
                    6b:69:53:bd:c1:7c:93:60:60:3c:a6:af:db:5e:56:
                    97:81:e3:4e:68:24:fb:88:57:19:53:6b:03:fb:4e:
                    a4:d3:c3:7c:6d:6f:99:c5:25:dd:fd:0a:12:24:33:
                    6c:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:D8:2F:CB:BC:D7:81:9D:04:D7:3C:B2:B4:82:43:F3:A5:29:71:DE
            X509v3 Authority Key Identifier:
                keyid:AF:FC:E6:37:98:81:65:E6:C5:1B:FB:FE:BD:12:83:D5:11:24:01:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E4468/827524E88EE511EEA2EEDD12C4F9AE02/r_zmN5iBZebFG_v-vRKD1REkAZA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r_zmN5iBZebFG_v-vRKD1REkAZA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4468/827524E88EE511EEA2EEDD12C4F9AE02/C608133C226F11EF8D24AD63C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.79.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:45:6b:9e:f5:4b:57:2a:20:61:2b:86:58:a0:3d:30:a2:31:
         4a:48:1a:dc:e4:0d:d2:61:02:5e:cc:d6:d7:32:d9:69:c0:b8:
         4a:3b:a9:e8:8a:1c:dc:53:b2:04:5a:28:55:46:29:69:73:8a:
         36:67:dc:33:ae:49:70:73:3f:2b:ef:95:82:0f:16:3b:78:b5:
         48:2d:40:dc:9c:60:2f:1d:0f:3f:c6:8c:60:22:3e:1c:5f:c9:
         dc:99:6d:c1:21:af:0d:90:81:6f:2e:49:75:bc:84:bf:fc:1c:
         97:6b:b1:b4:63:09:05:79:47:ac:f9:9e:6c:dd:41:6f:e8:91:
         09:9e:2f:b3:26:87:51:c0:4b:68:aa:42:a2:e2:50:af:c8:7d:
         c4:68:39:20:ab:7d:f5:5a:8b:5b:4d:3f:c8:a4:db:06:07:11:
         0d:50:9b:e7:15:35:f3:51:38:bf:67:db:7e:9d:90:63:ee:41:
         55:0b:22:e4:7d:e5:74:4f:64:b1:46:ab:fb:b9:2c:f5:31:b0:
         8b:a4:75:cf:3f:2f:09:e0:e2:c5:20:1a:c5:4f:24:cd:9f:0f:
         92:b1:32:47:53:90:c4:b5:df:0c:17:d6:46:01:b8:c6:12:46:
         e8:3e:ed:88:77:5f:45:eb:c0:25:98:ba:eb:87:26:a5:7e:b0:
         2e:f1:fb:88
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBbjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF
NDQ2ODExMC8GA1UEBRMoQUZGQ0U2Mzc5ODgxNjVFNkM1MUJGQkZFQkQxMjgzRDUx
MTI0MDE5MDAeFw0yNDA2MDQxMjQxMzNaFw0yNTAzMDIwMDAwMDBaMBgxFjAUBgNV
BAMTDTY2NWYwYjdkLWM0NmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDPm0ydGxlzKvAp53lOJ/ErkPED/KqaKfbAhlNBJn25r3RHONp7tGmMVAS5/9OG
QhJXHIywCgkw6bDkI3X2ok4y89EMCw8j+tT+C1MLJ9NbMuRqG+8swqymK02PZS18
p2Bl7veEoIL3k0ulYgPo4i4G2EqKEP3oA1p6X8KPtuRW+o4sbEQubQn0EYFFstEh
Eo0hgxX7Gy86CpoCfF2wjItaE4vcYN69eeF/hg8lRdhmLqvAxZoDZul58vXYslku
1eQ5kmt0Gp+5AvoFb2YWsXpOFGtpU73BfJNgYDymr9teVpeB405oJPuIVxlTawP7
TqTTw3xtb5nFJd39ChIkM2x1AgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUiNgvy7zX
gZ0E1zyytIJD86Upcd4wHwYDVR0jBBgwFoAUr/zmN5iBZebFG/v+vRKD1REkAZAw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU0NDY4LzgyNzUyNEU4OEVF
NTExRUVBMkVFREQxMkM0RjlBRTAyL3Jfem1ONWlCWmViRkdfdi12UktEMVJFa0Fa
QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvcl96bU41aUJaZWJGR192LXZSS0QxUkVrQVpBLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
NDQ2OC84Mjc1MjRFODhFRTUxMUVFQTJFRUREMTJDNEY5QUUwMi9DNjA4MTMzQzIy
NkYxMUVGOEQyNEFENjNDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEANJPtTANBgkqhkiG9w0BAQsFAAOCAQEAbUVrnvVLVyogYSuG
WKA9MKIxSkga3OQN0mECXszW1zLZacC4Sjup6Ioc3FOyBFooVUYpaXOKNmfcM65J
cHM/K++Vgg8WO3i1SC1A3JxgLx0PP8aMYCI+HF/J3JltwSGvDZCBby5JdbyEv/wc
l2uxtGMJBXlHrPmebN1Bb+iRCZ4vsyaHUcBLaKpCouJQr8h9xGg5IKt99VqLW00/
yKTbBgcRDVCb5xU181E4v2fbfp2QY+5BVQsi5H3ldE9ksUar+7ks9TGwi6R1zz8v
CeDixSAaxU8kzZ8PkrEyR1OQxLXfDBfWRgG4xhJG6D7tiHdfRevAJZi664cmpX6w
LvH7iA==
-----END CERTIFICATE-----
Generated at Sat Nov 23 05:02:59 2024 by rpki-client on console-fra.rpki-client.org