Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/E6F611DADD1211EABAE49278C4F9AE02.roa
File:                     E6F611DADD1211EABAE49278C4F9AE02.roa (raw, json)
Hash identifier:          59pY/EzDVxdAKRkl477DnesloWwKNbY2A4TWt1wm+Hk=
Subject key identifier:   40:69:EB:9A:F9:BD:1E:B8:C8:67:0B:22:34:76:19:F6:AF:06:DA:54
Certificate issuer:       /CN=A91EAE3D/serialNumber=C7269B124C420C55E29FB51D3C1B0D9D476CBD00
Certificate serial:       17A8
Authority key identifier: C7:26:9B:12:4C:42:0C:55:E2:9F:B5:1D:3C:1B:0D:9D:47:6C:BD:00
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/E6F611DADD1211EABAE49278C4F9AE02.roa
Signing time:             Tue 20 Feb 2024 17:55:45 +0000
ROA not before:           Tue 20 Feb 2024 17:55:45 +0000
ROA not after:            Thu 01 May 2025 00:00:00 +0000
asID:                     9820
IP address blocks:        203.188.144.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.crl
                          rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 16:57:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6056 (0x17a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EAE3D/serialNumber=C7269B124C420C55E29FB51D3C1B0D9D476CBD00
        Validity
            Not Before: Feb 20 17:55:45 2024 GMT
            Not After : May  1 00:00:00 2025 GMT
        Subject: CN=65d4e7a1-66a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:8d:18:ad:e7:7b:6f:d5:25:4f:c7:80:c7:54:
                    ba:5e:00:03:71:94:c2:68:1b:80:40:c4:9a:3f:6c:
                    35:8f:db:e3:5a:e8:86:06:97:e7:b6:38:98:a7:b4:
                    90:55:03:34:be:9f:0e:8c:52:b7:24:c6:50:f9:16:
                    32:8c:ed:14:d5:70:cd:3d:f5:02:dd:29:07:1a:c5:
                    f4:55:41:c6:e4:76:88:c1:be:6a:13:bb:fe:8d:df:
                    ea:f4:f6:e2:34:21:0f:1d:cf:57:e6:68:5f:ec:74:
                    f5:27:bd:5a:91:5d:20:9b:bd:07:4c:0a:64:69:dc:
                    0e:b7:26:43:d8:3d:d3:98:a3:00:55:5a:4c:b2:4d:
                    f1:b3:c5:84:39:41:bd:fa:65:4d:97:77:3b:8d:ca:
                    49:42:12:3a:01:7a:29:82:41:6a:80:67:51:64:3e:
                    58:f0:64:08:34:c1:66:34:49:e1:25:cc:9c:cc:16:
                    2a:39:27:85:2f:18:97:17:5b:59:17:b9:da:63:7e:
                    00:ef:74:07:00:05:b6:8d:35:4b:0b:ec:7e:e4:c8:
                    ab:66:25:f9:b0:91:76:b1:d3:e7:df:19:53:76:bf:
                    c2:2a:d6:b1:73:fe:1e:e2:d0:0f:dc:5b:71:88:8b:
                    1f:a6:2b:83:32:ca:79:e9:e9:54:9b:0b:58:99:48:
                    22:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:69:EB:9A:F9:BD:1E:B8:C8:67:0B:22:34:76:19:F6:AF:06:DA:54
            X509v3 Authority Key Identifier:
                keyid:C7:26:9B:12:4C:42:0C:55:E2:9F:B5:1D:3C:1B:0D:9D:47:6C:BD:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/E6F611DADD1211EABAE49278C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.188.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         61:54:5f:b2:e1:2a:4c:58:45:40:eb:d7:f9:42:4b:84:66:ce:
         4c:24:77:9e:d7:99:99:9b:4f:be:c4:00:8c:ed:17:6b:ad:3d:
         69:1e:e3:9e:28:7e:5d:71:45:82:af:54:05:ee:09:c7:38:96:
         be:c8:7d:41:bc:21:5c:2e:42:71:ea:3b:ce:2c:ec:ca:49:95:
         98:eb:dd:e4:f6:0d:af:3a:bc:38:c2:d9:61:31:03:81:3d:e9:
         25:6c:d5:57:18:a0:a3:be:94:39:4d:b8:bf:7c:be:5f:6f:ef:
         19:8a:68:2c:73:bb:f2:85:a6:ee:3b:ad:0a:6e:a3:6a:b7:c8:
         ec:e8:c2:31:a0:3c:b7:3f:93:16:c4:b0:65:53:eb:9c:2f:fc:
         51:9c:07:8f:0e:c1:ee:02:6b:d6:f7:08:7a:20:d7:5f:03:d6:
         85:53:00:51:ca:65:a9:83:ad:10:94:81:66:34:0d:20:cb:91:
         e2:e9:c7:fd:a2:2b:26:57:a5:2b:a3:30:0e:ff:e9:65:df:c1:
         a8:1b:da:7a:9b:96:4f:5c:61:10:bc:23:ab:ae:5a:76:c3:d8:
         3d:22:55:9a:d8:5d:84:72:4c:a8:12:e6:b7:ba:31:68:11:4b:
         c9:89:c3:9d:e7:0d:e9:32:14:e9:c6:e0:11:39:d4:da:bd:82:
         50:3e:1c:0f
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICF6gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUFFM0QxMTAvBgNVBAUTKEM3MjY5QjEyNEM0MjBDNTVFMjlGQjUxRDNDMUIwRDlE
NDc2Q0JEMDAwHhcNMjQwMjIwMTc1NTQ1WhcNMjUwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NWQ0ZTdhMS02NmE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1o0Yred7b9UlT8eAx1S6XgADcZTCaBuAQMSaP2w1j9vjWuiGBpfntjiYp7SQ
VQM0vp8OjFK3JMZQ+RYyjO0U1XDNPfUC3SkHGsX0VUHG5HaIwb5qE7v+jd/q9Pbi
NCEPHc9X5mhf7HT1J71akV0gm70HTApkadwOtyZD2D3TmKMAVVpMsk3xs8WEOUG9
+mVNl3c7jcpJQhI6AXopgkFqgGdRZD5Y8GQINMFmNEnhJcyczBYqOSeFLxiXF1tZ
F7naY34A73QHAAW2jTVLC+x+5MirZiX5sJF2sdPn3xlTdr/CKtaxc/4e4tAP3Ftx
iIsfpiuDMsp56elUmwtYmUgiYQIDAQABo4IClTCCApEwHQYDVR0OBBYEFEBp65r5
vR64yGcLIjR2GfavBtpUMB8GA1UdIwQYMBaAFMcmmxJMQgxV4p+1HTwbDZ1HbL0A
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQUUzRC85N0I2RTBDRTc1
REUxMUU4QjcwNEEyNDZDNEY5QUUwMi94eWFiRWt4Q0RGWGluN1VkUEJzTm5VZHN2
UUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3h5YWJFa3hDREZYaW43VWRQQnNOblVkc3ZRQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RUFFM0QvOTdCNkUwQ0U3NURFMTFFOEI3MDRBMjQ2QzRGOUFFMDIvRTZGNjExREFE
RDEyMTFFQUJBRTQ5Mjc4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBATLvJAwDQYJKoZIhvcNAQELBQADggEBAGFUX7LhKkxYRUDr
1/lCS4Rmzkwkd57XmZmbT77EAIztF2utPWke454ofl1xRYKvVAXuCcc4lr7IfUG8
IVwuQnHqO84s7MpJlZjr3eT2Da86vDjC2WExA4E96SVs1VcYoKO+lDlNuL98vl9v
7xmKaCxzu/KFpu47rQpuo2q3yOzowjGgPLc/kxbEsGVT65wv/FGcB48Owe4Ca9b3
CHog118D1oVTAFHKZamDrRCUgWY0DSDLkeLpx/2iKyZXpSujMA7/6WXfwagb2nqb
lk9cYRC8I6uuWnbD2D0iVZrYXYRyTKgS5re6MWgRS8mJw53nDekyFOnG4BE51Nq9
glA+HA8=
-----END CERTIFICATE-----
Generated at Fri Nov 22 19:50:22 2024 by rpki-client on console-ams.rpki-client.org