Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F81AD/4CCB00902CBE11ED99824B4CC4F9AE02/F9F81E3480FA11ED9B35954DC4F9AE02.roa
File:                     F9F81E3480FA11ED9B35954DC4F9AE02.roa (raw, json)
Hash identifier:          uF//tcko2WVqVVcNN8K7d2s/1bV6GiNlBkTpEaTcZJA=
Subject key identifier:   6F:AE:1A:0C:D7:4C:D2:12:06:62:3D:F8:A2:92:B5:DC:10:E7:0B:C4
Certificate issuer:       /CN=A91F81AD/serialNumber=A4CD3E67D1B224F325047E9F5E484ACDC4F663EC
Certificate serial:       01AF
Authority key identifier: A4:CD:3E:67:D1:B2:24:F3:25:04:7E:9F:5E:48:4A:CD:C4:F6:63:EC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pM0-Z9GyJPMlBH6fXkhKzcT2Y-w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F81AD/4CCB00902CBE11ED99824B4CC4F9AE02/F9F81E3480FA11ED9B35954DC4F9AE02.roa
Signing time:             Fri 27 Sep 2024 02:26:31 +0000
ROA not before:           Fri 27 Sep 2024 02:26:31 +0000
ROA not after:            Mon 01 Dec 2025 00:00:00 +0000
asID:                     58611
IP address blocks:        203.28.79.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F81AD/4CCB00902CBE11ED99824B4CC4F9AE02/pM0-Z9GyJPMlBH6fXkhKzcT2Y-w.crl
                          rsync://rpki.apnic.net/member_repository/A91F81AD/4CCB00902CBE11ED99824B4CC4F9AE02/pM0-Z9GyJPMlBH6fXkhKzcT2Y-w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pM0-Z9GyJPMlBH6fXkhKzcT2Y-w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 20:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 431 (0x1af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F81AD/serialNumber=A4CD3E67D1B224F325047E9F5E484ACDC4F663EC
        Validity
            Not Before: Sep 27 02:26:31 2024 GMT
            Not After : Dec  1 00:00:00 2025 GMT
        Subject: CN=66f617d7-b1c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:50:e3:95:c5:b8:28:0f:69:87:8d:d5:c0:90:
                    c7:c0:ba:91:e8:d8:0c:49:78:c9:59:55:7a:8f:00:
                    a6:bd:7f:16:47:c5:bf:77:e5:19:e1:3e:45:64:bc:
                    78:b5:fb:ed:4b:e5:13:cd:a6:b8:b7:13:73:89:ac:
                    8b:7e:8e:43:9a:c8:ec:11:b6:e8:e4:07:3b:a4:03:
                    fe:5d:aa:e1:80:6b:b7:87:c4:5d:8c:06:0c:31:4f:
                    f5:56:8e:2c:58:ab:82:7c:d4:0a:69:f7:ed:4e:19:
                    6a:e3:07:18:06:15:db:ba:06:7a:78:5e:66:bb:8e:
                    6d:16:d0:78:d7:ba:0a:62:09:93:74:31:ea:8a:ef:
                    74:f0:95:f7:fb:71:dd:7e:41:60:45:61:77:31:e1:
                    8d:9d:de:14:bc:b8:c5:41:0c:fa:99:4c:f7:9a:41:
                    8b:6e:58:8e:fd:46:0f:8c:11:db:b0:c1:96:79:15:
                    37:a9:be:9a:70:c0:b9:da:c7:89:13:31:e3:f6:36:
                    bf:65:98:f1:a8:54:76:44:2a:73:a8:8e:d9:a5:98:
                    ce:4f:84:ab:a2:63:68:ef:5f:63:7b:44:d5:44:d0:
                    43:ff:e1:64:f1:85:86:a1:cb:65:41:72:ae:78:15:
                    3f:62:4a:6e:aa:2a:ef:ab:31:5f:fe:59:b4:f9:3e:
                    a6:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:AE:1A:0C:D7:4C:D2:12:06:62:3D:F8:A2:92:B5:DC:10:E7:0B:C4
            X509v3 Authority Key Identifier:
                keyid:A4:CD:3E:67:D1:B2:24:F3:25:04:7E:9F:5E:48:4A:CD:C4:F6:63:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F81AD/4CCB00902CBE11ED99824B4CC4F9AE02/pM0-Z9GyJPMlBH6fXkhKzcT2Y-w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pM0-Z9GyJPMlBH6fXkhKzcT2Y-w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F81AD/4CCB00902CBE11ED99824B4CC4F9AE02/F9F81E3480FA11ED9B35954DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.28.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:e1:1c:fe:17:1b:2d:68:f3:3c:7d:5f:43:0a:98:be:6d:4b:
         13:dc:ed:ca:0e:50:48:d2:4d:ba:9a:8e:5b:77:e8:25:e1:79:
         e4:f5:38:f1:d1:24:66:a8:c8:92:14:ed:3b:23:19:7d:94:fe:
         90:71:93:cf:dc:1e:a4:07:65:75:29:b4:04:d2:86:b8:a6:75:
         19:bd:99:8c:f3:0d:52:90:e4:b9:36:4a:8e:b9:78:24:1e:9a:
         30:74:fb:02:0f:20:7a:b4:3c:af:70:64:ae:e4:03:b1:0f:b8:
         bc:5e:86:27:32:93:6e:c2:1d:a4:7f:e1:37:56:d0:bd:98:25:
         e4:ae:1c:3c:54:31:e2:9b:26:84:e1:5d:93:79:96:11:f0:77:
         b5:dc:cc:32:2f:c4:5b:b2:71:a9:ed:11:d7:09:1d:35:b8:60:
         88:fa:5f:9a:68:df:a4:ae:56:4b:95:15:a3:a7:9e:cf:95:54:
         c6:29:8f:9f:0b:29:a4:1e:ae:eb:f1:70:19:63:a8:cd:50:26:
         10:f4:9d:85:5c:eb:05:f9:92:90:ae:b5:28:d2:be:4b:96:29:
         e8:18:3f:93:39:a8:48:76:28:50:38:f0:76:8e:eb:ce:ea:8a:
         de:fc:40:6a:55:3e:b0:0c:c5:4d:01:a1:f1:a2:10:7a:09:92:
         fb:62:ee:72
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAa8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjgxQUQxMTAvBgNVBAUTKEE0Q0QzRTY3RDFCMjI0RjMyNTA0N0U5RjVFNDg0QUNE
QzRGNjYzRUMwHhcNMjQwOTI3MDIyNjMxWhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmY2MTdkNy1iMWM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4lDjlcW4KA9ph43VwJDHwLqR6NgMSXjJWVV6jwCmvX8WR8W/d+UZ4T5FZLx4
tfvtS+UTzaa4txNziayLfo5DmsjsEbbo5Ac7pAP+XarhgGu3h8RdjAYMMU/1Vo4s
WKuCfNQKafftThlq4wcYBhXbugZ6eF5mu45tFtB417oKYgmTdDHqiu908JX3+3Hd
fkFgRWF3MeGNnd4UvLjFQQz6mUz3mkGLbliO/UYPjBHbsMGWeRU3qb6acMC52seJ
EzHj9ja/ZZjxqFR2RCpzqI7ZpZjOT4SromNo719je0TVRNBD/+Fk8YWGoctlQXKu
eBU/YkpuqirvqzFf/lm0+T6mOwIDAQABo4IClTCCApEwHQYDVR0OBBYEFG+uGgzX
TNISBmI9+KKStdwQ5wvEMB8GA1UdIwQYMBaAFKTNPmfRsiTzJQR+n15ISs3E9mPs
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODFBRC80Q0NCMDA5MDJD
QkUxMUVEOTk4MjRCNENDNEY5QUUwMi9wTTAtWjlHeUpQTWxCSDZmWGtoS3pjVDJZ
LXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3BNMC1aOUd5SlBNbEJINmZYa2hLemNUMlktdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RjgxQUQvNENDQjAwOTAyQ0JFMTFFRDk5ODI0QjRDQzRGOUFFMDIvRjlGODFFMzQ4
MEZBMTFFRDlCMzU5NTREQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADLHE8wDQYJKoZIhvcNAQELBQADggEBABLhHP4XGy1o8zx9
X0MKmL5tSxPc7coOUEjSTbqajlt36CXheeT1OPHRJGaoyJIU7TsjGX2U/pBxk8/c
HqQHZXUptATShrimdRm9mYzzDVKQ5Lk2So65eCQemjB0+wIPIHq0PK9wZK7kA7EP
uLxehicyk27CHaR/4TdW0L2YJeSuHDxUMeKbJoThXZN5lhHwd7XczDIvxFuycant
EdcJHTW4YIj6X5po36SuVkuVFaOnns+VVMYpj58LKaQeruvxcBljqM1QJhD0nYVc
6wX5kpCutSjSvkuWKegYP5M5qEh2KFA48HaO687qit78QGpVPrAMxU0BofGiEHoJ
kvti7nI=
-----END CERTIFICATE-----
Generated at Thu Nov 21 03:12:09 2024 by rpki-client on console-fra.rpki-client.org