Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F81AD/4CCB00902CBE11ED99824B4CC4F9AE02/F9F81E3480FA11ED9B35954DC4F9AE02.roa
File:                     F9F81E3480FA11ED9B35954DC4F9AE02.roa (raw, json)
Hash identifier:          jpi6/y3FzQW00OvjjQ1kdUh/DYwN1lCBN9YVG2gazWE=
Subject key identifier:   8A:B4:95:F3:F9:E1:C7:5F:B3:44:D8:41:7A:9C:8F:B5:1B:A7:7C:7B
Certificate issuer:       /CN=A91F81AD/serialNumber=A4CD3E67D1B224F325047E9F5E484ACDC4F663EC
Certificate serial:       E5
Authority key identifier: A4:CD:3E:67:D1:B2:24:F3:25:04:7E:9F:5E:48:4A:CD:C4:F6:63:EC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pM0-Z9GyJPMlBH6fXkhKzcT2Y-w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F81AD/4CCB00902CBE11ED99824B4CC4F9AE02/F9F81E3480FA11ED9B35954DC4F9AE02.roa
Signing time:             Tue 05 Sep 2023 03:53:50 +0000
ROA not before:           Tue 05 Sep 2023 03:53:50 +0000
ROA not after:            Sun 01 Dec 2024 00:00:00 +0000
asID:                     58611
IP address blocks:        203.28.79.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F81AD/4CCB00902CBE11ED99824B4CC4F9AE02/pM0-Z9GyJPMlBH6fXkhKzcT2Y-w.crl
                          rsync://rpki.apnic.net/member_repository/A91F81AD/4CCB00902CBE11ED99824B4CC4F9AE02/pM0-Z9GyJPMlBH6fXkhKzcT2Y-w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pM0-Z9GyJPMlBH6fXkhKzcT2Y-w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 May 2024 02:50:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 229 (0xe5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F81AD/serialNumber=A4CD3E67D1B224F325047E9F5E484ACDC4F663EC
        Validity
            Not Before: Sep  5 03:53:50 2023 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=64f6a64d-8191
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:49:61:12:b8:18:89:bf:f4:8b:a7:37:1c:ff:
                    eb:80:44:9c:c6:03:26:e9:d3:63:a0:03:a7:ba:ae:
                    2d:a1:16:e3:c0:e5:89:cd:b2:2d:f1:71:00:ff:87:
                    a2:2c:85:db:3a:58:a2:87:02:60:ca:c5:b4:75:1b:
                    97:42:d2:39:2a:ab:05:b1:c9:d6:ff:21:06:99:44:
                    61:4a:e4:46:0e:30:8b:a6:b4:27:52:bc:67:43:20:
                    12:83:bc:df:34:b5:60:1a:1b:61:3b:ed:e8:42:3f:
                    18:9c:98:38:6a:d0:bf:8d:25:ea:a9:1e:40:03:2d:
                    ab:50:27:aa:96:9b:1c:60:34:d7:f4:ee:c9:7f:ff:
                    b5:4f:c7:e2:67:cc:1b:25:35:20:88:3b:20:78:23:
                    8a:ed:82:80:67:e3:77:57:7f:e5:46:c4:ca:91:42:
                    aa:4c:78:15:96:ce:8f:a7:b0:49:88:b0:f6:26:0a:
                    a5:32:c9:54:73:ee:cf:79:40:b9:d4:d6:19:48:da:
                    fa:24:25:f7:85:b6:b7:3a:83:ab:d9:6d:75:b9:36:
                    9e:5f:1e:bf:2e:92:05:d6:f0:3a:00:c0:1e:c8:d6:
                    67:bf:b5:df:f6:a5:33:81:5c:37:53:a8:8b:64:3e:
                    ce:ff:b0:22:16:b1:65:53:b4:df:cf:06:59:6e:8f:
                    c1:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:B4:95:F3:F9:E1:C7:5F:B3:44:D8:41:7A:9C:8F:B5:1B:A7:7C:7B
            X509v3 Authority Key Identifier:
                keyid:A4:CD:3E:67:D1:B2:24:F3:25:04:7E:9F:5E:48:4A:CD:C4:F6:63:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F81AD/4CCB00902CBE11ED99824B4CC4F9AE02/pM0-Z9GyJPMlBH6fXkhKzcT2Y-w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pM0-Z9GyJPMlBH6fXkhKzcT2Y-w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F81AD/4CCB00902CBE11ED99824B4CC4F9AE02/F9F81E3480FA11ED9B35954DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.28.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:3e:72:1c:26:72:f9:69:6e:c2:d6:ce:df:ad:3f:08:03:72:
         73:d7:ca:8b:e8:59:52:95:24:68:b4:4f:64:04:bd:ef:5b:e8:
         f9:5c:4a:7f:2c:32:89:e1:32:dd:7f:b5:54:8c:fa:61:e8:65:
         92:0a:49:68:2f:c4:ad:b5:c1:74:32:75:1e:b4:6f:43:ed:b5:
         a8:90:a3:7d:c0:2a:35:09:ee:0d:b8:2d:2e:b5:c7:b6:8e:9c:
         a4:51:b8:ce:cb:40:d9:da:57:52:2e:e9:5b:b8:fb:0d:5d:5a:
         ba:07:c4:11:c2:6f:5d:30:53:09:43:fb:b5:46:98:73:e9:46:
         7b:d0:78:a7:5a:09:0f:2b:3c:43:09:d9:cd:56:d3:74:98:05:
         e1:1f:51:8a:63:62:34:c8:24:1e:f9:81:0a:e0:eb:9a:b7:a4:
         ec:bf:a6:7a:88:dd:cc:f2:6d:bd:3a:48:f9:56:8b:a4:79:a5:
         ac:5a:e9:dd:5d:39:e9:d0:03:0c:8e:9a:78:0e:1d:d2:6d:d3:
         6f:6b:e9:36:b1:9f:80:29:8e:11:76:e8:75:a3:22:e9:5b:c8:
         72:9c:52:5e:d5:e8:2e:60:f0:d6:f4:72:c5:11:4f:e3:19:fd:
         36:d1:da:c3:ca:61:92:78:50:95:23:cb:79:98:0b:32:85:6b:
         85:7f:be:f9
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAOUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjgxQUQxMTAvBgNVBAUTKEE0Q0QzRTY3RDFCMjI0RjMyNTA0N0U5RjVFNDg0QUNE
QzRGNjYzRUMwHhcNMjMwOTA1MDM1MzUwWhcNMjQxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NGY2YTY0ZC04MTkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzElhErgYib/0i6c3HP/rgEScxgMm6dNjoAOnuq4toRbjwOWJzbIt8XEA/4ei
LIXbOliihwJgysW0dRuXQtI5KqsFscnW/yEGmURhSuRGDjCLprQnUrxnQyASg7zf
NLVgGhthO+3oQj8YnJg4atC/jSXqqR5AAy2rUCeqlpscYDTX9O7Jf/+1T8fiZ8wb
JTUgiDsgeCOK7YKAZ+N3V3/lRsTKkUKqTHgVls6Pp7BJiLD2JgqlMslUc+7PeUC5
1NYZSNr6JCX3hba3OoOr2W11uTaeXx6/LpIF1vA6AMAeyNZnv7Xf9qUzgVw3U6iL
ZD7O/7AiFrFlU7TfzwZZbo/B5QIDAQABo4IClTCCApEwHQYDVR0OBBYEFIq0lfP5
4cdfs0TYQXqcj7Ubp3x7MB8GA1UdIwQYMBaAFKTNPmfRsiTzJQR+n15ISs3E9mPs
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODFBRC80Q0NCMDA5MDJD
QkUxMUVEOTk4MjRCNENDNEY5QUUwMi9wTTAtWjlHeUpQTWxCSDZmWGtoS3pjVDJZ
LXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3BNMC1aOUd5SlBNbEJINmZYa2hLemNUMlktdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RjgxQUQvNENDQjAwOTAyQ0JFMTFFRDk5ODI0QjRDQzRGOUFFMDIvRjlGODFFMzQ4
MEZBMTFFRDlCMzU5NTREQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADLHE8wDQYJKoZIhvcNAQELBQADggEBAII+chwmcvlpbsLW
zt+tPwgDcnPXyovoWVKVJGi0T2QEve9b6PlcSn8sMonhMt1/tVSM+mHoZZIKSWgv
xK21wXQydR60b0PttaiQo33AKjUJ7g24LS61x7aOnKRRuM7LQNnaV1Iu6Vu4+w1d
WroHxBHCb10wUwlD+7VGmHPpRnvQeKdaCQ8rPEMJ2c1W03SYBeEfUYpjYjTIJB75
gQrg65q3pOy/pnqI3czybb06SPlWi6R5paxa6d1dOenQAwyOmngOHdJt029r6Tax
n4ApjhF26HWjIulbyHKcUl7V6C5g8Nb0csURT+MZ/TbR2sPKYZJ4UJUjy3mYCzKF
a4V/vvk=
-----END CERTIFICATE-----
Generated at Sun May 19 06:14:37 2024 by rpki-client on console-ams.rpki-client.org