Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9127E99/0ACE19B07A8511EDAD692887C4F9AE02/64D427963D8B11EE80D1E96DC4F9AE02.roa
File:                     64D427963D8B11EE80D1E96DC4F9AE02.roa (raw, json)
Hash identifier:          fdlRqtNSwYBeTIqhoeb8XWzhK9Fv7Fkpx1Jd+sxZc0I=
Subject key identifier:   98:FC:5C:76:99:B8:87:65:A2:65:F5:73:39:4F:49:C3:34:F7:D4:A5
Certificate issuer:       /CN=A9127E99/serialNumber=E2534D26C78C9701790996438C114108254776AA
Certificate serial:       013A
Authority key identifier: E2:53:4D:26:C7:8C:97:01:79:09:96:43:8C:11:41:08:25:47:76:AA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4lNNJseMlwF5CZZDjBFBCCVHdqo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9127E99/0ACE19B07A8511EDAD692887C4F9AE02/64D427963D8B11EE80D1E96DC4F9AE02.roa
Signing time:             Sat 27 Jul 2024 04:46:42 +0000
ROA not before:           Sat 27 Jul 2024 04:46:42 +0000
ROA not after:            Tue 30 Sep 2025 00:00:00 +0000
asID:                     133534
IP address blocks:        103.234.108.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9127E99/0ACE19B07A8511EDAD692887C4F9AE02/4lNNJseMlwF5CZZDjBFBCCVHdqo.crl
                          rsync://rpki.apnic.net/member_repository/A9127E99/0ACE19B07A8511EDAD692887C4F9AE02/4lNNJseMlwF5CZZDjBFBCCVHdqo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4lNNJseMlwF5CZZDjBFBCCVHdqo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:14:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 314 (0x13a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9127E99/serialNumber=E2534D26C78C9701790996438C114108254776AA
        Validity
            Not Before: Jul 27 04:46:42 2024 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=66a47bb2-17a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:15:26:53:34:f0:d8:7e:26:68:7d:29:66:ad:
                    32:fd:d4:da:6e:58:fa:63:e6:50:21:df:22:3c:9a:
                    59:3c:b8:50:71:04:63:6d:54:05:0c:ed:ad:79:95:
                    bf:ed:0d:0b:d7:bf:b2:a7:bb:85:3c:2a:8b:c7:84:
                    59:d3:8e:bc:1a:a9:67:73:7d:d0:e8:30:af:2a:7d:
                    65:6a:0e:73:f5:8b:f7:ab:b9:28:6c:c7:5c:61:c8:
                    eb:9a:f5:d8:52:e6:ec:70:12:09:6e:8f:00:7c:a8:
                    15:7b:ad:40:36:97:56:e5:f0:17:69:c9:c2:a3:66:
                    4b:96:87:7b:29:00:4e:4c:e8:90:92:84:b8:88:01:
                    11:cf:bd:3a:f1:ce:57:d8:15:cc:45:76:df:f7:5c:
                    0d:f9:2c:98:a5:05:07:34:68:87:d5:12:57:fd:b4:
                    6f:6c:68:73:a0:a9:ab:14:29:fe:36:1a:c5:dc:bc:
                    fa:97:d7:e5:7e:5c:01:48:60:59:7f:c0:b5:41:c2:
                    ba:18:d8:40:32:4e:f6:d4:66:2a:db:9b:e8:ce:34:
                    6c:18:80:34:65:12:1e:6b:00:dd:ba:e8:30:1f:d3:
                    fa:28:4f:ed:c9:eb:d3:ac:f8:b5:6b:23:fc:95:b3:
                    51:92:5e:ea:57:d8:46:53:ba:8e:8f:74:ed:b0:cb:
                    c1:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:FC:5C:76:99:B8:87:65:A2:65:F5:73:39:4F:49:C3:34:F7:D4:A5
            X509v3 Authority Key Identifier:
                keyid:E2:53:4D:26:C7:8C:97:01:79:09:96:43:8C:11:41:08:25:47:76:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9127E99/0ACE19B07A8511EDAD692887C4F9AE02/4lNNJseMlwF5CZZDjBFBCCVHdqo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4lNNJseMlwF5CZZDjBFBCCVHdqo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127E99/0ACE19B07A8511EDAD692887C4F9AE02/64D427963D8B11EE80D1E96DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.234.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:47:37:23:29:a6:1a:06:71:e5:44:2b:84:23:55:84:62:8e:
         b8:0c:68:32:22:e0:1e:42:bb:05:60:3d:fe:26:1f:3a:16:0d:
         d4:d8:d3:8d:df:45:95:f0:a8:2c:74:1c:1f:a9:75:2b:cc:f4:
         5e:7f:0c:aa:01:40:76:1e:bf:fb:75:bc:7f:0b:dd:75:54:51:
         5c:c7:9b:eb:f3:d7:04:76:d5:a3:b7:ae:42:7d:00:36:fc:cf:
         91:6d:38:65:67:e4:29:29:3b:f0:6d:42:16:ab:d7:96:d6:9b:
         8f:e9:74:5a:c6:09:e4:f8:c6:c3:53:43:f9:d1:0d:dd:d2:55:
         02:f0:a2:d2:af:9f:44:4e:91:a4:1e:25:c5:1e:be:e0:3c:a4:
         2a:6d:2f:cd:bd:b3:5f:7b:78:94:a1:13:49:9b:2a:95:7c:5b:
         04:ac:43:0d:0b:fc:ad:a8:bd:e3:8b:5d:55:13:1e:f3:db:30:
         41:19:f0:49:93:d1:59:68:25:ec:19:bc:71:f2:93:56:e7:7c:
         bc:db:36:d6:d2:d5:25:3a:4a:a6:c2:c7:28:6e:ac:c2:44:b4:
         40:c2:af:ab:7c:87:43:2f:0e:03:70:ec:f1:e4:ca:b0:6a:58:
         68:8f:a5:a6:0c:04:ae:fe:6c:f9:13:1b:cb:b8:52:2e:1f:43:
         8f:bc:25:c2
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICATowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjdFOTkxMTAvBgNVBAUTKEUyNTM0RDI2Qzc4Qzk3MDE3OTA5OTY0MzhDMTE0MTA4
MjU0Nzc2QUEwHhcNMjQwNzI3MDQ0NjQyWhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmE0N2JiMi0xN2E2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1BUmUzTw2H4maH0pZq0y/dTablj6Y+ZQId8iPJpZPLhQcQRjbVQFDO2teZW/
7Q0L17+yp7uFPCqLx4RZ0468Gqlnc33Q6DCvKn1lag5z9Yv3q7kobMdcYcjrmvXY
UubscBIJbo8AfKgVe61ANpdW5fAXacnCo2ZLlod7KQBOTOiQkoS4iAERz7068c5X
2BXMRXbf91wN+SyYpQUHNGiH1RJX/bRvbGhzoKmrFCn+NhrF3Lz6l9flflwBSGBZ
f8C1QcK6GNhAMk721GYq25vozjRsGIA0ZRIeawDduugwH9P6KE/tyevTrPi1ayP8
lbNRkl7qV9hGU7qOj3TtsMvBPwIDAQABo4IClTCCApEwHQYDVR0OBBYEFJj8XHaZ
uIdlomX1czlPScM099SlMB8GA1UdIwQYMBaAFOJTTSbHjJcBeQmWQ4wRQQglR3aq
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyN0U5OS8wQUNFMTlCMDdB
ODUxMUVEQUQ2OTI4ODdDNEY5QUUwMi80bE5OSnNlTWx3RjVDWlpEakJGQkNDVkhk
cW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzRsTk5Kc2VNbHdGNUNaWkRqQkZCQ0NWSGRxby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MjdFOTkvMEFDRTE5QjA3QTg1MTFFREFENjkyODg3QzRGOUFFMDIvNjRENDI3OTYz
RDhCMTFFRTgwRDFFOTZEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABn6mwwDQYJKoZIhvcNAQELBQADggEBAANHNyMpphoGceVE
K4QjVYRijrgMaDIi4B5CuwVgPf4mHzoWDdTY043fRZXwqCx0HB+pdSvM9F5/DKoB
QHYev/t1vH8L3XVUUVzHm+vz1wR21aO3rkJ9ADb8z5FtOGVn5CkpO/BtQhar15bW
m4/pdFrGCeT4xsNTQ/nRDd3SVQLwotKvn0ROkaQeJcUevuA8pCptL829s197eJSh
E0mbKpV8WwSsQw0L/K2oveOLXVUTHvPbMEEZ8EmT0VloJewZvHHyk1bnfLzbNtbS
1SU6SqbCxyhurMJEtEDCr6t8h0MvDgNw7PHkyrBqWGiPpaYMBK7+bPkTG8u4Ui4f
Q4+8JcI=
-----END CERTIFICATE-----
Generated at Sat Nov 23 03:58:36 2024 by rpki-client on console-ams.rpki-client.org