Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912D0BC/2024B44834B411ED9D70EF30C4F9AE02/C202E82834B611ED815AAB32C4F9AE02.roa
File:                     C202E82834B611ED815AAB32C4F9AE02.roa (raw, json)
Hash identifier:          hw3e3hTzsjowGN0Wxe4NUA2TCLqWrlYb3yFyRPFsovQ=
Subject key identifier:   21:E7:9B:9B:61:86:E0:6E:9E:33:FE:90:C0:62:66:D1:C6:D2:99:6A
Certificate issuer:       /CN=A912D0BC/serialNumber=2D3A0A23C59B4DF6DBE01A4C5F3B7C8BFFFF700D
Certificate serial:       01AB
Authority key identifier: 2D:3A:0A:23:C5:9B:4D:F6:DB:E0:1A:4C:5F:3B:7C:8B:FF:FF:70:0D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LToKI8WbTfbb4BpMXzt8i___cA0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912D0BC/2024B44834B411ED9D70EF30C4F9AE02/C202E82834B611ED815AAB32C4F9AE02.roa
Signing time:             Fri 25 Oct 2024 02:46:53 +0000
ROA not before:           Fri 25 Oct 2024 02:46:53 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     137538
IP address blocks:        103.5.218.0/23 maxlen: 24
                          2400:aae0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912D0BC/2024B44834B411ED9D70EF30C4F9AE02/LToKI8WbTfbb4BpMXzt8i___cA0.crl
                          rsync://rpki.apnic.net/member_repository/A912D0BC/2024B44834B411ED9D70EF30C4F9AE02/LToKI8WbTfbb4BpMXzt8i___cA0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LToKI8WbTfbb4BpMXzt8i___cA0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 01:48:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 427 (0x1ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912D0BC/serialNumber=2D3A0A23C59B4DF6DBE01A4C5F3B7C8BFFFF700D
        Validity
            Not Before: Oct 25 02:46:53 2024 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=671b069c-4060
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:b1:c5:bf:a9:90:6c:4c:e9:20:fb:84:1d:d5:
                    60:71:43:14:8a:7d:da:00:e4:2d:ea:41:99:9e:29:
                    8a:7c:b1:6f:e7:e8:6a:9c:7e:cc:d2:1d:20:f4:57:
                    6e:74:e0:89:52:62:1e:3b:94:73:b3:cd:68:04:5a:
                    54:5e:48:2b:36:ed:77:46:63:93:c9:17:58:43:72:
                    41:44:7c:2b:e9:d3:2d:d9:8a:1f:3d:0b:55:cb:c5:
                    ed:72:7b:98:f2:16:05:ca:d6:48:2c:73:a2:b5:0e:
                    08:4f:a5:7b:41:ee:db:1a:39:db:c0:66:4b:5f:a0:
                    ad:44:d2:f3:27:65:69:a6:c4:59:bb:9d:cf:44:89:
                    30:77:48:6c:3e:12:87:8e:bf:33:b6:54:63:6c:d9:
                    d6:b2:b5:de:b2:c3:fe:d2:e2:2f:0c:18:fd:d1:16:
                    3f:c9:7f:63:f7:fc:17:f9:e5:52:0c:fc:ac:44:69:
                    35:30:f5:f4:f4:ef:93:ea:17:32:40:b4:39:e8:2b:
                    78:de:ef:f0:85:28:2c:d5:d5:d2:e0:1d:e5:c5:f3:
                    b9:28:f9:1d:af:bd:0d:f1:1a:14:e6:c3:0a:b6:83:
                    89:54:84:cc:63:fb:61:83:04:81:2d:eb:d6:5e:4a:
                    5b:88:94:ba:e3:73:ba:4e:87:7b:c7:38:bf:44:60:
                    47:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:E7:9B:9B:61:86:E0:6E:9E:33:FE:90:C0:62:66:D1:C6:D2:99:6A
            X509v3 Authority Key Identifier:
                keyid:2D:3A:0A:23:C5:9B:4D:F6:DB:E0:1A:4C:5F:3B:7C:8B:FF:FF:70:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912D0BC/2024B44834B411ED9D70EF30C4F9AE02/LToKI8WbTfbb4BpMXzt8i___cA0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LToKI8WbTfbb4BpMXzt8i___cA0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D0BC/2024B44834B411ED9D70EF30C4F9AE02/C202E82834B611ED815AAB32C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.5.218.0/23
                IPv6:
                  2400:aae0::/32

    Signature Algorithm: sha256WithRSAEncryption
         53:89:d1:51:3e:3d:c0:00:51:75:a9:86:61:82:7c:cf:3a:f8:
         10:ef:c6:be:ee:66:4e:e7:31:c4:30:55:70:66:6c:ad:98:92:
         45:40:50:34:a7:8c:28:42:b7:10:50:17:a7:7e:61:6c:06:06:
         ff:30:df:c1:cb:0c:59:5a:5e:98:a5:16:70:80:ea:60:36:f8:
         13:fc:d7:11:93:56:e9:4e:ab:8c:3f:e0:79:95:cb:01:af:03:
         33:5b:51:66:21:cd:c6:59:58:da:e2:39:c9:9e:94:11:29:fb:
         80:b4:21:91:be:74:7c:45:ff:3f:46:17:e9:5a:60:6a:72:99:
         62:52:c0:63:97:53:a8:21:e1:aa:9f:d8:28:b2:02:f9:60:1a:
         b3:e1:3e:83:22:f2:c7:1b:20:2e:36:99:7f:3d:27:83:85:2a:
         6b:8b:96:72:c9:e1:91:56:a2:9b:b0:e1:79:d4:0f:f3:e6:f1:
         f6:7f:12:6b:e8:8d:f6:34:68:b2:19:c9:00:e9:f4:99:a5:ef:
         9c:bb:43:de:97:6c:e7:88:7d:52:5e:e8:db:d0:b9:56:c9:39:
         b9:a3:72:aa:98:50:46:9a:1f:69:c9:cc:48:d7:ad:f9:be:a8:
         a2:40:3a:f6:62:17:72:a6:fe:c7:6e:c1:ef:95:6a:46:f7:81:
         63:11:61:73
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICAaswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkQwQkMxMTAvBgNVBAUTKDJEM0EwQTIzQzU5QjRERjZEQkUwMUE0QzVGM0I3QzhC
RkZGRjcwMEQwHhcNMjQxMDI1MDI0NjUzWhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzFiMDY5Yy00MDYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzbHFv6mQbEzpIPuEHdVgcUMUin3aAOQt6kGZnimKfLFv5+hqnH7M0h0g9Fdu
dOCJUmIeO5Rzs81oBFpUXkgrNu13RmOTyRdYQ3JBRHwr6dMt2YofPQtVy8XtcnuY
8hYFytZILHOitQ4IT6V7Qe7bGjnbwGZLX6CtRNLzJ2VppsRZu53PRIkwd0hsPhKH
jr8ztlRjbNnWsrXessP+0uIvDBj90RY/yX9j9/wX+eVSDPysRGk1MPX09O+T6hcy
QLQ56Ct43u/whSgs1dXS4B3lxfO5KPkdr70N8RoU5sMKtoOJVITMY/thgwSBLevW
XkpbiJS643O6Tod7xzi/RGBHgwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFCHnm5th
huBunjP+kMBiZtHG0plqMB8GA1UdIwQYMBaAFC06CiPFm0322+AaTF87fIv//3AN
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDBCQy8yMDI0QjQ0ODM0
QjQxMUVEOUQ3MEVGMzBDNEY5QUUwMi9MVG9LSThXYlRmYmI0QnBNWHp0OGlfX19j
QTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0xUb0tJOFdiVGZiYjRCcE1YenQ4aV9fX2NBMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MkQwQkMvMjAyNEI0NDgzNEI0MTFFRDlENzBFRjMwQzRGOUFFMDIvQzIwMkU4Mjgz
NEI2MTFFRDgxNUFBQjMyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E
HzAdMAwEAgABMAYDBAFnBdowDQQCAAIwBwMFACQAquAwDQYJKoZIhvcNAQELBQAD
ggEBAFOJ0VE+PcAAUXWphmGCfM86+BDvxr7uZk7nMcQwVXBmbK2YkkVAUDSnjChC
txBQF6d+YWwGBv8w38HLDFlaXpilFnCA6mA2+BP81xGTVulOq4w/4HmVywGvAzNb
UWYhzcZZWNriOcmelBEp+4C0IZG+dHxF/z9GF+laYGpymWJSwGOXU6gh4aqf2Ciy
AvlgGrPhPoMi8scbIC42mX89J4OFKmuLlnLJ4ZFWopuw4XnUD/Pm8fZ/EmvojfY0
aLIZyQDp9Jml75y7Q96XbOeIfVJe6NvQuVbJObmjcqqYUEaaH2nJzEjXrfm+qKJA
OvZiF3Km/sduwe+Vakb3gWMRYXM=
-----END CERTIFICATE-----
Generated at Sat Nov 23 03:58:37 2024 by rpki-client on console-ams.rpki-client.org