Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9130416/CA6D58B4B67411EDBEB60F39C4F9AE02/B24758AE772311EFA5510A63C4F9AE02.roa
File:                     B24758AE772311EFA5510A63C4F9AE02.roa (raw, json)
Hash identifier:          46Rei/bZZJIVATTcdxCQjd0v0xlUhPPipw2D8+sS4KM=
Subject key identifier:   3F:55:47:E3:48:96:DD:C7:4F:EB:D3:24:0D:63:26:B0:C8:21:6A:6A
Certificate issuer:       /CN=A9130416/serialNumber=9906A870DADD14F6D4BA86F2CC2C1E5E470DE8B2
Certificate serial:       013F
Authority key identifier: 99:06:A8:70:DA:DD:14:F6:D4:BA:86:F2:CC:2C:1E:5E:47:0D:E8:B2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mQaocNrdFPbUuobyzCweXkcN6LI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9130416/CA6D58B4B67411EDBEB60F39C4F9AE02/B24758AE772311EFA5510A63C4F9AE02.roa
Signing time:             Fri 20 Sep 2024 07:46:21 +0000
ROA not before:           Fri 20 Sep 2024 07:46:21 +0000
ROA not after:            Wed 28 May 2025 00:00:00 +0000
asID:                     10225
IP address blocks:        103.182.210.0/23 maxlen: 23
                          103.182.210.0/24 maxlen: 24
                          103.182.211.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9130416/CA6D58B4B67411EDBEB60F39C4F9AE02/mQaocNrdFPbUuobyzCweXkcN6LI.crl
                          rsync://rpki.apnic.net/member_repository/A9130416/CA6D58B4B67411EDBEB60F39C4F9AE02/mQaocNrdFPbUuobyzCweXkcN6LI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mQaocNrdFPbUuobyzCweXkcN6LI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 02:36:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 319 (0x13f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9130416/serialNumber=9906A870DADD14F6D4BA86F2CC2C1E5E470DE8B2
        Validity
            Not Before: Sep 20 07:46:21 2024 GMT
            Not After : May 28 00:00:00 2025 GMT
        Subject: CN=66ed284c-263b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c6:07:d1:04:3e:48:24:64:87:c8:ef:72:6e:
                    c1:c7:90:e4:9f:87:01:c6:fa:b9:8e:9c:94:72:f5:
                    23:94:e2:4c:95:32:ad:cf:80:50:5a:4a:a7:fa:6d:
                    a0:4c:f5:38:49:44:ce:d6:67:99:21:bf:7c:82:a6:
                    4a:8f:fd:32:bf:78:a2:90:42:23:bd:34:d7:e4:03:
                    35:80:9e:86:04:4f:90:3e:58:ee:d7:c2:36:dd:78:
                    39:4a:fd:7b:d2:93:37:df:1f:fb:54:f1:27:d0:2a:
                    31:19:b1:01:09:d5:40:0d:29:e9:9c:3c:db:8a:5b:
                    83:b8:08:93:64:a7:29:8d:b4:74:e3:ed:61:7b:10:
                    13:cb:40:5c:9f:6f:2d:91:2c:e6:3a:07:57:52:e8:
                    b1:7b:9a:54:09:bd:c1:7c:41:7d:09:d1:43:60:3a:
                    70:58:b6:28:f8:e3:fa:45:e5:3d:3d:23:c4:33:b0:
                    26:a2:ee:a6:54:fc:93:22:45:24:69:7e:f1:f4:d7:
                    bc:fa:0e:55:71:aa:a7:0b:ec:15:fe:75:70:b9:f1:
                    19:19:fd:d1:2e:d6:fd:cc:ea:a8:70:d2:15:27:1d:
                    6e:14:69:0c:d8:82:cf:7c:0c:1a:f5:ed:e3:07:5a:
                    4f:6d:a1:18:14:f9:02:ff:05:93:c0:70:4c:61:8e:
                    04:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:55:47:E3:48:96:DD:C7:4F:EB:D3:24:0D:63:26:B0:C8:21:6A:6A
            X509v3 Authority Key Identifier:
                keyid:99:06:A8:70:DA:DD:14:F6:D4:BA:86:F2:CC:2C:1E:5E:47:0D:E8:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9130416/CA6D58B4B67411EDBEB60F39C4F9AE02/mQaocNrdFPbUuobyzCweXkcN6LI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mQaocNrdFPbUuobyzCweXkcN6LI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130416/CA6D58B4B67411EDBEB60F39C4F9AE02/B24758AE772311EFA5510A63C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.182.210.0/23

    Signature Algorithm: sha256WithRSAEncryption
         58:6a:5c:1d:45:70:18:6a:81:27:53:da:99:0a:33:71:30:e1:
         47:1d:70:71:ee:df:6d:b5:fa:ff:7b:90:5d:53:da:ca:3f:53:
         2a:78:c9:8b:5b:62:b4:44:58:42:e7:8f:62:3b:b1:ea:11:c3:
         9a:50:83:04:12:ca:f2:fd:45:74:5f:64:91:53:87:dc:f3:a9:
         cf:5c:99:74:36:96:1e:f4:92:57:de:03:d9:b8:ad:5b:82:68:
         91:d5:6a:18:9d:a6:de:6b:2d:30:3d:99:ae:f5:3d:ad:09:84:
         2c:7d:d1:7e:e8:19:ea:3f:4c:5b:af:eb:c6:53:ec:4f:84:d2:
         7c:4a:7b:4a:b8:f0:39:f7:07:af:83:0f:71:78:72:48:6d:54:
         ab:99:e7:11:f4:68:c8:c4:9a:91:e4:5e:b9:56:99:cf:f5:00:
         26:23:8f:45:6c:66:1a:8c:f1:19:73:3b:fa:c8:0e:fc:0e:b7:
         c8:84:19:42:58:eb:eb:36:7f:44:43:43:7a:6d:25:58:e2:bc:
         53:c2:fd:b3:ea:14:94:f7:ba:73:ce:4f:1f:1c:6a:49:4e:aa:
         d9:f6:10:76:99:03:c4:5c:37:89:6e:58:49:98:d4:f4:85:42:
         c4:f8:bf:84:73:30:83:f9:bc:5c:58:0f:7b:4b:60:20:77:b7:
         95:10:7e:da
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAT8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzA0MTYxMTAvBgNVBAUTKDk5MDZBODcwREFERDE0RjZENEJBODZGMkNDMkMxRTVF
NDcwREU4QjIwHhcNMjQwOTIwMDc0NjIxWhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02NmVkMjg0Yy0yNjNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvcYH0QQ+SCRkh8jvcm7Bx5Dkn4cBxvq5jpyUcvUjlOJMlTKtz4BQWkqn+m2g
TPU4SUTO1meZIb98gqZKj/0yv3iikEIjvTTX5AM1gJ6GBE+QPlju18I23Xg5Sv17
0pM33x/7VPEn0CoxGbEBCdVADSnpnDzbiluDuAiTZKcpjbR04+1hexATy0Bcn28t
kSzmOgdXUuixe5pUCb3BfEF9CdFDYDpwWLYo+OP6ReU9PSPEM7Amou6mVPyTIkUk
aX7x9Ne8+g5VcaqnC+wV/nVwufEZGf3RLtb9zOqocNIVJx1uFGkM2ILPfAwa9e3j
B1pPbaEYFPkC/wWTwHBMYY4E9wIDAQABo4IClTCCApEwHQYDVR0OBBYEFD9VR+NI
lt3HT+vTJA1jJrDIIWpqMB8GA1UdIwQYMBaAFJkGqHDa3RT21LqG8swsHl5HDeiy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDQxNi9DQTZENThCNEI2
NzQxMUVEQkVCNjBGMzlDNEY5QUUwMi9tUWFvY05yZEZQYlV1b2J5ekN3ZVhrY042
TEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL21RYW9jTnJkRlBiVXVvYnl6Q3dlWGtjTjZMSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzA0MTYvQ0E2RDU4QjRCNjc0MTFFREJFQjYwRjM5QzRGOUFFMDIvQjI0NzU4QUU3
NzIzMTFFRkE1NTEwQTYzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnttIwDQYJKoZIhvcNAQELBQADggEBAFhqXB1FcBhqgSdT
2pkKM3Ew4UcdcHHu3221+v97kF1T2so/Uyp4yYtbYrREWELnj2I7seoRw5pQgwQS
yvL9RXRfZJFTh9zzqc9cmXQ2lh70klfeA9m4rVuCaJHVahidpt5rLTA9ma71Pa0J
hCx90X7oGeo/TFuv68ZT7E+E0nxKe0q48Dn3B6+DD3F4ckhtVKuZ5xH0aMjEmpHk
XrlWmc/1ACYjj0VsZhqM8RlzO/rIDvwOt8iEGUJY6+s2f0RDQ3ptJVjivFPC/bPq
FJT3unPOTx8caklOqtn2EHaZA8RcN4luWEmY1PSFQsT4v4RzMIP5vFxYD3tLYCB3
t5UQfto=
-----END CERTIFICATE-----
Generated at Thu Nov 21 05:05:54 2024 by rpki-client on console-fra.rpki-client.org