Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9130837/E3F87CB236E311ECBC8CC250C4F9AE02/1C032F5A36E711EC9581EC54C4F9AE02.roa
File:                     1C032F5A36E711EC9581EC54C4F9AE02.roa (raw, json)
Hash identifier:          +tCUTtxnIQqqquc3K0vLgojNJZtRQoBeN844N0y2nGE=
Subject key identifier:   D9:CC:3C:75:18:B1:F1:ED:53:FC:7D:11:94:F7:5A:9A:81:BC:39:38
Certificate issuer:       /CN=A9130837/serialNumber=5368B8C8D6963EAD839905A486F53C44B041A5EF
Certificate serial:       038D
Authority key identifier: 53:68:B8:C8:D6:96:3E:AD:83:99:05:A4:86:F5:3C:44:B0:41:A5:EF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U2i4yNaWPq2DmQWkhvU8RLBBpe8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9130837/E3F87CB236E311ECBC8CC250C4F9AE02/1C032F5A36E711EC9581EC54C4F9AE02.roa
Signing time:             Wed 29 Nov 2023 02:13:41 +0000
ROA not before:           Wed 29 Nov 2023 02:13:41 +0000
ROA not after:            Fri 31 Jan 2025 00:00:00 +0000
asID:                     132372
IP address blocks:        103.175.50.0/24 maxlen: 24
                          103.175.51.0/24 maxlen: 24
                          2400:18a0::/32 maxlen: 32
                          2400:18a0:1001::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9130837/E3F87CB236E311ECBC8CC250C4F9AE02/U2i4yNaWPq2DmQWkhvU8RLBBpe8.crl
                          rsync://rpki.apnic.net/member_repository/A9130837/E3F87CB236E311ECBC8CC250C4F9AE02/U2i4yNaWPq2DmQWkhvU8RLBBpe8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U2i4yNaWPq2DmQWkhvU8RLBBpe8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 909 (0x38d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9130837/serialNumber=5368B8C8D6963EAD839905A486F53C44B041A5EF
        Validity
            Not Before: Nov 29 02:13:41 2023 GMT
            Not After : Jan 31 00:00:00 2025 GMT
        Subject: CN=65669e55-efe9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:df:a4:4c:a9:5c:2e:2d:7e:d5:8b:b8:77:39:
                    d2:5e:3d:84:f1:c8:ce:72:ef:e8:3d:36:a6:d1:0b:
                    2f:2d:d4:b9:ba:cc:0b:3e:f8:e7:05:49:90:8b:47:
                    b0:79:12:2f:7a:38:98:00:d0:d6:77:20:ba:c8:97:
                    3e:d6:99:cf:18:24:ec:34:f7:1b:6f:cb:db:09:c3:
                    9c:87:b5:10:a8:b1:46:53:5a:7a:e7:fe:5b:79:37:
                    0d:ac:dc:30:d1:59:8b:2b:5b:18:f5:c0:c2:ab:9f:
                    98:f8:1f:01:2c:49:cb:15:eb:d1:ed:ec:96:51:32:
                    00:13:6f:c9:d2:e2:4f:de:5e:08:ed:e8:22:12:90:
                    ee:e2:cd:b9:6b:84:a7:2f:9a:08:09:4b:a6:34:8b:
                    a2:0c:19:35:57:42:c8:60:6b:2b:41:b7:e9:34:25:
                    e7:78:e7:57:7e:db:8c:7c:f5:4f:fe:7d:a1:d4:8d:
                    40:44:d9:43:b2:f9:99:ba:14:02:82:a7:27:9d:0f:
                    b0:6c:14:3e:1f:19:11:2f:12:22:44:4e:6b:bf:bb:
                    30:98:a7:01:83:3b:3c:4d:a3:46:f5:29:5c:a6:a3:
                    ed:d7:eb:65:70:fb:2a:1c:b5:11:96:42:56:04:75:
                    6b:a3:46:80:ad:96:6b:6d:43:73:9a:94:35:e6:ee:
                    fa:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:CC:3C:75:18:B1:F1:ED:53:FC:7D:11:94:F7:5A:9A:81:BC:39:38
            X509v3 Authority Key Identifier:
                keyid:53:68:B8:C8:D6:96:3E:AD:83:99:05:A4:86:F5:3C:44:B0:41:A5:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9130837/E3F87CB236E311ECBC8CC250C4F9AE02/U2i4yNaWPq2DmQWkhvU8RLBBpe8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U2i4yNaWPq2DmQWkhvU8RLBBpe8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130837/E3F87CB236E311ECBC8CC250C4F9AE02/1C032F5A36E711EC9581EC54C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.175.50.0/23
                IPv6:
                  2400:18a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         2c:33:68:74:fd:af:c2:e7:d8:75:0b:fc:80:75:f9:90:d1:4c:
         9c:ca:23:fb:a1:47:d2:d4:52:09:c9:a0:98:8e:f8:52:4d:e4:
         96:35:fc:a9:b1:a4:af:63:a1:20:ea:20:b5:f6:e1:6f:24:34:
         26:31:a2:df:4a:56:8f:df:8e:14:b2:2e:d5:57:76:a1:b9:6b:
         ab:6d:83:0a:66:71:ad:c4:a6:20:d6:d6:3c:bb:9f:ab:e4:d4:
         10:c4:83:00:d9:d4:73:bc:18:5e:0a:17:7c:b2:72:52:b8:b2:
         49:eb:2e:80:28:c0:78:76:66:2c:e9:a4:0e:3c:17:71:cd:70:
         50:ec:23:d8:93:d4:79:47:71:b3:2a:da:66:37:1c:b0:79:85:
         5c:3b:78:07:c2:92:ac:30:47:01:91:cc:0f:d6:32:4a:b0:4f:
         c4:f7:e8:08:7f:0a:c7:98:81:00:7f:74:17:14:e8:4a:15:2a:
         99:82:14:24:22:be:19:87:67:07:95:d9:ba:b9:2a:c2:93:71:
         ba:61:0e:72:40:3c:95:a6:79:58:5d:b7:77:1b:fc:eb:fe:46:
         94:2c:9a:6f:b2:8d:2d:6d:51:0e:a7:bf:b6:a5:f3:ff:d7:2d:
         b9:95:46:59:81:60:ec:c7:9c:2b:66:61:1d:f0:93:41:73:ca:
         5a:56:85:ee
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICA40wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzA4MzcxMTAvBgNVBAUTKDUzNjhCOEM4RDY5NjNFQUQ4Mzk5MDVBNDg2RjUzQzQ0
QjA0MUE1RUYwHhcNMjMxMTI5MDIxMzQxWhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NTY2OWU1NS1lZmU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA29+kTKlcLi1+1Yu4dznSXj2E8cjOcu/oPTam0QsvLdS5uswLPvjnBUmQi0ew
eRIvejiYANDWdyC6yJc+1pnPGCTsNPcbb8vbCcOch7UQqLFGU1p65/5beTcNrNww
0VmLK1sY9cDCq5+Y+B8BLEnLFevR7eyWUTIAE2/J0uJP3l4I7egiEpDu4s25a4Sn
L5oICUumNIuiDBk1V0LIYGsrQbfpNCXneOdXftuMfPVP/n2h1I1ARNlDsvmZuhQC
gqcnnQ+wbBQ+HxkRLxIiRE5rv7swmKcBgzs8TaNG9SlcpqPt1+tlcPsqHLURlkJW
BHVro0aArZZrbUNzmpQ15u76QQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFNnMPHUY
sfHtU/x9EZT3WpqBvDk4MB8GA1UdIwQYMBaAFFNouMjWlj6tg5kFpIb1PESwQaXv
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDgzNy9FM0Y4N0NCMjM2
RTMxMUVDQkM4Q0MyNTBDNEY5QUUwMi9VMmk0eU5hV1BxMkRtUVdraHZVOFJMQkJw
ZTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1UyaTR5TmFXUHEyRG1RV2todlU4UkxCQnBlOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzA4MzcvRTNGODdDQjIzNkUzMTFFQ0JDOENDMjUwQzRGOUFFMDIvMUMwMzJGNUEz
NkU3MTFFQzk1ODFFQzU0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E
HzAdMAwEAgABMAYDBAFnrzIwDQQCAAIwBwMFACQAGKAwDQYJKoZIhvcNAQELBQAD
ggEBACwzaHT9r8Ln2HUL/IB1+ZDRTJzKI/uhR9LUUgnJoJiO+FJN5JY1/KmxpK9j
oSDqILX24W8kNCYxot9KVo/fjhSyLtVXdqG5a6ttgwpmca3EpiDW1jy7n6vk1BDE
gwDZ1HO8GF4KF3yyclK4sknrLoAowHh2ZizppA48F3HNcFDsI9iT1HlHcbMq2mY3
HLB5hVw7eAfCkqwwRwGRzA/WMkqwT8T36Ah/CseYgQB/dBcU6EoVKpmCFCQivhmH
ZweV2bq5KsKTcbphDnJAPJWmeVhdt3cb/Ov+RpQsmm+yjS1tUQ6nv7al8//XLbmV
RlmBYOzHnCtmYR3wk0FzylpWhe4=
-----END CERTIFICATE-----
Generated at Sat Nov 23 01:27:20 2024 by rpki-client on console-ams.rpki-client.org