Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9132F12/FF333B8A68C111EFA753A164C4F9AE02/A1418C5E68C411EF841B7987C4F9AE02.roa
File:                     A1418C5E68C411EF841B7987C4F9AE02.roa (raw, json)
Hash identifier:          5JMwnpM+0tjC6vQa7tr2/6x8ouVd1sEGMZJr/zVPnoE=
Subject key identifier:   4C:86:79:CD:78:9B:A0:96:2A:4F:78:D3:C7:10:BD:48:9F:B1:AA:00
Certificate issuer:       /CN=A9132F12/serialNumber=A69EE62C5AE881174A42123759EA423D61F73423
Certificate serial:       02
Authority key identifier: A6:9E:E6:2C:5A:E8:81:17:4A:42:12:37:59:EA:42:3D:61:F7:34:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pp7mLFrogRdKQhI3WepCPWH3NCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9132F12/FF333B8A68C111EFA753A164C4F9AE02/A1418C5E68C411EF841B7987C4F9AE02.roa
Signing time:             Mon 02 Sep 2024 00:45:20 +0000
ROA not before:           Mon 02 Sep 2024 00:45:20 +0000
ROA not after:            Thu 01 May 2025 00:00:00 +0000
asID:                     1221
IP address blocks:        103.247.118.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9132F12/FF333B8A68C111EFA753A164C4F9AE02/pp7mLFrogRdKQhI3WepCPWH3NCM.crl
                          rsync://rpki.apnic.net/member_repository/A9132F12/FF333B8A68C111EFA753A164C4F9AE02/pp7mLFrogRdKQhI3WepCPWH3NCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pp7mLFrogRdKQhI3WepCPWH3NCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9132F12/serialNumber=A69EE62C5AE881174A42123759EA423D61F73423
        Validity
            Not Before: Sep  2 00:45:20 2024 GMT
            Not After : May  1 00:00:00 2025 GMT
        Subject: CN=66d50aa0-d988
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:20:3d:ca:bb:d4:33:cf:10:c8:7c:37:79:44:
                    a2:6a:8c:13:dc:fd:7e:2f:3b:e2:4d:28:08:2c:50:
                    74:b0:f9:1f:e5:ba:be:62:9b:a0:39:93:ec:54:ea:
                    ed:d0:32:cf:d6:0e:6e:ac:54:5c:55:5e:bb:a0:88:
                    ca:e6:89:f2:a4:a4:0e:91:63:95:11:a4:1c:29:b3:
                    69:87:fc:cc:ed:69:14:d1:d7:f3:34:95:85:86:1f:
                    93:f1:c4:63:d1:ca:89:77:87:1b:61:a0:db:1d:1e:
                    7d:48:ca:49:73:bf:1d:33:48:e8:76:e0:fa:72:52:
                    8e:ee:86:c1:a4:28:37:99:01:12:d8:ed:72:05:36:
                    4c:99:fa:c5:1e:65:cd:79:fa:4e:87:fa:f4:18:ed:
                    e6:25:58:61:e6:5b:bc:42:af:65:71:3e:6a:ea:41:
                    4a:ee:3c:e6:9c:53:4d:fd:7f:61:ac:20:68:c2:78:
                    ee:77:bd:49:c1:80:24:02:7d:e5:db:e7:dc:9f:a1:
                    7e:b6:62:13:bb:a1:3a:4d:cb:43:77:53:5d:6c:bf:
                    10:35:53:07:bf:ee:73:1c:db:ae:c9:0b:ab:c1:57:
                    03:00:e9:50:50:38:14:11:b4:6e:2c:e2:3d:cb:36:
                    c7:43:1d:64:e4:e8:5c:98:f4:63:a8:b2:7a:d1:2d:
                    0a:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:86:79:CD:78:9B:A0:96:2A:4F:78:D3:C7:10:BD:48:9F:B1:AA:00
            X509v3 Authority Key Identifier:
                keyid:A6:9E:E6:2C:5A:E8:81:17:4A:42:12:37:59:EA:42:3D:61:F7:34:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9132F12/FF333B8A68C111EFA753A164C4F9AE02/pp7mLFrogRdKQhI3WepCPWH3NCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pp7mLFrogRdKQhI3WepCPWH3NCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132F12/FF333B8A68C111EFA753A164C4F9AE02/A1418C5E68C411EF841B7987C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.247.118.0/23

    Signature Algorithm: sha256WithRSAEncryption
         28:2f:38:a2:a9:82:45:7f:ef:6c:8d:03:bb:2c:bb:85:9d:dc:
         4b:7c:a7:d7:d7:26:9b:4a:d4:70:8c:45:d2:af:15:4c:0f:05:
         5c:44:a1:f7:64:67:01:a7:e2:5f:ff:f4:97:14:64:d0:cc:eb:
         ca:a8:ca:c0:c4:c4:86:c8:92:16:8f:19:52:05:5c:6e:cc:64:
         16:e6:0d:37:9c:b5:f6:a6:54:d8:89:c4:a1:da:3d:b6:9d:3b:
         24:0e:97:51:b9:03:c6:70:bf:32:d4:54:ff:47:f6:88:f0:3a:
         5d:58:80:60:0c:45:6a:2b:d5:5a:62:2c:c3:f6:96:08:d3:86:
         57:7d:b9:94:3d:6c:7f:79:a4:ed:43:c6:b9:33:06:26:26:f4:
         86:aa:69:8d:c6:d0:f1:75:fc:38:4b:3c:00:aa:72:41:1f:79:
         de:f4:29:64:ba:31:4c:13:76:0e:d3:d6:48:8d:06:1b:5b:2d:
         23:1b:ca:58:63:b2:de:41:98:41:86:86:81:f7:49:a0:ac:53:
         10:5c:3a:63:62:72:2a:bc:1b:57:a2:c2:fc:c5:39:98:83:5b:
         e4:9c:a3:4d:1b:bb:40:7d:fa:73:73:ff:d2:0c:a5:ee:78:01:
         66:84:fc:28:f6:7f:16:8f:84:d2:11:08:e7:ae:ba:32:94:81:
         54:f8:9e:62
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz
MkYxMjExMC8GA1UEBRMoQTY5RUU2MkM1QUU4ODExNzRBNDIxMjM3NTlFQTQyM0Q2
MUY3MzQyMzAeFw0yNDA5MDIwMDQ1MjBaFw0yNTA1MDEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY2ZDUwYWEwLWQ5ODgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDQID3Ku9QzzxDIfDd5RKJqjBPc/X4vO+JNKAgsUHSw+R/lur5im6A5k+xU6u3Q
Ms/WDm6sVFxVXrugiMrmifKkpA6RY5URpBwps2mH/MztaRTR1/M0lYWGH5PxxGPR
yol3hxthoNsdHn1Iyklzvx0zSOh24PpyUo7uhsGkKDeZARLY7XIFNkyZ+sUeZc15
+k6H+vQY7eYlWGHmW7xCr2VxPmrqQUruPOacU039f2GsIGjCeO53vUnBgCQCfeXb
59yfoX62YhO7oTpNy0N3U11svxA1Uwe/7nMc267JC6vBVwMA6VBQOBQRtG4s4j3L
NsdDHWTk6FyY9GOosnrRLQozAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUTIZ5zXib
oJYqT3jTxxC9SJ+xqgAwHwYDVR0jBBgwFoAUpp7mLFrogRdKQhI3WepCPWH3NCMw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMyRjEyL0ZGMzMzQjhBNjhD
MTExRUZBNzUzQTE2NEM0RjlBRTAyL3BwN21MRnJvZ1JkS1FoSTNXZXBDUFdIM05D
TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvcHA3bUxGcm9nUmRLUWhJM1dlcENQV0gzTkNNLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
MkYxMi9GRjMzM0I4QTY4QzExMUVGQTc1M0ExNjRDNEY5QUUwMi9BMTQxOEM1RTY4
QzQxMUVGODQxQjc5ODdDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAWf3djANBgkqhkiG9w0BAQsFAAOCAQEAKC84oqmCRX/vbI0D
uyy7hZ3cS3yn19cmm0rUcIxF0q8VTA8FXESh92RnAafiX//0lxRk0MzryqjKwMTE
hsiSFo8ZUgVcbsxkFuYNN5y19qZU2InEodo9tp07JA6XUbkDxnC/MtRU/0f2iPA6
XViAYAxFaivVWmIsw/aWCNOGV325lD1sf3mk7UPGuTMGJib0hqppjcbQ8XX8OEs8
AKpyQR953vQpZLoxTBN2DtPWSI0GG1stIxvKWGOy3kGYQYaGgfdJoKxTEFw6Y2Jy
KrwbV6LC/MU5mINb5JyjTRu7QH36c3P/0gyl7ngBZoT8KPZ/Fo+E0hEI5666MpSB
VPieYg==
-----END CERTIFICATE-----
Generated at Sat Nov 23 06:21:22 2024 by rpki-client on console-fra.rpki-client.org