Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/596D48ACC17311EAB16B1912C4F9AE02.roa
File:                     596D48ACC17311EAB16B1912C4F9AE02.roa (raw, json)
Hash identifier:          vN9wyIhoEAvL0Ppx9rHt6RaOh++3jtvNmxs0UWEaa1k=
Subject key identifier:   63:08:68:DC:85:92:F3:CD:3C:89:01:B3:7B:18:05:FC:24:7A:F4:7D
Certificate issuer:       /CN=A913900D/serialNumber=C603786D55A904124E7592EED2899EF578921100
Certificate serial:       7CE7
Authority key identifier: C6:03:78:6D:55:A9:04:12:4E:75:92:EE:D2:89:9E:F5:78:92:11:00
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgN4bVWpBBJOdZLu0ome9XiSEQA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/596D48ACC17311EAB16B1912C4F9AE02.roa
Signing time:             Mon 16 Sep 2024 17:25:01 +0000
ROA not before:           Mon 16 Sep 2024 17:25:01 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     23918
IP address blocks:        103.13.83.64/28 maxlen: 28
                          103.13.83.112/28 maxlen: 28
                          103.13.83.176/28 maxlen: 28
                          202.9.112.0/22 maxlen: 24
                          203.4.212.0/22 maxlen: 24
                          2402:f00::/32 maxlen: 32
                          2402:f00:2000::/38 maxlen: 38
                          2402:f00:2020::/46 maxlen: 48
                          2402:f00:2400::/38 maxlen: 38
                          2402:f00:3000::/38 maxlen: 38
                          2402:f00:3400::/38 maxlen: 38

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.crl
                          rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgN4bVWpBBJOdZLu0ome9XiSEQA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 17:01:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31975 (0x7ce7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913900D/serialNumber=C603786D55A904124E7592EED2899EF578921100
        Validity
            Not Before: Sep 16 17:25:01 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=66e869ed-5a16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:6a:0e:20:db:ac:22:5f:02:ce:0d:e1:fe:95:
                    29:1c:37:d8:25:a8:08:37:b5:b3:c9:d4:92:07:69:
                    d1:f1:89:03:17:21:ec:34:5c:f8:87:c2:98:b6:c1:
                    7b:82:f3:05:f1:3e:c3:55:73:bc:c7:c1:60:dc:15:
                    2e:34:62:98:ba:04:cc:8c:7c:8a:83:05:84:16:14:
                    57:6f:5b:33:15:bb:96:bb:e4:c2:6b:f4:88:4f:0c:
                    14:46:34:a5:9d:83:f3:f6:d3:69:75:a1:cb:1a:31:
                    3e:ea:f5:0e:72:80:89:98:fd:1c:16:fb:ab:e1:b7:
                    c6:ad:21:f9:86:75:de:2e:37:28:0c:0b:3c:bd:f1:
                    6e:ab:a8:50:74:92:bd:ac:c7:09:4c:2e:3c:ca:2e:
                    66:5f:5e:d1:4e:c5:7d:27:5e:52:00:b2:39:cf:21:
                    35:90:27:5d:f9:e6:b5:6e:d3:86:82:8b:b5:56:9d:
                    23:d3:cb:9a:aa:46:bb:37:20:7d:a8:5f:df:45:0f:
                    3a:48:a1:8b:d9:64:77:65:80:21:ac:ce:ab:2b:9d:
                    75:7b:9b:30:3d:9c:5b:e1:03:cc:cd:d8:fa:09:ae:
                    23:47:e7:f9:9a:2e:ef:55:ca:d7:99:62:2e:dc:f1:
                    ce:36:e6:09:0f:60:ff:46:2d:01:b4:3a:53:74:fc:
                    78:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:08:68:DC:85:92:F3:CD:3C:89:01:B3:7B:18:05:FC:24:7A:F4:7D
            X509v3 Authority Key Identifier:
                keyid:C6:03:78:6D:55:A9:04:12:4E:75:92:EE:D2:89:9E:F5:78:92:11:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgN4bVWpBBJOdZLu0ome9XiSEQA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/596D48ACC17311EAB16B1912C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.13.83.64/28
                  103.13.83.112/28
                  103.13.83.176/28
                  202.9.112.0/22
                  203.4.212.0/22
                IPv6:
                  2402:f00::/32

    Signature Algorithm: sha256WithRSAEncryption
         00:19:92:a1:e0:96:1d:83:23:4a:7f:7d:4d:7b:f9:72:cf:25:
         2c:59:dc:15:36:8f:b9:be:60:48:0b:0a:24:16:50:b4:cf:40:
         d7:70:75:f8:0e:09:a6:5e:01:34:6b:3c:d2:85:52:3d:e2:fb:
         e5:0e:94:60:f1:fd:1c:45:36:e0:19:fa:98:ec:62:e9:51:ea:
         b9:7f:5b:86:df:bc:e9:3f:c9:42:de:10:f6:62:31:a1:4d:b6:
         53:b9:07:bb:23:89:4b:54:6b:b3:d2:55:b4:40:43:e0:77:05:
         fc:16:ee:f3:f3:22:07:61:43:e9:83:ba:9e:06:c9:d6:5b:31:
         32:5e:9f:1a:d0:71:66:4e:52:d3:e8:db:7f:1c:a3:08:11:67:
         92:a8:58:63:c7:cc:c2:62:86:8f:0e:d6:3e:8c:d2:c1:0b:a6:
         55:73:6f:82:30:b7:47:52:26:76:ab:cb:39:78:23:70:21:ec:
         bb:91:15:d1:b8:51:87:82:05:0d:71:d8:13:c2:db:a4:55:09:
         0f:9e:58:a9:74:a0:14:ee:4a:5f:32:76:13:aa:3b:9c:98:44:
         10:52:a1:a0:35:51:89:b6:20:84:07:cd:aa:f4:c1:70:51:6a:
         5d:5d:38:8c:04:b7:d1:af:68:de:df:e5:ed:82:91:1f:51:5c:
         af:a5:89:b4
-----BEGIN CERTIFICATE-----
MIIFmzCCBIOgAwIBAgICfOcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzkwMEQxMTAvBgNVBAUTKEM2MDM3ODZENTVBOTA0MTI0RTc1OTJFRUQyODk5RUY1
Nzg5MjExMDAwHhcNMjQwOTE2MTcyNTAxWhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmU4NjllZC01YTE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4moOINusIl8Czg3h/pUpHDfYJagIN7WzydSSB2nR8YkDFyHsNFz4h8KYtsF7
gvMF8T7DVXO8x8Fg3BUuNGKYugTMjHyKgwWEFhRXb1szFbuWu+TCa/SITwwURjSl
nYPz9tNpdaHLGjE+6vUOcoCJmP0cFvur4bfGrSH5hnXeLjcoDAs8vfFuq6hQdJK9
rMcJTC48yi5mX17RTsV9J15SALI5zyE1kCdd+ea1btOGgou1Vp0j08uaqka7NyB9
qF/fRQ86SKGL2WR3ZYAhrM6rK511e5swPZxb4QPMzdj6Ca4jR+f5mi7vVcrXmWIu
3PHONuYJD2D/Ri0BtDpTdPx49wIDAQABo4ICvzCCArswHQYDVR0OBBYEFGMIaNyF
kvPNPIkBs3sYBfwkevR9MB8GA1UdIwQYMBaAFMYDeG1VqQQSTnWS7tKJnvV4khEA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTAwRC9GQ0RDRDNBMEFD
OUQxMUU4OTJDREFEMERDNEY5QUUwMi94Z040YlZXcEJCSk9kWkx1MG9tZTlYaVNF
UUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3hnTjRiVldwQkJKT2RaTHUwb21lOVhpU0VRQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzkwMEQvRkNEQ0QzQTBBQzlEMTFFODkyQ0RBRDBEQzRGOUFFMDIvNTk2RDQ4QUND
MTczMTFFQUIxNkIxOTEyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwSQYIKwYBBQUHAQcBAf8E
OjA4MCcEAgABMCEDBQRnDVNAAwUEZw1TcAMFBGcNU7ADBALKCXADBALLBNQwDQQC
AAIwBwMFACQCDwAwDQYJKoZIhvcNAQELBQADggEBAAAZkqHglh2DI0p/fU17+XLP
JSxZ3BU2j7m+YEgLCiQWULTPQNdwdfgOCaZeATRrPNKFUj3i++UOlGDx/RxFNuAZ
+pjsYulR6rl/W4bfvOk/yULeEPZiMaFNtlO5B7sjiUtUa7PSVbRAQ+B3BfwW7vPz
IgdhQ+mDup4GydZbMTJenxrQcWZOUtPo238cowgRZ5KoWGPHzMJiho8O1j6M0sEL
plVzb4Iwt0dSJnaryzl4I3Ah7LuRFdG4UYeCBQ1x2BPC26RVCQ+eWKl0oBTuSl8y
dhOqO5yYRBBSoaA1UYm2IIQHzar0wXBRal1dOIwEt9GvaN7f5e2CkR9RXK+libQ=
-----END CERTIFICATE-----
Generated at Wed Nov 20 19:05:15 2024 by rpki-client on console-ams.rpki-client.org