Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913A81E/91C9559C34FA11EB98941E7BC4F9AE02/C562A08C34FC11EB9AA0EE7DC4F9AE02.roa
File:                     C562A08C34FC11EB9AA0EE7DC4F9AE02.roa (raw, json)
Hash identifier:          iwf2bc8877eQNQdlvgE9Pwyqx+IwGNsKelNjJ8iJuYw=
Subject key identifier:   0D:AB:D9:DB:FE:57:40:AB:0E:37:09:E6:38:B9:9F:62:59:2A:4D:2C
Certificate issuer:       /CN=A913A81E/serialNumber=6DC0C7028AEB3B3B26631F692570500B60ED2719
Certificate serial:       068A
Authority key identifier: 6D:C0:C7:02:8A:EB:3B:3B:26:63:1F:69:25:70:50:0B:60:ED:27:19
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bcDHAorrOzsmYx9pJXBQC2DtJxk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913A81E/91C9559C34FA11EB98941E7BC4F9AE02/C562A08C34FC11EB9AA0EE7DC4F9AE02.roa
Signing time:             Wed 10 Jul 2024 23:01:18 +0000
ROA not before:           Wed 10 Jul 2024 23:01:17 +0000
ROA not after:            Tue 30 Sep 2025 00:00:00 +0000
asID:                     36819
IP address blocks:        103.154.198.0/24 maxlen: 24
                          103.162.227.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913A81E/91C9559C34FA11EB98941E7BC4F9AE02/bcDHAorrOzsmYx9pJXBQC2DtJxk.crl
                          rsync://rpki.apnic.net/member_repository/A913A81E/91C9559C34FA11EB98941E7BC4F9AE02/bcDHAorrOzsmYx9pJXBQC2DtJxk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bcDHAorrOzsmYx9pJXBQC2DtJxk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1674 (0x68a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913A81E/serialNumber=6DC0C7028AEB3B3B26631F692570500B60ED2719
        Validity
            Not Before: Jul 10 23:01:17 2024 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=668f12bd-45d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:63:d7:ec:95:c6:d9:d2:e3:c2:71:8d:76:32:
                    0e:5b:a3:b2:8b:94:04:19:42:43:f9:87:86:6e:55:
                    2e:c3:c1:12:8f:66:b7:8a:eb:13:a0:48:5a:b6:fc:
                    65:af:e0:14:6c:3e:6a:91:7e:12:23:7a:39:94:a0:
                    a5:a3:e5:ca:e2:62:ba:35:7d:c9:74:78:c8:84:f8:
                    27:c9:f3:2b:8f:a2:70:a0:9d:83:05:3b:f4:37:1c:
                    39:f5:1b:a4:a6:d1:a1:11:a7:85:b5:2a:c6:2f:d8:
                    eb:11:83:3b:a5:4a:30:ed:48:82:3d:36:45:59:64:
                    46:1d:56:12:a3:8b:ea:25:8d:fe:63:58:ce:fe:8c:
                    69:dd:da:30:07:36:c3:af:af:06:25:05:4a:92:3f:
                    95:c5:e6:a6:af:25:0f:0d:da:ac:bd:d8:d2:21:c4:
                    d2:33:45:65:5f:88:80:0e:7d:97:7e:ce:29:34:5f:
                    ae:dd:c8:32:84:fc:0a:4b:6f:24:0c:df:11:64:17:
                    a1:a5:cc:ff:b6:3f:5a:8b:b2:dd:95:37:22:93:63:
                    ed:00:9c:44:a7:35:b7:1e:ec:c2:79:e1:f5:79:34:
                    7d:09:be:cd:41:a0:7a:d5:f7:49:8f:7d:57:1a:ab:
                    48:fc:4e:32:40:47:be:b1:3c:82:a1:ea:33:2c:a4:
                    c2:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:AB:D9:DB:FE:57:40:AB:0E:37:09:E6:38:B9:9F:62:59:2A:4D:2C
            X509v3 Authority Key Identifier:
                keyid:6D:C0:C7:02:8A:EB:3B:3B:26:63:1F:69:25:70:50:0B:60:ED:27:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913A81E/91C9559C34FA11EB98941E7BC4F9AE02/bcDHAorrOzsmYx9pJXBQC2DtJxk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bcDHAorrOzsmYx9pJXBQC2DtJxk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A81E/91C9559C34FA11EB98941E7BC4F9AE02/C562A08C34FC11EB9AA0EE7DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.154.198.0/24
                  103.162.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         e7:d8:07:cd:50:ec:0c:e9:b9:ef:3d:da:45:a2:a8:9b:ed:42:
         e3:3d:68:0b:2c:67:b9:ed:27:4f:17:8b:c1:22:67:4b:d3:ee:
         02:8c:e1:83:82:e3:7b:62:a2:7a:0f:8a:52:ce:c6:a7:05:8c:
         c5:e4:af:09:d9:2f:5a:00:d4:a0:b9:08:b3:35:39:b9:e5:84:
         3a:45:05:7c:30:64:02:4e:e9:5c:97:51:c5:44:3a:de:bb:4b:
         29:19:51:16:cd:3a:23:a8:83:ef:35:7e:d7:a2:a6:9d:79:70:
         54:da:ef:bd:c7:9a:30:6d:ba:f2:3e:bf:03:9f:63:e7:9c:2f:
         a0:af:96:b1:fd:21:54:a2:f6:d4:e9:d9:d8:c2:c7:fd:9c:5a:
         24:ec:78:b2:d9:f4:ca:4e:5e:0d:9a:01:2c:a5:78:fd:f6:da:
         dd:78:4a:dd:f0:8f:a0:b9:c1:f6:87:01:95:cc:65:6c:eb:27:
         b8:13:90:63:2a:3d:11:01:14:3c:ed:5e:f8:10:d2:96:26:0d:
         12:e5:de:25:31:43:3e:4e:da:5c:58:85:b0:79:67:be:8e:3d:
         10:66:d6:ef:ac:d9:55:26:49:38:0b:35:63:28:31:78:1c:75:
         cb:b9:bc:93:f6:54:9c:3c:90:17:7c:31:bd:1d:67:67:39:55:
         24:27:18:65
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICBoowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0E4MUUxMTAvBgNVBAUTKDZEQzBDNzAyOEFFQjNCM0IyNjYzMUY2OTI1NzA1MDBC
NjBFRDI3MTkwHhcNMjQwNzEwMjMwMTE3WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NjhmMTJiZC00NWQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwWPX7JXG2dLjwnGNdjIOW6Oyi5QEGUJD+YeGblUuw8ESj2a3iusToEhatvxl
r+AUbD5qkX4SI3o5lKClo+XK4mK6NX3JdHjIhPgnyfMrj6JwoJ2DBTv0Nxw59Ruk
ptGhEaeFtSrGL9jrEYM7pUow7UiCPTZFWWRGHVYSo4vqJY3+Y1jO/oxp3dowBzbD
r68GJQVKkj+VxeamryUPDdqsvdjSIcTSM0VlX4iADn2Xfs4pNF+u3cgyhPwKS28k
DN8RZBehpcz/tj9ai7LdlTcik2PtAJxEpzW3HuzCeeH1eTR9Cb7NQaB61fdJj31X
GqtI/E4yQEe+sTyCoeozLKTCvQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFA2r2dv+
V0CrDjcJ5ji5n2JZKk0sMB8GA1UdIwQYMBaAFG3AxwKK6zs7JmMfaSVwUAtg7ScZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQTgxRS85MUM5NTU5QzM0
RkExMUVCOTg5NDFFN0JDNEY5QUUwMi9iY0RIQW9yck96c21ZeDlwSlhCUUMyRHRK
eGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2JjREhBb3JyT3pzbVl4OXBKWEJRQzJEdEp4ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
M0E4MUUvOTFDOTU1OUMzNEZBMTFFQjk4OTQxRTdCQzRGOUFFMDIvQzU2MkEwOEMz
NEZDMTFFQjlBQTBFRTdEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBABnmsYDBABnouMwDQYJKoZIhvcNAQELBQADggEBAOfYB81Q
7Azpue892kWiqJvtQuM9aAssZ7ntJ08Xi8EiZ0vT7gKM4YOC43tionoPilLOxqcF
jMXkrwnZL1oA1KC5CLM1ObnlhDpFBXwwZAJO6VyXUcVEOt67SykZURbNOiOog+81
fteipp15cFTa773HmjBtuvI+vwOfY+ecL6CvlrH9IVSi9tTp2djCx/2cWiTseLLZ
9MpOXg2aASyleP322t14St3wj6C5wfaHAZXMZWzrJ7gTkGMqPREBFDztXvgQ0pYm
DRLl3iUxQz5O2lxYhbB5Z76OPRBm1u+s2VUmSTgLNWMoMXgcdcu5vJP2VJw8kBd8
Mb0dZ2c5VSQnGGU=
-----END CERTIFICATE-----
Generated at Sat Nov 23 00:08:38 2024 by rpki-client on console-ams.rpki-client.org