Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/8EF0A700973911EDB1E3C460C4F9AE02.roa
File:                     8EF0A700973911EDB1E3C460C4F9AE02.roa (raw, json)
Hash identifier:          FjyEpzcjP1PBYPlxtefJUvEooVdC9DWyB8xqCU57zyU=
Subject key identifier:   00:16:25:FB:4D:07:E0:7F:83:3B:F5:19:E2:22:A6:4F:E8:C9:74:10
Certificate issuer:       /CN=A913B805/serialNumber=42D3ECB9C8570AB090EB601EDB3379C0D3D8A6D0
Certificate serial:       24D1
Authority key identifier: 42:D3:EC:B9:C8:57:0A:B0:90:EB:60:1E:DB:33:79:C0:D3:D8:A6:D0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/8EF0A700973911EDB1E3C460C4F9AE02.roa
Signing time:             Tue 12 Mar 2024 18:26:44 +0000
ROA not before:           Tue 12 Mar 2024 18:26:44 +0000
ROA not after:            Tue 30 Jul 2024 00:00:00 +0000
asID:                     4294967200
IP address blocks:        103.138.210.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.crl
                          rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 May 2024 18:33:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9425 (0x24d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B805/serialNumber=42D3ECB9C8570AB090EB601EDB3379C0D3D8A6D0
        Validity
            Not Before: Mar 12 18:26:44 2024 GMT
            Not After : Jul 30 00:00:00 2024 GMT
        Subject: CN=65f09e63-388f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:30:95:db:b4:2e:b9:4e:cf:2c:ea:54:ad:11:
                    69:64:33:60:5b:ab:c4:e7:c6:48:38:09:d1:7c:ca:
                    00:87:24:6e:1f:28:80:2b:d1:88:24:8e:52:38:07:
                    3f:4e:b6:44:65:67:ae:4a:cb:94:4b:70:01:ec:f9:
                    45:a1:2d:dd:cd:0d:ea:a8:70:b3:d5:a0:75:e8:f9:
                    be:56:ca:7b:5d:4f:29:87:fc:5f:50:5d:ab:07:35:
                    5f:0b:a2:84:b1:40:1e:54:e0:83:95:23:1d:31:7c:
                    31:c3:ee:02:4d:ec:dc:ee:8b:78:54:87:86:d5:4c:
                    b2:96:fa:e7:b9:2c:99:04:b7:6c:f1:32:4d:80:a6:
                    de:60:68:c6:48:8f:6e:16:5a:55:30:fc:27:d3:95:
                    cf:81:d6:57:11:f0:cd:38:1b:0b:9d:72:07:c4:a5:
                    b7:fe:6b:45:f8:59:0d:e1:26:01:e8:00:67:a4:5b:
                    71:2d:4f:82:70:1e:c3:4f:35:90:cc:84:d4:71:07:
                    43:9c:a4:e1:99:9f:3e:66:d8:db:aa:b3:35:87:23:
                    16:ec:37:63:a8:4e:cb:0d:2a:24:56:2d:cf:c9:3c:
                    62:e3:5f:98:7a:96:6d:14:f9:54:da:b5:32:26:f4:
                    50:ca:6a:6f:35:e7:d6:b5:55:ac:db:e3:32:c1:b4:
                    cb:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:16:25:FB:4D:07:E0:7F:83:3B:F5:19:E2:22:A6:4F:E8:C9:74:10
            X509v3 Authority Key Identifier:
                keyid:42:D3:EC:B9:C8:57:0A:B0:90:EB:60:1E:DB:33:79:C0:D3:D8:A6:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/8EF0A700973911EDB1E3C460C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.138.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:f3:7b:aa:dc:81:a4:68:d2:30:75:4f:55:a6:03:03:c4:cc:
         96:1a:1d:da:c9:64:d3:76:55:39:42:19:10:93:b8:4b:99:c7:
         a6:a1:e2:53:e9:9d:9c:aa:80:7e:92:9f:f6:64:68:bb:bd:86:
         2f:77:af:a8:1f:60:71:cc:53:15:f0:fd:8b:8e:d9:92:2a:ee:
         c8:56:9e:7a:ad:62:f7:25:f9:4f:65:ac:4f:ff:d2:b5:96:6b:
         5b:a0:91:63:48:99:0f:81:b1:e4:f4:7f:41:a5:00:cb:7f:44:
         0a:39:7b:bb:41:6b:4a:31:b5:84:7e:13:af:16:30:92:c5:55:
         e7:21:d2:1a:53:d6:7b:4b:eb:1f:12:28:99:a2:4d:06:3e:21:
         fd:34:33:6f:49:d8:39:cb:32:ae:11:04:6b:db:a8:49:eb:fd:
         bc:a4:93:c3:02:fa:6c:8c:96:42:17:ad:ab:3a:5a:b0:5a:bb:
         b3:3c:31:fd:d4:c3:be:13:84:35:03:4b:5b:b9:30:e2:17:71:
         00:d0:28:22:fa:c2:1f:64:05:73:08:16:2b:ea:3b:6e:bd:ab:
         e5:26:a2:d8:a3:79:df:91:f9:2a:99:52:36:e6:81:38:8b:99:
         1b:d4:c3:9d:1b:a1:b1:a2:41:3a:2d:ce:ae:7c:8c:b1:17:ba:
         21:8e:4d:d0
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICJNEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0I4MDUxMTAvBgNVBAUTKDQyRDNFQ0I5Qzg1NzBBQjA5MEVCNjAxRURCMzM3OUMw
RDNEOEE2RDAwHhcNMjQwMzEyMTgyNjQ0WhcNMjQwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NWYwOWU2My0zODhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArDCV27QuuU7PLOpUrRFpZDNgW6vE58ZIOAnRfMoAhyRuHyiAK9GIJI5SOAc/
TrZEZWeuSsuUS3AB7PlFoS3dzQ3qqHCz1aB16Pm+Vsp7XU8ph/xfUF2rBzVfC6KE
sUAeVOCDlSMdMXwxw+4CTezc7ot4VIeG1UyylvrnuSyZBLds8TJNgKbeYGjGSI9u
FlpVMPwn05XPgdZXEfDNOBsLnXIHxKW3/mtF+FkN4SYB6ABnpFtxLU+CcB7DTzWQ
zITUcQdDnKThmZ8+ZtjbqrM1hyMW7DdjqE7LDSokVi3PyTxi41+YepZtFPlU2rUy
JvRQympvNefWtVWs2+MywbTLpQIDAQABo4IClTCCApEwHQYDVR0OBBYEFAAWJftN
B+B/gzv1GeIipk/oyXQQMB8GA1UdIwQYMBaAFELT7LnIVwqwkOtgHtszecDT2KbQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjgwNS9GODA3NkI4QTdC
N0IxMUU5OEI2RUMwNzRDNEY5QUUwMi9RdFBzdWNoWENyQ1E2MkFlMnpONXdOUFlw
dEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1F0UHN1Y2hYQ3JDUTYyQWUyek41d05QWXB0QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
M0I4MDUvRjgwNzZCOEE3QjdCMTFFOThCNkVDMDc0QzRGOUFFMDIvOEVGMEE3MDA5
NzM5MTFFREIxRTNDNDYwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnitIwDQYJKoZIhvcNAQELBQADggEBAF3ze6rcgaRo0jB1
T1WmAwPEzJYaHdrJZNN2VTlCGRCTuEuZx6ah4lPpnZyqgH6Sn/ZkaLu9hi93r6gf
YHHMUxXw/YuO2ZIq7shWnnqtYvcl+U9lrE//0rWWa1ugkWNImQ+BseT0f0GlAMt/
RAo5e7tBa0oxtYR+E68WMJLFVech0hpT1ntL6x8SKJmiTQY+If00M29J2DnLMq4R
BGvbqEnr/bykk8MC+myMlkIXras6WrBau7M8Mf3Uw74ThDUDS1u5MOIXcQDQKCL6
wh9kBXMIFivqO269q+Umotijed+R+SqZUjbmgTiLmRvUw50bobGiQTotzq58jLEX
uiGOTdA=
-----END CERTIFICATE-----
Generated at Thu May 16 19:10:54 2024 by rpki-client on console-fra.rpki-client.org