Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/5C9259B631DA11EEBE28A546C4F9AE02.roa
File:                     5C9259B631DA11EEBE28A546C4F9AE02.roa (raw, json)
Hash identifier:          V/GHEmcZXIPqnvjusU9+mbGUzJT92uVcYMqnl8YTyFc=
Subject key identifier:   44:93:72:A2:5D:45:5B:D3:CE:58:26:A5:21:CF:0D:96:01:3E:8E:CF
Certificate issuer:       /CN=A9148AC0/serialNumber=766857BA3F7C728B680525AC41FA7CE2A1F0092D
Certificate serial:       F7
Authority key identifier: 76:68:57:BA:3F:7C:72:8B:68:05:25:AC:41:FA:7C:E2:A1:F0:09:2D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmhXuj98cotoBSWsQfp84qHwCS0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/5C9259B631DA11EEBE28A546C4F9AE02.roa
Signing time:             Sun 03 Nov 2024 03:37:07 +0000
ROA not before:           Sun 03 Nov 2024 03:37:06 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     139671
IP address blocks:        103.143.112.0/23 maxlen: 23
                          2405:4cc0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/dmhXuj98cotoBSWsQfp84qHwCS0.crl
                          rsync://rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/dmhXuj98cotoBSWsQfp84qHwCS0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmhXuj98cotoBSWsQfp84qHwCS0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 247 (0xf7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9148AC0/serialNumber=766857BA3F7C728B680525AC41FA7CE2A1F0092D
        Validity
            Not Before: Nov  3 03:37:06 2024 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=6726efe2-4adf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e3:c5:4f:be:9f:0d:85:c8:8f:d4:e2:b7:a7:
                    fb:30:9b:62:a9:a3:ac:db:ed:1e:e9:0a:39:bc:26:
                    9a:40:38:9c:20:f6:8a:10:08:a9:56:97:4f:1b:ee:
                    e2:4f:f4:93:f7:ce:d6:ca:e8:4b:d9:8f:e1:28:4f:
                    e5:95:61:37:cc:36:0a:f9:fa:a0:80:93:67:a2:1c:
                    de:ac:fd:65:09:80:62:07:08:d0:d9:09:08:42:c5:
                    7e:15:81:e3:ad:20:1c:f6:05:ff:51:38:22:2b:ad:
                    50:72:37:d3:67:31:ce:0c:77:c9:a5:4f:fc:ce:f0:
                    34:ad:79:02:28:58:2b:69:f8:2f:b2:ec:84:0b:a8:
                    45:9d:4a:5b:94:db:43:39:62:46:da:7e:85:e4:b6:
                    19:e0:e1:c8:c5:6d:8a:2f:24:9e:29:43:fa:3c:cc:
                    29:f0:87:df:83:d0:91:13:31:c2:b6:79:b9:7b:20:
                    b8:b1:d9:6b:fe:dc:de:f4:32:4b:e3:68:13:e2:52:
                    e6:a1:28:73:e0:2e:d0:32:c8:94:6a:59:ae:11:85:
                    14:ad:83:be:8d:d9:30:33:e8:32:59:09:85:14:94:
                    9e:2d:26:72:c4:6c:7d:cc:5a:1c:f3:ed:7a:1f:7e:
                    a3:08:27:b7:97:8a:79:4a:b2:4b:81:01:4a:72:e5:
                    ff:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:93:72:A2:5D:45:5B:D3:CE:58:26:A5:21:CF:0D:96:01:3E:8E:CF
            X509v3 Authority Key Identifier:
                keyid:76:68:57:BA:3F:7C:72:8B:68:05:25:AC:41:FA:7C:E2:A1:F0:09:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/dmhXuj98cotoBSWsQfp84qHwCS0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmhXuj98cotoBSWsQfp84qHwCS0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/5C9259B631DA11EEBE28A546C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.143.112.0/23
                IPv6:
                  2405:4cc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         33:a5:5c:0c:d5:98:25:0b:36:88:33:76:c8:96:19:b8:1c:ab:
         85:e6:d3:80:98:b9:f0:53:ee:d0:70:07:67:cd:4d:24:9d:d3:
         bf:1a:d8:5a:ce:c0:f1:bf:9e:fa:82:6a:14:21:58:7a:00:28:
         d2:66:90:b6:50:76:99:77:c5:1d:c3:4e:c9:98:32:1b:6e:93:
         70:b3:47:dc:fb:df:fb:c6:50:79:af:d9:cb:ec:f4:3c:d5:d7:
         46:f4:87:c2:31:a6:62:ec:04:06:82:b1:68:52:af:28:06:59:
         ed:5a:83:19:ab:84:77:37:4c:96:ac:d8:27:e1:f6:eb:68:d8:
         04:3a:75:00:19:69:d7:f1:fe:d6:87:09:f3:93:20:c1:f9:b5:
         de:e3:75:d5:61:d2:c5:06:f2:e9:75:8b:de:f8:82:c3:f6:25:
         08:10:0c:ad:1e:26:ca:fe:9b:bc:65:e6:e6:aa:85:61:73:e1:
         8b:0b:f0:58:48:6e:4b:94:28:64:ed:d5:07:36:c0:ee:d4:6c:
         7a:65:5a:c9:4d:e4:26:d6:6f:90:7a:50:c7:36:39:cf:3e:e5:
         9c:0c:07:01:92:0b:f4:6a:df:21:2d:a3:3e:67:5b:c3:3f:01:
         8d:80:27:03:3c:b1:88:d3:f2:5c:f1:94:1b:a5:90:13:c8:62:
         91:23:c7:11
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICAPcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDhBQzAxMTAvBgNVBAUTKDc2Njg1N0JBM0Y3QzcyOEI2ODA1MjVBQzQxRkE3Q0Uy
QTFGMDA5MkQwHhcNMjQxMTAzMDMzNzA2WhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzI2ZWZlMi00YWRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwePFT76fDYXIj9Tit6f7MJtiqaOs2+0e6Qo5vCaaQDicIPaKEAipVpdPG+7i
T/ST987WyuhL2Y/hKE/llWE3zDYK+fqggJNnohzerP1lCYBiBwjQ2QkIQsV+FYHj
rSAc9gX/UTgiK61QcjfTZzHODHfJpU/8zvA0rXkCKFgrafgvsuyEC6hFnUpblNtD
OWJG2n6F5LYZ4OHIxW2KLySeKUP6PMwp8Iffg9CREzHCtnm5eyC4sdlr/tze9DJL
42gT4lLmoShz4C7QMsiUalmuEYUUrYO+jdkwM+gyWQmFFJSeLSZyxGx9zFoc8+16
H36jCCe3l4p5SrJLgQFKcuX/hQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFESTcqJd
RVvTzlgmpSHPDZYBPo7PMB8GA1UdIwQYMBaAFHZoV7o/fHKLaAUlrEH6fOKh8Akt
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEFDMC9FNEVENTM5NDMx
RDgxMUVFODMwMDZBNDFDNEY5QUUwMi9kbWhYdWo5OGNvdG9CU1dzUWZwODRxSHdD
UzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2RtaFh1ajk4Y290b0JTV3NRZnA4NHFId0NTMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDhBQzAvRTRFRDUzOTQzMUQ4MTFFRTgzMDA2QTQxQzRGOUFFMDIvNUM5MjU5QjYz
MURBMTFFRUJFMjhBNTQ2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E
HzAdMAwEAgABMAYDBAFnj3AwDQQCAAIwBwMFACQFTMAwDQYJKoZIhvcNAQELBQAD
ggEBADOlXAzVmCULNogzdsiWGbgcq4Xm04CYufBT7tBwB2fNTSSd078a2FrOwPG/
nvqCahQhWHoAKNJmkLZQdpl3xR3DTsmYMhtuk3CzR9z73/vGUHmv2cvs9DzV10b0
h8IxpmLsBAaCsWhSrygGWe1agxmrhHc3TJas2Cfh9uto2AQ6dQAZadfx/taHCfOT
IMH5td7jddVh0sUG8ul1i974gsP2JQgQDK0eJsr+m7xl5uaqhWFz4YsL8FhIbkuU
KGTt1Qc2wO7UbHplWslN5CbWb5B6UMc2Oc8+5ZwMBwGSC/Rq3yEtoz5nW8M/AY2A
JwM8sYjT8lzxlBulkBPIYpEjxxE=
-----END CERTIFICATE-----
Generated at Sat Nov 23 06:13:06 2024 by rpki-client on console-ams.rpki-client.org