Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914A2CF/D61FEA9EA76611E4B1103D30C4F9AE02/6DAE125C54F611E79DF7E643C4F9AE02.roa
File:                     6DAE125C54F611E79DF7E643C4F9AE02.roa (raw, json)
Hash identifier:          8sGGt+SGiHPQcIk4RPk18gyGscIwkxemOo4LxPmvMKI=
Subject key identifier:   FD:53:5A:E2:21:56:66:9C:C3:4A:C4:01:87:29:B3:BE:81:DE:72:67
Certificate issuer:       /CN=A914A2CF/serialNumber=4381955E265A283F85DC9A44E9D51373127A2412
Certificate serial:       26BB
Authority key identifier: 43:81:95:5E:26:5A:28:3F:85:DC:9A:44:E9:D5:13:73:12:7A:24:12
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914A2CF/D61FEA9EA76611E4B1103D30C4F9AE02/6DAE125C54F611E79DF7E643C4F9AE02.roa
Signing time:             Wed 31 Jan 2024 16:02:29 +0000
ROA not before:           Wed 31 Jan 2024 16:02:29 +0000
ROA not after:            Mon 31 Mar 2025 00:00:00 +0000
asID:                     133920
IP address blocks:        103.48.8.0/22 maxlen: 24
                          2401:ec80::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914A2CF/D61FEA9EA76611E4B1103D30C4F9AE02/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.crl
                          rsync://rpki.apnic.net/member_repository/A914A2CF/D61FEA9EA76611E4B1103D30C4F9AE02/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Dec 2024 15:34:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9915 (0x26bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914A2CF/serialNumber=4381955E265A283F85DC9A44E9D51373127A2412
        Validity
            Not Before: Jan 31 16:02:29 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=65ba6f14-b879
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ff:59:da:6c:b8:c7:47:49:b6:d2:fc:61:7d:
                    c4:83:c5:16:9f:f7:3d:a6:a0:62:9b:eb:04:46:c4:
                    eb:2d:11:50:2c:0d:53:af:09:93:e0:11:53:cc:4c:
                    3f:55:36:4e:85:39:52:30:e7:16:95:3f:f4:9a:8d:
                    02:da:aa:61:03:f5:8e:c0:c6:e5:dd:ca:24:f1:d7:
                    64:2d:c7:1e:82:54:59:1a:30:c9:0e:c4:30:85:fc:
                    b3:c3:03:cd:39:58:4f:8c:4a:0d:62:d0:11:2a:c2:
                    ec:f1:27:cf:e3:ad:61:75:ef:52:9b:72:c6:02:57:
                    6c:5b:ee:cc:54:87:94:fa:de:ee:43:43:4a:04:8a:
                    76:6d:5a:16:9c:88:0d:67:de:34:c4:7d:8d:ff:b4:
                    e8:27:25:9b:a7:40:a1:93:21:cc:59:cb:bd:bd:36:
                    33:02:2f:39:a2:f9:6d:aa:53:8c:59:a0:9a:87:f7:
                    2d:c1:7c:2a:e7:f0:5d:04:d0:05:3f:40:b8:90:b3:
                    22:26:44:87:a5:24:ef:4f:29:c1:f5:82:cf:d3:ba:
                    89:ac:85:d2:d2:76:0b:9b:6b:d1:2d:59:48:e7:b5:
                    2f:05:50:46:84:16:b4:d4:2d:be:3f:7b:32:15:cd:
                    bd:9b:0c:22:a6:7b:b6:4a:2e:3e:8c:43:0e:e9:6f:
                    a8:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:53:5A:E2:21:56:66:9C:C3:4A:C4:01:87:29:B3:BE:81:DE:72:67
            X509v3 Authority Key Identifier:
                keyid:43:81:95:5E:26:5A:28:3F:85:DC:9A:44:E9:D5:13:73:12:7A:24:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914A2CF/D61FEA9EA76611E4B1103D30C4F9AE02/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A2CF/D61FEA9EA76611E4B1103D30C4F9AE02/6DAE125C54F611E79DF7E643C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.48.8.0/22
                IPv6:
                  2401:ec80::/32

    Signature Algorithm: sha256WithRSAEncryption
         76:ac:25:83:3e:ea:3b:7e:ee:76:27:27:bd:74:fa:ca:59:87:
         1e:38:23:1f:fe:09:bc:2f:63:e1:f7:c4:dc:a9:d6:b6:e3:a4:
         66:ad:eb:d0:be:0b:18:1e:76:77:ff:7f:43:c9:3d:5f:29:18:
         83:bb:3e:d8:7e:09:14:d2:45:8a:8b:8d:eb:ae:65:da:a4:ed:
         60:2a:6b:1f:ac:6e:d8:9a:b8:70:3b:e5:9c:e5:51:91:c0:46:
         8f:69:9d:d9:04:a6:5d:70:86:f9:f5:8d:11:02:22:cb:a7:ae:
         5e:ca:8b:c4:65:86:b5:29:14:ef:7e:61:1e:7a:90:07:47:1a:
         f8:ad:15:45:99:87:06:2c:c1:79:0e:87:97:0b:c0:37:e5:13:
         b5:c8:05:ae:6f:e0:14:7c:74:e0:07:5b:d6:28:54:34:35:81:
         18:56:92:61:d5:2b:c4:d9:83:93:62:78:52:0c:b9:fe:47:43:
         74:53:1f:95:96:36:5c:e1:40:8f:1b:7a:5f:14:f8:95:4a:ea:
         5d:24:f0:c4:4f:cb:43:12:27:41:e1:0d:77:c0:78:49:1d:8f:
         f9:4d:17:ea:c7:2c:29:93:cc:96:f1:92:35:8b:ab:a7:6b:13:
         21:df:c7:96:39:74:81:89:c8:cb:95:58:d1:36:4c:d8:69:b1:
         d2:e8:76:85
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICJrswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEEyQ0YxMTAvBgNVBAUTKDQzODE5NTVFMjY1QTI4M0Y4NURDOUE0NEU5RDUxMzcz
MTI3QTI0MTIwHhcNMjQwMTMxMTYwMjI5WhcNMjUwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NWJhNmYxNC1iODc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmv9Z2my4x0dJttL8YX3Eg8UWn/c9pqBim+sERsTrLRFQLA1TrwmT4BFTzEw/
VTZOhTlSMOcWlT/0mo0C2qphA/WOwMbl3cok8ddkLcceglRZGjDJDsQwhfyzwwPN
OVhPjEoNYtARKsLs8SfP461hde9Sm3LGAldsW+7MVIeU+t7uQ0NKBIp2bVoWnIgN
Z940xH2N/7ToJyWbp0ChkyHMWcu9vTYzAi85ovltqlOMWaCah/ctwXwq5/BdBNAF
P0C4kLMiJkSHpSTvTynB9YLP07qJrIXS0nYLm2vRLVlI57UvBVBGhBa01C2+P3sy
Fc29mwwipnu2Si4+jEMO6W+ojQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFP1TWuIh
Vmacw0rEAYcps76B3nJnMB8GA1UdIwQYMBaAFEOBlV4mWig/hdyaROnVE3MSeiQS
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTJDRi9ENjFGRUE5RUE3
NjYxMUU0QjExMDNEMzBDNEY5QUUwMi9RNEdWWGlaYUtELUYzSnBFNmRVVGN4SjZK
QkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1E0R1ZYaVphS0QtRjNKcEU2ZFVUY3hKNkpCSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NEEyQ0YvRDYxRkVBOUVBNzY2MTFFNEIxMTAzRDMwQzRGOUFFMDIvNkRBRTEyNUM1
NEY2MTFFNzlERjdFNjQzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E
HzAdMAwEAgABMAYDBAJnMAgwDQQCAAIwBwMFACQB7IAwDQYJKoZIhvcNAQELBQAD
ggEBAHasJYM+6jt+7nYnJ710+spZhx44Ix/+CbwvY+H3xNyp1rbjpGat69C+Cxge
dnf/f0PJPV8pGIO7Pth+CRTSRYqLjeuuZdqk7WAqax+sbtiauHA75ZzlUZHARo9p
ndkEpl1whvn1jRECIsunrl7Ki8RlhrUpFO9+YR56kAdHGvitFUWZhwYswXkOh5cL
wDflE7XIBa5v4BR8dOAHW9YoVDQ1gRhWkmHVK8TZg5NieFIMuf5HQ3RTH5WWNlzh
QI8bel8U+JVK6l0k8MRPy0MSJ0HhDXfAeEkdj/lNF+rHLCmTzJbxkjWLq6drEyHf
x5Y5dIGJyMuVWNE2TNhpsdLodoU=
-----END CERTIFICATE-----
Generated at Sun Nov 24 17:20:03 2024 by rpki-client on console-fra.rpki-client.org