Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914A553/95C8A3E457A311EAA935C083C4F9AE02/7E3B7BE6B1E911EC9A0D366FC4F9AE02.roa
File:                     7E3B7BE6B1E911EC9A0D366FC4F9AE02.roa (raw, json)
Hash identifier:          g4QhwzM7z0ux97yQFPOJpae6bb2epYVb5h5FA+p92Ak=
Subject key identifier:   89:61:AD:F8:B6:BA:6B:37:00:C1:99:03:52:1C:99:A5:0F:54:9D:00
Certificate issuer:       /CN=A914A553/serialNumber=AB4C3E35AEFC55B5BA358CA406ED9626A4220FD0
Certificate serial:       09AF
Authority key identifier: AB:4C:3E:35:AE:FC:55:B5:BA:35:8C:A4:06:ED:96:26:A4:22:0F:D0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q0w-Na78VbW6NYykBu2WJqQiD9A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914A553/95C8A3E457A311EAA935C083C4F9AE02/7E3B7BE6B1E911EC9A0D366FC4F9AE02.roa
Signing time:             Thu 04 Jan 2024 20:38:38 +0000
ROA not before:           Thu 04 Jan 2024 20:38:38 +0000
ROA not after:            Sun 02 Mar 2025 00:00:00 +0000
asID:                     136010
IP address blocks:        103.79.216.0/24 maxlen: 24
                          103.79.217.0/24 maxlen: 24
                          103.79.218.0/24 maxlen: 24
                          103.79.219.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914A553/95C8A3E457A311EAA935C083C4F9AE02/q0w-Na78VbW6NYykBu2WJqQiD9A.crl
                          rsync://rpki.apnic.net/member_repository/A914A553/95C8A3E457A311EAA935C083C4F9AE02/q0w-Na78VbW6NYykBu2WJqQiD9A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q0w-Na78VbW6NYykBu2WJqQiD9A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 19:30:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2479 (0x9af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914A553/serialNumber=AB4C3E35AEFC55B5BA358CA406ED9626A4220FD0
        Validity
            Not Before: Jan  4 20:38:38 2024 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=6597174e-da83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:3c:f7:c4:53:78:a6:57:b3:f3:19:6a:f8:bb:
                    e3:10:73:56:7b:49:9a:24:f0:ce:fd:e1:5b:90:1a:
                    aa:82:ae:20:1c:ad:ab:52:67:57:05:65:7f:ae:65:
                    56:f4:20:20:62:14:73:43:5e:dd:f1:f8:e3:fa:95:
                    8a:e5:6e:86:cf:e3:6d:bc:d8:cc:be:26:82:43:31:
                    52:8e:06:4d:03:da:96:5f:fa:d0:64:63:9a:03:35:
                    2c:1d:1b:64:6e:11:b2:23:3a:cb:78:ea:bb:df:3a:
                    34:63:dd:34:86:79:44:fc:00:2e:30:1e:db:b1:a4:
                    5c:58:5b:ef:f8:31:fd:4e:f9:1a:f8:75:d6:f8:cb:
                    59:f2:66:29:30:b7:22:0c:5e:b9:65:4c:d5:0f:dd:
                    18:be:44:8d:02:63:60:3a:a1:69:92:44:fc:da:53:
                    cd:de:72:68:2d:1c:83:bd:71:68:a8:3d:9f:b7:ee:
                    5a:42:95:5e:62:e7:da:b3:62:61:e0:6b:fd:34:36:
                    84:5b:c0:83:47:a0:06:99:6b:2d:83:7e:e0:1b:75:
                    87:83:2f:f4:de:86:58:df:0d:09:6c:40:64:1d:55:
                    e2:13:8a:8c:ca:2e:6e:4d:5c:b3:b6:cd:20:cd:fe:
                    8a:fc:d2:f4:7e:5e:36:71:af:82:92:49:1a:de:38:
                    7b:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:61:AD:F8:B6:BA:6B:37:00:C1:99:03:52:1C:99:A5:0F:54:9D:00
            X509v3 Authority Key Identifier:
                keyid:AB:4C:3E:35:AE:FC:55:B5:BA:35:8C:A4:06:ED:96:26:A4:22:0F:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914A553/95C8A3E457A311EAA935C083C4F9AE02/q0w-Na78VbW6NYykBu2WJqQiD9A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q0w-Na78VbW6NYykBu2WJqQiD9A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A553/95C8A3E457A311EAA935C083C4F9AE02/7E3B7BE6B1E911EC9A0D366FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.79.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         52:8f:15:d6:d0:1c:d1:95:21:5e:38:a4:20:3b:44:62:33:63:
         65:8a:11:fc:32:04:6d:9b:58:15:a9:4b:05:9b:f3:34:ad:70:
         a0:e2:b7:34:47:68:d9:7f:ce:50:7c:a2:9d:c8:53:77:1a:b9:
         c9:4b:69:fe:64:1a:ef:54:e9:fa:a6:a9:21:54:6d:e7:a0:5c:
         9c:7a:6a:1d:ed:88:13:22:14:1d:37:75:0f:ff:da:a5:51:96:
         fc:0f:ab:8d:a9:8c:a4:21:58:ff:73:e9:56:49:bd:03:ee:b9:
         06:68:b8:04:a3:57:a2:f8:80:80:f7:fb:91:cc:df:a2:27:76:
         f5:3f:09:66:48:e1:48:a9:51:03:83:09:6d:9f:d7:56:ea:64:
         0d:bd:7c:fe:77:4e:30:9b:37:6a:a9:b0:a5:09:a1:c2:03:8a:
         75:01:63:2a:ac:56:6b:e9:2a:1b:7c:ea:42:f7:5d:c7:fb:60:
         ac:d7:7e:ac:da:85:cc:2b:94:46:7d:a4:07:ae:b8:fe:5c:78:
         2d:e3:35:4f:d6:56:37:f9:f9:19:f4:fa:9a:d4:fc:69:6f:24:
         d8:dc:41:36:4f:fc:06:88:87:fc:cb:c0:f7:db:2a:83:75:d6:
         f4:6b:55:6b:4f:b5:ce:ed:45:fe:0d:83:9c:7f:20:9d:ac:a5:
         96:3d:b0:aa
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICCa8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEE1NTMxMTAvBgNVBAUTKEFCNEMzRTM1QUVGQzU1QjVCQTM1OENBNDA2RUQ5NjI2
QTQyMjBGRDAwHhcNMjQwMTA0MjAzODM4WhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02NTk3MTc0ZS1kYTgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvDz3xFN4plez8xlq+LvjEHNWe0maJPDO/eFbkBqqgq4gHK2rUmdXBWV/rmVW
9CAgYhRzQ17d8fjj+pWK5W6Gz+NtvNjMviaCQzFSjgZNA9qWX/rQZGOaAzUsHRtk
bhGyIzrLeOq73zo0Y900hnlE/AAuMB7bsaRcWFvv+DH9Tvka+HXW+MtZ8mYpMLci
DF65ZUzVD90YvkSNAmNgOqFpkkT82lPN3nJoLRyDvXFoqD2ft+5aQpVeYufas2Jh
4Gv9NDaEW8CDR6AGmWstg37gG3WHgy/03oZY3w0JbEBkHVXiE4qMyi5uTVyzts0g
zf6K/NL0fl42ca+Ckkka3jh7jQIDAQABo4IClTCCApEwHQYDVR0OBBYEFIlhrfi2
ums3AMGZA1IcmaUPVJ0AMB8GA1UdIwQYMBaAFKtMPjWu/FW1ujWMpAbtliakIg/Q
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTU1My85NUM4QTNFNDU3
QTMxMUVBQTkzNUMwODNDNEY5QUUwMi9xMHctTmE3OFZiVzZOWXlrQnUyV0pxUWlE
OUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3Ewdy1OYTc4VmJXNk5ZeWtCdTJXSnFRaUQ5QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NEE1NTMvOTVDOEEzRTQ1N0EzMTFFQUE5MzVDMDgzQzRGOUFFMDIvN0UzQjdCRTZC
MUU5MTFFQzlBMEQzNjZGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAJnT9gwDQYJKoZIhvcNAQELBQADggEBAFKPFdbQHNGVIV44
pCA7RGIzY2WKEfwyBG2bWBWpSwWb8zStcKDitzRHaNl/zlB8op3IU3cauclLaf5k
Gu9U6fqmqSFUbeegXJx6ah3tiBMiFB03dQ//2qVRlvwPq42pjKQhWP9z6VZJvQPu
uQZouASjV6L4gID3+5HM36IndvU/CWZI4UipUQODCW2f11bqZA29fP53TjCbN2qp
sKUJocIDinUBYyqsVmvpKht86kL3Xcf7YKzXfqzahcwrlEZ9pAeuuP5ceC3jNU/W
Vjf5+Rn0+prU/GlvJNjcQTZP/AaIh/zLwPfbKoN11vRrVWtPtc7tRf4Ng5x/IJ2s
pZY9sKo=
-----END CERTIFICATE-----
Generated at Fri Nov 22 21:05:27 2024 by rpki-client on console-fra.rpki-client.org