Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/8C1315A8060611EFB7EFA66CC4F9AE02.roa
File:                     8C1315A8060611EFB7EFA66CC4F9AE02.roa (raw, json)
Hash identifier:          ETvMuzBvPoU2G66qyTLqNfjzU5ef1XX1OEC6b7ttgWo=
Subject key identifier:   D7:2D:0F:84:D8:B2:96:C6:40:05:CD:E2:57:42:5C:42:08:29:9C:4F
Certificate issuer:       /CN=A914A814/serialNumber=5C056B8061A8622C2C06BB85786E9DC613614BCA
Certificate serial:       0134
Authority key identifier: 5C:05:6B:80:61:A8:62:2C:2C:06:BB:85:78:6E:9D:C6:13:61:4B:CA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAVrgGGoYiwsBruFeG6dxhNhS8o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/8C1315A8060611EFB7EFA66CC4F9AE02.roa
Signing time:             Mon 29 Apr 2024 08:57:46 +0000
ROA not before:           Mon 29 Apr 2024 08:57:46 +0000
ROA not after:            Thu 31 Oct 2024 00:00:00 +0000
asID:                     152700
IP address blocks:        103.230.10.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/XAVrgGGoYiwsBruFeG6dxhNhS8o.crl
                          rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/XAVrgGGoYiwsBruFeG6dxhNhS8o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAVrgGGoYiwsBruFeG6dxhNhS8o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 05:53:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 308 (0x134)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914A814/serialNumber=5C056B8061A8622C2C06BB85786E9DC613614BCA
        Validity
            Not Before: Apr 29 08:57:46 2024 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=662f610a-5dff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:66:7b:1a:76:82:ac:9a:82:98:90:87:7f:15:
                    28:24:ad:f2:94:a8:f0:fc:86:48:6d:20:b0:57:57:
                    4b:a0:27:e6:9d:9c:4b:11:b8:36:23:ab:d6:6a:bd:
                    30:e8:1f:b3:01:53:44:b1:d9:91:0f:54:e2:79:ea:
                    f7:79:42:89:ff:3d:02:87:ae:42:4e:d9:33:d2:3c:
                    00:fb:ba:ff:38:de:bc:f2:34:37:58:43:ba:fa:85:
                    5c:95:f6:6e:33:1d:57:2f:f7:0e:db:81:c7:14:1c:
                    85:e3:98:05:8d:d4:8e:0e:65:5b:96:c7:b2:28:36:
                    1d:95:08:be:b7:0e:c0:dd:78:9c:02:37:9f:34:e1:
                    27:68:bd:5f:ab:b1:2f:5a:33:ad:47:e6:ec:7b:bc:
                    99:72:91:05:0f:9f:61:22:ae:4d:7e:86:2b:a0:8e:
                    87:01:15:01:c8:e8:30:8f:ca:e5:bb:37:b7:0a:9b:
                    8c:c9:3b:97:9f:bc:09:aa:70:a5:53:28:f1:6a:cf:
                    78:fb:b5:e1:04:d8:cc:f3:df:bf:dd:7a:a6:a0:5b:
                    c0:a3:f4:2e:ec:a3:39:65:b5:2c:c3:b6:05:29:69:
                    20:1d:30:aa:e8:a6:9a:c4:1a:00:9d:1c:30:85:7e:
                    77:db:0f:23:52:b0:8b:9f:d7:89:2b:9a:0a:a1:fd:
                    47:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:2D:0F:84:D8:B2:96:C6:40:05:CD:E2:57:42:5C:42:08:29:9C:4F
            X509v3 Authority Key Identifier:
                keyid:5C:05:6B:80:61:A8:62:2C:2C:06:BB:85:78:6E:9D:C6:13:61:4B:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/XAVrgGGoYiwsBruFeG6dxhNhS8o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAVrgGGoYiwsBruFeG6dxhNhS8o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/8C1315A8060611EFB7EFA66CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.230.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:8b:04:f9:04:b6:38:05:cd:4a:1b:a2:72:ca:3c:a3:bd:95:
         a4:b6:18:1c:41:25:ea:3b:05:ab:ef:6b:b0:b9:b3:9a:fd:b2:
         9f:91:40:a1:ee:c0:3f:9f:7e:9b:99:ed:d6:a7:ca:68:89:11:
         d2:27:40:06:8c:ff:d6:d3:ab:81:60:fe:27:d6:e9:c2:7b:2e:
         e6:23:5e:cf:e7:a5:07:3d:b8:62:90:61:27:f7:6b:3d:76:ba:
         38:1f:04:03:f8:8f:32:fb:e3:ce:a5:94:c3:d5:c2:f0:11:c4:
         1c:58:70:89:0b:fe:79:8e:45:94:6b:1c:86:29:af:d1:54:20:
         c8:a5:62:e5:75:fc:d8:0d:5d:7f:1a:94:b1:25:1d:c6:7f:9b:
         65:58:13:ed:a6:23:ef:b8:8f:17:18:39:13:ce:ae:9b:1c:86:
         f5:94:ea:c9:60:3d:b2:78:bc:4e:81:9e:67:98:73:08:f5:a7:
         8a:51:23:bd:06:1c:66:35:41:d1:eb:ee:c5:2c:db:20:c8:6f:
         e4:47:45:7b:31:f2:e4:52:7e:48:ae:94:83:b7:e9:4c:dd:61:
         79:f8:7a:ce:69:c8:9e:59:da:d5:a0:23:f1:bf:ab:8a:a2:1b:
         91:12:27:d0:b8:a0:01:40:1d:74:26:7f:56:b1:a3:12:61:7e:
         d1:2c:37:47
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICATQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEE4MTQxMTAvBgNVBAUTKDVDMDU2QjgwNjFBODYyMkMyQzA2QkI4NTc4NkU5REM2
MTM2MTRCQ0EwHhcNMjQwNDI5MDg1NzQ2WhcNMjQxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NjJmNjEwYS01ZGZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAq2Z7GnaCrJqCmJCHfxUoJK3ylKjw/IZIbSCwV1dLoCfmnZxLEbg2I6vWar0w
6B+zAVNEsdmRD1Tieer3eUKJ/z0Ch65CTtkz0jwA+7r/ON688jQ3WEO6+oVclfZu
Mx1XL/cO24HHFByF45gFjdSODmVblseyKDYdlQi+tw7A3XicAjefNOEnaL1fq7Ev
WjOtR+bse7yZcpEFD59hIq5NfoYroI6HARUByOgwj8rluze3CpuMyTuXn7wJqnCl
Uyjxas94+7XhBNjM89+/3XqmoFvAo/Qu7KM5ZbUsw7YFKWkgHTCq6KaaxBoAnRww
hX532w8jUrCLn9eJK5oKof1HdwIDAQABo4IClTCCApEwHQYDVR0OBBYEFNctD4TY
spbGQAXN4ldCXEIIKZxPMB8GA1UdIwQYMBaAFFwFa4BhqGIsLAa7hXhuncYTYUvK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTgxNC9EMzhBMTkxMjc0
NUUxMUVEQkE2ODg1MTRDNEY5QUUwMi9YQVZyZ0dHb1lpd3NCcnVGZUc2ZHhoTmhT
OG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1hBVnJnR0dvWWl3c0JydUZlRzZkeGhOaFM4by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NEE4MTQvRDM4QTE5MTI3NDVFMTFFREJBNjg4NTE0QzRGOUFFMDIvOEMxMzE1QTgw
NjA2MTFFRkI3RUZBNjZDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABn5gowDQYJKoZIhvcNAQELBQADggEBAJ6LBPkEtjgFzUob
onLKPKO9laS2GBxBJeo7Bavva7C5s5r9sp+RQKHuwD+ffpuZ7danymiJEdInQAaM
/9bTq4Fg/ifW6cJ7LuYjXs/npQc9uGKQYSf3az12ujgfBAP4jzL7486llMPVwvAR
xBxYcIkL/nmORZRrHIYpr9FUIMilYuV1/NgNXX8alLElHcZ/m2VYE+2mI++4jxcY
ORPOrpschvWU6slgPbJ4vE6BnmeYcwj1p4pRI70GHGY1QdHr7sUs2yDIb+RHRXsx
8uRSfkiulIO36UzdYXn4es5pyJ5Z2tWgI/G/q4qiG5ESJ9C4oAFAHXQmf1axoxJh
ftEsN0c=
-----END CERTIFICATE-----
Generated at Sat Jun 1 07:09:19 2024 by rpki-client on console-fra.rpki-client.org