Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/4B167396E74111EC80E35542C4F9AE02.roa
File:                     4B167396E74111EC80E35542C4F9AE02.roa (raw, json)
Hash identifier:          bHN8Wd0Zu68QTsipkyferF9uwGKu6L4i92pMNTEMusM=
Subject key identifier:   9B:B0:83:7B:28:5B:2F:69:CF:D1:FC:88:B8:82:F0:B6:03:0F:36:75
Certificate issuer:       /CN=A914E9C1/serialNumber=0A1DE18DFC98E4ACB3FA233368105A73D1D419F3
Certificate serial:       0390
Authority key identifier: 0A:1D:E1:8D:FC:98:E4:AC:B3:FA:23:33:68:10:5A:73:D1:D4:19:F3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/4B167396E74111EC80E35542C4F9AE02.roa
Signing time:             Fri 11 Oct 2024 01:04:32 +0000
ROA not before:           Fri 11 Oct 2024 01:04:32 +0000
ROA not after:            Mon 01 Dec 2025 00:00:00 +0000
asID:                     3786
IP address blocks:        103.99.208.0/24 maxlen: 24
                          103.99.210.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.crl
                          rsync://rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 20:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 912 (0x390)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E9C1/serialNumber=0A1DE18DFC98E4ACB3FA233368105A73D1D419F3
        Validity
            Not Before: Oct 11 01:04:32 2024 GMT
            Not After : Dec  1 00:00:00 2025 GMT
        Subject: CN=670879a0-f77c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:e6:33:43:35:32:d7:68:69:6e:3a:a7:9b:2d:
                    09:fc:cd:d2:43:bf:16:33:0c:d4:ba:c0:95:ab:3f:
                    26:d4:9a:1c:fe:a2:a2:ce:40:2c:de:c8:6e:70:a4:
                    72:4a:6e:3d:0d:6c:d4:58:09:8a:05:e3:89:c8:89:
                    11:8e:2d:6a:a0:f7:08:a7:5b:a4:00:fd:8b:61:63:
                    b8:17:aa:9e:94:1e:d8:77:9e:35:17:01:cd:f6:58:
                    cc:cc:50:44:df:52:b4:00:fe:d2:f4:64:67:00:37:
                    41:5c:f2:ec:8c:8d:6a:ef:f0:22:89:de:d6:4b:94:
                    4f:74:2e:22:cb:77:b7:23:fd:7c:23:36:52:41:80:
                    46:7c:6e:f8:96:71:48:87:3e:97:d1:ff:2f:49:3a:
                    df:00:1a:48:ac:08:a7:f9:0c:f7:54:49:64:dc:2d:
                    d5:be:cf:01:78:9f:0c:e1:4f:7b:f8:f4:d3:cb:2b:
                    1a:e7:bf:7a:ee:22:a4:6b:a4:87:a6:be:5b:b1:ea:
                    80:c6:cf:ba:cb:a0:b6:c0:d7:53:f1:9b:33:9b:4b:
                    69:b6:d4:a0:6d:54:84:8e:70:24:d4:4f:91:f9:93:
                    e2:31:e0:c7:f1:70:26:f6:ff:05:df:9e:54:91:8b:
                    6c:6b:8f:6c:6a:33:93:2f:85:0d:16:a6:44:84:1e:
                    d5:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:B0:83:7B:28:5B:2F:69:CF:D1:FC:88:B8:82:F0:B6:03:0F:36:75
            X509v3 Authority Key Identifier:
                keyid:0A:1D:E1:8D:FC:98:E4:AC:B3:FA:23:33:68:10:5A:73:D1:D4:19:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/4B167396E74111EC80E35542C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.99.208.0/24
                  103.99.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:fb:22:91:c6:a9:df:29:f1:01:00:67:1a:d3:d6:91:bf:0f:
         3f:a8:2d:f0:ac:6c:cc:ac:9b:70:e5:4a:a8:1e:0c:c7:d7:d2:
         17:ab:d2:62:13:19:a1:9c:4a:de:7b:fd:15:f6:ed:c0:8e:31:
         22:44:15:bd:04:fb:27:d5:6a:fc:fd:ff:ee:9f:52:b0:67:2c:
         8f:1f:58:0d:11:28:86:d8:91:12:8c:a4:07:b5:c1:6e:e7:a6:
         0a:b4:04:f7:8e:5e:8f:3e:89:8c:07:fb:d4:ed:3c:b5:55:77:
         62:d9:cd:41:c9:06:a1:6a:3c:98:49:a9:24:cb:38:7e:5e:7e:
         d7:97:95:fa:86:20:2f:7c:95:70:13:99:78:29:59:68:27:33:
         07:54:8b:d6:ad:74:dc:0f:39:9a:17:12:2d:06:c0:6b:fd:3d:
         0b:07:ff:64:64:33:13:d6:ae:ba:c0:5d:17:94:f3:00:76:70:
         ed:c9:a2:91:4a:6f:01:d1:0a:09:b3:62:45:a5:e4:85:fb:a3:
         dd:db:53:c5:eb:65:fc:ad:47:fd:c2:14:00:29:b2:23:96:79:
         7a:7f:cc:4a:3e:c3:10:e2:d9:c8:d0:b2:44:20:50:7e:79:a6:
         07:70:e1:a7:36:67:d6:99:0e:ee:64:3e:9f:50:d4:0b:85:1b:
         b3:3c:23:80
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICA5AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEU5QzExMTAvBgNVBAUTKDBBMURFMThERkM5OEU0QUNCM0ZBMjMzMzY4MTA1QTcz
RDFENDE5RjMwHhcNMjQxMDExMDEwNDMyWhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzA4NzlhMC1mNzdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0+YzQzUy12hpbjqnmy0J/M3SQ78WMwzUusCVqz8m1Joc/qKizkAs3shucKRy
Sm49DWzUWAmKBeOJyIkRji1qoPcIp1ukAP2LYWO4F6qelB7Yd541FwHN9ljMzFBE
31K0AP7S9GRnADdBXPLsjI1q7/Aiid7WS5RPdC4iy3e3I/18IzZSQYBGfG74lnFI
hz6X0f8vSTrfABpIrAin+Qz3VElk3C3Vvs8BeJ8M4U97+PTTyysa57967iKka6SH
pr5bseqAxs+6y6C2wNdT8Zszm0tpttSgbVSEjnAk1E+R+ZPiMeDH8XAm9v8F355U
kYtsa49sajOTL4UNFqZEhB7VhwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFJuwg3so
Wy9pz9H8iLiC8LYDDzZ1MB8GA1UdIwQYMBaAFAod4Y38mOSss/ojM2gQWnPR1Bnz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTlDMS9FRTcwMkY0NDdB
QzkxMUVDOURBNTVCNDZDNEY5QUUwMi9DaDNoamZ5WTVLeXotaU16YUJCYWM5SFVH
Zk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0NoM2hqZnlZNUt5ei1pTXphQkJhYzlIVUdmTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NEU5QzEvRUU3MDJGNDQ3QUM5MTFFQzlEQTU1QjQ2QzRGOUFFMDIvNEIxNjczOTZF
NzQxMTFFQzgwRTM1NTQyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBABnY9ADBABnY9IwDQYJKoZIhvcNAQELBQADggEBABj7IpHG
qd8p8QEAZxrT1pG/Dz+oLfCsbMysm3DlSqgeDMfX0her0mITGaGcSt57/RX27cCO
MSJEFb0E+yfVavz9/+6fUrBnLI8fWA0RKIbYkRKMpAe1wW7npgq0BPeOXo8+iYwH
+9TtPLVVd2LZzUHJBqFqPJhJqSTLOH5efteXlfqGIC98lXATmXgpWWgnMwdUi9at
dNwPOZoXEi0GwGv9PQsH/2RkMxPWrrrAXReU8wB2cO3JopFKbwHRCgmzYkWl5IX7
o93bU8XrZfytR/3CFAApsiOWeXp/zEo+wxDi2cjQskQgUH55pgdw4ac2Z9aZDu5k
Pp9Q1AuFG7M8I4A=
-----END CERTIFICATE-----
Generated at Thu Nov 21 01:31:54 2024 by rpki-client on console-fra.rpki-client.org