Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9150E55/7D32A74EC60011EC87005C7DC4F9AE02/39952E50C6CB11ECB185E43EC4F9AE02.roa
File:                     39952E50C6CB11ECB185E43EC4F9AE02.roa (raw, json)
Hash identifier:          SFDD7nQaHtPhgjEbna4DrdxMkFPaixPmcuVySfzUZD8=
Subject key identifier:   D5:BE:37:02:96:42:D9:37:F9:E5:C1:0C:57:76:BA:80:F2:C1:89:69
Certificate issuer:       /CN=A9150E55/serialNumber=A01A0F06E310B38130131D7882970BF162DD0D66
Certificate serial:       0200
Authority key identifier: A0:1A:0F:06:E3:10:B3:81:30:13:1D:78:82:97:0B:F1:62:DD:0D:66
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oBoPBuMQs4EwEx14gpcL8WLdDWY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9150E55/7D32A74EC60011EC87005C7DC4F9AE02/39952E50C6CB11ECB185E43EC4F9AE02.roa
Signing time:             Mon 09 Oct 2023 02:54:33 +0000
ROA not before:           Mon 09 Oct 2023 02:54:33 +0000
ROA not after:            Mon 30 Dec 2024 00:00:00 +0000
asID:                     132742
IP address blocks:        43.243.64.0/22 maxlen: 24
                          103.38.168.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9150E55/7D32A74EC60011EC87005C7DC4F9AE02/oBoPBuMQs4EwEx14gpcL8WLdDWY.crl
                          rsync://rpki.apnic.net/member_repository/A9150E55/7D32A74EC60011EC87005C7DC4F9AE02/oBoPBuMQs4EwEx14gpcL8WLdDWY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oBoPBuMQs4EwEx14gpcL8WLdDWY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 04 Oct 2024 01:28:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 512 (0x200)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9150E55/serialNumber=A01A0F06E310B38130131D7882970BF162DD0D66
        Validity
            Not Before: Oct  9 02:54:33 2023 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=65236b69-583b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f8:2a:a6:f9:33:11:15:cc:33:31:a4:1a:28:
                    ef:fe:1e:01:d7:cc:51:ad:f6:14:ef:c5:c5:b2:56:
                    d9:32:f7:95:59:fb:a0:55:65:10:9f:2d:ee:94:26:
                    f8:84:1e:0a:af:e9:af:05:66:86:49:9d:13:4b:fe:
                    15:c5:a1:93:5c:f0:f6:dd:9b:d0:12:8d:dd:38:aa:
                    b0:d7:45:27:21:24:3a:7a:ea:ca:89:2a:c7:99:83:
                    c2:7c:c7:88:1a:22:91:c6:ed:76:06:0a:1e:d4:96:
                    5d:f7:cd:7e:4d:66:5a:c8:9f:3d:0e:f4:d7:ee:e4:
                    a5:4e:0b:85:fd:61:8a:ae:ad:2f:11:09:c8:d0:7c:
                    a8:f0:78:c9:26:97:7b:06:78:75:45:dd:bb:1d:45:
                    bb:e8:c6:2b:0f:03:72:24:e2:eb:bc:5d:de:fc:a9:
                    72:b5:8b:1b:97:e9:a3:0d:6a:90:10:82:aa:fc:e9:
                    e9:3e:e8:8a:3d:d3:95:90:3d:fb:df:29:12:c9:e5:
                    36:ca:e2:d5:93:71:ec:ec:1c:97:09:cb:bb:2e:ca:
                    79:09:9e:50:ee:90:e4:64:23:2c:10:ca:18:75:ca:
                    e9:55:3a:9c:0b:30:f6:14:77:8a:c8:c0:64:62:6e:
                    0e:92:18:0b:c6:84:39:05:4b:01:1b:32:9f:d8:a8:
                    ec:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:BE:37:02:96:42:D9:37:F9:E5:C1:0C:57:76:BA:80:F2:C1:89:69
            X509v3 Authority Key Identifier:
                keyid:A0:1A:0F:06:E3:10:B3:81:30:13:1D:78:82:97:0B:F1:62:DD:0D:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9150E55/7D32A74EC60011EC87005C7DC4F9AE02/oBoPBuMQs4EwEx14gpcL8WLdDWY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oBoPBuMQs4EwEx14gpcL8WLdDWY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150E55/7D32A74EC60011EC87005C7DC4F9AE02/39952E50C6CB11ECB185E43EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.243.64.0/22
                  103.38.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         88:49:16:16:c7:c6:2d:56:5a:ae:31:98:e7:b5:3e:4d:3c:16:
         8b:a7:dd:d3:c3:1f:0d:67:29:11:cd:f9:0b:12:bd:67:53:3f:
         ac:dd:2e:33:25:3c:d0:9c:8e:5a:1b:57:69:bd:3b:b6:8a:c4:
         6a:ab:d6:dd:09:ff:37:a8:65:ad:1e:4c:90:c0:29:42:18:29:
         3c:d4:23:c2:59:4e:f0:a7:c9:da:d9:0e:19:b8:98:fc:01:9f:
         5c:71:9c:f6:42:df:72:aa:b7:f2:9a:bd:c9:f6:30:85:9a:49:
         2f:d7:c3:61:15:ae:91:d5:58:c7:11:6e:8f:73:81:14:8e:14:
         bd:ed:67:26:12:51:1f:d7:63:49:82:3c:32:62:f5:d2:a1:4e:
         01:47:f7:00:ee:f0:f1:f4:3f:2d:3f:cf:be:35:56:6c:f0:45:
         02:1e:71:f8:f2:f8:d4:ea:10:1e:6c:03:3b:79:10:77:2c:41:
         3f:8b:66:e3:0b:ed:f4:26:62:b3:40:b5:0c:20:d2:a9:a2:9c:
         74:59:93:9e:86:33:ab:2f:85:da:10:78:6e:a3:58:82:3c:e8:
         f8:65:b9:6d:c4:b0:d9:08:f8:ef:90:87:7c:46:7f:df:76:ff:
         d6:93:34:f7:62:9e:be:a4:ac:86:a2:3c:3c:e0:62:17:77:db:
         14:4b:36:45
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICAgAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTBFNTUxMTAvBgNVBAUTKEEwMUEwRjA2RTMxMEIzODEzMDEzMUQ3ODgyOTcwQkYx
NjJERDBENjYwHhcNMjMxMDA5MDI1NDMzWhcNMjQxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NTIzNmI2OS01ODNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtfgqpvkzERXMMzGkGijv/h4B18xRrfYU78XFslbZMveVWfugVWUQny3ulCb4
hB4Kr+mvBWaGSZ0TS/4VxaGTXPD23ZvQEo3dOKqw10UnISQ6eurKiSrHmYPCfMeI
GiKRxu12Bgoe1JZd981+TWZayJ89DvTX7uSlTguF/WGKrq0vEQnI0Hyo8HjJJpd7
Bnh1Rd27HUW76MYrDwNyJOLrvF3e/KlytYsbl+mjDWqQEIKq/OnpPuiKPdOVkD37
3ykSyeU2yuLVk3Hs7ByXCcu7Lsp5CZ5Q7pDkZCMsEMoYdcrpVTqcCzD2FHeKyMBk
Ym4OkhgLxoQ5BUsBGzKf2KjsBwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFNW+NwKW
Qtk3+eXBDFd2uoDywYlpMB8GA1UdIwQYMBaAFKAaDwbjELOBMBMdeIKXC/Fi3Q1m
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MEU1NS83RDMyQTc0RUM2
MDAxMUVDODcwMDVDN0RDNEY5QUUwMi9vQm9QQnVNUXM0RXdFeDE0Z3BjTDhXTGRE
V1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL29Cb1BCdU1RczRFd0V4MTRncGNMOFdMZERXWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTBFNTUvN0QzMkE3NEVDNjAwMTFFQzg3MDA1QzdEQzRGOUFFMDIvMzk5NTJFNTBD
NkNCMTFFQ0IxODVFNDNFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBAIr80ADBAJnJqgwDQYJKoZIhvcNAQELBQADggEBAIhJFhbH
xi1WWq4xmOe1Pk08Foun3dPDHw1nKRHN+QsSvWdTP6zdLjMlPNCcjlobV2m9O7aK
xGqr1t0J/zeoZa0eTJDAKUIYKTzUI8JZTvCnydrZDhm4mPwBn1xxnPZC33Kqt/Ka
vcn2MIWaSS/Xw2EVrpHVWMcRbo9zgRSOFL3tZyYSUR/XY0mCPDJi9dKhTgFH9wDu
8PH0Py0/z741VmzwRQIecfjy+NTqEB5sAzt5EHcsQT+LZuML7fQmYrNAtQwg0qmi
nHRZk56GM6svhdoQeG6jWII86PhluW3EsNkI+O+Qh3xGf992/9aTNPdinr6krIai
PDzgYhd32xRLNkU=
-----END CERTIFICATE-----
Generated at Fri Sep 27 03:16:57 2024 by rpki-client on console-fra.rpki-client.org