Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915308F/2C14EA10F66011EE9C88DD1FC4F9AE02/2AF6426EF71911EE82FD6B0EC4F9AE02.roa
File:                     2AF6426EF71911EE82FD6B0EC4F9AE02.roa (raw, json)
Hash identifier:          T3FHkQFBnR1D7G7E+6iXElBbCR/lDFKEW2aPMQWoc4I=
Subject key identifier:   3D:1A:3F:62:5F:55:27:51:8D:A6:88:32:1B:BE:C3:F4:7E:CD:76:58
Certificate issuer:       /CN=A915308F/serialNumber=82E9C63B7C2C79087D5AB10E89DD28A2F7C49C3E
Certificate serial:       06
Authority key identifier: 82:E9:C6:3B:7C:2C:79:08:7D:5A:B1:0E:89:DD:28:A2:F7:C4:9C:3E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gunGO3wseQh9WrEOid0oovfEnD4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915308F/2C14EA10F66011EE9C88DD1FC4F9AE02/2AF6426EF71911EE82FD6B0EC4F9AE02.roa
Signing time:             Wed 10 Apr 2024 09:03:16 +0000
ROA not before:           Wed 10 Apr 2024 09:03:16 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     152684
IP address blocks:        103.129.14.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915308F/2C14EA10F66011EE9C88DD1FC4F9AE02/gunGO3wseQh9WrEOid0oovfEnD4.crl
                          rsync://rpki.apnic.net/member_repository/A915308F/2C14EA10F66011EE9C88DD1FC4F9AE02/gunGO3wseQh9WrEOid0oovfEnD4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gunGO3wseQh9WrEOid0oovfEnD4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915308F/serialNumber=82E9C63B7C2C79087D5AB10E89DD28A2F7C49C3E
        Validity
            Not Before: Apr 10 09:03:16 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=661655d4-c64c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ff:81:f0:be:c8:8b:b3:4a:0f:fd:e0:eb:fb:
                    de:9f:a4:5d:09:57:92:e4:78:f1:c9:9f:3d:df:f3:
                    6f:d6:1c:31:86:3a:65:41:d1:da:13:30:78:76:7f:
                    2e:17:4d:86:3e:e6:f6:83:d2:cd:f9:fc:a8:64:31:
                    c1:be:61:d8:2a:3d:54:38:d1:7b:b1:ca:64:2d:04:
                    3f:19:a2:5e:78:3e:01:4a:16:42:f5:16:21:e6:e0:
                    06:83:df:53:0f:60:3e:bc:ba:2c:e1:37:7b:d9:ad:
                    0d:bb:b8:b0:75:01:1d:af:6f:75:c7:40:05:04:16:
                    14:26:dc:ae:bf:f6:e8:54:5c:90:c1:a5:2f:93:24:
                    ac:9c:66:a0:0d:f7:d8:50:41:ff:0d:27:8e:2f:27:
                    7f:27:a7:0c:12:9f:b7:0f:ca:f9:2e:10:30:3c:90:
                    99:f2:4b:5c:a2:e8:28:cb:d8:f2:d6:a9:77:58:5d:
                    e0:3b:e3:2b:44:8e:4d:fe:e2:43:7c:23:63:a3:ba:
                    7e:bd:a0:ff:a8:b5:a9:dc:41:e3:4d:f3:ed:0a:3a:
                    2e:44:bc:89:cc:ba:f4:fc:96:fb:3b:e2:74:dd:b0:
                    e4:8f:11:5c:92:b7:29:a6:6d:6d:65:6e:e0:a5:7e:
                    d8:ad:a6:6e:c6:14:0b:ca:fe:17:dc:2e:f4:4b:1a:
                    6e:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:1A:3F:62:5F:55:27:51:8D:A6:88:32:1B:BE:C3:F4:7E:CD:76:58
            X509v3 Authority Key Identifier:
                keyid:82:E9:C6:3B:7C:2C:79:08:7D:5A:B1:0E:89:DD:28:A2:F7:C4:9C:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915308F/2C14EA10F66011EE9C88DD1FC4F9AE02/gunGO3wseQh9WrEOid0oovfEnD4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gunGO3wseQh9WrEOid0oovfEnD4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915308F/2C14EA10F66011EE9C88DD1FC4F9AE02/2AF6426EF71911EE82FD6B0EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.129.14.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2b:e0:aa:82:a0:dd:a0:2f:c8:97:1e:f3:44:0e:ba:76:aa:a3:
         ad:55:ab:68:0e:4f:62:8a:23:61:5e:c8:5b:93:08:12:e9:94:
         eb:8d:f1:a1:3b:01:2b:0c:94:81:01:9d:6f:a7:23:c6:d0:8e:
         19:8e:5b:b9:e7:70:8a:41:c9:27:fa:45:f1:08:53:e9:2d:4d:
         48:65:a6:5b:8e:74:1c:0f:ed:f6:b7:12:d8:48:10:35:bd:c8:
         a9:ba:da:78:3e:a4:c7:b8:71:4e:03:b2:3c:23:5e:f7:1a:5c:
         60:0a:df:10:74:d2:4a:7c:8a:c0:5e:77:2b:e0:fb:51:df:f9:
         f6:d2:62:76:ea:92:7d:8d:18:ea:91:0c:47:c5:6d:da:75:f1:
         f4:a1:c0:fb:b5:87:c3:e7:61:93:f3:c8:95:24:80:90:ff:c2:
         75:36:6f:7a:83:74:02:e4:eb:7f:ee:1c:16:ad:25:15:f4:29:
         b9:b5:73:99:68:b7:45:9c:6a:09:cb:13:ff:01:13:a7:28:62:
         d1:62:d9:ce:f9:8e:a4:c1:62:bf:fb:8d:cd:96:11:bf:32:07:
         eb:0b:05:86:a7:65:df:6e:d8:09:fa:5c:4c:e9:39:48:81:36:
         8f:29:3c:85:c6:0c:1b:08:45:71:1c:26:1d:99:50:ea:1a:c5:
         e0:a0:d6:90
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBBjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1
MzA4RjExMC8GA1UEBRMoODJFOUM2M0I3QzJDNzkwODdENUFCMTBFODlERDI4QTJG
N0M0OUMzRTAeFw0yNDA0MTAwOTAzMTZaFw0yNTA3MzAwMDAwMDBaMBgxFjAUBgNV
BAMTDTY2MTY1NWQ0LWM2NGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCv/4HwvsiLs0oP/eDr+96fpF0JV5LkePHJnz3f82/WHDGGOmVB0doTMHh2fy4X
TYY+5vaD0s35/KhkMcG+YdgqPVQ40XuxymQtBD8Zol54PgFKFkL1FiHm4AaD31MP
YD68uizhN3vZrQ27uLB1AR2vb3XHQAUEFhQm3K6/9uhUXJDBpS+TJKycZqAN99hQ
Qf8NJ44vJ38npwwSn7cPyvkuEDA8kJnyS1yi6CjL2PLWqXdYXeA74ytEjk3+4kN8
I2Ojun69oP+otancQeNN8+0KOi5EvInMuvT8lvs74nTdsOSPEVyStymmbW1lbuCl
ftitpm7GFAvK/hfcLvRLGm71AgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUPRo/Yl9V
J1GNpogyG77D9H7NdlgwHwYDVR0jBBgwFoAUgunGO3wseQh9WrEOid0oovfEnD4w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUzMDhGLzJDMTRFQTEwRjY2
MDExRUU5Qzg4REQxRkM0RjlBRTAyL2d1bkdPM3dzZVFoOVdyRU9pZDBvb3ZmRW5E
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvZ3VuR08zd3NlUWg5V3JFT2lkMG9vdmZFbkQ0LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
MzA4Ri8yQzE0RUExMEY2NjAxMUVFOUM4OEREMUZDNEY5QUUwMi8yQUY2NDI2RUY3
MTkxMUVFODJGRDZCMEVDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAWeBDjANBgkqhkiG9w0BAQsFAAOCAQEAK+CqgqDdoC/Ilx7z
RA66dqqjrVWraA5PYoojYV7IW5MIEumU643xoTsBKwyUgQGdb6cjxtCOGY5buedw
ikHJJ/pF8QhT6S1NSGWmW450HA/t9rcS2EgQNb3IqbraeD6kx7hxTgOyPCNe9xpc
YArfEHTSSnyKwF53K+D7Ud/59tJiduqSfY0Y6pEMR8Vt2nXx9KHA+7WHw+dhk/PI
lSSAkP/CdTZveoN0AuTrf+4cFq0lFfQpubVzmWi3RZxqCcsT/wETpyhi0WLZzvmO
pMFiv/uNzZYRvzIH6wsFhqdl327YCfpcTOk5SIE2jyk8hcYMGwhFcRwmHZlQ6hrF
4KDWkA==
-----END CERTIFICATE-----
Generated at Sat Nov 23 06:21:24 2024 by rpki-client on console-fra.rpki-client.org