Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915B2F1/26007FB68DF111EB8D0EA511C4F9AE02/9378220A8DF211EBADEDD212C4F9AE02.roa
File:                     9378220A8DF211EBADEDD212C4F9AE02.roa (raw, json)
Hash identifier:          pzmEhbNi69+FFSTeeH5V5Ci4qKH9yv0YpCfXLjHvTW4=
Subject key identifier:   DA:70:35:0A:4B:5D:17:01:74:AF:BD:8C:E5:13:10:3E:19:AF:7E:7C
Certificate issuer:       /CN=A915B2F1/serialNumber=5E82417953B35A9F8B59A42EC946F4D024D8776B
Certificate serial:       0528
Authority key identifier: 5E:82:41:79:53:B3:5A:9F:8B:59:A4:2E:C9:46:F4:D0:24:D8:77:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XoJBeVOzWp-LWaQuyUb00CTYd2s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915B2F1/26007FB68DF111EB8D0EA511C4F9AE02/9378220A8DF211EBADEDD212C4F9AE02.roa
Signing time:             Fri 17 Nov 2023 00:22:11 +0000
ROA not before:           Fri 17 Nov 2023 00:22:11 +0000
ROA not after:            Fri 31 Jan 2025 00:00:00 +0000
asID:                     137258
IP address blocks:        103.103.112.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915B2F1/26007FB68DF111EB8D0EA511C4F9AE02/XoJBeVOzWp-LWaQuyUb00CTYd2s.crl
                          rsync://rpki.apnic.net/member_repository/A915B2F1/26007FB68DF111EB8D0EA511C4F9AE02/XoJBeVOzWp-LWaQuyUb00CTYd2s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XoJBeVOzWp-LWaQuyUb00CTYd2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1320 (0x528)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915B2F1/serialNumber=5E82417953B35A9F8B59A42EC946F4D024D8776B
        Validity
            Not Before: Nov 17 00:22:11 2023 GMT
            Not After : Jan 31 00:00:00 2025 GMT
        Subject: CN=6556b233-cf7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:35:72:67:38:89:53:77:2b:7d:90:e5:d2:83:
                    e8:31:24:1e:06:9f:61:e8:d7:e5:d9:f4:5f:45:1f:
                    0c:ee:55:e3:11:ea:41:52:87:26:2d:89:9b:0d:36:
                    74:a0:3a:32:55:b3:c9:69:27:dc:e8:a2:96:62:61:
                    b3:9d:f7:69:35:86:df:2b:46:2d:26:54:da:e6:df:
                    2c:84:2f:89:e9:5d:76:05:12:53:8d:b7:b0:65:55:
                    2b:63:be:f9:0c:d6:45:ed:a7:63:16:e9:55:52:8f:
                    cc:d2:9a:99:16:49:e2:25:df:18:fe:f3:5c:ae:29:
                    88:e2:10:de:60:f2:f6:65:b7:c7:bd:fe:9d:d8:54:
                    96:d9:35:89:00:34:f0:b2:bb:4e:e8:cd:5d:2a:e6:
                    20:eb:f8:af:e9:7b:c8:45:bf:97:36:a1:d0:ca:a8:
                    a4:da:6d:73:4a:0b:f2:1e:bd:9e:10:07:18:c4:9a:
                    99:b2:85:dc:50:5e:f0:67:44:c2:d5:72:bc:26:89:
                    e9:08:8e:d2:12:b7:be:af:4c:74:26:f3:6a:3f:c6:
                    54:f8:03:7f:8b:8f:4d:f4:49:e6:38:1b:87:12:de:
                    cb:ba:ca:2c:4d:f1:76:50:3a:7a:65:60:7a:59:84:
                    db:01:f8:f5:76:a6:9b:09:3a:07:fc:45:09:74:bd:
                    0e:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:70:35:0A:4B:5D:17:01:74:AF:BD:8C:E5:13:10:3E:19:AF:7E:7C
            X509v3 Authority Key Identifier:
                keyid:5E:82:41:79:53:B3:5A:9F:8B:59:A4:2E:C9:46:F4:D0:24:D8:77:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915B2F1/26007FB68DF111EB8D0EA511C4F9AE02/XoJBeVOzWp-LWaQuyUb00CTYd2s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XoJBeVOzWp-LWaQuyUb00CTYd2s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B2F1/26007FB68DF111EB8D0EA511C4F9AE02/9378220A8DF211EBADEDD212C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.103.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:5b:01:63:7c:06:d6:3b:03:d2:fc:45:2b:9e:56:47:29:18:
         07:7f:3f:c2:b1:a9:56:7d:ff:5c:ba:cb:e4:0b:ea:2d:93:2b:
         03:9d:9f:8d:71:db:c5:42:93:0f:34:56:f0:2e:e1:b7:a1:33:
         1a:cb:58:c6:95:37:6e:37:a1:f0:26:7a:94:dc:05:c6:f5:d0:
         8f:95:58:01:d5:71:07:6b:3a:77:f4:32:86:b2:f2:61:bd:69:
         60:38:ca:fc:41:88:8b:3f:de:3f:d9:ac:d3:aa:8d:7b:2b:4b:
         d6:f6:1d:4b:f9:41:4c:d4:5a:51:24:55:13:c6:45:0a:76:34:
         16:18:61:68:f9:71:06:33:96:99:1c:ec:ef:46:6a:af:3c:29:
         81:0a:4d:60:c2:23:0d:e1:48:98:01:91:02:e9:53:d9:6f:5e:
         b8:94:46:fd:2f:c4:29:e7:39:d6:08:e4:63:5d:58:8a:80:f5:
         1b:a4:34:3c:e0:f0:4b:6d:4d:68:95:52:18:d8:e3:77:06:90:
         81:71:58:6f:34:14:a6:6a:8c:46:da:d7:55:8d:8e:bd:be:70:
         45:d8:ee:71:70:75:23:66:8a:20:3d:65:5f:c1:24:f9:de:ba:
         fc:ce:e5:9b:a1:18:df:9e:8d:30:96:d9:77:4e:29:b4:c7:e0:
         82:c3:70:3c
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBSgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUIyRjExMTAvBgNVBAUTKDVFODI0MTc5NTNCMzVBOUY4QjU5QTQyRUM5NDZGNEQw
MjREODc3NkIwHhcNMjMxMTE3MDAyMjExWhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NTU2YjIzMy1jZjdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0TVyZziJU3crfZDl0oPoMSQeBp9h6Nfl2fRfRR8M7lXjEepBUocmLYmbDTZ0
oDoyVbPJaSfc6KKWYmGznfdpNYbfK0YtJlTa5t8shC+J6V12BRJTjbewZVUrY775
DNZF7adjFulVUo/M0pqZFkniJd8Y/vNcrimI4hDeYPL2ZbfHvf6d2FSW2TWJADTw
srtO6M1dKuYg6/iv6XvIRb+XNqHQyqik2m1zSgvyHr2eEAcYxJqZsoXcUF7wZ0TC
1XK8JonpCI7SEre+r0x0JvNqP8ZU+AN/i49N9EnmOBuHEt7LusosTfF2UDp6ZWB6
WYTbAfj1dqabCToH/EUJdL0ObQIDAQABo4IClTCCApEwHQYDVR0OBBYEFNpwNQpL
XRcBdK+9jOUTED4Zr358MB8GA1UdIwQYMBaAFF6CQXlTs1qfi1mkLslG9NAk2Hdr
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjJGMS8yNjAwN0ZCNjhE
RjExMUVCOEQwRUE1MTFDNEY5QUUwMi9Yb0pCZVZPeldwLUxXYVF1eVViMDBDVFlk
MnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1hvSkJlVk96V3AtTFdhUXV5VWIwMENUWWQycy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NUIyRjEvMjYwMDdGQjY4REYxMTFFQjhEMEVBNTExQzRGOUFFMDIvOTM3ODIyMEE4
REYyMTFFQkFERUREMjEyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnZ3AwDQYJKoZIhvcNAQELBQADggEBAI9bAWN8BtY7A9L8
RSueVkcpGAd/P8KxqVZ9/1y6y+QL6i2TKwOdn41x28VCkw80VvAu4behMxrLWMaV
N243ofAmepTcBcb10I+VWAHVcQdrOnf0Moay8mG9aWA4yvxBiIs/3j/ZrNOqjXsr
S9b2HUv5QUzUWlEkVRPGRQp2NBYYYWj5cQYzlpkc7O9Gaq88KYEKTWDCIw3hSJgB
kQLpU9lvXriURv0vxCnnOdYI5GNdWIqA9RukNDzg8EttTWiVUhjY43cGkIFxWG80
FKZqjEba11WNjr2+cEXY7nFwdSNmiiA9ZV/BJPneuvzO5ZuhGN+ejTCW2XdOKbTH
4ILDcDw=
-----END CERTIFICATE-----
Generated at Sat Nov 23 00:08:40 2024 by rpki-client on console-ams.rpki-client.org