Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9171D3F/9B9C8E6AB1B511ED99E32669C4F9AE02/9344B512B1BA11ED8DC4D42EC4F9AE02.roa
File:                     9344B512B1BA11ED8DC4D42EC4F9AE02.roa (raw, json)
Hash identifier:          05FYul9tCmnEluZqc+GxuuNUpvwFpQ5F6tjIORKsJIs=
Subject key identifier:   96:56:8F:B5:14:5B:DA:5D:E6:35:BB:CC:05:30:7C:1E:DC:4E:87:03
Certificate issuer:       /CN=A9171D3F/serialNumber=EFD88F8A289B14C79443128BBBB791B52DA511AD
Certificate serial:       015B
Authority key identifier: EF:D8:8F:8A:28:9B:14:C7:94:43:12:8B:BB:B7:91:B5:2D:A5:11:AD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/79iPiiibFMeUQxKLu7eRtS2lEa0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9171D3F/9B9C8E6AB1B511ED99E32669C4F9AE02/9344B512B1BA11ED8DC4D42EC4F9AE02.roa
Signing time:             Thu 19 Dec 2024 02:55:57 +0000
ROA not before:           Thu 19 Dec 2024 02:55:57 +0000
ROA not after:            Mon 02 Mar 2026 00:00:00 +0000
asID:                     24323
IP address blocks:        103.39.196.0/23 maxlen: 23
                          103.39.196.0/24 maxlen: 24
                          103.39.197.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9171D3F/9B9C8E6AB1B511ED99E32669C4F9AE02/79iPiiibFMeUQxKLu7eRtS2lEa0.crl
                          rsync://rpki.apnic.net/member_repository/A9171D3F/9B9C8E6AB1B511ED99E32669C4F9AE02/79iPiiibFMeUQxKLu7eRtS2lEa0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/79iPiiibFMeUQxKLu7eRtS2lEa0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 05 Apr 2025 03:04:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 347 (0x15b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9171D3F
        Validity
            Not Before: Dec 19 02:55:57 2024 GMT
            Not After : Mar  2 00:00:00 2026 GMT
        Subject: CN=67638b3d-adfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:e4:90:5e:e5:af:a3:40:ef:89:b9:76:91:33:
                    67:3c:8c:66:71:aa:22:e6:f2:6a:f3:e9:f5:c1:4c:
                    c1:65:ad:61:ad:91:67:e9:15:92:9e:56:08:88:e9:
                    a7:e7:63:1c:81:0b:5a:5b:8d:da:ce:84:63:5b:b4:
                    10:0b:50:83:a3:a4:54:ae:d5:de:50:5f:c2:7e:00:
                    49:56:db:1b:b1:d3:db:1e:be:b5:80:3c:ad:08:e8:
                    0c:96:6f:b3:d3:80:84:c8:7b:85:2a:66:ca:9d:56:
                    a5:f0:bb:b5:c0:5b:e3:91:fe:2b:89:36:a4:03:f1:
                    6f:27:14:a1:5b:f0:20:2b:5e:4b:7c:c4:63:89:a8:
                    93:60:be:be:8a:22:e4:10:7e:d1:e7:83:32:3a:c3:
                    a6:61:52:53:9e:b0:23:c8:c1:9b:b3:0b:2b:db:5d:
                    e1:91:52:a8:ed:8b:13:42:0e:fa:f5:38:95:e0:f8:
                    be:da:5e:b0:9b:18:f6:5b:b3:8e:0e:5f:df:64:11:
                    1e:df:2e:d7:ac:cf:29:63:e0:a3:48:f3:f4:f3:00:
                    e3:86:ab:3c:5e:43:c8:4d:c3:d4:21:3e:d2:bc:48:
                    33:e2:21:82:88:be:88:34:47:1b:0d:30:2a:2c:a6:
                    34:f2:59:b0:d1:1b:8a:ae:7c:ca:68:c8:9c:a6:3a:
                    e0:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:56:8F:B5:14:5B:DA:5D:E6:35:BB:CC:05:30:7C:1E:DC:4E:87:03
            X509v3 Authority Key Identifier:
                keyid:EF:D8:8F:8A:28:9B:14:C7:94:43:12:8B:BB:B7:91:B5:2D:A5:11:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9171D3F/9B9C8E6AB1B511ED99E32669C4F9AE02/79iPiiibFMeUQxKLu7eRtS2lEa0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/79iPiiibFMeUQxKLu7eRtS2lEa0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171D3F/9B9C8E6AB1B511ED99E32669C4F9AE02/9344B512B1BA11ED8DC4D42EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.39.196.0/23

    Signature Algorithm: sha256WithRSAEncryption
         29:5a:54:c4:57:c0:02:00:75:b5:1c:16:1f:f7:0f:8d:2f:db:
         85:dd:62:35:9d:f2:0c:12:9d:a2:a5:a1:a0:df:83:e3:cc:e3:
         3b:2c:2c:50:76:76:42:f6:2f:30:32:bc:5d:42:e5:a5:b6:ec:
         14:a4:81:b2:b6:ee:57:1f:41:bb:67:d6:99:71:90:8c:c7:3d:
         a2:f1:2f:ac:39:36:79:e9:85:7a:d3:ab:49:79:de:6d:a4:6d:
         6e:c7:69:ea:96:0d:7b:d5:10:a1:e8:fe:77:18:a3:f2:d2:5b:
         58:9f:31:96:09:2a:38:e9:2d:c2:c3:01:67:0a:2e:ca:d1:26:
         96:31:8c:c2:30:7c:aa:6e:dc:0a:42:92:a2:50:7d:3e:18:7f:
         3d:2f:76:0e:a1:2e:25:bb:e9:4e:b0:19:94:80:be:3a:6e:cd:
         44:98:23:c7:5a:37:dc:76:b5:b2:b9:9e:7b:2b:56:aa:78:c3:
         12:2a:25:06:71:a9:79:00:de:f3:be:15:e4:c2:9c:76:0f:d7:
         e6:98:6a:17:ce:b6:5a:88:58:fa:b8:6d:8f:a6:55:61:df:04:
         7d:c1:44:f2:e5:7d:31:07:21:ed:cb:31:9f:20:67:fa:06:74:
         d1:da:1d:ae:3f:8a:cf:c1:6f:b6:dc:7e:6d:6b:e9:f5:f7:3c:
         2a:42:24:c3
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAVswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzFEM0YxMTAvBgNVBAUTKEVGRDg4RjhBMjg5QjE0Qzc5NDQzMTI4QkJCQjc5MUI1
MkRBNTExQUQwHhcNMjQxMjE5MDI1NTU3WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzYzOGIzZC1hZGZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6+SQXuWvo0Dvibl2kTNnPIxmcaoi5vJq8+n1wUzBZa1hrZFn6RWSnlYIiOmn
52McgQtaW43azoRjW7QQC1CDo6RUrtXeUF/CfgBJVtsbsdPbHr61gDytCOgMlm+z
04CEyHuFKmbKnVal8Lu1wFvjkf4riTakA/FvJxShW/AgK15LfMRjiaiTYL6+iiLk
EH7R54MyOsOmYVJTnrAjyMGbswsr213hkVKo7YsTQg769TiV4Pi+2l6wmxj2W7OO
Dl/fZBEe3y7XrM8pY+CjSPP08wDjhqs8XkPITcPUIT7SvEgz4iGCiL6INEcbDTAq
LKY08lmw0RuKrnzKaMicpjrggQIDAQABo4IClTCCApEwHQYDVR0OBBYEFJZWj7UU
W9pd5jW7zAUwfB7cTocDMB8GA1UdIwQYMBaAFO/Yj4oomxTHlEMSi7u3kbUtpRGt
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MUQzRi85QjlDOEU2QUIx
QjUxMUVEOTlFMzI2NjlDNEY5QUUwMi83OWlQaWlpYkZNZVVReEtMdTdlUnRTMmxF
YTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzc5aVBpaWliRk1lVVF4S0x1N2VSdFMybEVhMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NzFEM0YvOUI5QzhFNkFCMUI1MTFFRDk5RTMyNjY5QzRGOUFFMDIvOTM0NEI1MTJC
MUJBMTFFRDhEQzRENDJFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnJ8QwDQYJKoZIhvcNAQELBQADggEBAClaVMRXwAIAdbUc
Fh/3D40v24XdYjWd8gwSnaKloaDfg+PM4zssLFB2dkL2LzAyvF1C5aW27BSkgbK2
7lcfQbtn1plxkIzHPaLxL6w5NnnphXrTq0l53m2kbW7HaeqWDXvVEKHo/ncYo/LS
W1ifMZYJKjjpLcLDAWcKLsrRJpYxjMIwfKpu3ApCkqJQfT4Yfz0vdg6hLiW76U6w
GZSAvjpuzUSYI8daN9x2tbK5nnsrVqp4wxIqJQZxqXkA3vO+FeTCnHYP1+aYahfO
tlqIWPq4bY+mVWHfBH3BRPLlfTEHIe3LMZ8gZ/oGdNHaHa4/is/Bb7bcfm1r6fX3
PCpCJMM=
-----END CERTIFICATE-----
Generated at Sat Apr 5 02:15:57 2025 by rpki-client