Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9182B6F/F7F9476EC8B011ECA8847949C4F9AE02/681E9EECCAC111ECA0AC3E32C4F9AE02.roa
File:                     681E9EECCAC111ECA0AC3E32C4F9AE02.roa (raw, json)
Hash identifier:          A/XsmWmS2Fzl2w/pads2BI35cg5AkCMUce4iVb/sJsY=
Subject key identifier:   0F:54:B2:21:B2:55:B9:FF:CA:58:BC:C6:A0:0D:A7:C5:D2:86:FF:21
Certificate issuer:       /CN=A9182B6F/serialNumber=796A44CF1B70F4A9F9E6A5FFB009BB7860F35580
Certificate serial:       0267
Authority key identifier: 79:6A:44:CF:1B:70:F4:A9:F9:E6:A5:FF:B0:09:BB:78:60:F3:55:80
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eWpEzxtw9Kn55qX_sAm7eGDzVYA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9182B6F/F7F9476EC8B011ECA8847949C4F9AE02/681E9EECCAC111ECA0AC3E32C4F9AE02.roa
Signing time:             Sun 05 May 2024 04:06:45 +0000
ROA not before:           Sun 05 May 2024 04:06:45 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     134242
IP address blocks:        103.111.16.0/22 maxlen: 22
                          103.111.16.0/24 maxlen: 24
                          103.111.17.0/24 maxlen: 24
                          103.111.18.0/24 maxlen: 24
                          103.111.19.0/24 maxlen: 24
                          2402:9340::/32 maxlen: 32
                          2402:9340:1000::/36 maxlen: 36
                          2402:9340:2000::/36 maxlen: 36
                          2402:9340:3000::/36 maxlen: 36
                          2402:9340:4000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9182B6F/F7F9476EC8B011ECA8847949C4F9AE02/eWpEzxtw9Kn55qX_sAm7eGDzVYA.crl
                          rsync://rpki.apnic.net/member_repository/A9182B6F/F7F9476EC8B011ECA8847949C4F9AE02/eWpEzxtw9Kn55qX_sAm7eGDzVYA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eWpEzxtw9Kn55qX_sAm7eGDzVYA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 04:53:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 615 (0x267)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9182B6F/serialNumber=796A44CF1B70F4A9F9E6A5FFB009BB7860F35580
        Validity
            Not Before: May  5 04:06:45 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=663705d5-a889
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:a5:a8:d7:98:f5:dc:e7:07:c6:c4:bc:72:57:
                    a2:ec:a9:19:db:46:7e:ba:45:50:57:58:f4:5c:54:
                    5c:f4:09:b2:c3:2d:c0:91:eb:5c:6a:83:96:7f:b3:
                    39:a6:ad:fb:c2:3c:d4:65:28:ee:05:72:e2:68:ea:
                    f3:2d:a8:39:47:6e:c7:4f:c5:cd:46:93:7b:f2:88:
                    ee:dd:09:fc:1a:a3:25:e9:32:2e:cb:af:86:0c:5f:
                    37:d4:8c:1c:84:88:c1:6a:4f:b1:4b:44:7c:de:ed:
                    a6:93:ca:29:91:94:34:e5:aa:11:b1:7d:a7:37:58:
                    26:12:27:57:3e:8a:df:c6:ac:f8:d7:65:82:28:2e:
                    da:b5:3d:40:93:4d:47:58:8e:0a:d1:ff:67:49:18:
                    da:02:81:56:53:b7:07:23:71:76:21:f6:73:34:06:
                    91:d4:0c:8d:a0:3c:d4:1d:8a:23:26:a3:95:60:06:
                    f8:d2:5d:f3:ff:d6:89:5d:dd:2d:51:3b:26:80:9a:
                    12:52:b0:c9:4b:da:48:5e:3f:2b:b5:26:92:1a:ff:
                    b9:8d:f7:8b:90:9e:8b:9b:64:b2:0e:e3:5f:6a:e4:
                    49:b4:2c:93:6f:fc:0c:67:96:90:d0:22:d4:8d:fd:
                    6a:37:55:2b:da:c3:95:02:df:04:70:c0:39:97:f8:
                    8e:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:54:B2:21:B2:55:B9:FF:CA:58:BC:C6:A0:0D:A7:C5:D2:86:FF:21
            X509v3 Authority Key Identifier:
                keyid:79:6A:44:CF:1B:70:F4:A9:F9:E6:A5:FF:B0:09:BB:78:60:F3:55:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9182B6F/F7F9476EC8B011ECA8847949C4F9AE02/eWpEzxtw9Kn55qX_sAm7eGDzVYA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eWpEzxtw9Kn55qX_sAm7eGDzVYA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182B6F/F7F9476EC8B011ECA8847949C4F9AE02/681E9EECCAC111ECA0AC3E32C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.111.16.0/22
                IPv6:
                  2402:9340::/32

    Signature Algorithm: sha256WithRSAEncryption
         09:d5:65:16:39:cc:f5:09:0c:39:2a:51:99:85:25:b4:c2:a5:
         06:2c:f1:3b:6c:ed:92:90:0c:ff:58:91:81:92:21:b0:ab:b8:
         e4:cf:d5:77:3f:a3:ab:28:8b:e0:99:6a:e2:03:9c:64:19:a9:
         03:7e:25:4a:2c:8d:d1:8a:0d:04:1c:fd:bc:81:ff:e2:57:09:
         a4:7e:53:74:63:58:37:b0:78:aa:39:91:62:59:52:24:35:3e:
         68:d6:2b:39:da:17:3f:12:e6:5c:05:6b:83:f0:19:b5:9b:c6:
         93:c3:98:9d:c7:de:3c:cd:f3:8e:63:7d:59:00:3e:f5:83:ce:
         9b:a1:8e:1d:9c:02:1d:68:43:68:07:8f:ca:74:ac:98:a8:ad:
         bc:8c:15:5d:fc:82:ef:82:68:7e:72:44:98:4e:31:bc:0d:5a:
         38:00:fe:60:28:5e:cc:0e:92:2d:00:5b:4b:b8:23:9e:83:2c:
         53:de:98:f0:28:93:ea:51:e1:b4:9f:28:7b:42:e1:a4:a2:33:
         27:50:1e:8a:72:54:f7:7a:7e:b1:89:02:e5:8c:15:33:71:25:
         38:2f:5c:fe:31:7b:35:a2:42:83:c0:5d:f5:66:6b:ed:24:1b:
         5b:80:cf:1f:1f:d8:18:ee:ef:01:f4:64:27:d1:7e:5d:a4:42:
         69:71:4c:56
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICAmcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODJCNkYxMTAvBgNVBAUTKDc5NkE0NENGMUI3MEY0QTlGOUU2QTVGRkIwMDlCQjc4
NjBGMzU1ODAwHhcNMjQwNTA1MDQwNjQ1WhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NjM3MDVkNS1hODg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1qWo15j13OcHxsS8clei7KkZ20Z+ukVQV1j0XFRc9Amywy3AketcaoOWf7M5
pq37wjzUZSjuBXLiaOrzLag5R27HT8XNRpN78oju3Qn8GqMl6TIuy6+GDF831Iwc
hIjBak+xS0R83u2mk8opkZQ05aoRsX2nN1gmEidXPorfxqz412WCKC7atT1Ak01H
WI4K0f9nSRjaAoFWU7cHI3F2IfZzNAaR1AyNoDzUHYojJqOVYAb40l3z/9aJXd0t
UTsmgJoSUrDJS9pIXj8rtSaSGv+5jfeLkJ6Lm2SyDuNfauRJtCyTb/wMZ5aQ0CLU
jf1qN1Ur2sOVAt8EcMA5l/iObQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFA9UsiGy
Vbn/yli8xqANp8XShv8hMB8GA1UdIwQYMBaAFHlqRM8bcPSp+eal/7AJu3hg81WA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MkI2Ri9GN0Y5NDc2RUM4
QjAxMUVDQTg4NDc5NDlDNEY5QUUwMi9lV3BFenh0dzlLbjU1cVhfc0FtN2VHRHpW
WUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2VXcEV6eHR3OUtuNTVxWF9zQW03ZUdEelZZQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODJCNkYvRjdGOTQ3NkVDOEIwMTFFQ0E4ODQ3OTQ5QzRGOUFFMDIvNjgxRTlFRUND
QUMxMTFFQ0EwQUMzRTMyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E
HzAdMAwEAgABMAYDBAJnbxAwDQQCAAIwBwMFACQCk0AwDQYJKoZIhvcNAQELBQAD
ggEBAAnVZRY5zPUJDDkqUZmFJbTCpQYs8Tts7ZKQDP9YkYGSIbCruOTP1Xc/o6so
i+CZauIDnGQZqQN+JUosjdGKDQQc/byB/+JXCaR+U3RjWDeweKo5kWJZUiQ1PmjW
KznaFz8S5lwFa4PwGbWbxpPDmJ3H3jzN845jfVkAPvWDzpuhjh2cAh1oQ2gHj8p0
rJiorbyMFV38gu+CaH5yRJhOMbwNWjgA/mAoXswOki0AW0u4I56DLFPemPAok+pR
4bSfKHtC4aSiMydQHopyVPd6frGJAuWMFTNxJTgvXP4xezWiQoPAXfVma+0kG1uA
zx8f2Bju7wH0ZCfRfl2kQmlxTFY=
-----END CERTIFICATE-----
Generated at Sat Jun 1 05:48:43 2024 by rpki-client on console-fra.rpki-client.org