Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9184279/0E361BB69C1511EB997ABD59C4F9AE02/BFC00D26D18011EEB673FD69C4F9AE02.roa
File:                     BFC00D26D18011EEB673FD69C4F9AE02.roa (raw, json)
Hash identifier:          v2pifPgOwNDmh/wYV1DkyCR4TlF4IX+bXrJPT+Zae4s=
Subject key identifier:   EA:E0:F4:DA:8F:07:1B:92:0F:E1:E5:B1:3F:2F:77:FE:7F:22:67:03
Certificate issuer:       /CN=A9184279/serialNumber=06D28C43EAE43F1F5DA56C6A21E6CABBFCB88DBE
Certificate serial:       05DE
Authority key identifier: 06:D2:8C:43:EA:E4:3F:1F:5D:A5:6C:6A:21:E6:CA:BB:FC:B8:8D:BE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtKMQ-rkPx9dpWxqIebKu_y4jb4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9184279/0E361BB69C1511EB997ABD59C4F9AE02/BFC00D26D18011EEB673FD69C4F9AE02.roa
Signing time:             Fri 04 Oct 2024 23:32:30 +0000
ROA not before:           Fri 04 Oct 2024 23:32:30 +0000
ROA not after:            Sun 02 Mar 2025 00:00:00 +0000
asID:                     141743
IP address blocks:        103.163.94.0/24 maxlen: 24
                          103.167.10.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9184279/0E361BB69C1511EB997ABD59C4F9AE02/BtKMQ-rkPx9dpWxqIebKu_y4jb4.crl
                          rsync://rpki.apnic.net/member_repository/A9184279/0E361BB69C1511EB997ABD59C4F9AE02/BtKMQ-rkPx9dpWxqIebKu_y4jb4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtKMQ-rkPx9dpWxqIebKu_y4jb4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1502 (0x5de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9184279/serialNumber=06D28C43EAE43F1F5DA56C6A21E6CABBFCB88DBE
        Validity
            Not Before: Oct  4 23:32:30 2024 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=67007b0e-3975
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:1d:26:79:a6:9a:0f:47:ae:1c:36:54:85:79:
                    c3:77:ff:d9:3c:9a:95:26:f2:1e:28:16:25:71:08:
                    af:cf:f7:84:5d:38:a0:5b:a8:76:67:3d:51:de:08:
                    b9:0d:47:b4:1e:a6:c0:67:72:dd:47:d3:e1:3c:b1:
                    69:97:fe:10:29:c7:19:54:56:0f:5f:cc:b1:ad:ba:
                    aa:9e:e0:57:bb:18:3c:57:53:a3:5e:0b:1f:f0:a9:
                    ea:2e:61:c6:25:0f:37:9d:53:09:96:91:44:7f:d0:
                    c8:3d:4a:e5:90:41:3b:17:91:28:07:68:57:8e:e7:
                    fb:76:34:a6:94:e0:81:82:c0:fb:60:b2:39:0c:59:
                    d9:4e:aa:30:bc:0b:1d:51:26:b1:d2:e7:07:a1:d2:
                    91:b3:31:ab:2c:17:eb:16:4d:35:d5:5e:fe:49:dd:
                    e1:a2:dc:ca:84:2b:9b:3d:3c:d5:4c:22:8a:da:e8:
                    b4:b4:ee:a6:45:ff:6c:9a:ff:10:3a:46:34:5a:9d:
                    f3:14:41:02:ca:f3:91:dd:6c:b7:5f:19:ef:81:8a:
                    d9:cd:09:54:b0:8a:dc:30:2a:4b:81:d4:9c:c3:8e:
                    29:f0:47:ac:ef:1b:5a:60:24:db:2f:df:3d:8d:05:
                    57:7d:4d:29:2b:05:b9:a4:a3:78:92:da:ca:ee:56:
                    9c:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:E0:F4:DA:8F:07:1B:92:0F:E1:E5:B1:3F:2F:77:FE:7F:22:67:03
            X509v3 Authority Key Identifier:
                keyid:06:D2:8C:43:EA:E4:3F:1F:5D:A5:6C:6A:21:E6:CA:BB:FC:B8:8D:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9184279/0E361BB69C1511EB997ABD59C4F9AE02/BtKMQ-rkPx9dpWxqIebKu_y4jb4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtKMQ-rkPx9dpWxqIebKu_y4jb4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184279/0E361BB69C1511EB997ABD59C4F9AE02/BFC00D26D18011EEB673FD69C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.163.94.0/24
                  103.167.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:68:c8:0b:a4:92:6b:47:9e:bb:5b:ca:fc:0a:31:63:8a:85:
         89:b2:dc:7a:cc:40:a8:dd:bf:f3:9c:67:e6:69:2b:e3:f8:9e:
         33:d2:59:36:df:26:f9:33:21:55:99:9a:9a:38:a6:ec:f9:04:
         47:ed:da:c0:7d:8d:10:8b:60:84:bc:29:7c:77:e5:f2:68:a4:
         68:12:46:d1:72:66:53:91:a3:50:73:19:1b:dd:cc:f2:2b:29:
         59:b4:4f:93:3c:80:ac:f6:52:52:11:64:14:0b:92:63:95:12:
         f6:8d:cf:1e:74:c2:37:d0:b5:b1:d3:fd:0a:92:7d:25:b0:33:
         24:5d:c4:22:bc:63:e5:82:50:d7:9b:67:15:2c:6f:8e:9d:81:
         3a:86:14:3c:f0:6e:2d:d8:88:07:02:f8:20:68:a8:13:63:68:
         97:5c:64:80:7e:e1:24:45:6c:62:98:e9:69:eb:0b:b3:86:3c:
         9e:2d:23:f0:50:51:a0:01:e1:22:88:8f:a2:dc:e1:37:7c:5e:
         1d:c2:5b:3f:21:7a:de:9d:ff:b8:db:d4:ec:32:aa:ca:51:e0:
         bf:cf:03:f0:0a:7b:dc:84:4c:2b:4e:73:cd:3d:e5:11:da:8d:
         86:a9:05:64:41:c1:99:9c:2c:c9:c7:45:8c:00:33:b2:fe:e7:
         79:0c:37:07
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICBd4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODQyNzkxMTAvBgNVBAUTKDA2RDI4QzQzRUFFNDNGMUY1REE1NkM2QTIxRTZDQUJC
RkNCODhEQkUwHhcNMjQxMDA0MjMzMjMwWhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzAwN2IwZS0zOTc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlh0meaaaD0euHDZUhXnDd//ZPJqVJvIeKBYlcQivz/eEXTigW6h2Zz1R3gi5
DUe0HqbAZ3LdR9PhPLFpl/4QKccZVFYPX8yxrbqqnuBXuxg8V1OjXgsf8KnqLmHG
JQ83nVMJlpFEf9DIPUrlkEE7F5EoB2hXjuf7djSmlOCBgsD7YLI5DFnZTqowvAsd
USax0ucHodKRszGrLBfrFk011V7+Sd3hotzKhCubPTzVTCKK2ui0tO6mRf9smv8Q
OkY0Wp3zFEECyvOR3Wy3XxnvgYrZzQlUsIrcMCpLgdScw44p8Ees7xtaYCTbL989
jQVXfU0pKwW5pKN4ktrK7lacBQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFOrg9NqP
BxuSD+HlsT8vd/5/ImcDMB8GA1UdIwQYMBaAFAbSjEPq5D8fXaVsaiHmyrv8uI2+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDI3OS8wRTM2MUJCNjlD
MTUxMUVCOTk3QUJENTlDNEY5QUUwMi9CdEtNUS1ya1B4OWRwV3hxSWViS3VfeTRq
YjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0J0S01RLXJrUHg5ZHBXeHFJZWJLdV95NGpiNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODQyNzkvMEUzNjFCQjY5QzE1MTFFQjk5N0FCRDU5QzRGOUFFMDIvQkZDMDBEMjZE
MTgwMTFFRUI2NzNGRDY5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBABno14DBABnpwowDQYJKoZIhvcNAQELBQADggEBAHhoyAuk
kmtHnrtbyvwKMWOKhYmy3HrMQKjdv/OcZ+ZpK+P4njPSWTbfJvkzIVWZmpo4puz5
BEft2sB9jRCLYIS8KXx35fJopGgSRtFyZlORo1BzGRvdzPIrKVm0T5M8gKz2UlIR
ZBQLkmOVEvaNzx50wjfQtbHT/QqSfSWwMyRdxCK8Y+WCUNebZxUsb46dgTqGFDzw
bi3YiAcC+CBoqBNjaJdcZIB+4SRFbGKY6WnrC7OGPJ4tI/BQUaAB4SKIj6Lc4Td8
Xh3CWz8het6d/7jb1OwyqspR4L/PA/AKe9yETCtOc8095RHajYapBWRBwZmcLMnH
RYwAM7L+53kMNwc=
-----END CERTIFICATE-----
Generated at Sat Nov 23 00:08:44 2024 by rpki-client on console-ams.rpki-client.org