Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/A197DDE6BF2011E99B065B7DC4F9AE02.roa
File:                     A197DDE6BF2011E99B065B7DC4F9AE02.roa (raw, json)
Hash identifier:          XODHegdUtMCzoEoTSUegvVKzLpENrWz3F4wwNQhAS1w=
Subject key identifier:   2F:04:00:B6:5E:25:B8:17:51:D7:8C:F5:85:F1:B7:F3:DA:6F:66:38
Certificate issuer:       /CN=A9186214/serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
Certificate serial:       336C
Authority key identifier: F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/A197DDE6BF2011E99B065B7DC4F9AE02.roa
Signing time:             Tue 30 Jan 2024 16:13:01 +0000
ROA not before:           Tue 30 Jan 2024 16:13:00 +0000
ROA not after:            Sat 31 Aug 2024 00:00:00 +0000
asID:                     55695
IP address blocks:        103.25.54.0/24 maxlen: 24
                          103.25.55.0/24 maxlen: 24
                          202.0.92.0/23 maxlen: 24
                          2405:2d40::/32 maxlen: 32
                          2405:2d40::/48 maxlen: 48
                          2405:2d40:1::/48 maxlen: 48
                          2405:2d40:2::/48 maxlen: 48
                          2405:2d40:11::/48 maxlen: 48
                          2405:2d40:12::/48 maxlen: 48
                          2405:2d40:13::/48 maxlen: 48
                          2405:2d40:14::/48 maxlen: 48
                          2405:2d40:15::/48 maxlen: 48
                          2405:2d40:16::/48 maxlen: 48
                          2405:2d40:17::/48 maxlen: 48
                          2405:2d40:18::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl
                          rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 May 2024 02:42:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13164 (0x336c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186214/serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
        Validity
            Not Before: Jan 30 16:13:00 2024 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=65b9200c-c41a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c3:70:fb:c7:92:3e:2e:eb:75:b3:34:fe:71:
                    1d:7d:e2:95:86:f3:a0:85:9e:9e:1f:f3:0c:8a:31:
                    83:18:78:1e:34:a1:31:6d:9a:98:2f:32:b5:1b:c1:
                    00:88:77:79:ff:d3:2b:d1:5f:b1:50:c0:20:7c:8a:
                    e1:84:76:34:f6:d9:c3:a4:0c:58:30:71:da:6a:70:
                    94:64:dd:4c:56:78:04:61:80:27:d8:ff:f6:f7:1e:
                    a1:f9:5a:4f:82:e1:b5:22:21:f0:e6:50:9d:43:49:
                    04:d7:e5:c3:d8:61:88:01:1f:70:a7:2e:83:38:5b:
                    fe:e1:d7:e3:f0:5b:e9:ce:cd:76:57:a8:d4:2f:6f:
                    17:99:88:f7:d0:fa:e0:c7:ce:81:a4:2a:5e:17:9e:
                    50:d6:12:30:5c:1b:02:02:48:66:a1:ff:a6:25:b9:
                    ec:b6:f4:81:00:bb:51:5b:60:6f:12:2a:99:ed:6e:
                    2b:99:da:fb:2e:06:cd:12:3e:9b:32:9a:ae:ee:8c:
                    6e:d6:d7:ee:2c:1c:39:31:86:fc:26:42:b6:3c:d0:
                    ce:91:5a:30:6d:60:a4:41:31:bd:7a:12:4f:a7:bb:
                    18:d4:93:e4:2a:61:7f:a7:34:70:a3:c1:7a:58:73:
                    16:ca:9f:8f:ac:fa:0c:82:dc:65:86:46:78:8c:21:
                    05:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:04:00:B6:5E:25:B8:17:51:D7:8C:F5:85:F1:B7:F3:DA:6F:66:38
            X509v3 Authority Key Identifier:
                keyid:F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/A197DDE6BF2011E99B065B7DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.25.54.0/23
                  202.0.92.0/23
                IPv6:
                  2405:2d40::/32

    Signature Algorithm: sha256WithRSAEncryption
         79:9b:64:d8:e2:f2:8f:de:12:e0:8b:dc:15:a9:91:af:f7:bf:
         e7:01:00:83:2c:a7:a6:14:05:f8:ec:04:1c:48:a1:c8:72:c7:
         8b:1d:8d:98:eb:f8:03:0a:a3:fe:a2:01:bb:45:77:39:1f:16:
         53:83:b5:ad:0b:bd:51:84:db:b0:0e:f9:57:80:25:d4:74:f3:
         03:a6:88:e5:5f:fe:56:e4:dc:52:60:0b:eb:e7:59:f0:d7:dc:
         1a:4d:be:e4:db:04:99:4b:a9:3c:7b:51:05:4d:64:b2:76:84:
         b1:eb:f1:51:62:1f:11:74:74:33:af:f3:a6:8b:ab:a2:20:12:
         ab:00:80:10:03:9a:f3:dd:b0:b3:98:05:ba:13:78:c6:4e:69:
         4e:d4:47:9a:bb:50:6b:73:ac:4a:17:8f:d5:16:19:45:ba:92:
         e9:ff:e2:76:bc:a8:c7:06:8c:8f:5b:44:6e:38:2f:bc:5e:35:
         62:9b:7c:d6:d0:c0:6e:53:d0:c7:b0:02:d8:56:57:48:d2:89:
         25:45:a4:0a:ff:37:4f:ad:a7:86:f4:0e:87:e7:32:f0:0f:3c:
         d3:b7:e7:87:b1:18:1c:f7:36:7f:57:37:43:96:c2:a3:31:60:
         18:64:f3:80:aa:e6:a6:8d:3e:87:6e:20:b5:c4:7b:2c:c8:d7:
         ca:2e:07:d1
-----BEGIN CERTIFICATE-----
MIIFhjCCBG6gAwIBAgICM2wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODYyMTQxMTAvBgNVBAUTKEYzREI5RjE2MjAwOEJENjY2Q0JGOEM5OTYwNzgxNENG
QUIyNEQ3RTcwHhcNMjQwMTMwMTYxMzAwWhcNMjQwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NWI5MjAwYy1jNDFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApMNw+8eSPi7rdbM0/nEdfeKVhvOghZ6eH/MMijGDGHgeNKExbZqYLzK1G8EA
iHd5/9Mr0V+xUMAgfIrhhHY09tnDpAxYMHHaanCUZN1MVngEYYAn2P/29x6h+VpP
guG1IiHw5lCdQ0kE1+XD2GGIAR9wpy6DOFv+4dfj8Fvpzs12V6jUL28XmYj30Prg
x86BpCpeF55Q1hIwXBsCAkhmof+mJbnstvSBALtRW2BvEiqZ7W4rmdr7LgbNEj6b
Mpqu7oxu1tfuLBw5MYb8JkK2PNDOkVowbWCkQTG9ehJPp7sY1JPkKmF/pzRwo8F6
WHMWyp+PrPoMgtxlhkZ4jCEFXwIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFC8EALZe
JbgXUdeM9YXxt/Pab2Y4MB8GA1UdIwQYMBaAFPPbnxYgCL1mbL+MmWB4FM+rJNfn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjIxNC9DNjVENTM2NDMz
MUExMUU0QUYyQUIzN0NDNEY5QUUwMi84OXVmRmlBSXZXWnN2NHlaWUhnVXo2c2sx
LWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzg5dWZGaUFJdldac3Y0eVpZSGdVejZzazEtYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODYyMTQvQzY1RDUzNjQzMzFBMTFFNEFGMkFCMzdDQzRGOUFFMDIvQTE5N0RERTZC
RjIwMTFFOTlCMDY1QjdEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E
JTAjMBIEAgABMAwDBAFnGTYDBAHKAFwwDQQCAAIwBwMFACQFLUAwDQYJKoZIhvcN
AQELBQADggEBAHmbZNji8o/eEuCL3BWpka/3v+cBAIMsp6YUBfjsBBxIochyx4sd
jZjr+AMKo/6iAbtFdzkfFlODta0LvVGE27AO+VeAJdR08wOmiOVf/lbk3FJgC+vn
WfDX3BpNvuTbBJlLqTx7UQVNZLJ2hLHr8VFiHxF0dDOv86aLq6IgEqsAgBADmvPd
sLOYBboTeMZOaU7UR5q7UGtzrEoXj9UWGUW6kun/4na8qMcGjI9bRG44L7xeNWKb
fNbQwG5T0MewAthWV0jSiSVFpAr/N0+tp4b0DofnMvAPPNO354exGBz3Nn9XN0OW
wqMxYBhk84Cq5qaNPoduILXEeyzI18ouB9E=
-----END CERTIFICATE-----
Generated at Fri May 10 17:10:27 2024 by rpki-client on console-fra.rpki-client.org