Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918C158/AE51D802673B11EA99B2E556C4F9AE02/F25A6266796A11EB82E0EE24C4F9AE02.roa
File:                     F25A6266796A11EB82E0EE24C4F9AE02.roa (raw, json)
Hash identifier:          aNxxH/k6H9pUK4+Yh6tMJ5W3Dxa/fkGC+OopIVqyBEI=
Subject key identifier:   CD:9C:59:ED:C5:5A:0C:3D:BF:87:F3:78:DA:CF:CD:B3:A3:B2:DE:49
Certificate issuer:       /CN=A918C158/serialNumber=3A4F482E125C08DB830516D51A4A2DF1E0AA8ACA
Certificate serial:       09D8
Authority key identifier: 3A:4F:48:2E:12:5C:08:DB:83:05:16:D5:1A:4A:2D:F1:E0:AA:8A:CA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ok9ILhJcCNuDBRbVGkot8eCqiso.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918C158/AE51D802673B11EA99B2E556C4F9AE02/F25A6266796A11EB82E0EE24C4F9AE02.roa
Signing time:             Sun 06 Oct 2024 20:09:42 +0000
ROA not before:           Sun 06 Oct 2024 20:09:42 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     136746
IP address blocks:        103.142.204.0/24 maxlen: 24
                          103.142.205.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918C158/AE51D802673B11EA99B2E556C4F9AE02/Ok9ILhJcCNuDBRbVGkot8eCqiso.crl
                          rsync://rpki.apnic.net/member_repository/A918C158/AE51D802673B11EA99B2E556C4F9AE02/Ok9ILhJcCNuDBRbVGkot8eCqiso.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ok9ILhJcCNuDBRbVGkot8eCqiso.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 19:39:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2520 (0x9d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918C158/serialNumber=3A4F482E125C08DB830516D51A4A2DF1E0AA8ACA
        Validity
            Not Before: Oct  6 20:09:42 2024 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=6702ee86-c184
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:da:68:67:0b:89:3a:b7:d8:9b:cf:65:d6:b8:
                    26:ab:4f:8e:75:ec:02:c1:bd:83:cb:90:9a:b0:18:
                    e7:de:bf:42:f7:db:c7:d7:dc:d4:ef:ee:bc:9b:a5:
                    86:15:f4:34:c2:50:5e:de:4f:1e:10:45:57:01:74:
                    39:09:61:71:57:78:51:72:fc:cd:48:12:10:b6:4e:
                    a2:41:45:38:4a:ca:4d:a5:0f:d1:3f:47:2e:ea:30:
                    86:75:f0:18:56:7f:06:8e:3e:cf:a3:e9:13:40:61:
                    c6:31:52:0f:56:65:a7:5d:d5:fa:7a:23:05:f0:5c:
                    68:9a:f3:61:64:74:ec:de:f9:33:86:ee:06:04:38:
                    e0:0d:b2:bb:87:a4:b0:fd:68:73:0d:4c:6f:48:58:
                    ae:f3:c6:6d:7b:ec:70:39:57:4c:46:d9:d8:a6:74:
                    45:1d:3d:02:24:71:a3:65:17:42:47:04:be:29:dc:
                    e2:cf:ce:e0:c8:19:c5:48:ec:ba:ee:36:e8:7e:6c:
                    a2:57:42:9f:4a:61:05:4f:9e:1e:34:f3:d3:3e:16:
                    bf:a1:ed:01:b3:2e:a9:94:2d:49:5f:1d:7f:0a:4e:
                    7f:c5:8a:4d:fa:3e:36:2e:fe:54:b4:41:4d:c5:18:
                    65:3f:f0:f5:43:88:4a:a9:ef:69:15:c3:b0:c6:14:
                    57:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:9C:59:ED:C5:5A:0C:3D:BF:87:F3:78:DA:CF:CD:B3:A3:B2:DE:49
            X509v3 Authority Key Identifier:
                keyid:3A:4F:48:2E:12:5C:08:DB:83:05:16:D5:1A:4A:2D:F1:E0:AA:8A:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918C158/AE51D802673B11EA99B2E556C4F9AE02/Ok9ILhJcCNuDBRbVGkot8eCqiso.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ok9ILhJcCNuDBRbVGkot8eCqiso.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C158/AE51D802673B11EA99B2E556C4F9AE02/F25A6266796A11EB82E0EE24C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.142.204.0/23

    Signature Algorithm: sha256WithRSAEncryption
         52:56:1b:5f:a1:e8:ad:63:e8:51:65:66:48:75:fd:6b:ee:4c:
         d0:64:d8:83:30:fe:31:04:0c:88:33:65:c0:75:ca:06:26:9e:
         40:6a:d6:26:43:95:83:82:10:00:3c:b1:e5:fc:18:aa:f6:d2:
         c0:76:44:15:3e:62:82:de:e1:77:c2:05:2b:c9:03:8d:85:57:
         17:98:4b:47:49:e3:d4:dc:8d:c0:28:26:7e:81:3d:36:92:ec:
         84:8e:65:d3:0e:66:0c:08:71:5a:34:14:51:2c:d9:39:b6:5d:
         8e:a9:11:9e:e5:ae:9e:9b:3c:10:86:d8:4e:45:41:61:b3:54:
         b9:70:6d:d7:36:d3:31:b8:7e:e3:b9:e2:74:25:8e:cf:5b:6d:
         23:0e:7a:79:38:f0:3a:c1:1e:2f:6e:a0:77:ee:02:09:32:b4:
         e0:1c:93:cd:43:5e:34:2a:18:54:bb:4f:2b:5c:99:5b:10:4d:
         3a:77:87:79:74:17:64:9b:9c:72:03:ee:6b:5f:5f:79:1c:47:
         3e:ca:31:ec:d5:f9:ff:ff:e9:fe:97:c7:27:83:4b:a6:12:2f:
         ad:45:b3:d4:96:02:a1:54:ff:2b:f4:a5:2b:1f:26:6f:b8:0d:
         5c:2b:54:fe:bd:86:8f:36:04:5d:72:ff:57:72:57:aa:77:de:
         8d:ba:6e:cd
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICCdgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEMxNTgxMTAvBgNVBAUTKDNBNEY0ODJFMTI1QzA4REI4MzA1MTZENTFBNEEyREYx
RTBBQThBQ0EwHhcNMjQxMDA2MjAwOTQyWhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzAyZWU4Ni1jMTg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAptpoZwuJOrfYm89l1rgmq0+OdewCwb2Dy5CasBjn3r9C99vH19zU7+68m6WG
FfQ0wlBe3k8eEEVXAXQ5CWFxV3hRcvzNSBIQtk6iQUU4SspNpQ/RP0cu6jCGdfAY
Vn8Gjj7Po+kTQGHGMVIPVmWnXdX6eiMF8FxomvNhZHTs3vkzhu4GBDjgDbK7h6Sw
/WhzDUxvSFiu88Zte+xwOVdMRtnYpnRFHT0CJHGjZRdCRwS+Kdziz87gyBnFSOy6
7jbofmyiV0KfSmEFT54eNPPTPha/oe0Bsy6plC1JXx1/Ck5/xYpN+j42Lv5UtEFN
xRhlP/D1Q4hKqe9pFcOwxhRX0QIDAQABo4IClTCCApEwHQYDVR0OBBYEFM2cWe3F
Wgw9v4fzeNrPzbOjst5JMB8GA1UdIwQYMBaAFDpPSC4SXAjbgwUW1RpKLfHgqorK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzE1OC9BRTUxRDgwMjY3
M0IxMUVBOTlCMkU1NTZDNEY5QUUwMi9PazlJTGhKY0NOdURCUmJWR2tvdDhlQ3Fp
c28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL09rOUlMaEpjQ051REJSYlZHa290OGVDcWlzby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEMxNTgvQUU1MUQ4MDI2NzNCMTFFQTk5QjJFNTU2QzRGOUFFMDIvRjI1QTYyNjY3
OTZBMTFFQjgyRTBFRTI0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnjswwDQYJKoZIhvcNAQELBQADggEBAFJWG1+h6K1j6FFl
Zkh1/WvuTNBk2IMw/jEEDIgzZcB1ygYmnkBq1iZDlYOCEAA8seX8GKr20sB2RBU+
YoLe4XfCBSvJA42FVxeYS0dJ49TcjcAoJn6BPTaS7ISOZdMOZgwIcVo0FFEs2Tm2
XY6pEZ7lrp6bPBCG2E5FQWGzVLlwbdc20zG4fuO54nQljs9bbSMOenk48DrBHi9u
oHfuAgkytOAck81DXjQqGFS7TytcmVsQTTp3h3l0F2SbnHID7mtfX3kcRz7KMezV
+f//6f6XxyeDS6YSL61Fs9SWAqFU/yv0pSsfJm+4DVwrVP69ho82BF1y/1dyV6p3
3o26bs0=
-----END CERTIFICATE-----
Generated at Fri Nov 22 22:14:34 2024 by rpki-client on console-ams.rpki-client.org