Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918C5C8/3DEF45CEF5E511EBAE946437C4F9AE02/012EAE068C1411EDA66E4F28C4F9AE02.roa
File:                     012EAE068C1411EDA66E4F28C4F9AE02.roa (raw, json)
Hash identifier:          3X8COzsonevAkXvZ3vmm5rfrI/BF1A9VGfV2hY7+jto=
Subject key identifier:   49:C6:AA:26:4F:91:AF:CD:35:EF:A2:3D:C3:B3:16:0E:1B:09:12:7A
Certificate issuer:       /CN=A918C5C8/serialNumber=AB8A751417FF67FC9948E3D427B84DD6593E9183
Certificate serial:       04AA
Authority key identifier: AB:8A:75:14:17:FF:67:FC:99:48:E3:D4:27:B8:4D:D6:59:3E:91:83
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q4p1FBf_Z_yZSOPUJ7hN1lk-kYM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918C5C8/3DEF45CEF5E511EBAE946437C4F9AE02/012EAE068C1411EDA66E4F28C4F9AE02.roa
Signing time:             Tue 06 Aug 2024 07:59:40 +0000
ROA not before:           Tue 06 Aug 2024 07:59:40 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     140499
IP address blocks:        103.149.240.0/24 maxlen: 24
                          103.149.241.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918C5C8/3DEF45CEF5E511EBAE946437C4F9AE02/q4p1FBf_Z_yZSOPUJ7hN1lk-kYM.crl
                          rsync://rpki.apnic.net/member_repository/A918C5C8/3DEF45CEF5E511EBAE946437C4F9AE02/q4p1FBf_Z_yZSOPUJ7hN1lk-kYM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q4p1FBf_Z_yZSOPUJ7hN1lk-kYM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1194 (0x4aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918C5C8/serialNumber=AB8A751417FF67FC9948E3D427B84DD6593E9183
        Validity
            Not Before: Aug  6 07:59:40 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=66b1d7ec-3b6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:cb:c6:54:63:a2:3f:36:b3:66:5a:57:b1:88:
                    5a:30:79:0f:2d:9a:be:51:1e:05:19:4e:91:71:5b:
                    16:78:81:12:d8:92:e3:15:b6:93:fd:be:e5:de:0e:
                    5c:89:3e:79:7a:dd:04:68:60:43:e0:ab:61:e1:28:
                    d8:97:57:77:a6:94:3a:4f:91:61:29:ed:7f:8b:28:
                    ac:15:ed:16:5a:62:51:7f:2f:b5:5d:40:e9:b8:d3:
                    58:aa:02:9b:6b:34:dd:4c:bb:66:62:41:c9:1a:e3:
                    4c:42:7f:a9:cd:56:4e:52:cb:fe:80:b1:cf:70:eb:
                    33:0d:5e:40:8b:66:b8:f3:f6:19:25:b4:4c:a8:e0:
                    b9:f4:94:bc:be:95:dc:19:c5:61:b4:00:dd:4e:11:
                    e3:28:18:d8:ca:a3:fe:a2:cd:c8:fa:4e:c5:31:0b:
                    c4:81:b0:8a:12:7c:cb:58:47:77:6e:cb:02:71:85:
                    5d:fc:38:7e:1b:16:88:4d:39:da:b9:3c:ad:7f:6a:
                    5f:61:e4:1b:7a:5d:97:20:55:18:31:08:87:c5:4d:
                    a4:82:8f:cf:44:27:58:b8:93:02:62:f7:7b:b7:66:
                    24:49:58:f6:6c:1f:f1:08:4b:37:0c:94:ac:94:f2:
                    6b:1a:f5:89:73:69:2c:57:76:81:99:31:c6:d8:ca:
                    8f:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:C6:AA:26:4F:91:AF:CD:35:EF:A2:3D:C3:B3:16:0E:1B:09:12:7A
            X509v3 Authority Key Identifier:
                keyid:AB:8A:75:14:17:FF:67:FC:99:48:E3:D4:27:B8:4D:D6:59:3E:91:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918C5C8/3DEF45CEF5E511EBAE946437C4F9AE02/q4p1FBf_Z_yZSOPUJ7hN1lk-kYM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q4p1FBf_Z_yZSOPUJ7hN1lk-kYM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C5C8/3DEF45CEF5E511EBAE946437C4F9AE02/012EAE068C1411EDA66E4F28C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.149.240.0/23

    Signature Algorithm: sha256WithRSAEncryption
         56:02:fc:f4:34:85:5c:b4:f5:f3:94:ec:a7:d9:53:3e:3c:ed:
         57:70:22:dc:57:99:6e:ee:6d:bc:89:89:5c:bc:9d:f1:29:93:
         78:73:27:8b:86:90:d6:6c:bb:71:ce:8a:35:33:78:64:c6:52:
         94:b5:f1:8b:af:49:f6:08:aa:89:e9:b5:4d:93:2e:35:71:67:
         61:c2:49:5d:c4:cc:5b:60:e2:a6:3a:a5:ec:2f:0e:6d:58:d7:
         73:19:ad:30:70:c8:a6:29:a3:9d:4e:58:4e:60:16:9c:4f:c0:
         a9:c2:8e:b7:53:4d:a9:91:5b:16:c6:87:93:b8:28:99:d4:dd:
         b2:74:ef:3b:c8:c7:6b:b0:b7:00:dc:ce:7b:86:7c:12:98:d5:
         c5:b9:f0:70:b5:89:5c:36:29:86:48:03:be:e8:ea:b6:0a:20:
         cc:c0:4a:96:b8:cd:7c:15:07:66:aa:7e:db:53:f5:e3:7d:1b:
         44:8f:94:4f:c1:15:90:e3:70:df:c8:87:94:e7:91:46:c8:f6:
         0d:11:9f:bf:9b:6a:83:fc:56:f4:c6:a0:1e:da:a5:63:b0:c6:
         18:4c:92:81:20:75:7d:41:17:3e:f0:7f:77:97:6e:8b:76:e8:
         6d:0b:9e:58:ea:20:c3:f7:f8:f9:ca:0e:60:12:c4:2a:40:f4:
         aa:f9:e9:c9
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBKowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEM1QzgxMTAvBgNVBAUTKEFCOEE3NTE0MTdGRjY3RkM5OTQ4RTNENDI3Qjg0REQ2
NTkzRTkxODMwHhcNMjQwODA2MDc1OTQwWhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmIxZDdlYy0zYjZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA9MvGVGOiPzazZlpXsYhaMHkPLZq+UR4FGU6RcVsWeIES2JLjFbaT/b7l3g5c
iT55et0EaGBD4Kth4SjYl1d3ppQ6T5FhKe1/iyisFe0WWmJRfy+1XUDpuNNYqgKb
azTdTLtmYkHJGuNMQn+pzVZOUsv+gLHPcOszDV5Ai2a48/YZJbRMqOC59JS8vpXc
GcVhtADdThHjKBjYyqP+os3I+k7FMQvEgbCKEnzLWEd3bssCcYVd/Dh+GxaITTna
uTytf2pfYeQbel2XIFUYMQiHxU2kgo/PRCdYuJMCYvd7t2YkSVj2bB/xCEs3DJSs
lPJrGvWJc2ksV3aBmTHG2MqPOQIDAQABo4IClTCCApEwHQYDVR0OBBYEFEnGqiZP
ka/NNe+iPcOzFg4bCRJ6MB8GA1UdIwQYMBaAFKuKdRQX/2f8mUjj1Ce4TdZZPpGD
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzVDOC8zREVGNDVDRUY1
RTUxMUVCQUU5NDY0MzdDNEY5QUUwMi9xNHAxRkJmX1pfeVpTT1BVSjdoTjFsay1r
WU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3E0cDFGQmZfWl95WlNPUFVKN2hOMWxrLWtZTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEM1QzgvM0RFRjQ1Q0VGNUU1MTFFQkFFOTQ2NDM3QzRGOUFFMDIvMDEyRUFFMDY4
QzE0MTFFREE2NkU0RjI4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnlfAwDQYJKoZIhvcNAQELBQADggEBAFYC/PQ0hVy09fOU
7KfZUz487VdwItxXmW7ubbyJiVy8nfEpk3hzJ4uGkNZsu3HOijUzeGTGUpS18Yuv
SfYIqonptU2TLjVxZ2HCSV3EzFtg4qY6pewvDm1Y13MZrTBwyKYpo51OWE5gFpxP
wKnCjrdTTamRWxbGh5O4KJnU3bJ07zvIx2uwtwDcznuGfBKY1cW58HC1iVw2KYZI
A77o6rYKIMzASpa4zXwVB2aqfttT9eN9G0SPlE/BFZDjcN/Ih5TnkUbI9g0Rn7+b
aoP8VvTGoB7apWOwxhhMkoEgdX1BFz7wf3eXbot26G0LnljqIMP3+PnKDmASxCpA
9Kr56ck=
-----END CERTIFICATE-----
Generated at Sat Nov 23 01:27:24 2024 by rpki-client on console-ams.rpki-client.org