Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/46CDFDCC057911EC822F230EC4F9AE02.roa
File:                     46CDFDCC057911EC822F230EC4F9AE02.roa (raw, json)
Hash identifier:          B2NWeD2L+QuqkGQkZvFICD2nMq6JvcmDocbiPLfKIXM=
Subject key identifier:   06:7B:3B:03:0D:97:75:88:13:3C:57:B9:15:E1:95:0F:99:89:4C:68
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       8E6F
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/46CDFDCC057911EC822F230EC4F9AE02.roa
Signing time:             Thu 30 May 2024 16:19:39 +0000
ROA not before:           Thu 30 May 2024 16:19:39 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     146933
IP address blocks:        103.136.209.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 06:14:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 36463 (0x8e6f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 30 16:19:39 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=6658a71b-ef46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:41:82:e2:42:48:98:09:d6:d3:af:7a:4b:41:
                    24:a9:8c:69:7e:55:25:43:e2:13:fe:40:ec:c6:f4:
                    73:d3:cf:7e:11:88:4f:b6:28:da:79:99:3a:d3:aa:
                    c9:4e:a6:a5:34:df:38:7a:6d:13:ee:c2:ce:1e:ad:
                    40:95:8f:42:12:1e:e8:b1:d3:41:0f:b5:4f:91:e0:
                    92:08:cb:77:7b:92:2b:8c:60:1b:ec:a0:5d:2a:3a:
                    53:09:36:22:db:23:69:bd:5e:0e:b9:5f:79:a1:24:
                    a7:a4:31:49:b4:07:46:da:9c:7f:1d:27:20:1c:a0:
                    d2:32:f6:d8:07:71:e4:b2:f5:e8:1e:17:fe:a1:96:
                    7b:aa:b4:26:74:0e:91:86:3c:5b:ae:b3:0e:c0:96:
                    35:96:ec:ba:de:97:84:17:93:28:11:cf:fb:ae:fd:
                    6f:69:28:44:c5:44:de:19:be:94:65:d8:e6:7d:6f:
                    a6:55:90:dd:d9:f7:6b:5f:cd:63:52:2c:8e:52:12:
                    ec:b6:60:19:3c:64:93:2e:c0:08:a2:81:bb:88:2c:
                    99:6c:3d:fa:8b:3d:16:77:70:08:46:0b:4c:48:0e:
                    64:8c:9e:76:fc:15:c6:3d:eb:34:45:fc:c8:06:ce:
                    a7:36:d2:d1:15:49:4c:c6:1a:c6:46:bb:01:a4:f1:
                    55:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:7B:3B:03:0D:97:75:88:13:3C:57:B9:15:E1:95:0F:99:89:4C:68
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/46CDFDCC057911EC822F230EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.136.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:7a:5e:5c:ba:29:19:4a:22:90:44:14:89:f8:ff:cf:04:7d:
         4c:05:f0:b8:be:e6:1e:1e:1e:c4:41:61:a9:99:e9:6d:6b:68:
         d6:88:62:8d:6c:85:b4:96:86:37:d0:5f:f4:c3:91:58:bd:5c:
         bf:ff:c4:80:cd:7e:4d:70:9b:a3:5e:1c:0c:e5:c9:96:ba:f1:
         c8:12:4f:aa:68:56:90:60:0f:2d:35:61:7b:b7:15:e4:92:a5:
         ac:d9:ae:98:92:f0:c4:24:61:d7:58:fc:de:68:07:cb:ff:6a:
         cb:91:04:f9:0c:6b:6b:9d:bc:a1:0e:6b:9b:08:b2:1e:86:12:
         b0:f6:64:b0:dd:ef:35:b5:fa:61:6d:34:bd:b5:0f:3a:bf:8d:
         c8:87:1d:47:66:4b:af:24:30:85:81:2c:48:a0:ed:d0:15:72:
         be:60:73:e8:c4:ea:c6:7a:86:9c:0c:0f:c0:35:0a:87:ec:08:
         4d:10:4b:55:40:f6:28:7d:2e:d3:ea:2c:5c:9e:09:33:2f:c7:
         05:45:ea:e2:03:f0:82:23:27:0b:6a:4d:88:bf:6a:aa:db:b6:
         5c:cc:b7:f2:54:21:37:fd:8c:dc:6d:58:4b:ac:fd:97:c2:66:
         5c:ae:47:40:bb:e5:1a:87:3d:14:19:c1:87:9d:3f:5a:f1:32:
         2a:31:c6:4b
-----BEGIN CERTIFICATE-----
MIIFcjCCBFqgAwIBAgIDAI5vMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI0MDUzMDE2MTkzOVoXDTI1MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNjY1OGE3MWItZWY0NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAL1BguJCSJgJ1tOvektBJKmMaX5VJUPiE/5A7Mb0c9PPfhGIT7Yo2nmZOtOq
yU6mpTTfOHptE+7Czh6tQJWPQhIe6LHTQQ+1T5HgkgjLd3uSK4xgG+ygXSo6Uwk2
Itsjab1eDrlfeaEkp6QxSbQHRtqcfx0nIByg0jL22Adx5LL16B4X/qGWe6q0JnQO
kYY8W66zDsCWNZbsut6XhBeTKBHP+679b2koRMVE3hm+lGXY5n1vplWQ3dn3a1/N
Y1IsjlIS7LZgGTxkky7ACKKBu4gsmWw9+os9FndwCEYLTEgOZIyedvwVxj3rNEX8
yAbOpzbS0RVJTMYaxka7AaTxVYUCAwEAAaOCApUwggKRMB0GA1UdDgQWBBQGezsD
DZd1iBM8V7kV4ZUPmYlMaDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzQ2Q0RGREND
MDU3OTExRUM4MjJGMjMwRUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6
Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQAZ4jRMA0GCSqGSIb3DQEBCwUAA4IBAQBBel5cuikZSiKQ
RBSJ+P/PBH1MBfC4vuYeHh7EQWGpmelta2jWiGKNbIW0loY30F/0w5FYvVy//8SA
zX5NcJujXhwM5cmWuvHIEk+qaFaQYA8tNWF7txXkkqWs2a6YkvDEJGHXWPzeaAfL
/2rLkQT5DGtrnbyhDmubCLIehhKw9mSw3e81tfphbTS9tQ86v43Ihx1HZkuvJDCF
gSxIoO3QFXK+YHPoxOrGeoacDA/ANQqH7AhNEEtVQPYofS7T6ixcngkzL8cFReri
A/CCIycLak2Iv2qq27ZczLfyVCE3/YzcbVhLrP2XwmZcrkdAu+Uahz0UGcGHnT9a
8TIqMcZL
-----END CERTIFICATE-----
Generated at Fri Nov 22 11:17:36 2024 by rpki-client on console-fra.rpki-client.org