Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/983A2AA20F3011EDA9D57685C4F9AE02.roa
File:                     983A2AA20F3011EDA9D57685C4F9AE02.roa (raw, json)
Hash identifier:          87sTTH7HT3OWk9m9sGpVqgdql1L7BYa0XxLT95Va0Zc=
Subject key identifier:   19:D1:D4:38:C8:9F:C7:16:3C:59:89:05:69:99:1D:5D:1D:43:18:96
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       8F7E
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/983A2AA20F3011EDA9D57685C4F9AE02.roa
Signing time:             Thu 30 May 2024 16:24:03 +0000
ROA not before:           Thu 30 May 2024 16:24:03 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     150050
IP address blocks:        103.191.40.0/23 maxlen: 24
                          2400:94a0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 10:54:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 36734 (0x8f7e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 30 16:24:03 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=6658a823-f15b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:77:19:e1:37:93:ac:6e:dd:31:5e:65:f1:ce:
                    e0:39:ff:2c:96:6d:f6:cc:29:e8:97:0d:8e:67:e7:
                    c9:72:bb:45:a7:72:b8:b4:7d:94:a6:62:3f:4f:6f:
                    a5:d9:6f:63:4d:a5:60:58:14:69:b7:d8:75:b9:88:
                    f8:84:aa:40:07:e4:4f:51:fe:de:69:5d:6c:d1:3c:
                    a2:3f:2f:66:63:7b:00:56:64:fa:3f:3f:2d:4e:fe:
                    b6:ce:5f:d6:41:6d:ae:26:03:5b:e5:10:94:b3:7d:
                    24:cd:9c:c3:57:cf:5a:d7:bd:3f:57:b2:c4:e0:9f:
                    a4:8a:d7:ec:fa:c3:c6:cf:b7:52:db:ca:d7:49:96:
                    e1:0b:a8:62:45:44:0f:d4:33:2c:3a:cb:5d:dd:09:
                    55:58:93:51:e8:5e:43:d2:d5:df:fe:85:d1:4d:89:
                    35:39:0d:64:85:ef:c9:7d:1c:ea:9d:ec:f9:62:54:
                    7d:6b:6c:56:51:73:27:4c:c6:82:89:37:06:5a:eb:
                    04:58:c2:ed:c6:67:4a:ab:b6:2a:a6:0a:5e:8d:7c:
                    b2:ba:ed:b2:ec:6e:8d:59:54:54:cf:ab:5c:fe:8f:
                    e5:f4:03:78:b3:01:2d:c7:dc:70:7f:e0:56:bb:05:
                    50:27:d5:74:2a:fd:a0:78:e2:6f:a9:dc:98:58:d7:
                    f1:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:D1:D4:38:C8:9F:C7:16:3C:59:89:05:69:99:1D:5D:1D:43:18:96
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/983A2AA20F3011EDA9D57685C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.191.40.0/23
                IPv6:
                  2400:94a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         5c:54:ef:57:b5:25:c3:87:33:7d:1d:9b:7c:10:c6:30:91:49:
         f7:6a:7d:53:db:2f:8b:de:cb:d9:1d:60:cc:67:bb:81:09:ba:
         42:21:f5:03:08:1c:3a:01:20:a7:bf:bf:7e:39:8b:18:af:13:
         6d:28:8f:a1:c0:fa:61:35:21:d6:b8:fb:45:51:e5:e6:57:4b:
         94:ed:1e:fc:93:88:65:cf:7a:20:08:04:60:d1:f6:6c:94:f3:
         10:be:cd:ca:03:07:f2:35:8b:67:d9:23:05:1c:09:f9:83:8a:
         50:65:21:75:d3:57:9c:08:98:d8:e9:1d:f3:48:b9:34:59:63:
         1c:a0:97:16:c0:5d:37:de:88:a8:ec:d2:74:5a:48:f0:a3:cb:
         d8:43:c2:80:09:46:2e:3f:26:f9:5a:04:14:5b:11:95:a4:93:
         51:4d:3f:2f:35:7e:6a:bc:01:83:f5:75:b8:85:b7:cc:01:4b:
         35:96:d4:7b:9a:57:c4:81:39:4c:42:e8:87:23:06:7b:79:ee:
         7f:69:95:0a:4f:ce:e6:19:6d:19:02:f3:ba:0a:6d:38:ca:62:
         f2:fd:c9:44:db:ea:99:26:46:94:8b:36:62:8e:12:10:8c:bf:
         52:e9:6b:b6:a9:d4:ca:59:df:11:fd:61:6f:34:65:49:cb:61:
         78:dc:d7:5d
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAI9+MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI0MDUzMDE2MjQwM1oXDTI1MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNjY1OGE4MjMtZjE1YjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALF3GeE3k6xu3TFeZfHO4Dn/LJZt9swp6JcNjmfnyXK7RadyuLR9lKZiP09v
pdlvY02lYFgUabfYdbmI+ISqQAfkT1H+3mldbNE8oj8vZmN7AFZk+j8/LU7+ts5f
1kFtriYDW+UQlLN9JM2cw1fPWte9P1eyxOCfpIrX7PrDxs+3UtvK10mW4QuoYkVE
D9QzLDrLXd0JVViTUeheQ9LV3/6F0U2JNTkNZIXvyX0c6p3s+WJUfWtsVlFzJ0zG
gok3BlrrBFjC7cZnSqu2KqYKXo18srrtsuxujVlUVM+rXP6P5fQDeLMBLcfccH/g
VrsFUCfVdCr9oHjib6ncmFjX8dkCAwEAAaOCAqQwggKgMB0GA1UdDgQWBBQZ0dQ4
yJ/HFjxZiQVpmR1dHUMYljAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzk4M0EyQUEy
MEYzMDExRURBOUQ1NzY4NUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6
Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMC4GCCsGAQUFBwEHAQH/
BB8wHTAMBAIAATAGAwQBZ78oMA0EAgACMAcDBQAkAJSgMA0GCSqGSIb3DQEBCwUA
A4IBAQBcVO9XtSXDhzN9HZt8EMYwkUn3an1T2y+L3svZHWDMZ7uBCbpCIfUDCBw6
ASCnv79+OYsYrxNtKI+hwPphNSHWuPtFUeXmV0uU7R78k4hlz3ogCARg0fZslPMQ
vs3KAwfyNYtn2SMFHAn5g4pQZSF101ecCJjY6R3zSLk0WWMcoJcWwF033oio7NJ0
Wkjwo8vYQ8KACUYuPyb5WgQUWxGVpJNRTT8vNX5qvAGD9XW4hbfMAUs1ltR7mlfE
gTlMQuiHIwZ7ee5/aZUKT87mGW0ZAvO6Cm04ymLy/clE2+qZJkaUizZijhIQjL9S
6Wu2qdTKWd8R/WFvNGVJy2F43Ndd
-----END CERTIFICATE-----
Generated at Mon Nov 25 13:17:20 2024 by rpki-client on console-ams.rpki-client.org