Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B197DFC80EDA11EC95CB984DC4F9AE02.roa
File:                     B197DFC80EDA11EC95CB984DC4F9AE02.roa (raw, json)
Hash identifier:          qfygNZFe+myoP/EAqHSZIG4uwaf4yrK4ntqmvyCen/c=
Subject key identifier:   7F:18:39:7A:E7:81:1A:02:E0:BC:06:2D:C4:A2:77:92:0A:4F:87:E5
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       8E69
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B197DFC80EDA11EC95CB984DC4F9AE02.roa
Signing time:             Thu 30 May 2024 16:19:34 +0000
ROA not before:           Thu 30 May 2024 16:19:34 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     146926
IP address blocks:        103.171.198.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 06:14:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 36457 (0x8e69)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 30 16:19:34 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=6658a716-b993
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:3f:3f:d9:a0:3d:32:3c:ca:8f:9d:42:96:68:
                    a2:8f:f0:f4:91:6e:03:96:ff:fc:89:24:0b:48:10:
                    49:d0:49:40:df:cc:b8:61:77:f4:fa:57:64:8b:30:
                    b9:9a:1d:9e:af:6f:b7:79:fd:02:64:ea:1d:96:e0:
                    e0:33:c6:dd:74:7a:b9:18:23:fc:3a:40:ef:9e:84:
                    20:10:89:e4:83:46:18:08:ec:04:18:68:0b:70:a3:
                    88:bb:88:31:2c:00:aa:4d:f2:84:00:ad:7f:bf:51:
                    89:1a:b8:84:11:03:af:4c:7a:d0:03:b6:35:51:7d:
                    d9:45:79:3a:2a:92:e5:74:62:e9:f2:8b:7e:b7:7a:
                    c8:4a:7b:75:58:b8:28:3a:58:f4:ac:51:1c:53:01:
                    58:ec:5e:b5:93:54:43:26:50:49:9a:16:11:a9:be:
                    24:55:46:d0:48:14:63:b6:a8:62:9c:56:06:3d:8d:
                    8c:dd:51:5e:b4:41:fd:05:d0:eb:a1:72:18:15:7b:
                    64:05:bf:a1:fa:a1:08:25:68:2e:ee:af:fb:30:c8:
                    b5:89:96:1e:7c:b1:57:98:98:15:8f:d1:13:0d:38:
                    ee:e1:51:10:52:2a:aa:fb:20:9c:6a:15:bc:c6:e9:
                    98:ce:81:63:5c:4f:f7:2a:03:79:43:72:f4:e2:16:
                    92:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:18:39:7A:E7:81:1A:02:E0:BC:06:2D:C4:A2:77:92:0A:4F:87:E5
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B197DFC80EDA11EC95CB984DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.171.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:d0:e1:17:62:74:fc:c3:5f:6a:26:c7:ba:bc:b9:92:7c:7f:
         29:3a:58:ac:dc:0b:ae:6c:fd:7e:54:57:12:4d:11:7e:b3:71:
         c6:bc:ec:82:94:1c:c2:be:8f:c4:28:0b:82:da:c2:30:b4:97:
         51:41:69:ee:d8:e6:7b:a3:f0:44:67:f4:25:04:b2:7d:4f:58:
         f7:54:fc:7c:da:2f:0f:3c:8d:f6:19:16:02:db:7c:26:21:99:
         63:b1:46:56:b3:6f:8c:34:2d:11:17:c0:c9:51:57:9c:0a:a2:
         1a:bc:ae:7f:d4:58:b8:a9:00:fc:0e:74:22:6f:c2:ed:27:c9:
         a7:c0:21:dc:ff:cd:57:af:9b:88:03:c6:61:43:02:99:e9:b6:
         1c:09:ef:24:1d:dd:9e:20:2b:b6:69:37:fc:64:25:c6:00:86:
         6d:59:f0:b0:da:59:03:9d:09:ae:36:c9:cd:8d:89:7d:d0:33:
         60:12:89:60:7f:b7:84:40:51:2b:20:c1:f8:24:d0:de:79:c7:
         36:33:73:70:b6:68:8f:a0:56:99:40:68:e4:21:e7:a8:f3:2d:
         12:29:25:40:d6:1e:48:b2:51:d7:68:25:8a:d9:c6:d5:6a:c7:
         24:22:19:f3:32:3c:e0:1e:df:ee:c5:f1:90:f1:92:ea:31:2a:
         90:93:d6:29
-----BEGIN CERTIFICATE-----
MIIFcjCCBFqgAwIBAgIDAI5pMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI0MDUzMDE2MTkzNFoXDTI1MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNjY1OGE3MTYtYjk5MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALY/P9mgPTI8yo+dQpZooo/w9JFuA5b//IkkC0gQSdBJQN/MuGF39PpXZIsw
uZodnq9vt3n9AmTqHZbg4DPG3XR6uRgj/DpA756EIBCJ5INGGAjsBBhoC3CjiLuI
MSwAqk3yhACtf79RiRq4hBEDr0x60AO2NVF92UV5OiqS5XRi6fKLfrd6yEp7dVi4
KDpY9KxRHFMBWOxetZNUQyZQSZoWEam+JFVG0EgUY7aoYpxWBj2NjN1RXrRB/QXQ
66FyGBV7ZAW/ofqhCCVoLu6v+zDItYmWHnyxV5iYFY/REw047uFREFIqqvsgnGoV
vMbpmM6BY1xP9yoDeUNy9OIWkgkCAwEAAaOCApUwggKRMB0GA1UdDgQWBBR/GDl6
54EaAuC8Bi3EoneSCk+H5TAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0IxOTdERkM4
MEVEQTExRUM5NUNCOTg0REM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6
Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQAZ6vGMA0GCSqGSIb3DQEBCwUAA4IBAQCF0OEXYnT8w19q
Jse6vLmSfH8pOlis3AuubP1+VFcSTRF+s3HGvOyClBzCvo/EKAuC2sIwtJdRQWnu
2OZ7o/BEZ/QlBLJ9T1j3VPx82i8PPI32GRYC23wmIZljsUZWs2+MNC0RF8DJUVec
CqIavK5/1Fi4qQD8DnQib8LtJ8mnwCHc/81Xr5uIA8ZhQwKZ6bYcCe8kHd2eICu2
aTf8ZCXGAIZtWfCw2lkDnQmuNsnNjYl90DNgEolgf7eEQFErIMH4JNDeecc2M3Nw
tmiPoFaZQGjkIeeo8y0SKSVA1h5IslHXaCWK2cbVasckIhnzMjzgHt/uxfGQ8ZLq
MSqQk9Yp
-----END CERTIFICATE-----
Generated at Fri Nov 22 11:17:49 2024 by rpki-client on console-fra.rpki-client.org