Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C892F92C780F11EBA1552785C4F9AE02.roa
File:                     C892F92C780F11EBA1552785C4F9AE02.roa (raw, json)
Hash identifier:          AtouNsLGYg3tTBjCcy3g65inhtH+eMYcyfUHel9xlD0=
Subject key identifier:   B7:45:FF:40:C7:18:8F:74:43:FD:D7:AB:2B:AF:29:09:56:BE:59:94
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       88AB
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C892F92C780F11EBA1552785C4F9AE02.roa
Signing time:             Thu 30 May 2024 15:55:33 +0000
ROA not before:           Thu 30 May 2024 15:55:33 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     132987
IP address blocks:        103.160.134.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 10:54:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 34987 (0x88ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 30 15:55:33 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=6658a175-5a5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:ff:17:07:b3:c1:24:0a:ab:0d:b4:ee:bb:33:
                    98:fe:9e:f0:75:d5:3f:61:82:8e:db:93:1c:8a:b6:
                    4d:cf:17:d3:1d:25:be:0b:d6:43:a4:19:b1:1d:7f:
                    88:3e:d7:28:d1:db:9c:0a:d0:27:07:1b:ad:65:ea:
                    3c:b3:b5:07:ca:c3:0a:52:a5:7d:86:1a:59:c0:71:
                    54:ce:bf:82:1c:d5:be:60:f6:96:39:f0:64:b3:a1:
                    b7:ac:f2:46:1b:b8:4e:ed:49:f7:64:03:b4:ed:45:
                    91:97:ac:e2:df:59:7e:e5:f6:ea:c7:96:cb:c8:dd:
                    5c:65:11:1b:7c:09:de:43:2b:bc:8e:db:92:c7:ed:
                    4e:95:39:a0:e3:b7:1d:95:0f:7f:5c:22:71:59:3a:
                    5b:4c:04:bf:df:83:a0:15:f2:dd:fd:b4:eb:67:4c:
                    04:4a:45:ac:e7:ad:cf:51:61:19:e4:7d:96:6a:b2:
                    e1:6a:bb:46:87:ff:0f:cb:5c:c3:38:50:be:db:21:
                    59:82:64:ef:56:55:83:84:8c:dc:b4:1e:7c:80:f4:
                    a9:86:bf:eb:1b:ee:1a:ba:e3:7b:f2:4b:d0:a7:1d:
                    1f:51:ce:62:35:9a:81:d5:f8:99:de:ec:61:10:d4:
                    05:0f:4d:8d:c0:57:ae:e7:07:78:2b:79:13:6b:77:
                    79:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:45:FF:40:C7:18:8F:74:43:FD:D7:AB:2B:AF:29:09:56:BE:59:94
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C892F92C780F11EBA1552785C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.160.134.0/23

    Signature Algorithm: sha256WithRSAEncryption
         60:64:eb:68:21:6e:7e:d0:bd:f5:3d:0a:d1:d2:05:e8:c0:ac:
         03:b8:09:1d:70:e3:0c:14:e0:b6:fd:90:fe:7e:eb:75:bf:0e:
         42:d4:0d:e6:d5:a9:1a:1e:0d:d5:17:5f:c3:c9:fd:1b:2b:43:
         29:6b:26:08:e7:62:4f:f9:23:4e:3b:d5:d3:e6:fa:57:d7:b0:
         3a:d3:b0:c3:8a:08:07:ac:e0:71:2c:01:00:69:2d:8d:69:b2:
         25:ce:a3:81:78:76:45:e6:bf:60:91:e7:0e:e2:d9:1f:c5:f8:
         89:70:f7:56:c9:3e:e4:3e:16:0a:42:ee:37:05:43:b9:97:b3:
         9f:9e:16:48:67:fe:80:cb:25:5d:35:53:1c:d5:59:de:57:21:
         2e:21:fd:1e:d3:03:6f:c9:35:39:63:5b:e3:c4:4b:fb:7f:1c:
         5d:89:75:3c:d6:de:7b:8b:41:8d:5b:c3:70:59:61:ac:3f:d0:
         dd:d1:3f:95:a4:dd:33:06:60:3f:38:f2:ed:bc:d1:ad:d7:ce:
         88:fe:ce:88:51:b4:55:98:62:88:33:6a:a4:b6:7d:91:8d:d0:
         25:f7:9a:b7:15:c8:a0:7d:94:ff:01:3e:60:36:50:49:d0:39:
         36:28:83:29:3f:1c:f0:1c:eb:14:c8:ed:6f:da:04:23:a3:35:
         4e:f6:23:f5
-----BEGIN CERTIFICATE-----
MIIFcjCCBFqgAwIBAgIDAIirMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI0MDUzMDE1NTUzM1oXDTI1MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNjY1OGExNzUtNWE1YjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAN//FwezwSQKqw207rszmP6e8HXVP2GCjtuTHIq2Tc8X0x0lvgvWQ6QZsR1/
iD7XKNHbnArQJwcbrWXqPLO1B8rDClKlfYYaWcBxVM6/ghzVvmD2ljnwZLOht6zy
Rhu4Tu1J92QDtO1FkZes4t9ZfuX26seWy8jdXGURG3wJ3kMrvI7bksftTpU5oOO3
HZUPf1wicVk6W0wEv9+DoBXy3f2062dMBEpFrOetz1FhGeR9lmqy4Wq7Rof/D8tc
wzhQvtshWYJk71ZVg4SM3LQefID0qYa/6xvuGrrje/JL0KcdH1HOYjWagdX4md7s
YRDUBQ9NjcBXrucHeCt5E2t3eRECAwEAAaOCApUwggKRMB0GA1UdDgQWBBS3Rf9A
xxiPdEP916srrykJVr5ZlDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0M4OTJGOTJD
NzgwRjExRUJBMTU1Mjc4NUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6
Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQBZ6CGMA0GCSqGSIb3DQEBCwUAA4IBAQBgZOtoIW5+0L31
PQrR0gXowKwDuAkdcOMMFOC2/ZD+fut1vw5C1A3m1akaHg3VF1/Dyf0bK0MpayYI
52JP+SNOO9XT5vpX17A607DDiggHrOBxLAEAaS2NabIlzqOBeHZF5r9gkecO4tkf
xfiJcPdWyT7kPhYKQu43BUO5l7OfnhZIZ/6AyyVdNVMc1VneVyEuIf0e0wNvyTU5
Y1vjxEv7fxxdiXU81t57i0GNW8NwWWGsP9Dd0T+VpN0zBmA/OPLtvNGt186I/s6I
UbRVmGKIM2qktn2RjdAl95q3FcigfZT/AT5gNlBJ0Dk2KIMpPxzwHOsUyO1v2gQj
ozVO9iP1
-----END CERTIFICATE-----
Generated at Mon Nov 25 13:05:08 2024 by rpki-client on console-fra.rpki-client.org