Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DB74486C5F3A11EC8C771087C4F9AE02.roa
File:                     DB74486C5F3A11EC8C771087C4F9AE02.roa (raw, json)
Hash identifier:          JKeNVbcOMtDQEIvYDYp6u+8hJFBp1dzRSlFSfCs/lJw=
Subject key identifier:   48:C9:C5:64:F4:EC:82:C3:59:B5:06:36:85:86:CF:17:33:53:81:27
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       8CC4
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DB74486C5F3A11EC8C771087C4F9AE02.roa
Signing time:             Thu 30 May 2024 16:12:44 +0000
ROA not before:           Thu 30 May 2024 16:12:44 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     140138
IP address blocks:        103.155.30.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 12:05:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 36036 (0x8cc4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 30 16:12:44 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=6658a57c-e2b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:d1:e1:1d:32:11:0c:b9:a1:a6:1f:b1:39:c1:
                    75:ac:37:84:be:d9:ca:7f:8e:ff:0d:c4:ea:59:cd:
                    b1:b9:44:ee:fe:70:50:b1:4a:ac:34:b4:a3:8b:40:
                    3d:82:62:ac:2f:2e:44:fa:71:a9:b3:06:42:64:f0:
                    44:0a:9e:d3:ff:52:6b:8f:d8:88:00:cb:a6:40:42:
                    8c:c0:51:eb:31:0d:ee:56:04:d5:da:f4:38:51:33:
                    6b:15:60:3e:c2:fa:85:86:bc:92:44:c2:a4:4c:3e:
                    6e:c8:82:f3:13:7d:76:b1:2b:9d:48:50:22:e8:bd:
                    c4:c0:5d:77:08:6f:28:46:a9:e0:84:74:78:ff:5d:
                    d0:1d:a2:2c:6b:51:e5:0b:4a:3a:b5:82:da:91:0e:
                    9d:2f:2d:7e:2d:36:6e:95:fd:23:0a:31:aa:eb:55:
                    1b:57:05:de:3d:22:a3:6d:31:8d:0c:80:95:e4:34:
                    61:51:77:57:98:84:5d:89:62:a6:51:7b:91:87:ce:
                    1c:b6:1d:66:bc:a4:3e:d2:ac:4a:56:12:94:1d:e7:
                    8a:a5:c1:0c:a7:eb:31:7e:42:6d:9c:48:43:5f:0c:
                    e8:23:34:3c:1b:50:0d:e6:60:a4:8c:1b:ba:4d:d1:
                    61:cb:af:7e:ce:ea:9a:23:91:ab:1c:83:95:36:e4:
                    b5:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:C9:C5:64:F4:EC:82:C3:59:B5:06:36:85:86:CF:17:33:53:81:27
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DB74486C5F3A11EC8C771087C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.155.30.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2d:94:1b:a4:ac:7b:c9:dd:48:35:b0:50:07:2b:2a:4d:cb:50:
         9f:d2:81:b8:ec:ba:f5:97:77:03:91:2e:8d:b5:32:55:f2:db:
         51:2a:8a:14:f4:fd:81:ca:02:0e:5a:fe:5e:cb:41:9b:91:2b:
         fa:3b:a7:60:a3:7d:c3:63:fd:9b:ce:65:f0:fe:35:38:9e:9d:
         d8:33:42:d4:4f:e7:c2:80:9e:ce:19:e4:32:28:85:e0:c3:31:
         d8:a5:14:3e:a9:f3:83:4b:92:a8:b7:e3:b5:4d:b0:e0:63:ef:
         7f:8c:50:bc:38:ca:91:5c:dd:7c:c0:fb:ea:4a:b0:6d:11:da:
         93:e7:9a:52:28:1c:69:f2:b7:28:c0:f4:32:82:da:2c:34:9d:
         41:48:87:a6:59:2d:97:90:66:f9:62:3c:05:ab:40:32:a6:78:
         40:c4:61:79:7b:31:0a:e1:ed:b8:d3:94:fd:e0:04:4d:4c:d8:
         2a:b4:99:4b:fa:2f:f6:58:56:28:ac:03:b2:d4:05:21:93:2f:
         3f:42:cb:66:ce:97:32:57:54:73:f2:dc:7c:69:d1:fb:61:48:
         b2:ca:a0:2c:be:3b:c4:f6:d2:d4:d8:10:ce:a7:a3:51:a9:fe:
         48:aa:b3:9c:99:23:ed:01:fb:72:74:97:3c:81:03:f0:38:a9:
         9f:91:52:8d
-----BEGIN CERTIFICATE-----
MIIFcjCCBFqgAwIBAgIDAIzEMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI0MDUzMDE2MTI0NFoXDTI1MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNjY1OGE1N2MtZTJiMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJfR4R0yEQy5oaYfsTnBdaw3hL7Zyn+O/w3E6lnNsblE7v5wULFKrDS0o4tA
PYJirC8uRPpxqbMGQmTwRAqe0/9Sa4/YiADLpkBCjMBR6zEN7lYE1dr0OFEzaxVg
PsL6hYa8kkTCpEw+bsiC8xN9drErnUhQIui9xMBddwhvKEap4IR0eP9d0B2iLGtR
5QtKOrWC2pEOnS8tfi02bpX9IwoxqutVG1cF3j0io20xjQyAleQ0YVF3V5iEXYli
plF7kYfOHLYdZrykPtKsSlYSlB3niqXBDKfrMX5CbZxIQ18M6CM0PBtQDeZgpIwb
uk3RYcuvfs7qmiORqxyDlTbktQcCAwEAAaOCApUwggKRMB0GA1UdDgQWBBRIycVk
9OyCw1m1BjaFhs8XM1OBJzAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0RCNzQ0ODZD
NUYzQTExRUM4Qzc3MTA4N0M0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6
Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQBZ5seMA0GCSqGSIb3DQEBCwUAA4IBAQAtlBukrHvJ3Ug1
sFAHKypNy1Cf0oG47Lr1l3cDkS6NtTJV8ttRKooU9P2BygIOWv5ey0GbkSv6O6dg
o33DY/2bzmXw/jU4np3YM0LUT+fCgJ7OGeQyKIXgwzHYpRQ+qfODS5Kot+O1TbDg
Y+9/jFC8OMqRXN18wPvqSrBtEdqT55pSKBxp8rcowPQygtosNJ1BSIemWS2XkGb5
YjwFq0AypnhAxGF5ezEK4e2405T94ARNTNgqtJlL+i/2WFYorAOy1AUhky8/Qstm
zpcyV1Rz8tx8adH7YUiyyqAsvjvE9tLU2BDOp6NRqf5IqrOcmSPtAftydJc8gQPw
OKmfkVKN
-----END CERTIFICATE-----
Generated at Fri Nov 22 13:35:18 2024 by rpki-client on console-fra.rpki-client.org