Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E491F456D8A011EB8F5C1925C4F9AE02.roa
File:                     E491F456D8A011EB8F5C1925C4F9AE02.roa (raw, json)
Hash identifier:          1fr41btoZqvSMPcbmOs6mSWfik+JI0KezwZ7i8w9/lc=
Subject key identifier:   67:F7:FB:AF:03:0E:DF:FC:74:FA:07:22:8E:05:6B:47:38:E1:98:57
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       8BEE
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E491F456D8A011EB8F5C1925C4F9AE02.roa
Signing time:             Thu 30 May 2024 16:09:14 +0000
ROA not before:           Thu 30 May 2024 16:09:14 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     138229
IP address blocks:        103.124.80.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 12:05:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 35822 (0x8bee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 30 16:09:14 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=6658a4aa-bf21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:8b:5e:c2:26:4b:8c:03:49:2a:15:15:f9:f1:
                    a2:c5:d5:78:cf:53:11:e4:b8:b9:c7:65:01:7d:28:
                    e0:19:4a:18:44:9d:c0:0b:52:53:3d:18:b7:77:d7:
                    b1:ff:2c:6e:45:94:1c:db:1b:99:72:a5:09:05:17:
                    98:aa:d5:a0:39:ca:6e:43:82:af:72:b6:66:51:66:
                    37:3d:9f:11:c5:b0:6b:5c:02:91:98:17:eb:29:62:
                    54:06:87:d4:f6:f5:d4:45:64:85:03:ff:b1:fe:0b:
                    26:56:bd:b3:d6:a3:9e:ab:79:7b:0f:29:55:90:f4:
                    ba:01:b7:6b:ca:2f:ad:80:11:13:4d:75:f6:83:6e:
                    63:4c:49:ff:3c:e9:8b:93:c1:f2:00:d3:f2:c8:c0:
                    66:12:9c:03:f1:03:cd:87:4a:cc:d0:bc:a6:19:6a:
                    21:59:f6:99:96:34:60:41:8d:4e:31:4f:db:a3:ac:
                    ae:ea:ab:c9:56:03:6c:30:64:2d:eb:b9:55:4c:62:
                    b4:bb:e4:65:cb:c1:1e:2e:c9:ff:b9:44:a3:7d:6b:
                    47:24:81:3f:aa:d3:2e:d7:d6:65:91:09:35:9a:82:
                    61:36:16:7b:df:64:e3:5c:7a:dd:2e:c5:98:da:a6:
                    8a:a1:2e:e7:ae:dd:71:f3:6d:a8:2a:20:1a:8d:75:
                    b7:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:F7:FB:AF:03:0E:DF:FC:74:FA:07:22:8E:05:6B:47:38:E1:98:57
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E491F456D8A011EB8F5C1925C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.124.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         63:de:28:b9:c8:d8:3c:26:c2:50:e2:0d:85:25:02:56:21:49:
         fd:f2:10:1c:b7:e3:22:a7:8a:41:97:db:45:b4:a7:3d:b8:35:
         70:66:0d:80:58:fd:81:81:9d:47:56:3a:d9:42:62:90:53:d5:
         fd:c9:98:f7:06:14:77:59:c7:87:d7:03:24:98:ae:04:5c:e3:
         3e:c6:50:01:8f:3e:33:c4:bf:ba:ab:ee:7f:a5:56:8b:d3:de:
         f2:c7:f4:57:39:73:62:25:c2:65:aa:af:df:20:f4:d3:e9:a0:
         e8:8c:bb:2e:38:5f:ff:ee:b0:bd:d1:b5:c2:a1:10:97:9a:8e:
         e7:76:31:bb:6b:41:87:db:9e:03:c6:24:af:b1:13:c8:34:9a:
         8e:15:00:b7:ef:07:f7:26:86:9c:ff:bf:28:84:ef:a8:fc:8d:
         a1:37:df:57:4a:f1:94:9b:b1:4d:97:81:53:d0:f2:70:ba:eb:
         ce:44:dd:08:af:68:e8:bf:6c:c0:ae:36:ce:91:83:7a:71:2e:
         00:c2:3e:f7:6a:c9:8e:03:e3:38:a5:1e:49:24:d0:59:15:df:
         7b:ee:f1:32:1e:ba:0b:d7:d5:e4:f0:ba:8c:bd:8e:8b:8d:63:
         54:20:97:af:70:4a:c7:07:e8:b4:ca:e5:83:7e:03:bd:aa:84:
         3d:cd:15:ba
-----BEGIN CERTIFICATE-----
MIIFcjCCBFqgAwIBAgIDAIvuMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI0MDUzMDE2MDkxNFoXDTI1MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNjY1OGE0YWEtYmYyMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANaLXsImS4wDSSoVFfnxosXVeM9TEeS4ucdlAX0o4BlKGESdwAtSUz0Yt3fX
sf8sbkWUHNsbmXKlCQUXmKrVoDnKbkOCr3K2ZlFmNz2fEcWwa1wCkZgX6yliVAaH
1Pb11EVkhQP/sf4LJla9s9ajnqt5ew8pVZD0ugG3a8ovrYARE0119oNuY0xJ/zzp
i5PB8gDT8sjAZhKcA/EDzYdKzNC8phlqIVn2mZY0YEGNTjFP26OsruqryVYDbDBk
Leu5VUxitLvkZcvBHi7J/7lEo31rRySBP6rTLtfWZZEJNZqCYTYWe99k41x63S7F
mNqmiqEu567dcfNtqCogGo11t2MCAwEAAaOCApUwggKRMB0GA1UdDgQWBBRn9/uv
Aw7f/HT6ByKOBWtHOOGYVzAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0U0OTFGNDU2
RDhBMDExRUI4RjVDMTkyNUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6
Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQCZ3xQMA0GCSqGSIb3DQEBCwUAA4IBAQBj3ii5yNg8JsJQ
4g2FJQJWIUn98hAct+Mip4pBl9tFtKc9uDVwZg2AWP2BgZ1HVjrZQmKQU9X9yZj3
BhR3WceH1wMkmK4EXOM+xlABjz4zxL+6q+5/pVaL097yx/RXOXNiJcJlqq/fIPTT
6aDojLsuOF//7rC90bXCoRCXmo7ndjG7a0GH254DxiSvsRPINJqOFQC37wf3Joac
/78ohO+o/I2hN99XSvGUm7FNl4FT0PJwuuvORN0Ir2jov2zArjbOkYN6cS4Awj73
asmOA+M4pR5JJNBZFd977vEyHroL19Xk8LqMvY6LjWNUIJevcErHB+i0yuWDfgO9
qoQ9zRW6
-----END CERTIFICATE-----
Generated at Fri Nov 22 13:35:19 2024 by rpki-client on console-fra.rpki-client.org