Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E92469D2BDD411EAA2D98325C4F9AE02.roa
File:                     E92469D2BDD411EAA2D98325C4F9AE02.roa (raw, json)
Hash identifier:          N9bl8FjL7rvak5RS6qEkpPUvuKz4yMFUAPnWAAl/fHc=
Subject key identifier:   1D:78:1E:58:D4:28:E7:94:17:BA:9E:94:36:61:AF:CA:6E:E1:2A:84
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       9139
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E92469D2BDD411EAA2D98325C4F9AE02.roa
Signing time:             Thu 30 May 2024 16:31:17 +0000
ROA not before:           Thu 30 May 2024 16:31:17 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     59197
IP address blocks:        103.80.130.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 06:14:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 37177 (0x9139)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 30 16:31:17 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=6658a9d4-731b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:d0:dd:27:22:4a:ed:e8:ac:34:31:47:30:4e:
                    dd:e1:e9:01:86:bc:2a:9b:2e:88:c2:9c:3f:84:31:
                    7b:7f:98:9d:74:d1:7b:f9:55:fc:6f:37:74:20:6e:
                    56:ab:cd:aa:93:47:73:c4:5f:2a:9d:74:b4:a2:1d:
                    65:ea:12:d7:58:30:6c:ae:0c:ab:bd:20:24:2d:b2:
                    34:8a:ee:55:66:28:ac:50:d6:59:0a:20:98:11:7c:
                    9b:76:b3:06:3b:91:35:42:b2:ce:1d:83:b8:a0:8d:
                    71:bf:40:25:d5:5c:4d:52:a5:5c:f3:8d:e2:e0:be:
                    c3:06:19:23:8c:38:4e:2c:b3:35:55:6e:3d:75:e5:
                    6d:c1:28:97:84:47:a4:f3:6a:d7:dc:ad:cc:eb:f4:
                    bc:80:4a:cb:3a:ac:2d:6c:c2:22:32:6a:3e:e5:c1:
                    ba:c1:4f:84:5f:7a:5f:46:d1:0a:e1:3b:79:0f:9b:
                    2a:52:29:43:f9:5f:ba:9e:0f:9e:5b:76:ce:f9:6d:
                    27:65:8c:c1:e5:0d:1b:fc:d1:42:f4:da:e7:e9:c8:
                    ab:88:76:1e:68:c4:11:bb:86:17:0d:85:bc:47:b3:
                    0d:50:14:70:1a:1a:13:6d:87:a8:b7:02:14:4c:af:
                    d5:a2:e4:c9:51:3e:11:5c:7d:45:05:ab:c4:96:5c:
                    5e:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:78:1E:58:D4:28:E7:94:17:BA:9E:94:36:61:AF:CA:6E:E1:2A:84
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E92469D2BDD411EAA2D98325C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.80.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:15:8b:d0:22:52:b8:d9:82:19:68:e4:69:38:13:0e:57:9b:
         e7:ba:f8:f1:ee:74:67:09:98:e9:2e:33:50:a2:43:2d:1a:9b:
         6b:71:44:59:b5:32:50:fe:f0:22:91:57:f4:16:fc:17:69:7b:
         26:2f:e6:b2:33:53:85:19:b3:4c:07:22:47:5b:ec:95:a0:56:
         8b:24:69:4a:cb:b7:95:1c:10:78:db:88:2a:4d:ca:1f:d4:d8:
         1b:91:34:8e:d9:f4:3a:d7:d8:b3:f3:11:cc:79:32:36:93:1a:
         fa:69:5a:e5:c7:17:a6:14:c3:31:3d:f1:2f:e9:1f:a3:58:2d:
         01:fe:74:5a:b9:31:2b:ea:f3:33:c8:76:bd:c1:dc:26:de:1c:
         76:31:10:3c:f5:5b:ea:2b:eb:63:40:48:c5:c4:f2:00:64:5b:
         20:b2:e4:c8:32:ea:4b:b0:e9:4e:ef:fd:2f:4a:69:c7:9c:54:
         47:a8:51:5b:58:d7:7c:05:ca:e9:c2:81:4b:e2:da:c1:7e:ac:
         68:d4:95:19:21:e0:cf:d7:4f:b6:6a:c3:02:f2:1e:cb:78:f1:
         00:10:58:ff:7f:fc:42:3a:d4:41:e8:60:d7:2c:a7:6a:27:65:
         ce:f5:8c:8f:82:ff:af:e8:95:89:fe:be:36:72:64:5f:28:c9:
         24:06:50:cc
-----BEGIN CERTIFICATE-----
MIIFcjCCBFqgAwIBAgIDAJE5MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI0MDUzMDE2MzExN1oXDTI1MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNjY1OGE5ZDQtNzMxYjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMnQ3SciSu3orDQxRzBO3eHpAYa8KpsuiMKcP4Qxe3+YnXTRe/lV/G83dCBu
VqvNqpNHc8RfKp10tKIdZeoS11gwbK4Mq70gJC2yNIruVWYorFDWWQogmBF8m3az
BjuRNUKyzh2DuKCNcb9AJdVcTVKlXPON4uC+wwYZI4w4TiyzNVVuPXXlbcEol4RH
pPNq19ytzOv0vIBKyzqsLWzCIjJqPuXBusFPhF96X0bRCuE7eQ+bKlIpQ/lfup4P
nlt2zvltJ2WMweUNG/zRQvTa5+nIq4h2HmjEEbuGFw2FvEezDVAUcBoaE22HqLcC
FEyv1aLkyVE+EVx9RQWrxJZcXjECAwEAAaOCApUwggKRMB0GA1UdDgQWBBQdeB5Y
1CjnlBe6npQ2Ya/KbuEqhDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0U5MjQ2OUQy
QkRENDExRUFBMkQ5ODMyNUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6
Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQAZ1CCMA0GCSqGSIb3DQEBCwUAA4IBAQBVFYvQIlK42YIZ
aORpOBMOV5vnuvjx7nRnCZjpLjNQokMtGptrcURZtTJQ/vAikVf0FvwXaXsmL+ay
M1OFGbNMByJHW+yVoFaLJGlKy7eVHBB424gqTcof1NgbkTSO2fQ619iz8xHMeTI2
kxr6aVrlxxemFMMxPfEv6R+jWC0B/nRauTEr6vMzyHa9wdwm3hx2MRA89VvqK+tj
QEjFxPIAZFsgsuTIMupLsOlO7/0vSmnHnFRHqFFbWNd8BcrpwoFL4trBfqxo1JUZ
IeDP10+2asMC8h7LePEAEFj/f/xCOtRB6GDXLKdqJ2XO9YyPgv+v6JWJ/r42cmRf
KMkkBlDM
-----END CERTIFICATE-----
Generated at Fri Nov 22 11:48:05 2024 by rpki-client on console-ams.rpki-client.org