Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919E4C6/EAB947A81E1811ED9479365DC4F9AE02/4C0F405E1E1C11EDA19CF560C4F9AE02.roa
File:                     4C0F405E1E1C11EDA19CF560C4F9AE02.roa (raw, json)
Hash identifier:          Mjvz0g/6VHNBx1WBrf/RAQ24UJcGDEU3e3YasLXb4ZU=
Subject key identifier:   43:5A:34:FE:4F:A3:E4:B5:F2:CD:5E:80:96:0B:DB:9D:8C:F7:B0:43
Certificate issuer:       /CN=A919E4C6/serialNumber=B919BA0B3AD5E26FC31D394BE132BBCA87FCC852
Certificate serial:       01B6
Authority key identifier: B9:19:BA:0B:3A:D5:E2:6F:C3:1D:39:4B:E1:32:BB:CA:87:FC:C8:52
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uRm6CzrV4m_DHTlL4TK7yof8yFI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919E4C6/EAB947A81E1811ED9479365DC4F9AE02/4C0F405E1E1C11EDA19CF560C4F9AE02.roa
Signing time:             Sat 27 Jul 2024 03:55:37 +0000
ROA not before:           Sat 27 Jul 2024 03:55:37 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     150165
IP address blocks:        103.143.236.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919E4C6/EAB947A81E1811ED9479365DC4F9AE02/uRm6CzrV4m_DHTlL4TK7yof8yFI.crl
                          rsync://rpki.apnic.net/member_repository/A919E4C6/EAB947A81E1811ED9479365DC4F9AE02/uRm6CzrV4m_DHTlL4TK7yof8yFI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uRm6CzrV4m_DHTlL4TK7yof8yFI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 01:40:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 438 (0x1b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919E4C6/serialNumber=B919BA0B3AD5E26FC31D394BE132BBCA87FCC852
        Validity
            Not Before: Jul 27 03:55:37 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=66a46fb8-e8ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:9e:34:66:d5:9c:90:ec:bd:fe:f1:27:4d:85:
                    51:7e:1d:95:74:29:aa:4e:11:c5:79:09:b1:42:cf:
                    da:76:30:e8:22:26:bc:45:a7:51:0d:77:b3:e7:8e:
                    47:dd:aa:b1:3e:c5:10:5b:08:43:25:7a:f5:5a:39:
                    84:fa:f8:66:3c:17:53:53:7b:88:d6:d0:3a:fd:ba:
                    fc:5f:2d:48:39:c1:39:0b:d4:21:3b:c5:45:08:8b:
                    7b:d7:09:96:c7:b5:ef:64:09:db:e8:23:ba:32:be:
                    82:30:c9:2c:55:a5:6f:b2:33:44:bf:e8:3f:2f:18:
                    2d:3f:e5:a3:e7:b6:6e:1e:a6:dd:65:ae:57:3d:72:
                    e2:89:8f:6d:8d:53:66:b9:f9:3a:f9:84:1b:32:c4:
                    73:94:7c:e6:65:09:b8:18:2d:c3:06:21:b4:38:d1:
                    a4:95:c9:af:ea:9a:23:79:87:a9:6a:22:11:f6:c3:
                    a9:83:ae:5b:7e:45:db:ac:51:cb:b1:8c:03:e2:00:
                    f3:48:8c:dd:b9:0e:4c:02:8c:5f:ea:e9:60:64:f4:
                    68:3d:db:b1:36:2f:f5:5b:07:bc:f2:df:cb:53:18:
                    f0:86:4f:4c:7b:84:e6:3e:67:28:87:e0:5c:20:01:
                    e4:65:0a:de:9e:2e:be:07:74:37:fc:22:46:98:eb:
                    87:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:5A:34:FE:4F:A3:E4:B5:F2:CD:5E:80:96:0B:DB:9D:8C:F7:B0:43
            X509v3 Authority Key Identifier:
                keyid:B9:19:BA:0B:3A:D5:E2:6F:C3:1D:39:4B:E1:32:BB:CA:87:FC:C8:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919E4C6/EAB947A81E1811ED9479365DC4F9AE02/uRm6CzrV4m_DHTlL4TK7yof8yFI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uRm6CzrV4m_DHTlL4TK7yof8yFI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E4C6/EAB947A81E1811ED9479365DC4F9AE02/4C0F405E1E1C11EDA19CF560C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.143.236.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ab:0d:e8:cb:b8:24:a5:69:2b:0e:99:56:46:c4:02:ac:32:5f:
         25:e7:e0:dd:48:91:5e:a3:0e:e4:c4:f5:9d:33:2c:72:b1:db:
         ef:7c:cd:02:5f:75:77:1e:92:d0:4c:a8:69:57:72:ac:4a:0e:
         28:32:29:14:ff:f4:99:0a:65:b8:b6:8f:5e:f7:13:a5:35:bc:
         73:a5:03:69:6f:91:03:3a:00:1d:3a:a1:be:c1:5b:49:ca:2e:
         84:b2:65:06:ec:96:90:e4:bd:27:cf:ad:33:19:5c:b8:6a:ff:
         6f:06:21:3b:b2:50:a9:11:4b:a0:ad:bd:17:2d:d3:b0:d2:df:
         a4:3a:a8:7b:fd:08:d4:df:b4:de:e6:7f:01:3e:d4:d7:8b:0b:
         a8:ed:15:db:7f:a7:62:10:5d:03:a4:1c:fe:bd:c2:c9:d6:e9:
         df:d1:e2:f2:dd:53:d5:fa:c0:53:5b:ad:42:cc:fb:db:9a:16:
         14:6f:f5:16:88:95:07:ca:58:d4:79:28:03:71:1d:f9:fa:ca:
         cd:9d:af:e4:2f:50:09:03:aa:56:b8:cb:36:9d:ae:bb:e4:01:
         14:f5:29:41:c3:48:c0:db:d4:db:7f:9d:c5:f3:83:51:b7:19:
         72:0a:6f:b7:6b:83:d0:7f:39:44:fe:c1:c6:5d:eb:fd:5e:c8:
         87:7c:70:ba
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAbYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUU0QzYxMTAvBgNVBAUTKEI5MTlCQTBCM0FENUUyNkZDMzFEMzk0QkUxMzJCQkNB
ODdGQ0M4NTIwHhcNMjQwNzI3MDM1NTM3WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmE0NmZiOC1lOGFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqp40ZtWckOy9/vEnTYVRfh2VdCmqThHFeQmxQs/adjDoIia8RadRDXez545H
3aqxPsUQWwhDJXr1WjmE+vhmPBdTU3uI1tA6/br8Xy1IOcE5C9QhO8VFCIt71wmW
x7XvZAnb6CO6Mr6CMMksVaVvsjNEv+g/LxgtP+Wj57ZuHqbdZa5XPXLiiY9tjVNm
ufk6+YQbMsRzlHzmZQm4GC3DBiG0ONGklcmv6pojeYepaiIR9sOpg65bfkXbrFHL
sYwD4gDzSIzduQ5MAoxf6ulgZPRoPduxNi/1Wwe88t/LUxjwhk9Me4TmPmcoh+Bc
IAHkZQreni6+B3Q3/CJGmOuHsQIDAQABo4IClTCCApEwHQYDVR0OBBYEFENaNP5P
o+S18s1egJYL252M97BDMB8GA1UdIwQYMBaAFLkZugs61eJvwx05S+Eyu8qH/MhS
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RTRDNi9FQUI5NDdBODFF
MTgxMUVEOTQ3OTM2NURDNEY5QUUwMi91Um02Q3pyVjRtX0RIVGxMNFRLN3lvZjh5
RkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3VSbTZDenJWNG1fREhUbEw0VEs3eW9mOHlGSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OUU0QzYvRUFCOTQ3QTgxRTE4MTFFRDk0NzkzNjVEQzRGOUFFMDIvNEMwRjQwNUUx
RTFDMTFFREExOUNGNTYwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnj+wwDQYJKoZIhvcNAQELBQADggEBAKsN6Mu4JKVpKw6Z
VkbEAqwyXyXn4N1IkV6jDuTE9Z0zLHKx2+98zQJfdXcektBMqGlXcqxKDigyKRT/
9JkKZbi2j173E6U1vHOlA2lvkQM6AB06ob7BW0nKLoSyZQbslpDkvSfPrTMZXLhq
/28GITuyUKkRS6CtvRct07DS36Q6qHv9CNTftN7mfwE+1NeLC6jtFdt/p2IQXQOk
HP69wsnW6d/R4vLdU9X6wFNbrULM+9uaFhRv9RaIlQfKWNR5KANxHfn6ys2dr+Qv
UAkDqla4yzadrrvkART1KUHDSMDb1Nt/ncXzg1G3GXIKb7drg9B/OUT+wcZd6/1e
yId8cLo=
-----END CERTIFICATE-----
Generated at Sat Nov 23 03:58:46 2024 by rpki-client on console-ams.rpki-client.org