Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919ECE7/5E05DBA45FAC11EB8494452FC4F9AE02/4641C3785C2311EDA3D17465C4F9AE02.roa
File:                     4641C3785C2311EDA3D17465C4F9AE02.roa (raw, json)
Hash identifier:          iDGr4mpDxzIj5BZedVCmEUhs01yQX3/+XGo2tTl7UXw=
Subject key identifier:   FD:F8:51:AD:42:36:E7:36:0F:6A:61:25:97:C9:77:0A:D0:8F:9C:83
Certificate issuer:       /CN=A919ECE7/serialNumber=77370BC07305D19DBDACCE4BF7209E1EB6D40E33
Certificate serial:       05C8
Authority key identifier: 77:37:0B:C0:73:05:D1:9D:BD:AC:CE:4B:F7:20:9E:1E:B6:D4:0E:33
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dzcLwHMF0Z29rM5L9yCeHrbUDjM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919ECE7/5E05DBA45FAC11EB8494452FC4F9AE02/4641C3785C2311EDA3D17465C4F9AE02.roa
Signing time:             Wed 06 Dec 2023 23:51:12 +0000
ROA not before:           Wed 06 Dec 2023 23:51:12 +0000
ROA not after:            Fri 31 Jan 2025 00:00:00 +0000
asID:                     55933
IP address blocks:        103.42.30.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919ECE7/5E05DBA45FAC11EB8494452FC4F9AE02/dzcLwHMF0Z29rM5L9yCeHrbUDjM.crl
                          rsync://rpki.apnic.net/member_repository/A919ECE7/5E05DBA45FAC11EB8494452FC4F9AE02/dzcLwHMF0Z29rM5L9yCeHrbUDjM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dzcLwHMF0Z29rM5L9yCeHrbUDjM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1480 (0x5c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919ECE7/serialNumber=77370BC07305D19DBDACCE4BF7209E1EB6D40E33
        Validity
            Not Before: Dec  6 23:51:12 2023 GMT
            Not After : Jan 31 00:00:00 2025 GMT
        Subject: CN=657108ef-185b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:30:4f:8f:c6:63:15:90:78:70:9a:2b:55:b1:
                    b5:26:66:2c:27:96:c3:15:14:5d:64:92:45:19:b7:
                    8a:55:b7:90:53:67:0e:29:b2:b1:1e:f1:91:50:d3:
                    04:97:8f:08:6b:00:af:d6:bc:e1:56:61:5f:8c:0d:
                    fd:4b:fa:79:af:3e:7f:8d:8f:6b:bc:a8:da:06:f2:
                    6c:79:6d:41:57:2c:a5:dd:a7:86:01:22:e3:98:a1:
                    25:35:17:87:c0:46:03:72:aa:c4:a4:ce:5e:03:97:
                    65:09:b5:f1:cd:1d:13:8b:8e:03:11:b0:83:20:be:
                    aa:7b:b5:09:40:72:31:32:10:3e:19:0a:54:d8:5f:
                    32:ba:22:27:97:74:0c:dc:9c:35:9f:f7:b4:df:ad:
                    88:45:d4:f8:fe:5b:0b:15:df:c5:a0:32:f3:fe:8a:
                    ad:c2:af:c9:1f:ed:f7:ec:e6:ae:fe:1b:2d:65:62:
                    99:7a:3b:aa:e7:df:e5:a2:4b:9a:d6:e0:ed:65:2d:
                    69:f2:6b:a6:a4:2d:1c:af:4c:cb:73:12:b1:8b:f2:
                    22:2e:58:6a:57:b1:31:8f:c7:97:88:0f:c9:49:37:
                    98:62:d5:c7:21:e3:ba:60:f7:8c:66:51:ab:bb:9d:
                    63:cd:7b:27:e9:1a:7f:6c:8e:b6:1d:b5:12:26:47:
                    44:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:F8:51:AD:42:36:E7:36:0F:6A:61:25:97:C9:77:0A:D0:8F:9C:83
            X509v3 Authority Key Identifier:
                keyid:77:37:0B:C0:73:05:D1:9D:BD:AC:CE:4B:F7:20:9E:1E:B6:D4:0E:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919ECE7/5E05DBA45FAC11EB8494452FC4F9AE02/dzcLwHMF0Z29rM5L9yCeHrbUDjM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dzcLwHMF0Z29rM5L9yCeHrbUDjM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919ECE7/5E05DBA45FAC11EB8494452FC4F9AE02/4641C3785C2311EDA3D17465C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.42.30.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4e:2c:6f:b1:99:17:c4:e1:de:82:1d:f5:b2:25:9d:4e:f9:e8:
         43:79:dd:52:e9:e7:ec:ff:94:fd:e7:af:d7:78:f7:d5:98:fd:
         75:59:61:f0:cf:43:64:bb:d7:42:07:2d:c4:35:a8:ce:d5:db:
         fe:af:cb:59:a0:53:49:a4:75:f0:2c:5b:f7:36:d3:e8:72:ed:
         ab:f6:1e:28:59:ce:f5:97:1d:e3:73:e3:f1:8b:bc:53:5c:54:
         c4:34:f4:e2:84:9d:9d:1b:e4:77:3e:20:5a:82:3c:0e:6d:09:
         6d:8b:f8:75:d2:29:45:a4:d9:35:d9:17:23:80:a3:d0:77:db:
         70:ee:3e:72:56:21:63:dc:60:ea:4c:77:83:3a:05:4c:fc:77:
         65:ef:48:13:34:a1:99:4c:14:1b:d1:28:26:df:5b:2d:ec:67:
         33:e4:57:eb:f4:f2:5a:56:89:77:24:70:dd:87:46:a4:f3:b3:
         20:92:bf:7c:c1:c5:fe:55:2b:f1:ea:7b:fa:3e:e3:ae:01:8f:
         57:42:b3:e2:f7:25:1d:bd:e0:01:d6:5d:2c:c8:08:55:ef:2a:
         a0:25:32:77:61:29:8e:37:b6:6f:fb:f1:a2:77:93:d9:00:c5:
         11:1c:8c:d7:b0:cd:28:41:18:eb:8f:b4:5a:cc:e7:07:66:25:
         30:80:0e:ce
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBcgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUVDRTcxMTAvBgNVBAUTKDc3MzcwQkMwNzMwNUQxOURCREFDQ0U0QkY3MjA5RTFF
QjZENDBFMzMwHhcNMjMxMjA2MjM1MTEyWhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NTcxMDhlZi0xODViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA+jBPj8ZjFZB4cJorVbG1JmYsJ5bDFRRdZJJFGbeKVbeQU2cOKbKxHvGRUNME
l48IawCv1rzhVmFfjA39S/p5rz5/jY9rvKjaBvJseW1BVyyl3aeGASLjmKElNReH
wEYDcqrEpM5eA5dlCbXxzR0Ti44DEbCDIL6qe7UJQHIxMhA+GQpU2F8yuiInl3QM
3Jw1n/e0362IRdT4/lsLFd/FoDLz/oqtwq/JH+337Oau/hstZWKZejuq59/lokua
1uDtZS1p8mumpC0cr0zLcxKxi/IiLlhqV7Exj8eXiA/JSTeYYtXHIeO6YPeMZlGr
u51jzXsn6Rp/bI62HbUSJkdENwIDAQABo4IClTCCApEwHQYDVR0OBBYEFP34Ua1C
Nuc2D2phJZfJdwrQj5yDMB8GA1UdIwQYMBaAFHc3C8BzBdGdvazOS/cgnh621A4z
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUNFNy81RTA1REJBNDVG
QUMxMUVCODQ5NDQ1MkZDNEY5QUUwMi9kemNMd0hNRjBaMjlyTTVMOXlDZUhyYlVE
ak0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2R6Y0x3SE1GMFoyOXJNNUw5eUNlSHJiVURqTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OUVDRTcvNUUwNURCQTQ1RkFDMTFFQjg0OTQ0NTJGQzRGOUFFMDIvNDY0MUMzNzg1
QzIzMTFFREEzRDE3NDY1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnKh4wDQYJKoZIhvcNAQELBQADggEBAE4sb7GZF8Th3oId
9bIlnU756EN53VLp5+z/lP3nr9d499WY/XVZYfDPQ2S710IHLcQ1qM7V2/6vy1mg
U0mkdfAsW/c20+hy7av2HihZzvWXHeNz4/GLvFNcVMQ09OKEnZ0b5Hc+IFqCPA5t
CW2L+HXSKUWk2TXZFyOAo9B323DuPnJWIWPcYOpMd4M6BUz8d2XvSBM0oZlMFBvR
KCbfWy3sZzPkV+v08lpWiXckcN2HRqTzsyCSv3zBxf5VK/Hqe/o+464Bj1dCs+L3
JR294AHWXSzICFXvKqAlMndhKY43tm/78aJ3k9kAxREcjNewzShBGOuPtFrM5wdm
JTCADs4=
-----END CERTIFICATE-----
Generated at Sat Nov 23 00:08:46 2024 by rpki-client on console-ams.rpki-client.org