Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/68612E727A7F11EFB5653840C4F9AE02.roa
File:                     68612E727A7F11EFB5653840C4F9AE02.roa (raw, json)
Hash identifier:          FvteCjqeo9yVrq2Lsua0n4LN7Rg+CLRjFiDooXY8jik=
Subject key identifier:   A2:2B:07:2A:57:C0:7A:0A:07:D0:B6:CF:63:C7:54:60:E0:EF:E8:35
Certificate issuer:       /CN=A9116DDB/serialNumber=0C769DA44982F61650362943E6DFEF951B9777FA
Certificate serial:       0169
Authority key identifier: 0C:76:9D:A4:49:82:F6:16:50:36:29:43:E6:DF:EF:95:1B:97:77:FA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHadpEmC9hZQNilD5t_vlRuXd_o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/68612E727A7F11EFB5653840C4F9AE02.roa
Signing time:             Sun 29 Sep 2024 03:17:25 +0000
ROA not before:           Sun 29 Sep 2024 03:17:25 +0000
ROA not after:            Mon 01 Dec 2025 00:00:00 +0000
asID:                     5065
IP address blocks:        103.71.93.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.crl
                          rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHadpEmC9hZQNilD5t_vlRuXd_o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 02:40:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 361 (0x169)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9116DDB/serialNumber=0C769DA44982F61650362943E6DFEF951B9777FA
        Validity
            Not Before: Sep 29 03:17:25 2024 GMT
            Not After : Dec  1 00:00:00 2025 GMT
        Subject: CN=66f8c6c4-05eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:25:cd:ce:e0:0b:47:9f:e6:f8:e2:3b:30:38:
                    95:33:06:59:48:ef:b8:48:ef:d7:d4:9c:f5:d7:76:
                    54:07:b9:ec:97:f8:55:f3:a2:52:f9:83:c5:8c:32:
                    2e:60:f9:6e:c0:46:e6:a8:65:f8:da:2d:68:a0:ed:
                    60:1f:78:5e:e8:40:11:3f:14:61:f9:c6:35:f7:de:
                    40:e6:c7:ab:8d:7f:2c:94:f6:69:6f:a6:94:d8:a1:
                    4b:b8:e7:a1:21:18:37:43:fb:c4:80:0d:c5:af:60:
                    d2:64:87:aa:f8:88:09:e7:4c:12:4d:21:44:06:0e:
                    49:5a:67:10:bd:a6:64:af:b9:27:cb:cf:9f:00:52:
                    a2:6d:41:9c:2f:b7:09:65:e8:a5:00:1a:6e:82:10:
                    8e:66:8e:db:31:7c:2a:43:9d:51:d6:3d:c1:f1:a3:
                    10:67:5a:3a:b4:23:e4:fe:f0:cf:f7:31:57:e7:ea:
                    00:95:0a:dc:38:05:9e:e1:7a:dc:84:c3:84:7b:e5:
                    00:b4:90:39:38:a5:54:4d:b3:51:8e:72:9d:e8:07:
                    41:bc:fb:43:08:0c:5b:27:ad:cd:76:07:14:12:dc:
                    4a:60:f8:9c:64:e8:04:e1:ff:5e:da:34:92:20:8a:
                    81:a1:3d:0a:04:a2:1b:78:a1:01:d9:22:3f:4c:73:
                    e1:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:2B:07:2A:57:C0:7A:0A:07:D0:B6:CF:63:C7:54:60:E0:EF:E8:35
            X509v3 Authority Key Identifier:
                keyid:0C:76:9D:A4:49:82:F6:16:50:36:29:43:E6:DF:EF:95:1B:97:77:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHadpEmC9hZQNilD5t_vlRuXd_o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/68612E727A7F11EFB5653840C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.71.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:62:c8:86:e1:f2:a7:3a:df:8d:d7:a3:ce:a3:ec:61:db:48:
         4b:77:d6:ab:e6:d9:97:1d:80:f9:f5:6c:c9:e9:05:8e:d9:2d:
         5c:ed:25:90:e1:cf:f3:85:2a:85:a4:5b:42:2a:96:61:36:57:
         70:0b:58:05:5b:d5:ad:1b:41:f6:15:c5:b8:53:2d:eb:69:00:
         ee:3d:02:d4:7e:f8:cb:f4:27:6c:d5:c0:5e:5d:c5:ee:ba:cc:
         79:8d:28:9f:3a:e5:cf:3d:25:95:8d:aa:5a:de:5c:58:c1:2a:
         3c:53:8f:a4:38:a7:bd:c9:6e:23:39:54:95:00:dc:b5:f0:eb:
         83:7b:25:19:6f:2d:55:e7:f7:01:fb:82:c9:cf:27:a8:49:cd:
         9b:54:39:b1:45:41:c3:18:cc:1d:e1:95:bf:11:b3:a8:24:12:
         69:b9:bd:e0:98:8f:4c:c6:a7:1e:47:56:07:9e:52:a9:52:b9:
         ed:7a:9e:47:9b:0d:5e:40:58:39:cd:8c:7a:6f:a3:20:4d:8e:
         85:af:83:5b:93:c7:74:eb:f2:bb:1d:24:52:d6:ef:bd:78:c9:
         9a:f3:f4:df:77:40:2f:09:90:b4:4a:63:95:ff:1c:50:f3:26:
         2b:66:c2:24:bf:30:9d:0c:25:3f:51:bb:b3:09:00:3a:d7:ea:
         1e:97:55:ff
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAWkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTZEREIxMTAvBgNVBAUTKDBDNzY5REE0NDk4MkY2MTY1MDM2Mjk0M0U2REZFRjk1
MUI5Nzc3RkEwHhcNMjQwOTI5MDMxNzI1WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmY4YzZjNC0wNWViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyiXNzuALR5/m+OI7MDiVMwZZSO+4SO/X1Jz113ZUB7nsl/hV86JS+YPFjDIu
YPluwEbmqGX42i1ooO1gH3he6EARPxRh+cY1995A5serjX8slPZpb6aU2KFLuOeh
IRg3Q/vEgA3Fr2DSZIeq+IgJ50wSTSFEBg5JWmcQvaZkr7kny8+fAFKibUGcL7cJ
ZeilABpughCOZo7bMXwqQ51R1j3B8aMQZ1o6tCPk/vDP9zFX5+oAlQrcOAWe4Xrc
hMOEe+UAtJA5OKVUTbNRjnKd6AdBvPtDCAxbJ63NdgcUEtxKYPicZOgE4f9e2jSS
IIqBoT0KBKIbeKEB2SI/THPh6QIDAQABo4IClTCCApEwHQYDVR0OBBYEFKIrBypX
wHoKB9C2z2PHVGDg7+g1MB8GA1UdIwQYMBaAFAx2naRJgvYWUDYpQ+bf75Ubl3f6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNkREQi9FMUNEQ0REMkJF
MUIxMUVEQTYxQUNEODRDNEY5QUUwMi9ESGFkcEVtQzloWlFOaWxENXRfdmxSdVhk
X28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0RIYWRwRW1DOWhaUU5pbEQ1dF92bFJ1WGRfby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MTZEREIvRTFDRENERDJCRTFCMTFFREE2MUFDRDg0QzRGOUFFMDIvNjg2MTJFNzI3
QTdGMTFFRkI1NjUzODQwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnR10wDQYJKoZIhvcNAQELBQADggEBAJRiyIbh8qc6343X
o86j7GHbSEt31qvm2ZcdgPn1bMnpBY7ZLVztJZDhz/OFKoWkW0IqlmE2V3ALWAVb
1a0bQfYVxbhTLetpAO49AtR++Mv0J2zVwF5dxe66zHmNKJ865c89JZWNqlreXFjB
KjxTj6Q4p73JbiM5VJUA3LXw64N7JRlvLVXn9wH7gsnPJ6hJzZtUObFFQcMYzB3h
lb8Rs6gkEmm5veCYj0zGpx5HVgeeUqlSue16nkebDV5AWDnNjHpvoyBNjoWvg1uT
x3Tr8rsdJFLW7714yZrz9N93QC8JkLRKY5X/HFDzJitmwiS/MJ0MJT9Ru7MJADrX
6h6XVf8=
-----END CERTIFICATE-----
Generated at Thu Nov 21 05:05:53 2024 by rpki-client on console-fra.rpki-client.org