Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9118022/C61C256AADCC11E9AC672F4BC4F9AE02/127D33EC027011EB98FEC44BC4F9AE02.roa
File:                     127D33EC027011EB98FEC44BC4F9AE02.roa (raw, json)
Hash identifier:          WKzAcG2HI+Rmp0I06ZjLFib0fSkn15at9z87zdNmyk8=
Subject key identifier:   29:C9:8C:40:AC:87:96:6B:B1:1C:21:21:8A:A7:28:A1:8A:61:67:63
Certificate issuer:       /CN=A9118022/serialNumber=C768761BC81AB4FE7FD4401548261CBA87207BEA
Certificate serial:       0D94
Authority key identifier: C7:68:76:1B:C8:1A:B4:FE:7F:D4:40:15:48:26:1C:BA:87:20:7B:EA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x2h2G8gatP5_1EAVSCYcuocge-o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9118022/C61C256AADCC11E9AC672F4BC4F9AE02/127D33EC027011EB98FEC44BC4F9AE02.roa
Signing time:             Sat 24 Aug 2024 18:36:46 +0000
ROA not before:           Sat 24 Aug 2024 18:36:45 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     137443
IP address blocks:        103.140.228.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9118022/C61C256AADCC11E9AC672F4BC4F9AE02/x2h2G8gatP5_1EAVSCYcuocge-o.crl
                          rsync://rpki.apnic.net/member_repository/A9118022/C61C256AADCC11E9AC672F4BC4F9AE02/x2h2G8gatP5_1EAVSCYcuocge-o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x2h2G8gatP5_1EAVSCYcuocge-o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 17:13:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3476 (0xd94)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9118022/serialNumber=C768761BC81AB4FE7FD4401548261CBA87207BEA
        Validity
            Not Before: Aug 24 18:36:45 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=66ca283d-0e8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:fe:5f:0b:9e:df:47:78:3f:52:f3:12:53:21:
                    16:b8:ac:68:03:38:ec:84:aa:4d:01:cb:06:88:56:
                    4d:b4:60:70:51:99:30:13:85:ca:33:54:b7:b7:3d:
                    51:5a:65:b8:4c:c9:ee:28:d3:82:e9:aa:7a:f6:00:
                    80:37:c0:06:da:3e:4e:58:39:40:51:3b:8e:8f:ac:
                    24:0e:b8:78:7e:af:0b:99:8e:7a:13:f6:bb:0d:3f:
                    b4:ca:d5:d5:a8:31:fd:f0:90:48:dc:db:42:fc:a4:
                    7d:6a:a5:ab:76:21:a4:80:c5:50:46:99:e3:04:03:
                    67:7c:13:f5:5d:89:6e:95:54:16:f7:fc:c3:9c:48:
                    e6:72:5e:1e:a9:0f:ad:c6:cb:28:4a:84:0e:30:da:
                    38:a9:7f:08:d6:b7:90:be:04:97:3f:b1:33:ea:da:
                    65:25:cf:a4:59:4f:4e:98:6c:1b:f7:f3:54:55:ef:
                    08:3d:4f:0c:98:e5:45:be:b4:1f:54:c0:a9:ac:00:
                    63:8e:b8:f4:b4:54:c6:20:20:d9:9c:9b:cd:14:de:
                    27:6e:48:97:27:20:c4:f4:37:14:89:3b:0b:3f:c1:
                    a8:68:31:e0:10:08:19:7f:6d:8a:ae:77:63:18:4c:
                    bf:89:57:b2:59:c3:cb:ed:91:93:e7:74:7b:55:82:
                    38:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:C9:8C:40:AC:87:96:6B:B1:1C:21:21:8A:A7:28:A1:8A:61:67:63
            X509v3 Authority Key Identifier:
                keyid:C7:68:76:1B:C8:1A:B4:FE:7F:D4:40:15:48:26:1C:BA:87:20:7B:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9118022/C61C256AADCC11E9AC672F4BC4F9AE02/x2h2G8gatP5_1EAVSCYcuocge-o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x2h2G8gatP5_1EAVSCYcuocge-o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118022/C61C256AADCC11E9AC672F4BC4F9AE02/127D33EC027011EB98FEC44BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.140.228.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bc:7b:0b:97:aa:59:b9:64:c1:43:83:2d:21:8e:42:59:dd:a2:
         1c:52:97:60:a6:1c:77:b7:9a:ae:df:2c:96:df:b7:52:03:bf:
         ce:31:ff:d3:31:08:50:32:f1:a4:5a:32:b2:0d:2f:b1:4c:4f:
         b8:02:93:b9:97:af:a6:a8:79:b0:75:74:47:ba:0f:70:13:f7:
         7f:1e:a8:66:ae:2a:1e:72:c3:80:8a:eb:57:58:2f:8b:30:5b:
         d3:eb:35:4f:ce:d1:ad:f0:80:cb:dc:7d:a8:46:5a:15:e4:5a:
         8d:d3:98:09:bb:f3:e0:c2:a8:ec:ca:3d:e9:98:b1:fe:d3:15:
         77:1e:d6:f9:b5:1e:9b:ad:f0:29:d9:71:93:da:1e:fd:ab:e2:
         7c:ee:a2:cc:25:2b:5f:2d:d4:d6:54:89:c0:81:d0:2a:f9:87:
         7c:90:f8:dc:71:a0:7a:16:fa:07:7c:38:96:37:c2:54:25:35:
         b2:09:77:e1:cb:00:bf:a9:5a:50:c3:86:21:2f:d6:8b:b5:bc:
         84:c1:22:59:c0:47:3c:1b:02:45:f9:b7:8e:27:6d:78:05:14:
         ec:2f:95:46:d4:7b:6c:4a:ad:1e:fb:e7:7b:86:53:46:4c:22:
         1a:77:86:2a:03:c3:85:b3:91:b9:bf:3e:0a:8f:3c:14:2a:d7:
         4b:9a:1b:cf
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICDZQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTgwMjIxMTAvBgNVBAUTKEM3Njg3NjFCQzgxQUI0RkU3RkQ0NDAxNTQ4MjYxQ0JB
ODcyMDdCRUEwHhcNMjQwODI0MTgzNjQ1WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmNhMjgzZC0wZThmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1/5fC57fR3g/UvMSUyEWuKxoAzjshKpNAcsGiFZNtGBwUZkwE4XKM1S3tz1R
WmW4TMnuKNOC6ap69gCAN8AG2j5OWDlAUTuOj6wkDrh4fq8LmY56E/a7DT+0ytXV
qDH98JBI3NtC/KR9aqWrdiGkgMVQRpnjBANnfBP1XYlulVQW9/zDnEjmcl4eqQ+t
xssoSoQOMNo4qX8I1reQvgSXP7Ez6tplJc+kWU9OmGwb9/NUVe8IPU8MmOVFvrQf
VMCprABjjrj0tFTGICDZnJvNFN4nbkiXJyDE9DcUiTsLP8GoaDHgEAgZf22Krndj
GEy/iVeyWcPL7ZGT53R7VYI4RwIDAQABo4IClTCCApEwHQYDVR0OBBYEFCnJjECs
h5ZrsRwhIYqnKKGKYWdjMB8GA1UdIwQYMBaAFMdodhvIGrT+f9RAFUgmHLqHIHvq
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODAyMi9DNjFDMjU2QUFE
Q0MxMUU5QUM2NzJGNEJDNEY5QUUwMi94MmgyRzhnYXRQNV8xRUFWU0NZY3VvY2dl
LW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3gyaDJHOGdhdFA1XzFFQVZTQ1ljdW9jZ2Utby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MTgwMjIvQzYxQzI1NkFBRENDMTFFOUFDNjcyRjRCQzRGOUFFMDIvMTI3RDMzRUMw
MjcwMTFFQjk4RkVDNDRCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnjOQwDQYJKoZIhvcNAQELBQADggEBALx7C5eqWblkwUOD
LSGOQlndohxSl2CmHHe3mq7fLJbft1IDv84x/9MxCFAy8aRaMrINL7FMT7gCk7mX
r6aoebB1dEe6D3AT938eqGauKh5yw4CK61dYL4swW9PrNU/O0a3wgMvcfahGWhXk
Wo3TmAm78+DCqOzKPemYsf7TFXce1vm1Hput8CnZcZPaHv2r4nzuoswlK18t1NZU
icCB0Cr5h3yQ+NxxoHoW+gd8OJY3wlQlNbIJd+HLAL+pWlDDhiEv1ou1vITBIlnA
RzwbAkX5t44nbXgFFOwvlUbUe2xKrR7753uGU0ZMIhp3hioDw4Wzkbm/PgqPPBQq
10uaG88=
-----END CERTIFICATE-----
Generated at Wed Nov 20 19:05:11 2024 by rpki-client on console-ams.rpki-client.org