Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9118FFA/0586068A2B7C11EF89E84144C4F9AE02/E80A0D282B9D11EFB61F1148C4F9AE02.roa
File:                     E80A0D282B9D11EFB61F1148C4F9AE02.roa (raw, json)
Hash identifier:          F0SsWsfme5DR54sccnOQA0ilylY47//E27uoZDHPm3k=
Subject key identifier:   03:AC:C7:12:3A:A2:B3:6C:32:95:C0:74:F8:2E:B0:21:3A:A5:6A:E7
Certificate issuer:       /CN=A9118FFA/serialNumber=9FE881D8BD32AD15AB7BE7B4EC4F752212546C76
Certificate serial:       40
Authority key identifier: 9F:E8:81:D8:BD:32:AD:15:AB:7B:E7:B4:EC:4F:75:22:12:54:6C:76
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n-iB2L0yrRWre-e07E91IhJUbHY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9118FFA/0586068A2B7C11EF89E84144C4F9AE02/E80A0D282B9D11EFB61F1148C4F9AE02.roa
Signing time:             Thu 03 Oct 2024 06:40:17 +0000
ROA not before:           Thu 03 Oct 2024 06:40:17 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     7474
IP address blocks:        103.122.4.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9118FFA/0586068A2B7C11EF89E84144C4F9AE02/n-iB2L0yrRWre-e07E91IhJUbHY.crl
                          rsync://rpki.apnic.net/member_repository/A9118FFA/0586068A2B7C11EF89E84144C4F9AE02/n-iB2L0yrRWre-e07E91IhJUbHY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n-iB2L0yrRWre-e07E91IhJUbHY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 05:15:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 64 (0x40)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9118FFA/serialNumber=9FE881D8BD32AD15AB7BE7B4EC4F752212546C76
        Validity
            Not Before: Oct  3 06:40:17 2024 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=66fe3c51-8018
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:4a:90:50:3d:df:dd:fe:a6:fa:fd:6b:12:85:
                    a9:ab:ce:77:e5:57:3a:df:01:a1:51:dc:fb:0f:d1:
                    13:32:41:27:18:81:76:71:8e:51:6c:16:13:2a:da:
                    15:9b:dd:64:04:98:fe:9a:c0:26:fa:76:7e:40:08:
                    7d:1f:83:80:b1:7d:88:18:2d:d2:98:3d:46:c1:76:
                    37:27:df:78:9b:2e:37:c6:df:ac:17:fa:a4:53:31:
                    41:fa:6e:40:4d:15:40:a4:79:51:c2:fa:6d:0a:ec:
                    af:7f:f6:f8:9f:d9:a7:0b:27:04:96:dc:be:2c:06:
                    24:8f:06:f1:10:fc:df:1c:98:c2:09:6f:87:a9:97:
                    e4:9d:0f:4d:bb:ec:75:6f:54:2c:8b:f3:90:38:87:
                    f3:51:bf:16:9d:a4:2c:2d:6f:75:fb:f5:90:1d:40:
                    c9:46:e2:71:c1:98:60:5c:4d:bf:5c:09:2c:5b:28:
                    2b:40:2b:c2:b3:ae:a4:ff:c2:bc:13:5e:fd:ec:64:
                    b7:9c:b7:2e:a9:5e:69:9d:8e:d4:09:c1:e9:a4:29:
                    b2:bc:b8:5d:e3:1d:47:d9:78:00:47:27:49:7e:35:
                    fd:e4:e3:b8:69:d4:d1:04:17:8f:2c:c4:ba:66:67:
                    d7:bd:bf:46:a9:7c:37:94:b0:eb:5d:24:3e:b6:65:
                    4e:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:AC:C7:12:3A:A2:B3:6C:32:95:C0:74:F8:2E:B0:21:3A:A5:6A:E7
            X509v3 Authority Key Identifier:
                keyid:9F:E8:81:D8:BD:32:AD:15:AB:7B:E7:B4:EC:4F:75:22:12:54:6C:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9118FFA/0586068A2B7C11EF89E84144C4F9AE02/n-iB2L0yrRWre-e07E91IhJUbHY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n-iB2L0yrRWre-e07E91IhJUbHY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118FFA/0586068A2B7C11EF89E84144C4F9AE02/E80A0D282B9D11EFB61F1148C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.122.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:ba:db:fd:58:0f:4d:2c:88:f8:9c:d7:2a:86:14:37:32:48:
         30:d7:f3:85:ee:83:80:d6:7f:3b:1d:4a:2c:4a:c1:0b:7b:d7:
         93:f8:95:cb:5c:39:08:ba:50:5d:08:19:27:f8:bf:32:14:ac:
         08:e0:6b:31:f5:0a:1a:91:9d:cc:85:b2:3f:6d:eb:1d:92:f4:
         b9:30:38:23:78:a4:02:8a:f5:8a:6b:a8:fb:0d:90:04:ef:b8:
         8e:fa:2c:2d:dd:c8:b3:c0:37:db:8b:9a:ba:e9:d5:ba:1e:32:
         c5:58:f6:ec:9f:26:10:27:3a:45:a4:4c:84:c2:1f:31:cd:b5:
         86:8d:22:43:02:45:fb:6c:23:fe:4a:7c:0a:37:9a:77:dd:47:
         db:64:8d:eb:30:e0:15:9d:b2:8e:d4:e0:68:a0:14:b6:5e:3f:
         2c:8f:68:c4:af:44:87:fd:ba:42:37:96:77:06:24:ec:73:f7:
         7b:e5:91:de:18:0d:a9:de:04:26:c7:7c:42:50:70:2a:ac:56:
         c4:db:7f:cc:be:e4:2c:ea:cc:5b:4a:eb:9e:f9:1e:5d:b9:7e:
         73:5b:75:b6:60:ca:28:59:90:b5:95:3b:db:d3:4d:5d:e1:92:
         1d:83:14:de:4a:31:14:b4:1b:4b:c4:0d:79:49:fd:0f:22:84:
         98:c3:42:90
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBQDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx
OEZGQTExMC8GA1UEBRMoOUZFODgxRDhCRDMyQUQxNUFCN0JFN0I0RUM0Rjc1MjIx
MjU0NkM3NjAeFw0yNDEwMDMwNjQwMTdaFw0yNTEyMzAwMDAwMDBaMBgxFjAUBgNV
BAMTDTY2ZmUzYzUxLTgwMTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCySpBQPd/d/qb6/WsShamrznflVzrfAaFR3PsP0RMyQScYgXZxjlFsFhMq2hWb
3WQEmP6awCb6dn5ACH0fg4CxfYgYLdKYPUbBdjcn33ibLjfG36wX+qRTMUH6bkBN
FUCkeVHC+m0K7K9/9vif2acLJwSW3L4sBiSPBvEQ/N8cmMIJb4epl+SdD0277HVv
VCyL85A4h/NRvxadpCwtb3X79ZAdQMlG4nHBmGBcTb9cCSxbKCtAK8KzrqT/wrwT
Xv3sZLecty6pXmmdjtQJwemkKbK8uF3jHUfZeABHJ0l+Nf3k47hp1NEEF48sxLpm
Z9e9v0apfDeUsOtdJD62ZU5hAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUA6zHEjqi
s2wylcB0+C6wITqlaucwHwYDVR0jBBgwFoAUn+iB2L0yrRWre+e07E91IhJUbHYw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE4RkZBLzA1ODYwNjhBMkI3
QzExRUY4OUU4NDE0NEM0RjlBRTAyL24taUIyTDB5clJXcmUtZTA3RTkxSWhKVWJI
WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvbi1pQjJMMHlyUldyZS1lMDdFOTFJaEpVYkhZLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
OEZGQS8wNTg2MDY4QTJCN0MxMUVGODlFODQxNDRDNEY5QUUwMi9FODBBMEQyODJC
OUQxMUVGQjYxRjExNDhDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAGd6BDANBgkqhkiG9w0BAQsFAAOCAQEAY7rb/VgPTSyI+JzX
KoYUNzJIMNfzhe6DgNZ/Ox1KLErBC3vXk/iVy1w5CLpQXQgZJ/i/MhSsCOBrMfUK
GpGdzIWyP23rHZL0uTA4I3ikAor1imuo+w2QBO+4jvosLd3Is8A324uauunVuh4y
xVj27J8mECc6RaRMhMIfMc21ho0iQwJF+2wj/kp8Cjead91H22SN6zDgFZ2yjtTg
aKAUtl4/LI9oxK9Eh/26QjeWdwYk7HP3e+WR3hgNqd4EJsd8QlBwKqxWxNt/zL7k
LOrMW0rrnvkeXbl+c1t1tmDKKFmQtZU729NNXeGSHYMU3koxFLQbS8QNeUn9DyKE
mMNCkA==
-----END CERTIFICATE-----
Generated at Thu Nov 21 06:50:12 2024 by rpki-client on console-fra.rpki-client.org