Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/966A85CCA6F111EF9E720A74C4F9AE02.roa
File:                     966A85CCA6F111EF9E720A74C4F9AE02.roa (raw, json)
Hash identifier:          l1zTb4aOu3rmvJEPSxHAaI79qqdpqNuPfm9TQuJWTFI=
Subject key identifier:   63:77:93:92:9B:72:4D:A8:62:EB:C2:DF:60:27:F5:3C:B1:C9:B1:D8
Certificate issuer:       /CN=A9119363/serialNumber=788FB4D96B601DBA616DDDC99CFE465D60C38F21
Certificate serial:       04
Authority key identifier: 78:8F:B4:D9:6B:60:1D:BA:61:6D:DD:C9:9C:FE:46:5D:60:C3:8F:21
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eI-02WtgHbphbd3JnP5GXWDDjyE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/966A85CCA6F111EF9E720A74C4F9AE02.roa
Signing time:             Wed 20 Nov 2024 03:43:21 +0000
ROA not before:           Wed 20 Nov 2024 03:43:21 +0000
ROA not after:            Wed 28 May 2025 00:00:00 +0000
asID:                     142127
IP address blocks:        103.163.49.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/eI-02WtgHbphbd3JnP5GXWDDjyE.crl
                          rsync://rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/eI-02WtgHbphbd3JnP5GXWDDjyE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eI-02WtgHbphbd3JnP5GXWDDjyE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 20:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9119363/serialNumber=788FB4D96B601DBA616DDDC99CFE465D60C38F21
        Validity
            Not Before: Nov 20 03:43:21 2024 GMT
            Not After : May 28 00:00:00 2025 GMT
        Subject: CN=673d5ad9-462e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:f0:f0:db:d8:54:b4:f7:f6:c7:26:59:4d:dc:
                    49:45:7c:37:5e:d1:d9:f0:df:25:0f:eb:7c:59:6f:
                    87:34:0a:ee:04:6d:06:c6:9f:b5:90:d5:ef:e9:7e:
                    82:d1:35:a2:f9:2d:5c:ff:e6:46:e3:9b:85:53:5d:
                    5a:6d:32:f4:1b:e9:20:41:bc:ee:fe:b8:b4:c1:35:
                    20:7d:d9:56:2e:4a:8e:74:d7:fb:9a:9d:12:c7:9a:
                    8d:e0:7c:c5:0e:48:7b:45:2e:8a:a0:47:e7:fc:60:
                    fe:61:bc:c7:79:aa:df:47:60:a3:af:7c:c6:4e:7e:
                    40:76:8e:96:79:7e:19:37:c2:a3:28:5a:bb:45:1b:
                    5f:48:57:fc:ea:17:3d:44:dc:a4:49:91:a8:6f:d6:
                    94:b4:0c:8c:f3:46:50:ce:da:ea:50:5f:03:7e:55:
                    95:d2:1d:b2:ed:c7:e5:e5:5b:3a:a9:13:83:f5:6f:
                    49:88:d1:27:7a:dd:e6:d3:30:ad:e2:f8:1b:f5:a8:
                    56:c9:7b:13:3b:bd:b4:7e:5a:11:07:19:63:1d:bf:
                    71:1c:a0:a6:2d:1e:c5:78:2c:31:f9:4b:4c:e9:d0:
                    c6:97:53:07:69:d3:88:3b:6b:9c:ca:0c:d3:c7:b6:
                    72:20:35:b1:65:e5:a0:f0:63:07:c5:b7:f1:9b:3d:
                    0d:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:77:93:92:9B:72:4D:A8:62:EB:C2:DF:60:27:F5:3C:B1:C9:B1:D8
            X509v3 Authority Key Identifier:
                keyid:78:8F:B4:D9:6B:60:1D:BA:61:6D:DD:C9:9C:FE:46:5D:60:C3:8F:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/eI-02WtgHbphbd3JnP5GXWDDjyE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eI-02WtgHbphbd3JnP5GXWDDjyE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/966A85CCA6F111EF9E720A74C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.163.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:e2:ad:03:17:69:50:a5:1b:86:f5:9d:ac:32:51:e1:a0:0f:
         2a:1b:bb:fd:63:f5:f1:74:1b:8d:5d:f8:83:99:c5:59:20:cc:
         6e:ee:ac:3a:f4:4e:3d:d6:65:1c:78:b8:67:b3:37:ad:13:97:
         a3:a4:87:a0:6d:93:53:f9:e9:ab:c9:d5:f2:8f:2b:82:78:c9:
         e0:db:b3:e8:74:7a:0a:7f:c8:b2:f9:df:2f:34:8c:ef:7b:b3:
         72:1c:df:44:90:73:d3:96:f0:d3:f2:c4:0b:bc:59:59:34:28:
         c5:11:77:c8:7b:8e:d2:e5:f0:b8:41:d5:50:1d:72:79:9f:ad:
         29:71:f3:60:ad:07:0c:db:02:c9:40:dc:c4:c1:05:3d:58:20:
         00:a8:03:28:7b:75:12:72:f4:14:c2:a2:30:82:a3:c6:16:25:
         51:e7:1c:a8:dd:f0:63:4f:6f:a1:a7:99:78:e8:ae:23:ac:4a:
         5f:54:49:59:94:da:8c:26:14:18:70:0c:32:1c:24:16:b4:81:
         a5:8a:27:34:9c:af:d2:dc:01:88:d6:03:69:3b:28:dd:9b:55:
         25:c3:c0:7d:56:c3:22:8c:cf:4f:8c:8c:9c:09:a3:6a:58:f0:
         52:8a:b8:61:95:ba:f0:20:10:20:2b:f8:84:fb:25:1a:aa:01:
         13:56:87:8d
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBBDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx
OTM2MzExMC8GA1UEBRMoNzg4RkI0RDk2QjYwMURCQTYxNkREREM5OUNGRTQ2NUQ2
MEMzOEYyMTAeFw0yNDExMjAwMzQzMjFaFw0yNTA1MjgwMDAwMDBaMBgxFjAUBgNV
BAMTDTY3M2Q1YWQ5LTQ2MmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDW8PDb2FS09/bHJllN3ElFfDde0dnw3yUP63xZb4c0Cu4EbQbGn7WQ1e/pfoLR
NaL5LVz/5kbjm4VTXVptMvQb6SBBvO7+uLTBNSB92VYuSo501/uanRLHmo3gfMUO
SHtFLoqgR+f8YP5hvMd5qt9HYKOvfMZOfkB2jpZ5fhk3wqMoWrtFG19IV/zqFz1E
3KRJkahv1pS0DIzzRlDO2upQXwN+VZXSHbLtx+XlWzqpE4P1b0mI0Sd63ebTMK3i
+Bv1qFbJexM7vbR+WhEHGWMdv3EcoKYtHsV4LDH5S0zp0MaXUwdp04g7a5zKDNPH
tnIgNbFl5aDwYwfFt/GbPQ1vAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUY3eTkpty
Tahi68LfYCf1PLHJsdgwHwYDVR0jBBgwFoAUeI+02WtgHbphbd3JnP5GXWDDjyEw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE5MzYzLzMxRUFERkE0NUNC
QTExRUM4QUExM0UyNEM0RjlBRTAyL2VJLTAyV3RnSGJwaGJkM0puUDVHWFdERGp5
RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvZUktMDJXdGdIYnBoYmQzSm5QNUdYV0REanlFLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
OTM2My8zMUVBREZBNDVDQkExMUVDOEFBMTNFMjRDNEY5QUUwMi85NjZBODVDQ0E2
RjExMUVGOUU3MjBBNzRDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAGejMTANBgkqhkiG9w0BAQsFAAOCAQEADuKtAxdpUKUbhvWd
rDJR4aAPKhu7/WP18XQbjV34g5nFWSDMbu6sOvROPdZlHHi4Z7M3rROXo6SHoG2T
U/npq8nV8o8rgnjJ4Nuz6HR6Cn/IsvnfLzSM73uzchzfRJBz05bw0/LEC7xZWTQo
xRF3yHuO0uXwuEHVUB1yeZ+tKXHzYK0HDNsCyUDcxMEFPVggAKgDKHt1EnL0FMKi
MIKjxhYlUeccqN3wY09voaeZeOiuI6xKX1RJWZTajCYUGHAMMhwkFrSBpYonNJyv
0twBiNYDaTso3ZtVJcPAfVbDIozPT4yMnAmjaljwUoq4YZW68CAQICv4hPslGqoB
E1aHjQ==
-----END CERTIFICATE-----
Generated at Thu Nov 21 03:56:44 2024 by rpki-client on console-fra.rpki-client.org