Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/5277F6368D2411EC816B4C70C4F9AE02.roa
File:                     5277F6368D2411EC816B4C70C4F9AE02.roa (raw, json)
Hash identifier:          jmM2MyWVgkGoSl8m7eT/QohnLLhAgCt5V5ifbC8tFnE=
Subject key identifier:   01:2B:AD:69:D8:9A:FE:31:8D:A3:51:F3:AE:BD:77:4C:41:8A:F3:DE
Certificate issuer:       /CN=A9119A40/serialNumber=BD14CF1A9F08F68137FE8116CD776ADBDB2FEFB4
Certificate serial:       035E
Authority key identifier: BD:14:CF:1A:9F:08:F6:81:37:FE:81:16:CD:77:6A:DB:DB:2F:EF:B4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vRTPGp8I9oE3_oEWzXdq29sv77Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/5277F6368D2411EC816B4C70C4F9AE02.roa
Signing time:             Tue 08 Oct 2024 18:56:58 +0000
ROA not before:           Tue 08 Oct 2024 18:56:58 +0000
ROA not after:            Mon 01 Dec 2025 00:00:00 +0000
asID:                     63996
IP address blocks:        103.129.238.0/24 maxlen: 24
                          103.129.239.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/vRTPGp8I9oE3_oEWzXdq29sv77Q.crl
                          rsync://rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/vRTPGp8I9oE3_oEWzXdq29sv77Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vRTPGp8I9oE3_oEWzXdq29sv77Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 18:20:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 862 (0x35e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9119A40/serialNumber=BD14CF1A9F08F68137FE8116CD776ADBDB2FEFB4
        Validity
            Not Before: Oct  8 18:56:58 2024 GMT
            Not After : Dec  1 00:00:00 2025 GMT
        Subject: CN=67058079-ed6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:11:21:8a:76:5c:62:9e:3b:d7:3f:bb:bf:ca:
                    e8:51:ba:87:ff:0c:12:15:cc:69:c1:f3:9b:dc:c8:
                    ef:ff:e3:bb:5c:ca:eb:ea:8b:65:c7:70:bd:b8:2b:
                    e1:3a:01:d7:b0:af:f8:b5:58:73:4c:76:1c:5b:b6:
                    f1:38:5a:16:8b:96:5b:41:7e:4f:e3:2f:80:85:3d:
                    f8:8e:1e:f0:f1:36:89:d7:05:fd:52:d8:ea:e1:72:
                    27:c0:a6:65:0f:a2:e2:b0:52:81:7c:65:f9:69:86:
                    d6:4f:72:d8:19:37:e4:72:ed:18:c9:1b:95:89:19:
                    c4:13:86:41:9f:e0:b6:8b:f4:b3:b3:bd:76:e7:a3:
                    39:32:7e:84:d0:44:57:4b:1b:50:3e:b1:dc:0d:00:
                    0c:65:84:ec:71:58:57:e2:bf:47:d3:89:be:7b:65:
                    31:72:b1:49:b1:4f:13:e4:f8:38:ee:54:1f:1e:25:
                    54:74:c1:84:69:ee:61:2d:81:4d:30:04:93:5c:e7:
                    32:c3:6b:ae:f9:08:83:96:64:d8:21:3b:94:2f:8f:
                    02:88:62:06:dc:29:b9:38:f5:ad:79:3f:78:e1:03:
                    e6:6b:7a:0f:9d:e4:ec:62:41:19:06:98:4e:27:7f:
                    cb:1c:8a:0d:82:e8:98:9b:ab:c0:29:6d:dd:d8:fd:
                    07:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:2B:AD:69:D8:9A:FE:31:8D:A3:51:F3:AE:BD:77:4C:41:8A:F3:DE
            X509v3 Authority Key Identifier:
                keyid:BD:14:CF:1A:9F:08:F6:81:37:FE:81:16:CD:77:6A:DB:DB:2F:EF:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/vRTPGp8I9oE3_oEWzXdq29sv77Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vRTPGp8I9oE3_oEWzXdq29sv77Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/5277F6368D2411EC816B4C70C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.129.238.0/23

    Signature Algorithm: sha256WithRSAEncryption
         13:67:4e:63:b3:7b:90:58:b6:eb:87:4a:10:64:dd:d9:db:b2:
         f9:71:7b:b4:71:ed:d7:ef:40:d2:a0:98:f6:0b:a0:a2:f1:46:
         f8:d4:d6:b1:d5:e2:c9:1a:7d:a2:b3:c8:8b:60:8b:42:7b:d1:
         e9:97:b5:de:ea:bb:83:d2:c6:b9:ff:74:70:be:93:4e:73:c8:
         43:14:d5:e1:b8:14:2c:4e:24:b6:ff:27:82:da:92:ea:29:34:
         f9:5e:a6:ac:f2:e1:e2:41:e3:ef:f0:08:65:61:37:10:95:22:
         6e:d1:04:ed:03:a6:c5:76:11:be:a3:09:75:d5:b1:26:8a:56:
         49:67:d8:2f:5c:7b:77:a7:34:1b:c9:bd:fd:99:d8:3d:4c:e0:
         05:90:24:11:f0:a9:6f:be:6e:0d:e5:de:0e:bb:a8:ea:1c:d1:
         1e:73:44:ac:02:fc:06:a3:f9:37:83:23:58:44:61:81:d4:fa:
         9a:88:07:81:80:8b:ef:27:f2:4b:eb:44:c2:5b:15:a0:b1:3e:
         b6:f1:3c:1f:c4:67:78:cb:6d:7c:57:bb:2a:9d:e7:f9:16:20:
         ea:65:38:78:86:69:9e:03:f4:19:4f:95:7c:94:c1:bc:5d:19:
         6f:42:08:06:c0:5e:c7:be:24:08:bf:59:c7:4d:83:f2:2d:e6:
         cd:45:f8:16
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICA14wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTlBNDAxMTAvBgNVBAUTKEJEMTRDRjFBOUYwOEY2ODEzN0ZFODExNkNENzc2QURC
REIyRkVGQjQwHhcNMjQxMDA4MTg1NjU4WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzA1ODA3OS1lZDZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyBEhinZcYp471z+7v8roUbqH/wwSFcxpwfOb3Mjv/+O7XMrr6otlx3C9uCvh
OgHXsK/4tVhzTHYcW7bxOFoWi5ZbQX5P4y+AhT34jh7w8TaJ1wX9Utjq4XInwKZl
D6LisFKBfGX5aYbWT3LYGTfkcu0YyRuViRnEE4ZBn+C2i/Szs71256M5Mn6E0ERX
SxtQPrHcDQAMZYTscVhX4r9H04m+e2UxcrFJsU8T5Pg47lQfHiVUdMGEae5hLYFN
MASTXOcyw2uu+QiDlmTYITuUL48CiGIG3Cm5OPWteT944QPma3oPneTsYkEZBphO
J3/LHIoNguiYm6vAKW3d2P0HWQIDAQABo4IClTCCApEwHQYDVR0OBBYEFAErrWnY
mv4xjaNR8669d0xBivPeMB8GA1UdIwQYMBaAFL0UzxqfCPaBN/6BFs13atvbL++0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOUE0MC8wQkQ0NTYyMjAw
N0ExMUVBQjhCMzFCMTBDNEY5QUUwMi92UlRQR3A4STlvRTNfb0VXelhkcTI5c3Y3
N1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ZSVFBHcDhJOW9FM19vRVd6WGRxMjlzdjc3US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MTlBNDAvMEJENDU2MjIwMDdBMTFFQUI4QjMxQjEwQzRGOUFFMDIvNTI3N0Y2MzY4
RDI0MTFFQzgxNkI0QzcwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnge4wDQYJKoZIhvcNAQELBQADggEBABNnTmOze5BYtuuH
ShBk3dnbsvlxe7Rx7dfvQNKgmPYLoKLxRvjU1rHV4skafaKzyItgi0J70emXtd7q
u4PSxrn/dHC+k05zyEMU1eG4FCxOJLb/J4LakuopNPlepqzy4eJB4+/wCGVhNxCV
Im7RBO0DpsV2Eb6jCXXVsSaKVkln2C9ce3enNBvJvf2Z2D1M4AWQJBHwqW++bg3l
3g67qOoc0R5zRKwC/Aaj+TeDI1hEYYHU+pqIB4GAi+8n8kvrRMJbFaCxPrbxPB/E
Z3jLbXxXuyqd5/kWIOplOHiGaZ4D9BlPlXyUwbxdGW9CCAbAXse+JAi/WcdNg/It
5s1F+BY=
-----END CERTIFICATE-----
Generated at Fri Nov 22 19:49:56 2024 by rpki-client on console-ams.rpki-client.org