Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/7203E112568C11EEA2DD9914C4F9AE02.roa
File:                     7203E112568C11EEA2DD9914C4F9AE02.roa (raw, json)
Hash identifier:          gF8SP0nG0LD9gIiEjyyKah/KS5kKQp222tN7wLJ4Gdw=
Subject key identifier:   C3:6B:64:36:9D:A5:E6:85:65:27:BD:DA:84:19:FC:01:64:1F:C5:1D
Certificate issuer:       /CN=A911AE4D/serialNumber=B459B915D67B72D8335384202DBFBB39565C94D8
Certificate serial:       0101
Authority key identifier: B4:59:B9:15:D6:7B:72:D8:33:53:84:20:2D:BF:BB:39:56:5C:94:D8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tFm5FdZ7ctgzU4QgLb-7OVZclNg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/7203E112568C11EEA2DD9914C4F9AE02.roa
Signing time:             Tue 27 Aug 2024 05:18:45 +0000
ROA not before:           Tue 27 Aug 2024 05:18:45 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     209043
IP address blocks:        103.120.13.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.crl
                          rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tFm5FdZ7ctgzU4QgLb-7OVZclNg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 03:09:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 257 (0x101)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911AE4D/serialNumber=B459B915D67B72D8335384202DBFBB39565C94D8
        Validity
            Not Before: Aug 27 05:18:45 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=66cd61b4-fe8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:49:85:c2:b5:da:8a:82:d5:94:1f:f8:5c:f5:
                    19:77:48:f8:ee:ee:4d:44:13:74:e3:00:d4:25:02:
                    87:7f:f5:b8:74:09:ed:f7:53:f0:8f:3b:fa:bb:64:
                    8e:e9:61:15:da:9c:90:5d:11:20:f0:b2:68:71:58:
                    4b:11:3e:71:f4:ac:e5:ad:6c:d0:84:5b:1c:78:cd:
                    20:36:d5:db:01:8f:42:2b:3c:d3:ad:b9:51:01:f3:
                    7d:16:a6:b4:ff:83:ab:22:21:52:1a:54:b6:dc:e0:
                    7c:a7:2d:55:a1:fb:ee:0d:14:12:e7:46:2c:30:82:
                    09:41:5c:27:57:81:d1:d2:63:ac:de:f2:eb:f0:b4:
                    0b:39:01:bc:44:2f:b7:ea:39:24:73:85:c7:6a:98:
                    0b:19:d5:d5:c0:f4:67:dc:97:dd:b1:fe:49:b9:87:
                    fa:e1:95:fc:fe:fd:fe:ea:46:97:4a:e9:bf:9d:4a:
                    d8:03:83:d2:d0:1d:16:5d:51:d4:12:f6:8b:41:05:
                    4e:9d:bd:59:b5:30:89:5a:09:ff:a9:28:2b:67:50:
                    4d:c8:e3:a8:a4:08:f4:ce:c6:0c:87:6c:f1:0b:d3:
                    bb:46:7f:56:ee:63:41:06:d5:21:b1:50:7d:06:e1:
                    a4:a9:73:b2:94:b8:6c:5c:4a:d1:9b:5e:4a:21:2c:
                    83:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:6B:64:36:9D:A5:E6:85:65:27:BD:DA:84:19:FC:01:64:1F:C5:1D
            X509v3 Authority Key Identifier:
                keyid:B4:59:B9:15:D6:7B:72:D8:33:53:84:20:2D:BF:BB:39:56:5C:94:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tFm5FdZ7ctgzU4QgLb-7OVZclNg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/7203E112568C11EEA2DD9914C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.120.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:fe:3b:41:7e:96:36:6b:a8:bb:15:3a:fa:c8:ef:90:78:8c:
         e5:23:fc:90:1d:6f:87:4f:aa:d2:c4:d6:d6:8a:d4:28:2c:20:
         b9:4a:d6:8d:3a:8f:fe:b5:ee:40:91:2d:6e:1a:44:7b:d8:45:
         97:47:b4:83:6a:f4:b1:31:ac:bf:db:bb:fd:1d:04:35:ed:38:
         a0:70:58:ae:ff:4d:81:74:5c:28:18:7b:64:0d:a0:88:91:d0:
         88:9e:ef:32:b6:71:8a:af:35:6a:f6:b0:f7:e1:50:ab:25:5f:
         13:19:cb:05:54:ea:59:9f:a3:b2:57:f2:d6:2e:6b:41:8b:73:
         fd:33:a3:25:ff:85:e5:56:c5:53:d8:24:03:65:a8:05:94:eb:
         0b:1c:a7:42:d1:2f:cf:a0:c7:29:b6:d4:f2:76:cb:5b:a7:f6:
         91:5c:e1:4c:51:19:06:6d:86:23:a9:07:82:00:a0:a3:3a:d3:
         74:52:6f:17:28:a7:ae:dc:ed:f3:5a:85:0f:07:f4:8d:30:72:
         a1:a8:12:69:5f:a0:ad:8d:f6:ba:a4:81:9b:92:e5:e6:02:64:
         ec:22:00:47:9c:ad:e4:80:6e:23:ad:e7:8f:41:4a:da:2b:78:
         df:73:25:85:ec:97:27:c8:0b:b7:0c:82:24:bf:0a:f3:b1:21:
         bf:08:09:06
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAQEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUFFNEQxMTAvBgNVBAUTKEI0NTlCOTE1RDY3QjcyRDgzMzUzODQyMDJEQkZCQjM5
NTY1Qzk0RDgwHhcNMjQwODI3MDUxODQ1WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmNkNjFiNC1mZThmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3kmFwrXaioLVlB/4XPUZd0j47u5NRBN04wDUJQKHf/W4dAnt91Pwjzv6u2SO
6WEV2pyQXREg8LJocVhLET5x9KzlrWzQhFsceM0gNtXbAY9CKzzTrblRAfN9Fqa0
/4OrIiFSGlS23OB8py1VofvuDRQS50YsMIIJQVwnV4HR0mOs3vLr8LQLOQG8RC+3
6jkkc4XHapgLGdXVwPRn3Jfdsf5JuYf64ZX8/v3+6kaXSum/nUrYA4PS0B0WXVHU
EvaLQQVOnb1ZtTCJWgn/qSgrZ1BNyOOopAj0zsYMh2zxC9O7Rn9W7mNBBtUhsVB9
BuGkqXOylLhsXErRm15KISyDbQIDAQABo4IClTCCApEwHQYDVR0OBBYEFMNrZDad
peaFZSe92oQZ/AFkH8UdMB8GA1UdIwQYMBaAFLRZuRXWe3LYM1OEIC2/uzlWXJTY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUU0RC81N0MzN0UzODBB
NTcxMUVFOEM2MzVBNDZDNEY5QUUwMi90Rm01RmRaN2N0Z3pVNFFnTGItN09WWmNs
TmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3RGbTVGZFo3Y3RnelU0UWdMYi03T1ZaY2xOZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MUFFNEQvNTdDMzdFMzgwQTU3MTFFRThDNjM1QTQ2QzRGOUFFMDIvNzIwM0UxMTI1
NjhDMTFFRUEyREQ5OTE0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABneA0wDQYJKoZIhvcNAQELBQADggEBAD/+O0F+ljZrqLsV
OvrI75B4jOUj/JAdb4dPqtLE1taK1CgsILlK1o06j/617kCRLW4aRHvYRZdHtINq
9LExrL/bu/0dBDXtOKBwWK7/TYF0XCgYe2QNoIiR0Iie7zK2cYqvNWr2sPfhUKsl
XxMZywVU6lmfo7JX8tYua0GLc/0zoyX/heVWxVPYJANlqAWU6wscp0LRL8+gxym2
1PJ2y1un9pFc4UxRGQZthiOpB4IAoKM603RSbxcop67c7fNahQ8H9I0wcqGoEmlf
oK2N9rqkgZuS5eYCZOwiAEecreSAbiOt549BStoreN9zJYXslyfIC7cMgiS/CvOx
Ib8ICQY=
-----END CERTIFICATE-----
Generated at Thu Nov 21 05:37:00 2024 by rpki-client on console-ams.rpki-client.org