Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/319543069BBF11EDBFB6EE5DC4F9AE02.roa
File:                     319543069BBF11EDBFB6EE5DC4F9AE02.roa (raw, json)
Hash identifier:          vZLrRb8D5tduBuTVKoErlXudBIz+MpXOKS0TeU5hY9o=
Subject key identifier:   43:F3:EA:83:7C:6F:56:C7:72:9C:87:16:DF:BD:5B:B4:BD:D9:72:2B
Certificate issuer:       /CN=A911C621/serialNumber=87A47F27E75E7C2839C133351DA2511482C6F9B4
Certificate serial:       011B
Authority key identifier: 87:A4:7F:27:E7:5E:7C:28:39:C1:33:35:1D:A2:51:14:82:C6:F9:B4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6R_J-defCg5wTM1HaJRFILG-bQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/319543069BBF11EDBFB6EE5DC4F9AE02.roa
Signing time:             Wed 27 Mar 2024 05:38:03 +0000
ROA not before:           Wed 27 Mar 2024 05:38:03 +0000
ROA not after:            Wed 28 May 2025 00:00:00 +0000
asID:                     211415
IP address blocks:        103.86.121.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.crl
                          rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6R_J-defCg5wTM1HaJRFILG-bQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 May 2024 04:58:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 283 (0x11b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C621/serialNumber=87A47F27E75E7C2839C133351DA2511482C6F9B4
        Validity
            Not Before: Mar 27 05:38:03 2024 GMT
            Not After : May 28 00:00:00 2025 GMT
        Subject: CN=6603b0bb-c9d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:86:a1:fd:9a:52:cd:76:05:d6:4d:aa:2b:5f:
                    e4:ce:29:31:b9:d9:7e:3c:31:27:c6:b9:a0:c2:da:
                    26:35:ca:1c:a7:c7:90:16:e3:1a:b1:3e:13:f7:97:
                    72:24:38:e8:be:7b:e4:b2:cb:83:53:31:2d:7b:32:
                    b0:d1:86:9f:d7:11:2d:bc:8c:39:15:ea:e6:83:af:
                    4d:e0:21:75:64:00:e2:c5:1e:d4:4a:76:93:0e:48:
                    b5:83:74:60:c5:35:ad:ac:5c:e3:d5:0f:ba:38:a5:
                    35:90:e4:bc:94:c0:9c:4a:4d:89:54:b3:1c:67:92:
                    88:cf:d0:70:a0:34:76:b6:2c:4a:93:3d:f8:fe:ec:
                    c5:32:72:43:87:53:26:88:6f:a7:fc:db:e3:3a:d3:
                    99:5b:43:90:1a:f7:20:87:bc:f1:9c:ef:bc:1c:51:
                    88:4b:e8:43:17:f4:86:0b:a1:e3:c4:1d:49:ff:64:
                    33:7f:56:cb:e7:ba:70:11:2a:1b:46:55:a9:77:38:
                    cf:b5:6a:46:32:38:37:9a:11:81:8e:9d:d8:6a:85:
                    5e:76:3d:2f:4e:cc:68:2d:d5:d3:15:c1:bc:37:d0:
                    6f:6c:be:35:fe:96:b6:fe:66:73:9a:7b:9c:27:38:
                    59:b4:f6:64:85:f7:52:79:8d:8b:4d:6e:ae:04:2e:
                    70:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:F3:EA:83:7C:6F:56:C7:72:9C:87:16:DF:BD:5B:B4:BD:D9:72:2B
            X509v3 Authority Key Identifier:
                keyid:87:A4:7F:27:E7:5E:7C:28:39:C1:33:35:1D:A2:51:14:82:C6:F9:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6R_J-defCg5wTM1HaJRFILG-bQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/319543069BBF11EDBFB6EE5DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.86.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:b0:3c:07:48:da:fa:6e:f8:ff:74:4c:01:aa:3a:a3:c1:63:
         ad:f6:26:ed:95:44:b9:13:ac:a7:77:12:a0:32:16:89:26:30:
         43:4b:8f:a4:b8:1a:dd:99:25:d4:7f:66:81:9d:01:03:bf:f3:
         b5:5b:5c:e6:e5:d3:e9:fb:51:82:f6:8c:9d:ae:fa:50:59:fc:
         41:e3:04:a9:83:d6:ab:67:94:91:98:66:ca:25:c2:4f:9e:e6:
         25:38:ba:46:ea:92:e9:0d:9b:bb:b3:9d:14:ba:70:90:30:b1:
         5d:83:6e:ae:11:29:51:75:03:a8:b2:e0:97:b8:e7:59:4d:d9:
         fc:b6:45:bd:4d:af:39:93:65:87:48:95:ca:90:46:44:1d:26:
         e9:9b:16:40:cb:28:1b:ed:5c:45:32:ea:a1:f4:09:58:9d:b9:
         84:fe:7a:5f:fa:79:33:ce:fe:ae:f5:78:e8:7c:22:49:9b:e5:
         f6:35:8c:12:87:2c:27:5b:37:1b:40:10:77:45:63:e1:65:ff:
         8c:ec:fa:9c:10:1a:bb:ea:b7:d3:f6:ee:2f:7b:b4:09:d8:ae:
         da:5f:5e:6e:40:6e:98:2b:7a:8a:48:82:8c:d8:45:49:4c:81:
         60:43:d2:0a:f4:b0:49:f0:ae:b5:82:26:7f:ae:5f:7b:52:bc:
         82:74:f7:5f
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICARswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUM2MjExMTAvBgNVBAUTKDg3QTQ3RjI3RTc1RTdDMjgzOUMxMzMzNTFEQTI1MTE0
ODJDNkY5QjQwHhcNMjQwMzI3MDUzODAzWhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02NjAzYjBiYi1jOWQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAq4ah/ZpSzXYF1k2qK1/kzikxudl+PDEnxrmgwtomNcocp8eQFuMasT4T95dy
JDjovnvkssuDUzEtezKw0Yaf1xEtvIw5Fermg69N4CF1ZADixR7USnaTDki1g3Rg
xTWtrFzj1Q+6OKU1kOS8lMCcSk2JVLMcZ5KIz9BwoDR2tixKkz34/uzFMnJDh1Mm
iG+n/NvjOtOZW0OQGvcgh7zxnO+8HFGIS+hDF/SGC6HjxB1J/2Qzf1bL57pwESob
RlWpdzjPtWpGMjg3mhGBjp3YaoVedj0vTsxoLdXTFcG8N9BvbL41/pa2/mZzmnuc
JzhZtPZkhfdSeY2LTW6uBC5wewIDAQABo4IClTCCApEwHQYDVR0OBBYEFEPz6oN8
b1bHcpyHFt+9W7S92XIrMB8GA1UdIwQYMBaAFIekfyfnXnwoOcEzNR2iURSCxvm0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzYyMS9GN0QwMEJFRTc0
MzkxMUVEOTg2RDczODVDNEY5QUUwMi9oNlJfSi1kZWZDZzV3VE0xSGFKUkZJTEct
YlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2g2Ul9KLWRlZkNnNXdUTTFIYUpSRklMRy1iUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MUM2MjEvRjdEMDBCRUU3NDM5MTFFRDk4NkQ3Mzg1QzRGOUFFMDIvMzE5NTQzMDY5
QkJGMTFFREJGQjZFRTVEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnVnkwDQYJKoZIhvcNAQELBQADggEBAAmwPAdI2vpu+P90
TAGqOqPBY632Ju2VRLkTrKd3EqAyFokmMENLj6S4Gt2ZJdR/ZoGdAQO/87VbXObl
0+n7UYL2jJ2u+lBZ/EHjBKmD1qtnlJGYZsolwk+e5iU4ukbqkukNm7uznRS6cJAw
sV2Dbq4RKVF1A6iy4Je451lN2fy2Rb1NrzmTZYdIlcqQRkQdJumbFkDLKBvtXEUy
6qH0CViduYT+el/6eTPO/q71eOh8Ikmb5fY1jBKHLCdbNxtAEHdFY+Fl/4zs+pwQ
Grvqt9P27i97tAnYrtpfXm5AbpgreopIgozYRUlMgWBD0gr0sEnwrrWCJn+uX3tS
vIJ0918=
-----END CERTIFICATE-----
Generated at Wed May 15 06:10:17 2024 by rpki-client on console-ams.rpki-client.org