Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911DF8A/3553CFAAA37F11EC92D6FA5EC4F9AE02/2E8C1E00DD9C11ECA143AA87C4F9AE02.roa
File:                     2E8C1E00DD9C11ECA143AA87C4F9AE02.roa (raw, json)
Hash identifier:          BaABEEJUMzOwQ3XJ4WXo+v7cM/zbzd2LSNgZ3M14nRc=
Subject key identifier:   2C:72:43:12:B8:DB:C5:77:78:DA:07:98:EF:24:14:3B:CE:97:9A:DC
Certificate issuer:       /CN=A911DF8A/serialNumber=826007A4E3D14BB0B509BB969845D01EB809DD7A
Certificate serial:       02BE
Authority key identifier: 82:60:07:A4:E3:D1:4B:B0:B5:09:BB:96:98:45:D0:1E:B8:09:DD:7A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911DF8A/3553CFAAA37F11EC92D6FA5EC4F9AE02/2E8C1E00DD9C11ECA143AA87C4F9AE02.roa
Signing time:             Fri 05 Apr 2024 04:05:42 +0000
ROA not before:           Fri 05 Apr 2024 04:05:42 +0000
ROA not after:            Wed 28 May 2025 00:00:00 +0000
asID:                     396073
IP address blocks:        103.182.97.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911DF8A/3553CFAAA37F11EC92D6FA5EC4F9AE02/gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.crl
                          rsync://rpki.apnic.net/member_repository/A911DF8A/3553CFAAA37F11EC92D6FA5EC4F9AE02/gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 24 Apr 2024 03:27:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 702 (0x2be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911DF8A/serialNumber=826007A4E3D14BB0B509BB969845D01EB809DD7A
        Validity
            Not Before: Apr  5 04:05:42 2024 GMT
            Not After : May 28 00:00:00 2025 GMT
        Subject: CN=660f7896-feea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:c8:6e:a4:a9:7e:35:8c:5e:bf:b5:02:aa:ec:
                    bf:6f:95:06:bf:47:63:e7:22:4f:c5:6d:09:75:04:
                    23:0b:87:9b:d4:a1:5d:4e:0a:86:9c:c4:d2:de:38:
                    3e:1d:08:a1:ff:a6:40:b5:ec:a3:d2:f4:a2:b7:fa:
                    2b:4f:a7:f4:cf:5d:dc:dd:8f:04:8e:b5:c5:b7:85:
                    98:6b:1e:46:2b:b2:c2:a1:88:ad:5f:f2:df:3d:ac:
                    81:eb:31:33:20:cd:c5:a2:a2:f1:86:6b:99:c6:1c:
                    88:7b:cc:bd:2c:32:0d:68:cc:79:31:b8:c7:a2:84:
                    8a:e2:ec:96:2a:4d:d2:23:e4:8f:11:0c:b4:b5:bd:
                    28:12:ac:73:ce:e4:39:02:81:5e:7b:62:35:cc:ea:
                    4c:a7:a7:8f:a4:9d:03:1a:b3:b7:de:fd:b8:21:fc:
                    f8:84:bd:17:26:10:44:f6:b7:ac:b8:40:f3:be:4d:
                    8d:90:db:18:9b:55:f4:39:10:4c:c2:38:4e:27:5c:
                    b1:b8:44:ff:c3:c1:8a:17:43:00:f5:d0:90:21:e7:
                    ce:cd:71:67:55:c0:ec:8a:5e:43:14:24:94:7b:1a:
                    40:99:c8:ec:f3:b6:91:c0:5b:a3:09:4e:7b:3d:0e:
                    d6:e9:c0:c5:62:32:67:31:6f:34:91:f8:08:5d:02:
                    ad:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:72:43:12:B8:DB:C5:77:78:DA:07:98:EF:24:14:3B:CE:97:9A:DC
            X509v3 Authority Key Identifier:
                keyid:82:60:07:A4:E3:D1:4B:B0:B5:09:BB:96:98:45:D0:1E:B8:09:DD:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911DF8A/3553CFAAA37F11EC92D6FA5EC4F9AE02/gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DF8A/3553CFAAA37F11EC92D6FA5EC4F9AE02/2E8C1E00DD9C11ECA143AA87C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.182.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:27:9e:1f:9f:0e:77:67:6e:51:ee:16:8f:8a:31:5d:3a:e3:
         10:13:c5:31:14:a5:d3:22:54:ae:8c:b5:14:bd:25:b8:9c:10:
         ea:84:51:5b:7d:d3:f2:a8:5d:e6:c4:b2:e4:a0:50:86:ae:aa:
         3b:16:62:1a:fc:f4:cc:e3:68:bd:9e:f8:7c:0f:18:31:f0:a1:
         53:a4:0c:21:cc:bd:31:7d:c3:ef:e3:6b:b8:37:72:34:53:e9:
         cb:e9:a8:3e:cc:85:2f:08:01:3d:e4:57:70:35:71:dd:17:68:
         3c:ef:5e:02:54:69:be:56:af:19:77:65:9d:12:a6:a8:12:f3:
         94:8c:2d:3e:02:79:64:21:e3:96:cf:a5:89:dd:a4:32:84:3b:
         d9:2c:80:17:4b:1e:39:73:01:b8:a1:a4:82:ed:f7:d0:db:61:
         35:ce:33:48:c8:e2:a0:93:b9:d0:ba:df:b9:01:ee:1d:c9:11:
         ce:2d:c4:7a:b6:b1:e6:47:3e:2e:a2:ff:bb:81:ca:09:ff:a6:
         10:ae:72:99:36:e2:ad:02:59:45:a6:d9:d1:fc:97:b8:99:fc:
         2e:6f:17:3b:c5:0b:b8:d8:c8:6e:8a:78:1f:bf:a9:37:c3:26:
         22:9e:8b:22:78:af:fb:e0:d3:e6:54:47:16:4f:59:4d:14:85:
         63:d7:5d:9f
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAr4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MURGOEExMTAvBgNVBAUTKDgyNjAwN0E0RTNEMTRCQjBCNTA5QkI5Njk4NDVEMDFF
QjgwOUREN0EwHhcNMjQwNDA1MDQwNTQyWhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02NjBmNzg5Ni1mZWVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3MhupKl+NYxev7UCquy/b5UGv0dj5yJPxW0JdQQjC4eb1KFdTgqGnMTS3jg+
HQih/6ZAteyj0vSit/orT6f0z13c3Y8EjrXFt4WYax5GK7LCoYitX/LfPayB6zEz
IM3FoqLxhmuZxhyIe8y9LDINaMx5MbjHooSK4uyWKk3SI+SPEQy0tb0oEqxzzuQ5
AoFee2I1zOpMp6ePpJ0DGrO33v24Ifz4hL0XJhBE9resuEDzvk2NkNsYm1X0ORBM
wjhOJ1yxuET/w8GKF0MA9dCQIefOzXFnVcDsil5DFCSUexpAmcjs87aRwFujCU57
PQ7W6cDFYjJnMW80kfgIXQKt1wIDAQABo4IClTCCApEwHQYDVR0OBBYEFCxyQxK4
28V3eNoHmO8kFDvOl5rcMB8GA1UdIwQYMBaAFIJgB6Tj0UuwtQm7lphF0B64Cd16
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExREY4QS8zNTUzQ0ZBQUEz
N0YxMUVDOTJENkZBNUVDNEY5QUUwMi9nbUFIcE9QUlM3QzFDYnVXbUVYUUhyZ0oz
WG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2dtQUhwT1BSUzdDMUNidVdtRVhRSHJnSjNYby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MURGOEEvMzU1M0NGQUFBMzdGMTFFQzkyRDZGQTVFQzRGOUFFMDIvMkU4QzFFMDBE
RDlDMTFFQ0ExNDNBQTg3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABntmEwDQYJKoZIhvcNAQELBQADggEBAAYnnh+fDndnblHu
Fo+KMV064xATxTEUpdMiVK6MtRS9JbicEOqEUVt90/KoXebEsuSgUIauqjsWYhr8
9MzjaL2e+HwPGDHwoVOkDCHMvTF9w+/ja7g3cjRT6cvpqD7MhS8IAT3kV3A1cd0X
aDzvXgJUab5Wrxl3ZZ0SpqgS85SMLT4CeWQh45bPpYndpDKEO9ksgBdLHjlzAbih
pILt99DbYTXOM0jI4qCTudC637kB7h3JEc4txHq2seZHPi6i/7uBygn/phCucpk2
4q0CWUWm2dH8l7iZ/C5vFzvFC7jYyG6KeB+/qTfDJiKeiyJ4r/vg0+ZURxZPWU0U
hWPXXZ8=
-----END CERTIFICATE-----
Generated at Wed Apr 17 04:19:14 2024 by rpki-client on console-fra.rpki-client.org