Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911EF4D/FF678C723FD711EF8FBB6955C4F9AE02/52D8EF7A426911EF97319666C4F9AE02.roa
File:                     52D8EF7A426911EF97319666C4F9AE02.roa (raw, json)
Hash identifier:          pr/FonujJs8CRNXZXFhUXfAX9ms1i2o+BQHIlp1z64k=
Subject key identifier:   53:0F:2E:A5:2B:A8:55:72:1F:BF:C9:49:BA:AA:20:79:96:13:71:50
Certificate issuer:       /CN=A911EF4D/serialNumber=F11F576D6B0CDB2AA92DCF9D4E77327360D55767
Certificate serial:       04
Authority key identifier: F1:1F:57:6D:6B:0C:DB:2A:A9:2D:CF:9D:4E:77:32:73:60:D5:57:67
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8R9XbWsM2yqpLc-dTncyc2DVV2c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911EF4D/FF678C723FD711EF8FBB6955C4F9AE02/52D8EF7A426911EF97319666C4F9AE02.roa
Signing time:             Mon 15 Jul 2024 05:16:00 +0000
ROA not before:           Mon 15 Jul 2024 05:16:00 +0000
ROA not after:            Mon 30 Dec 2024 00:00:00 +0000
asID:                     139681
IP address blocks:        103.143.162.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911EF4D/FF678C723FD711EF8FBB6955C4F9AE02/8R9XbWsM2yqpLc-dTncyc2DVV2c.crl
                          rsync://rpki.apnic.net/member_repository/A911EF4D/FF678C723FD711EF8FBB6955C4F9AE02/8R9XbWsM2yqpLc-dTncyc2DVV2c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8R9XbWsM2yqpLc-dTncyc2DVV2c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 24 Sep 2024 04:46:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911EF4D/serialNumber=F11F576D6B0CDB2AA92DCF9D4E77327360D55767
        Validity
            Not Before: Jul 15 05:16:00 2024 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=6694b090-d8ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:21:00:f8:c9:03:4b:33:57:9b:b5:80:18:bf:
                    03:c8:e2:ad:1b:15:13:b1:d5:c7:0d:78:c2:ac:69:
                    fa:b9:4f:ba:8c:01:ff:93:dd:e5:12:fa:79:f7:46:
                    b8:11:da:df:71:c5:2b:99:74:60:04:42:b9:c6:dd:
                    2c:f1:8c:ea:49:7e:0a:78:ff:fe:80:e9:fd:c6:37:
                    9b:80:1c:3d:fb:9d:fb:df:21:f6:a3:cd:e6:55:55:
                    64:be:98:9c:3a:91:ae:9a:ec:3c:2c:67:57:83:e7:
                    6f:64:01:4b:85:3d:bc:e1:7f:eb:8e:9b:96:32:69:
                    50:a9:fd:ab:2d:80:db:e5:ab:e4:7f:de:e1:52:1d:
                    35:dd:ac:ec:7d:ee:6c:83:34:6b:16:8a:91:2b:7f:
                    28:71:80:7a:8f:ab:13:05:06:26:2c:89:fe:2a:99:
                    12:25:3e:98:45:82:1d:a4:18:62:7a:bd:a8:37:18:
                    75:3d:cf:ed:39:51:0e:bf:84:d2:d2:10:b5:a4:ba:
                    4e:16:dd:46:0a:85:e1:e6:d0:e1:90:70:c0:a3:a1:
                    43:51:7c:8c:d1:79:1f:3f:6d:3e:b7:d3:8e:5e:5b:
                    c1:78:0b:42:6f:1e:97:3d:41:58:8f:72:31:35:b4:
                    e6:90:74:cd:db:8a:e1:2d:3c:7a:b5:8e:48:3e:1e:
                    23:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:0F:2E:A5:2B:A8:55:72:1F:BF:C9:49:BA:AA:20:79:96:13:71:50
            X509v3 Authority Key Identifier:
                keyid:F1:1F:57:6D:6B:0C:DB:2A:A9:2D:CF:9D:4E:77:32:73:60:D5:57:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911EF4D/FF678C723FD711EF8FBB6955C4F9AE02/8R9XbWsM2yqpLc-dTncyc2DVV2c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8R9XbWsM2yqpLc-dTncyc2DVV2c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911EF4D/FF678C723FD711EF8FBB6955C4F9AE02/52D8EF7A426911EF97319666C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.143.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:db:61:c6:57:66:c5:d8:d3:42:e1:15:4f:7e:54:67:95:33:
         dd:7a:d1:14:7c:86:dd:d7:a8:9e:2e:cd:70:6e:d5:fc:dd:9e:
         36:49:e5:c3:35:2f:dd:e3:0a:19:77:7d:77:30:dc:e5:da:51:
         f6:50:e7:73:87:0b:71:89:46:aa:32:57:64:28:4c:f1:b9:71:
         4c:aa:58:d8:0e:2a:7f:52:65:a8:1c:ac:52:6d:a2:96:8c:59:
         5e:a4:62:3c:bc:d6:db:95:3d:08:c0:d3:ea:26:36:c2:1f:c8:
         5d:38:65:0e:17:8e:49:79:bc:a1:06:a1:00:6b:94:34:21:5f:
         ee:4b:95:d0:38:2a:4d:9a:0c:17:08:68:6a:03:32:ac:c3:31:
         8f:4a:09:0f:9a:88:ed:aa:c0:ab:f4:d8:20:67:07:55:da:b4:
         2b:af:6c:4c:2b:0d:1c:e4:e9:0f:86:40:1c:8e:ed:47:16:df:
         20:08:d1:1b:50:78:d7:cf:37:2a:6a:51:4a:c9:20:57:8f:e9:
         58:50:7e:8a:8c:0d:ea:df:ed:cb:1e:ea:92:e5:4b:85:31:48:
         0a:d3:a8:88:b0:9b:e0:53:4a:83:3b:89:fd:ac:1f:a7:23:b8:
         e3:6c:de:7b:f3:ae:db:b8:69:08:da:b7:06:ab:49:6b:4c:90:
         d2:46:12:cd
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBBDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx
RUY0RDExMC8GA1UEBRMoRjExRjU3NkQ2QjBDREIyQUE5MkRDRjlENEU3NzMyNzM2
MEQ1NTc2NzAeFw0yNDA3MTUwNTE2MDBaFw0yNDEyMzAwMDAwMDBaMBgxFjAUBgNV
BAMTDTY2OTRiMDkwLWQ4YmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC5IQD4yQNLM1ebtYAYvwPI4q0bFROx1ccNeMKsafq5T7qMAf+T3eUS+nn3RrgR
2t9xxSuZdGAEQrnG3SzxjOpJfgp4//6A6f3GN5uAHD37nfvfIfajzeZVVWS+mJw6
ka6a7DwsZ1eD529kAUuFPbzhf+uOm5YyaVCp/astgNvlq+R/3uFSHTXdrOx97myD
NGsWipErfyhxgHqPqxMFBiYsif4qmRIlPphFgh2kGGJ6vag3GHU9z+05UQ6/hNLS
ELWkuk4W3UYKheHm0OGQcMCjoUNRfIzReR8/bT63045eW8F4C0JvHpc9QViPcjE1
tOaQdM3biuEtPHq1jkg+HiNNAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUUw8upSuo
VXIfv8lJuqogeZYTcVAwHwYDVR0jBBgwFoAU8R9XbWsM2yqpLc+dTncyc2DVV2cw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFFRjREL0ZGNjc4QzcyM0ZE
NzExRUY4RkJCNjk1NUM0RjlBRTAyLzhSOVhiV3NNMnlxcExjLWRUbmN5YzJEVlYy
Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvOFI5WGJXc00yeXFwTGMtZFRuY3ljMkRWVjJjLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
RUY0RC9GRjY3OEM3MjNGRDcxMUVGOEZCQjY5NTVDNEY5QUUwMi81MkQ4RUY3QTQy
NjkxMUVGOTczMTk2NjZDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAGePojANBgkqhkiG9w0BAQsFAAOCAQEAI9thxldmxdjTQuEV
T35UZ5Uz3XrRFHyG3deoni7NcG7V/N2eNknlwzUv3eMKGXd9dzDc5dpR9lDnc4cL
cYlGqjJXZChM8blxTKpY2A4qf1JlqBysUm2iloxZXqRiPLzW25U9CMDT6iY2wh/I
XThlDheOSXm8oQahAGuUNCFf7kuV0DgqTZoMFwhoagMyrMMxj0oJD5qI7arAq/TY
IGcHVdq0K69sTCsNHOTpD4ZAHI7tRxbfIAjRG1B41883KmpRSskgV4/pWFB+iowN
6t/tyx7qkuVLhTFICtOoiLCb4FNKgzuJ/awfpyO442zee/Ou27hpCNq3BqtJa0yQ
0kYSzQ==
-----END CERTIFICATE-----
Generated at Tue Sep 17 07:38:14 2024 by rpki-client on console-fra.rpki-client.org