Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912184B/136487FA8C8C11E6B0B7C528C4F9AE02/8144C55412E611E98A4A6A35C4F9AE02.roa
File:                     8144C55412E611E98A4A6A35C4F9AE02.roa (raw, json)
Hash identifier:          B/BCaz2TXiyhMYghIJx4ExT6EIypcbPithXsBrEqDik=
Subject key identifier:   C4:05:7B:77:73:DB:F0:0A:A0:67:BB:78:33:70:2B:C3:02:FB:25:08
Certificate issuer:       /CN=A912184B/serialNumber=7341F64EAB2517EA9938DDE4FB0A814E5CBB7E77
Certificate serial:       1CF2
Authority key identifier: 73:41:F6:4E:AB:25:17:EA:99:38:DD:E4:FB:0A:81:4E:5C:BB:7E:77
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c0H2TqslF-qZON3k-wqBTly7fnc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912184B/136487FA8C8C11E6B0B7C528C4F9AE02/8144C55412E611E98A4A6A35C4F9AE02.roa
Signing time:             Sat 02 Dec 2023 16:43:33 +0000
ROA not before:           Sat 02 Dec 2023 16:43:33 +0000
ROA not after:            Mon 30 Dec 2024 00:00:00 +0000
asID:                     133749
IP address blocks:        103.76.40.0/22 maxlen: 22
                          2407:6180::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912184B/136487FA8C8C11E6B0B7C528C4F9AE02/c0H2TqslF-qZON3k-wqBTly7fnc.crl
                          rsync://rpki.apnic.net/member_repository/A912184B/136487FA8C8C11E6B0B7C528C4F9AE02/c0H2TqslF-qZON3k-wqBTly7fnc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c0H2TqslF-qZON3k-wqBTly7fnc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 14:50:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7410 (0x1cf2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912184B/serialNumber=7341F64EAB2517EA9938DDE4FB0A814E5CBB7E77
        Validity
            Not Before: Dec  2 16:43:33 2023 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=656b5eb5-8732
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:22:17:f9:4d:67:d7:80:bc:36:1d:be:ee:26:
                    d9:ba:5d:c4:4e:3d:2d:b7:0e:8a:f7:53:6d:b0:10:
                    ec:79:f6:2d:b9:b2:fb:65:fc:c3:eb:9c:e3:bd:b0:
                    05:37:e2:39:50:07:ae:ff:10:6b:0d:a6:72:24:7c:
                    f7:55:93:4b:76:bf:bc:20:a2:37:05:59:a3:a9:c3:
                    44:d4:f1:d0:60:88:89:ab:d0:27:f1:83:93:5b:97:
                    ae:94:56:5c:f3:2f:cf:18:0c:bf:fb:fc:ca:d6:8b:
                    7c:4d:ca:46:7d:99:e3:62:ad:46:72:68:77:9c:1f:
                    27:5e:b7:32:97:ac:39:da:0d:fa:cd:f4:fa:96:d4:
                    8c:9a:97:e4:ab:60:8c:af:51:2f:2c:cd:c2:6e:fa:
                    1f:62:fa:bf:df:df:16:35:3d:5d:c1:48:46:39:63:
                    d9:bc:d8:c0:e5:0f:c7:00:e2:df:14:db:22:30:a7:
                    72:70:7b:e8:43:2e:db:d2:90:ab:a1:42:a4:01:06:
                    ea:7c:c6:95:0e:ef:f5:7f:8a:8e:19:c3:13:ea:55:
                    b7:98:ae:41:13:6d:3e:d5:09:04:f3:3f:d4:a2:cb:
                    e6:51:03:85:5f:b3:02:ee:45:8b:03:a4:ca:20:09:
                    d6:fd:35:72:ec:e0:e6:ee:db:8c:9f:ca:fe:21:ac:
                    04:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:05:7B:77:73:DB:F0:0A:A0:67:BB:78:33:70:2B:C3:02:FB:25:08
            X509v3 Authority Key Identifier:
                keyid:73:41:F6:4E:AB:25:17:EA:99:38:DD:E4:FB:0A:81:4E:5C:BB:7E:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912184B/136487FA8C8C11E6B0B7C528C4F9AE02/c0H2TqslF-qZON3k-wqBTly7fnc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c0H2TqslF-qZON3k-wqBTly7fnc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912184B/136487FA8C8C11E6B0B7C528C4F9AE02/8144C55412E611E98A4A6A35C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.76.40.0/22
                IPv6:
                  2407:6180::/32

    Signature Algorithm: sha256WithRSAEncryption
         18:c6:e9:de:8c:12:ab:6f:50:54:df:41:41:ae:5f:45:64:3b:
         2b:4c:3f:d3:19:5b:70:6e:2b:a8:16:b3:4b:f7:bf:ae:da:e8:
         58:8a:e8:78:d7:e5:f9:03:37:5b:46:f1:8b:d1:37:42:ad:da:
         2e:e0:38:af:89:ce:5c:dd:26:b0:a6:79:ab:51:46:f0:91:c5:
         9c:16:c0:74:df:d8:dd:88:d5:f2:6e:61:f9:d7:80:72:fa:60:
         08:37:04:3e:8b:56:ea:65:b7:94:f9:ed:f6:72:62:03:ca:9a:
         84:87:af:70:d7:ac:03:d5:c9:7d:19:38:e4:f8:ff:69:c0:6a:
         b2:8d:f8:a6:d5:d0:9d:3f:a7:94:cc:1c:ec:ec:5a:b0:c5:ed:
         6f:e3:a5:42:32:79:04:f6:41:ce:f2:d5:bc:b3:35:3d:6d:bc:
         4d:04:06:bc:34:90:47:c8:c6:ab:b4:3a:d4:33:83:6a:99:e3:
         ba:b1:56:11:5e:0a:fc:95:08:7f:0d:89:b5:e7:d9:77:75:6f:
         26:47:ce:96:ec:53:c8:be:94:e3:ba:3a:0f:c8:c6:8a:b0:16:
         e1:1b:d3:87:ae:9d:72:e9:6d:8f:19:e7:1d:74:14:05:c9:a7:
         f6:0a:e3:75:f7:b2:ad:f4:9d:66:c9:8d:c4:38:49:49:76:65:
         9e:92:de:bf
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICHPIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjE4NEIxMTAvBgNVBAUTKDczNDFGNjRFQUIyNTE3RUE5OTM4RERFNEZCMEE4MTRF
NUNCQjdFNzcwHhcNMjMxMjAyMTY0MzMzWhcNMjQxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NTZiNWViNS04NzMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1iIX+U1n14C8Nh2+7ibZul3ETj0ttw6K91NtsBDsefYtubL7ZfzD65zjvbAF
N+I5UAeu/xBrDaZyJHz3VZNLdr+8IKI3BVmjqcNE1PHQYIiJq9An8YOTW5eulFZc
8y/PGAy/+/zK1ot8TcpGfZnjYq1Gcmh3nB8nXrcyl6w52g36zfT6ltSMmpfkq2CM
r1EvLM3CbvofYvq/398WNT1dwUhGOWPZvNjA5Q/HAOLfFNsiMKdycHvoQy7b0pCr
oUKkAQbqfMaVDu/1f4qOGcMT6lW3mK5BE20+1QkE8z/UosvmUQOFX7MC7kWLA6TK
IAnW/TVy7ODm7tuMn8r+IawEYwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFMQFe3dz
2/AKoGe7eDNwK8MC+yUIMB8GA1UdIwQYMBaAFHNB9k6rJRfqmTjd5PsKgU5cu353
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTg0Qi8xMzY0ODdGQThD
OEMxMUU2QjBCN0M1MjhDNEY5QUUwMi9jMEgyVHFzbEYtcVpPTjNrLXdxQlRseTdm
bmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2MwSDJUcXNsRi1xWk9OM2std3FCVGx5N2ZuYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MjE4NEIvMTM2NDg3RkE4QzhDMTFFNkIwQjdDNTI4QzRGOUFFMDIvODE0NEM1NTQx
MkU2MTFFOThBNEE2QTM1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E
HzAdMAwEAgABMAYDBAJnTCgwDQQCAAIwBwMFACQHYYAwDQYJKoZIhvcNAQELBQAD
ggEBABjG6d6MEqtvUFTfQUGuX0VkOytMP9MZW3BuK6gWs0v3v67a6FiK6HjX5fkD
N1tG8YvRN0Kt2i7gOK+JzlzdJrCmeatRRvCRxZwWwHTf2N2I1fJuYfnXgHL6YAg3
BD6LVuplt5T57fZyYgPKmoSHr3DXrAPVyX0ZOOT4/2nAarKN+KbV0J0/p5TMHOzs
WrDF7W/jpUIyeQT2Qc7y1byzNT1tvE0EBrw0kEfIxqu0OtQzg2qZ47qxVhFeCvyV
CH8NibXn2Xd1byZHzpbsU8i+lOO6Og/IxoqwFuEb04eunXLpbY8Z5x10FAXJp/YK
43X3sq30nWbJjcQ4SUl2ZZ6S3r8=
-----END CERTIFICATE-----
Generated at Sat May 18 16:57:53 2024 by rpki-client on console-fra.rpki-client.org