Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912527F/BCFDAFCC10DD11ED80AA2485C4F9AE02/BE0481A4EFA111ED87AD1F0BC4F9AE02.roa
File:                     BE0481A4EFA111ED87AD1F0BC4F9AE02.roa (raw, json)
Hash identifier:          NQf56Uj9m/23kHcMdcevpS6JxvdYxcKJxC0qqxSbed4=
Subject key identifier:   CB:86:C3:BF:1F:E6:95:DD:5B:40:9B:25:86:70:64:AF:F0:A3:D1:2D
Certificate issuer:       /CN=A912527F/serialNumber=379BD4E7732F1A8D1C3B222DB7773C1C15419F42
Certificate serial:       01F0
Authority key identifier: 37:9B:D4:E7:73:2F:1A:8D:1C:3B:22:2D:B7:77:3C:1C:15:41:9F:42
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5vU53MvGo0cOyItt3c8HBVBn0I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912527F/BCFDAFCC10DD11ED80AA2485C4F9AE02/BE0481A4EFA111ED87AD1F0BC4F9AE02.roa
Signing time:             Sat 21 Sep 2024 02:15:46 +0000
ROA not before:           Sat 21 Sep 2024 02:15:46 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     140499
IP address blocks:        103.153.116.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912527F/BCFDAFCC10DD11ED80AA2485C4F9AE02/N5vU53MvGo0cOyItt3c8HBVBn0I.crl
                          rsync://rpki.apnic.net/member_repository/A912527F/BCFDAFCC10DD11ED80AA2485C4F9AE02/N5vU53MvGo0cOyItt3c8HBVBn0I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5vU53MvGo0cOyItt3c8HBVBn0I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 01:33:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 496 (0x1f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912527F/serialNumber=379BD4E7732F1A8D1C3B222DB7773C1C15419F42
        Validity
            Not Before: Sep 21 02:15:46 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=66ee2c52-d814
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:96:13:a3:05:c6:df:8c:2d:9c:6a:43:62:8b:
                    04:40:d8:ed:3e:b5:31:8c:5a:16:ef:57:82:5d:ca:
                    64:6d:95:c6:04:a1:68:0b:ba:e6:27:39:31:67:d3:
                    34:95:e2:72:84:4e:10:5a:16:20:83:72:ec:23:a5:
                    95:56:dd:de:1e:2e:69:3b:90:c1:b4:a3:d9:ed:26:
                    e4:82:2b:f5:d3:76:a3:cd:c2:9d:06:ea:de:49:bf:
                    fb:b5:d3:50:96:77:95:19:9d:ff:91:ad:61:80:fc:
                    9b:43:2d:59:3b:43:28:d0:04:46:7c:30:d4:07:3a:
                    f3:8f:f2:cc:8b:7b:ce:16:91:01:a6:fd:3a:19:2f:
                    43:c6:4f:94:c4:d2:94:a5:5b:82:50:0c:7c:24:94:
                    cb:45:44:bf:9e:da:0d:7e:0e:b6:a4:48:a8:59:c7:
                    3a:63:c6:9e:76:ff:7d:05:52:a1:cb:bd:dd:68:6f:
                    83:25:b1:28:ad:b5:98:a3:be:e1:e9:a1:37:10:ae:
                    4f:4b:46:b8:9a:93:c1:3a:ec:6b:b1:93:88:33:c2:
                    2c:f9:6f:6e:e7:5a:58:a8:8f:34:38:78:42:10:e6:
                    2d:a1:12:90:b5:b5:46:88:b3:35:e9:a5:7e:a9:5b:
                    cc:ea:56:f5:82:16:89:ac:6b:0e:c7:1b:35:4f:28:
                    2a:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:86:C3:BF:1F:E6:95:DD:5B:40:9B:25:86:70:64:AF:F0:A3:D1:2D
            X509v3 Authority Key Identifier:
                keyid:37:9B:D4:E7:73:2F:1A:8D:1C:3B:22:2D:B7:77:3C:1C:15:41:9F:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912527F/BCFDAFCC10DD11ED80AA2485C4F9AE02/N5vU53MvGo0cOyItt3c8HBVBn0I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5vU53MvGo0cOyItt3c8HBVBn0I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912527F/BCFDAFCC10DD11ED80AA2485C4F9AE02/BE0481A4EFA111ED87AD1F0BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.153.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:46:52:7f:77:9f:e0:01:3a:d8:ad:49:95:ea:38:d6:9a:d1:
         d9:9a:31:3b:67:7d:dc:56:41:c3:74:b6:e3:b9:32:d7:46:e1:
         ec:a9:ef:f0:de:05:0f:61:e3:4b:68:78:fa:ed:46:91:a2:5c:
         c8:38:c0:85:e0:cd:34:f1:31:c1:20:21:22:2c:d2:9a:2c:16:
         42:fe:fa:d9:36:31:6e:c7:31:ac:6e:d5:8e:78:dc:c4:74:91:
         98:73:9e:dd:19:08:b9:5b:9f:00:80:fd:fc:a8:51:fc:0c:32:
         ce:f6:8f:e7:aa:cb:99:5b:6d:b5:cd:06:e9:a3:d7:11:a1:94:
         14:f4:e1:4c:16:ed:fe:ed:d5:ef:02:3b:d3:11:cf:81:77:13:
         e7:ca:65:96:ee:50:61:88:45:14:37:5e:83:68:b8:ba:29:3b:
         6c:1e:74:72:dc:e0:ee:bf:d4:bf:b6:89:53:3f:44:6d:92:9b:
         a8:82:b5:f6:fa:a0:4b:73:dc:28:78:f1:16:ef:98:cc:a7:cc:
         e4:db:60:b5:a5:fb:73:94:09:35:08:fe:dd:77:b6:c3:29:7c:
         64:5a:38:28:18:63:06:87:e7:66:22:0c:df:ae:93:20:ee:3a:
         0f:dd:0b:20:66:8c:07:ec:8f:d6:03:27:87:3a:cf:83:86:5a:
         c4:22:f6:d0
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAfAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjUyN0YxMTAvBgNVBAUTKDM3OUJENEU3NzMyRjFBOEQxQzNCMjIyREI3NzczQzFD
MTU0MTlGNDIwHhcNMjQwOTIxMDIxNTQ2WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmVlMmM1Mi1kODE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtpYTowXG34wtnGpDYosEQNjtPrUxjFoW71eCXcpkbZXGBKFoC7rmJzkxZ9M0
leJyhE4QWhYgg3LsI6WVVt3eHi5pO5DBtKPZ7Sbkgiv103ajzcKdBureSb/7tdNQ
lneVGZ3/ka1hgPybQy1ZO0Mo0ARGfDDUBzrzj/LMi3vOFpEBpv06GS9Dxk+UxNKU
pVuCUAx8JJTLRUS/ntoNfg62pEioWcc6Y8aedv99BVKhy73daG+DJbEorbWYo77h
6aE3EK5PS0a4mpPBOuxrsZOIM8Is+W9u51pYqI80OHhCEOYtoRKQtbVGiLM16aV+
qVvM6lb1ghaJrGsOxxs1TygqJwIDAQABo4IClTCCApEwHQYDVR0OBBYEFMuGw78f
5pXdW0CbJYZwZK/wo9EtMB8GA1UdIwQYMBaAFDeb1OdzLxqNHDsiLbd3PBwVQZ9C
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTI3Ri9CQ0ZEQUZDQzEw
REQxMUVEODBBQTI0ODVDNEY5QUUwMi9ONXZVNTNNdkdvMGNPeUl0dDNjOEhCVkJu
MEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL041dlU1M012R28wY095SXR0M2M4SEJWQm4wSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MjUyN0YvQkNGREFGQ0MxMEREMTFFRDgwQUEyNDg1QzRGOUFFMDIvQkUwNDgxQTRF
RkExMTFFRDg3QUQxRjBCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnmXQwDQYJKoZIhvcNAQELBQADggEBAENGUn93n+ABOtit
SZXqONaa0dmaMTtnfdxWQcN0tuO5MtdG4eyp7/DeBQ9h40toePrtRpGiXMg4wIXg
zTTxMcEgISIs0posFkL++tk2MW7HMaxu1Y543MR0kZhznt0ZCLlbnwCA/fyoUfwM
Ms72j+eqy5lbbbXNBumj1xGhlBT04UwW7f7t1e8CO9MRz4F3E+fKZZbuUGGIRRQ3
XoNouLopO2wedHLc4O6/1L+2iVM/RG2Sm6iCtfb6oEtz3Ch48RbvmMynzOTbYLWl
+3OUCTUI/t13tsMpfGRaOCgYYwaH52YiDN+ukyDuOg/dCyBmjAfsj9YDJ4c6z4OG
WsQi9tA=
-----END CERTIFICATE-----
Generated at Sat Nov 23 03:58:35 2024 by rpki-client on console-ams.rpki-client.org