Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91275FB/FDDB88DCC21011E7920A955DC4F9AE02/FCD95792C21111E792F4785EC4F9AE02.roa
File:                     FCD95792C21111E792F4785EC4F9AE02.roa (raw, json)
Hash identifier:          vQNKqM+IPJTV8w/FcMbZHdV0h0wCR5wUymZdMLOlrMg=
Subject key identifier:   F3:75:A8:60:DA:7D:0B:27:13:72:B6:A6:2F:D2:91:D8:EB:48:49:76
Certificate issuer:       /CN=A91275FB/serialNumber=26199C5F6189E02EC516853919E15BA601D7C85F
Certificate serial:       179A
Authority key identifier: 26:19:9C:5F:61:89:E0:2E:C5:16:85:39:19:E1:5B:A6:01:D7:C8:5F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JhmcX2GJ4C7FFoU5GeFbpgHXyF8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91275FB/FDDB88DCC21011E7920A955DC4F9AE02/FCD95792C21111E792F4785EC4F9AE02.roa
Signing time:             Thu 14 Nov 2024 16:34:35 +0000
ROA not before:           Thu 14 Nov 2024 16:34:35 +0000
ROA not after:            Sat 31 Jan 2026 00:00:00 +0000
asID:                     63930
IP address blocks:        103.77.79.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91275FB/FDDB88DCC21011E7920A955DC4F9AE02/JhmcX2GJ4C7FFoU5GeFbpgHXyF8.crl
                          rsync://rpki.apnic.net/member_repository/A91275FB/FDDB88DCC21011E7920A955DC4F9AE02/JhmcX2GJ4C7FFoU5GeFbpgHXyF8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JhmcX2GJ4C7FFoU5GeFbpgHXyF8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 16:30:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6042 (0x179a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91275FB/serialNumber=26199C5F6189E02EC516853919E15BA601D7C85F
        Validity
            Not Before: Nov 14 16:34:35 2024 GMT
            Not After : Jan 31 00:00:00 2026 GMT
        Subject: CN=6736269a-db0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:49:bb:5a:d4:8c:8d:ae:3f:65:ab:14:ca:fd:
                    4a:d0:54:37:d1:4b:90:bf:62:82:ad:be:b1:75:9a:
                    0c:db:21:c8:a0:46:99:9d:e0:12:f4:84:fb:f8:0c:
                    ec:41:2e:6e:a0:df:0b:74:60:91:4e:b6:c0:db:33:
                    2f:4f:f7:76:19:f1:82:3c:e5:51:f7:c3:9a:26:2a:
                    c5:0d:df:b2:bd:b6:37:f4:bf:09:00:4c:ec:d7:76:
                    1a:cf:e2:67:1f:ea:1c:62:9e:a4:f6:79:74:2d:79:
                    73:cc:f8:19:69:ff:71:0b:26:7b:09:13:0a:f9:53:
                    1c:54:28:56:b0:0f:30:b8:05:bb:51:df:15:42:78:
                    8a:25:05:cf:b6:f8:b6:fd:e0:f1:75:b3:e6:8f:1f:
                    47:e4:70:c8:9c:0e:ab:0f:de:92:b2:af:2d:7b:45:
                    6f:aa:8f:1a:ee:a5:60:6d:db:f3:a2:f8:5c:64:16:
                    26:1d:d5:2e:9c:26:de:d7:2f:ba:39:ab:5b:d7:ad:
                    dd:7e:da:0d:b3:8b:26:5f:86:6e:79:31:35:4f:6a:
                    ab:45:a0:bc:93:15:0f:a0:f9:d3:3c:bf:0a:e0:41:
                    8a:cc:b7:7b:47:1e:cc:bb:fc:d2:f9:79:05:f6:bd:
                    19:01:28:6f:24:a2:ea:2d:a6:71:80:ac:5e:23:4d:
                    67:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:75:A8:60:DA:7D:0B:27:13:72:B6:A6:2F:D2:91:D8:EB:48:49:76
            X509v3 Authority Key Identifier:
                keyid:26:19:9C:5F:61:89:E0:2E:C5:16:85:39:19:E1:5B:A6:01:D7:C8:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91275FB/FDDB88DCC21011E7920A955DC4F9AE02/JhmcX2GJ4C7FFoU5GeFbpgHXyF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JhmcX2GJ4C7FFoU5GeFbpgHXyF8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91275FB/FDDB88DCC21011E7920A955DC4F9AE02/FCD95792C21111E792F4785EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.77.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:0b:bc:58:6f:58:70:00:6b:f5:d7:fd:d5:b8:de:31:81:12:
         e1:55:81:89:b7:77:7b:72:9a:ba:15:b2:96:24:3f:c3:d4:24:
         12:c3:b0:bd:f4:19:8b:98:18:ce:99:b7:b3:c4:28:53:54:bb:
         05:98:7f:73:e1:4f:b9:d6:5e:40:db:05:b4:ff:2c:6b:75:90:
         51:de:c7:97:81:7f:c1:f4:53:97:97:71:34:c9:0a:e4:37:ae:
         aa:56:94:d8:3c:7d:a6:e0:4a:c2:28:82:08:92:11:6f:b8:16:
         91:b4:5d:a5:2b:25:48:dc:3d:69:a2:b5:95:ab:51:78:a1:88:
         e4:e1:03:ab:8d:f9:be:2e:c0:fc:02:a1:30:27:4e:b6:f2:35:
         38:02:21:fa:17:37:75:b5:7a:95:c0:cc:9b:bb:f7:f2:22:29:
         3b:7a:5f:44:5c:5f:e0:71:d8:38:07:90:45:58:1a:a0:a4:9d:
         d4:65:4c:fa:5e:73:15:b3:5a:ab:6b:d3:b4:2e:1d:6d:32:1e:
         8c:52:01:22:be:a7:93:22:8c:65:69:ba:b5:88:ad:2c:8b:e5:
         e6:09:18:aa:35:4b:65:ae:e9:31:2d:c4:d1:b9:1e:15:0b:60:
         fc:af:c7:2c:5a:f9:79:91:eb:dd:4b:60:e7:46:f2:1d:8f:ca:
         d2:a1:71:95
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICF5owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Mjc1RkIxMTAvBgNVBAUTKDI2MTk5QzVGNjE4OUUwMkVDNTE2ODUzOTE5RTE1QkE2
MDFEN0M4NUYwHhcNMjQxMTE0MTYzNDM1WhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzM2MjY5YS1kYjBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA/Em7WtSMja4/ZasUyv1K0FQ30UuQv2KCrb6xdZoM2yHIoEaZneAS9IT7+Azs
QS5uoN8LdGCRTrbA2zMvT/d2GfGCPOVR98OaJirFDd+yvbY39L8JAEzs13Yaz+Jn
H+ocYp6k9nl0LXlzzPgZaf9xCyZ7CRMK+VMcVChWsA8wuAW7Ud8VQniKJQXPtvi2
/eDxdbPmjx9H5HDInA6rD96Ssq8te0Vvqo8a7qVgbdvzovhcZBYmHdUunCbe1y+6
Oatb163dftoNs4smX4ZueTE1T2qrRaC8kxUPoPnTPL8K4EGKzLd7Rx7Mu/zS+XkF
9r0ZAShvJKLqLaZxgKxeI01njwIDAQABo4IClTCCApEwHQYDVR0OBBYEFPN1qGDa
fQsnE3K2pi/SkdjrSEl2MB8GA1UdIwQYMBaAFCYZnF9hieAuxRaFORnhW6YB18hf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzVGQi9GRERCODhEQ0My
MTAxMUU3OTIwQTk1NURDNEY5QUUwMi9KaG1jWDJHSjRDN0ZGb1U1R2VGYnBnSFh5
RjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0pobWNYMkdKNEM3RkZvVTVHZUZicGdIWHlGOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Mjc1RkIvRkREQjg4RENDMjEwMTFFNzkyMEE5NTVEQzRGOUFFMDIvRkNEOTU3OTJD
MjExMTFFNzkyRjQ3ODVFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnTU8wDQYJKoZIhvcNAQELBQADggEBADoLvFhvWHAAa/XX
/dW43jGBEuFVgYm3d3tymroVspYkP8PUJBLDsL30GYuYGM6Zt7PEKFNUuwWYf3Ph
T7nWXkDbBbT/LGt1kFHex5eBf8H0U5eXcTTJCuQ3rqpWlNg8fabgSsIoggiSEW+4
FpG0XaUrJUjcPWmitZWrUXihiOThA6uN+b4uwPwCoTAnTrbyNTgCIfoXN3W1epXA
zJu79/IiKTt6X0RcX+Bx2DgHkEVYGqCkndRlTPpecxWzWqtr07QuHW0yHoxSASK+
p5MijGVpurWIrSyL5eYJGKo1S2Wu6TEtxNG5HhULYPyvxyxa+XmR691LYOdG8h2P
ytKhcZU=
-----END CERTIFICATE-----
Generated at Fri Nov 22 17:55:39 2024 by rpki-client on console-fra.rpki-client.org