Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912918B/7E0CEEFAEEB511EAAA4FAD32C4F9AE02/187415DE3E6F11EEA236AD17C4F9AE02.roa
File:                     187415DE3E6F11EEA236AD17C4F9AE02.roa (raw, json)
Hash identifier:          oCp4PWI4KP913wPG7fBsv0AeBkh1JffMER8sLvsvQsc=
Subject key identifier:   22:9F:0C:ED:03:85:FE:11:9F:E8:29:9C:63:31:53:DC:6D:36:B3:61
Certificate issuer:       /CN=A912918B/serialNumber=DD61C22A95B28EFDE378312A759FACAFEE406C18
Certificate serial:       077B
Authority key identifier: DD:61:C2:2A:95:B2:8E:FD:E3:78:31:2A:75:9F:AC:AF:EE:40:6C:18
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3WHCKpWyjv3jeDEqdZ-sr-5AbBg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912918B/7E0CEEFAEEB511EAAA4FAD32C4F9AE02/187415DE3E6F11EEA236AD17C4F9AE02.roa
Signing time:             Tue 24 Sep 2024 21:10:58 +0000
ROA not before:           Tue 24 Sep 2024 21:10:58 +0000
ROA not after:            Mon 01 Dec 2025 00:00:00 +0000
asID:                     141154
IP address blocks:        103.155.98.0/24 maxlen: 24
                          2001:df4:c080::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912918B/7E0CEEFAEEB511EAAA4FAD32C4F9AE02/3WHCKpWyjv3jeDEqdZ-sr-5AbBg.crl
                          rsync://rpki.apnic.net/member_repository/A912918B/7E0CEEFAEEB511EAAA4FAD32C4F9AE02/3WHCKpWyjv3jeDEqdZ-sr-5AbBg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3WHCKpWyjv3jeDEqdZ-sr-5AbBg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1915 (0x77b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912918B/serialNumber=DD61C22A95B28EFDE378312A759FACAFEE406C18
        Validity
            Not Before: Sep 24 21:10:58 2024 GMT
            Not After : Dec  1 00:00:00 2025 GMT
        Subject: CN=66f32ae2-e0b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:50:bd:ae:ff:03:c8:2a:2e:64:40:4c:df:78:
                    bb:4f:34:92:af:3e:c5:97:9e:22:ff:2f:09:20:3a:
                    0d:77:ce:40:fe:2c:7e:76:b9:2e:a7:e7:f8:da:79:
                    79:b6:6a:d1:b1:3c:b7:cf:90:ca:a8:48:3f:6e:df:
                    94:c7:b0:8b:45:0b:18:76:b6:e5:50:13:f7:03:18:
                    c3:f5:92:20:ce:c4:05:c0:f7:f1:ef:bf:b0:0d:21:
                    b0:4a:15:e4:08:bd:ed:ae:73:91:72:b4:86:23:13:
                    bd:a4:11:fb:14:49:55:6c:3a:d0:6c:37:b8:cc:02:
                    83:d0:61:49:08:50:ca:a5:ad:32:5d:fd:63:a9:a9:
                    ed:c4:34:f3:e0:cf:88:c8:3a:a6:81:17:56:64:ec:
                    87:d8:20:30:9b:cb:29:65:8c:93:65:a3:ee:ec:67:
                    9c:67:7f:15:0e:b4:be:df:71:4f:ab:58:57:fc:89:
                    d3:2a:a3:ae:d2:3a:49:4d:fa:1f:d6:15:5b:b3:52:
                    3a:e5:87:64:0b:82:36:26:77:ca:53:8a:2d:73:97:
                    0b:97:a3:8b:49:20:f8:59:a1:25:79:e2:a3:41:f5:
                    f3:df:cd:ef:15:c1:20:fd:09:4f:bb:22:8a:07:71:
                    20:e3:c3:e2:47:53:5b:ef:48:21:f3:96:47:37:54:
                    1e:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:9F:0C:ED:03:85:FE:11:9F:E8:29:9C:63:31:53:DC:6D:36:B3:61
            X509v3 Authority Key Identifier:
                keyid:DD:61:C2:2A:95:B2:8E:FD:E3:78:31:2A:75:9F:AC:AF:EE:40:6C:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912918B/7E0CEEFAEEB511EAAA4FAD32C4F9AE02/3WHCKpWyjv3jeDEqdZ-sr-5AbBg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3WHCKpWyjv3jeDEqdZ-sr-5AbBg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912918B/7E0CEEFAEEB511EAAA4FAD32C4F9AE02/187415DE3E6F11EEA236AD17C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.155.98.0/24
                IPv6:
                  2001:df4:c080::/48

    Signature Algorithm: sha256WithRSAEncryption
         82:6f:11:ed:5c:ee:3d:62:00:ac:0e:da:12:de:a1:70:b0:c2:
         18:a3:03:9f:bd:a7:f4:9b:1f:22:49:63:9f:29:b3:b7:49:ac:
         6a:2c:a4:9e:72:6b:45:40:ef:be:e7:e8:e6:a6:1c:46:a6:94:
         50:29:6e:60:f7:81:3e:56:a8:b9:2a:33:70:38:fd:31:11:e9:
         ee:40:16:e6:36:7e:f7:a2:a9:4a:39:50:bb:eb:dd:23:a8:24:
         ab:c0:d7:a9:d9:4b:98:a2:a2:a2:8d:a4:bd:61:a0:78:84:47:
         89:c9:3a:4a:88:01:ad:cc:73:25:6b:09:e4:4e:28:15:9a:9a:
         47:43:e4:57:27:52:02:ff:82:7b:84:ba:29:c3:59:42:c0:7f:
         d2:b1:a7:39:8a:81:b6:fd:7a:c5:65:e4:d3:61:67:5d:4a:aa:
         39:6b:a8:99:21:92:36:af:d4:e3:8f:24:f8:48:fb:e9:eb:60:
         12:6e:ea:90:80:88:5e:71:49:ad:50:35:97:85:63:d0:da:62:
         8f:9c:7a:14:5c:92:06:41:05:c8:1b:2d:b2:54:b8:42:43:33:
         65:fa:bb:a6:e9:50:bc:e1:3b:3e:44:ae:d8:22:3d:9d:25:77:
         93:31:43:9c:a3:16:e4:b1:d5:26:10:1b:6f:e8:77:9a:4a:f2:
         86:0a:d1:d3
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgICB3swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjkxOEIxMTAvBgNVBAUTKERENjFDMjJBOTVCMjhFRkRFMzc4MzEyQTc1OUZBQ0FG
RUU0MDZDMTgwHhcNMjQwOTI0MjExMDU4WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmYzMmFlMi1lMGIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3VC9rv8DyCouZEBM33i7TzSSrz7Fl54i/y8JIDoNd85A/ix+drkup+f42nl5
tmrRsTy3z5DKqEg/bt+Ux7CLRQsYdrblUBP3AxjD9ZIgzsQFwPfx77+wDSGwShXk
CL3trnORcrSGIxO9pBH7FElVbDrQbDe4zAKD0GFJCFDKpa0yXf1jqantxDTz4M+I
yDqmgRdWZOyH2CAwm8spZYyTZaPu7GecZ38VDrS+33FPq1hX/InTKqOu0jpJTfof
1hVbs1I65YdkC4I2JnfKU4otc5cLl6OLSSD4WaEleeKjQfXz383vFcEg/QlPuyKK
B3Eg48PiR1Nb70gh85ZHN1QeewIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFCKfDO0D
hf4Rn+gpnGMxU9xtNrNhMB8GA1UdIwQYMBaAFN1hwiqVso7943gxKnWfrK/uQGwY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTE4Qi83RTBDRUVGQUVF
QjUxMUVBQUE0RkFEMzJDNEY5QUUwMi8zV0hDS3BXeWp2M2plREVxZFotc3ItNUFi
QmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzNXSENLcFd5anYzamVERXFkWi1zci01QWJCZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MjkxOEIvN0UwQ0VFRkFFRUI1MTFFQUFBNEZBRDMyQzRGOUFFMDIvMTg3NDE1REUz
RTZGMTFFRUEyMzZBRDE3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E
ITAfMAwEAgABMAYDBABnm2IwDwQCAAIwCQMHACABDfTAgDANBgkqhkiG9w0BAQsF
AAOCAQEAgm8R7VzuPWIArA7aEt6hcLDCGKMDn72n9JsfIkljnymzt0msaiyknnJr
RUDvvufo5qYcRqaUUCluYPeBPlaouSozcDj9MRHp7kAW5jZ+96KpSjlQu+vdI6gk
q8DXqdlLmKKioo2kvWGgeIRHick6SogBrcxzJWsJ5E4oFZqaR0PkVydSAv+Ce4S6
KcNZQsB/0rGnOYqBtv16xWXk02FnXUqqOWuomSGSNq/U448k+Ej76etgEm7qkICI
XnFJrVA1l4Vj0Npij5x6FFySBkEFyBstslS4QkMzZfq7pulQvOE7PkSu2CI9nSV3
kzFDnKMW5LHVJhAbb+h3mkryhgrR0w==
-----END CERTIFICATE-----
Generated at Fri Nov 22 22:24:06 2024 by rpki-client on console-fra.rpki-client.org