Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912A10A/E518B076139211EDA052021FC4F9AE02/8C286648818611ED8D1C5824C4F9AE02.roa
File:                     8C286648818611ED8D1C5824C4F9AE02.roa (raw, json)
Hash identifier:          xFXNX7ojWtYsPecQfS60CBpkcLKXmlqCPRZZdxkSgiE=
Subject key identifier:   F9:AC:B0:3C:0F:39:30:C3:73:F7:4E:F7:C8:4B:C3:2F:43:BD:47:DA
Certificate issuer:       /CN=A912A10A/serialNumber=EB44A7C6D72E646D84A2C7B6D2E9A732101B813A
Certificate serial:       0207
Authority key identifier: EB:44:A7:C6:D7:2E:64:6D:84:A2:C7:B6:D2:E9:A7:32:10:1B:81:3A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/60SnxtcuZG2Eose20umnMhAbgTo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912A10A/E518B076139211EDA052021FC4F9AE02/8C286648818611ED8D1C5824C4F9AE02.roa
Signing time:             Thu 07 Nov 2024 01:34:41 +0000
ROA not before:           Thu 07 Nov 2024 01:34:41 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     56294
IP address blocks:        103.173.70.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912A10A/E518B076139211EDA052021FC4F9AE02/60SnxtcuZG2Eose20umnMhAbgTo.crl
                          rsync://rpki.apnic.net/member_repository/A912A10A/E518B076139211EDA052021FC4F9AE02/60SnxtcuZG2Eose20umnMhAbgTo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/60SnxtcuZG2Eose20umnMhAbgTo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 519 (0x207)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912A10A/serialNumber=EB44A7C6D72E646D84A2C7B6D2E9A732101B813A
        Validity
            Not Before: Nov  7 01:34:41 2024 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=672c1931-c1ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:6a:9e:cb:9b:5b:94:5f:13:84:4a:85:9f:82:
                    fe:aa:f3:2c:69:46:f2:fc:c6:9d:7f:48:28:92:0f:
                    c8:8c:77:48:97:be:8f:c0:1e:a3:da:58:db:66:c4:
                    cd:e3:de:6a:6a:e6:bb:dd:a3:2e:b5:9d:50:0a:a7:
                    72:40:af:24:0a:a5:7e:c5:88:da:99:33:21:ec:46:
                    66:f7:c4:fb:fc:27:01:61:88:c3:86:bd:24:0e:63:
                    2c:16:68:d3:02:c9:e1:18:86:54:9b:04:b1:36:8d:
                    73:84:a6:51:e3:05:ef:5e:09:6a:a9:df:69:71:ec:
                    94:84:79:45:2b:37:e0:34:ff:c7:d3:3a:3d:c9:74:
                    74:dd:7e:e9:3c:3d:28:9a:21:b2:04:0c:c8:93:92:
                    79:58:0b:c1:98:26:81:b5:35:e6:e7:b4:cf:0e:45:
                    42:1b:e7:e7:ff:73:2f:0b:d5:68:d7:d3:a0:f4:b4:
                    82:de:c1:2c:c7:c9:dd:fa:39:b6:75:90:50:a3:d4:
                    ca:86:52:a4:83:b0:03:e2:4a:58:fd:e9:cd:b7:36:
                    d5:3f:e2:6a:4d:bc:66:a1:15:b9:5a:23:01:b3:20:
                    b7:3f:2c:4d:a6:a1:81:2a:73:ef:cf:25:46:d3:16:
                    2d:ef:46:c7:54:93:58:f8:3d:da:31:16:77:a1:72:
                    67:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:AC:B0:3C:0F:39:30:C3:73:F7:4E:F7:C8:4B:C3:2F:43:BD:47:DA
            X509v3 Authority Key Identifier:
                keyid:EB:44:A7:C6:D7:2E:64:6D:84:A2:C7:B6:D2:E9:A7:32:10:1B:81:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912A10A/E518B076139211EDA052021FC4F9AE02/60SnxtcuZG2Eose20umnMhAbgTo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/60SnxtcuZG2Eose20umnMhAbgTo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A10A/E518B076139211EDA052021FC4F9AE02/8C286648818611ED8D1C5824C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.173.70.0/23

    Signature Algorithm: sha256WithRSAEncryption
         23:17:09:52:25:55:be:d1:a4:91:d2:76:4e:4f:13:ca:63:aa:
         83:6e:fb:42:6f:a2:10:e4:11:b7:7c:58:dc:a1:54:57:60:c4:
         21:1c:6c:76:93:b7:da:89:9e:c4:f0:6c:fa:44:00:8e:d5:25:
         46:e5:27:2b:90:64:0f:92:60:01:2f:d0:f2:2d:a6:1f:b9:7b:
         07:7c:d7:2c:58:82:46:b2:cc:89:db:a1:d6:30:34:9b:4a:9c:
         ee:f7:e6:e9:81:3a:05:63:47:a3:90:52:4d:ec:07:9e:28:45:
         e6:95:21:64:29:29:de:84:1c:ee:ca:59:30:0b:15:e5:d0:1c:
         33:bd:4e:8e:bb:5a:2d:92:a8:83:a9:2c:0e:91:64:ef:fb:19:
         1e:9c:88:7e:d9:b5:de:75:1f:7e:cd:3f:2e:3c:f9:51:78:2e:
         57:89:ec:a2:4a:73:33:c8:15:57:73:29:44:77:79:f1:5f:a4:
         6b:67:b7:a4:7e:81:79:f8:d7:76:27:26:fe:3f:03:cc:ea:3a:
         8b:45:93:54:24:38:ee:83:d6:18:e9:5d:94:e1:a0:b3:58:bb:
         97:06:de:3c:65:1e:2a:58:40:fb:57:28:76:00:93:56:a2:b9:
         41:8d:01:20:72:48:cc:ac:54:a3:21:80:13:06:b1:85:1c:d4:
         1d:14:dc:e2
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAgcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkExMEExMTAvBgNVBAUTKEVCNDRBN0M2RDcyRTY0NkQ4NEEyQzdCNkQyRTlBNzMy
MTAxQjgxM0EwHhcNMjQxMTA3MDEzNDQxWhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzJjMTkzMS1jMWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAp2qey5tblF8ThEqFn4L+qvMsaUby/Madf0gokg/IjHdIl76PwB6j2ljbZsTN
495qaua73aMutZ1QCqdyQK8kCqV+xYjamTMh7EZm98T7/CcBYYjDhr0kDmMsFmjT
AsnhGIZUmwSxNo1zhKZR4wXvXglqqd9pceyUhHlFKzfgNP/H0zo9yXR03X7pPD0o
miGyBAzIk5J5WAvBmCaBtTXm57TPDkVCG+fn/3MvC9Vo19Og9LSC3sEsx8nd+jm2
dZBQo9TKhlKkg7AD4kpY/enNtzbVP+JqTbxmoRW5WiMBsyC3PyxNpqGBKnPvzyVG
0xYt70bHVJNY+D3aMRZ3oXJnuQIDAQABo4IClTCCApEwHQYDVR0OBBYEFPmssDwP
OTDDc/dO98hLwy9DvUfaMB8GA1UdIwQYMBaAFOtEp8bXLmRthKLHttLppzIQG4E6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTEwQS9FNTE4QjA3NjEz
OTIxMUVEQTA1MjAyMUZDNEY5QUUwMi82MFNueHRjdVpHMkVvc2UyMHVtbk1oQWJn
VG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzYwU254dGN1WkcyRW9zZTIwdW1uTWhBYmdUby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MkExMEEvRTUxOEIwNzYxMzkyMTFFREEwNTIwMjFGQzRGOUFFMDIvOEMyODY2NDg4
MTg2MTFFRDhEMUM1ODI0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnrUYwDQYJKoZIhvcNAQELBQADggEBACMXCVIlVb7RpJHS
dk5PE8pjqoNu+0JvohDkEbd8WNyhVFdgxCEcbHaTt9qJnsTwbPpEAI7VJUblJyuQ
ZA+SYAEv0PItph+5ewd81yxYgkayzInbodYwNJtKnO735umBOgVjR6OQUk3sB54o
ReaVIWQpKd6EHO7KWTALFeXQHDO9To67Wi2SqIOpLA6RZO/7GR6ciH7Ztd51H37N
Py48+VF4LleJ7KJKczPIFVdzKUR3efFfpGtnt6R+gXn413YnJv4/A8zqOotFk1Qk
OO6D1hjpXZThoLNYu5cG3jxlHipYQPtXKHYAk1aiuUGNASBySMysVKMhgBMGsYUc
1B0U3OI=
-----END CERTIFICATE-----
Generated at Sat Nov 23 02:33:32 2024 by rpki-client on console-fra.rpki-client.org