Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912A455/841C8DDCB1D411EA92F6AA1BC4F9AE02/BED97520B1D911EA912C632EC4F9AE02.roa
File:                     BED97520B1D911EA912C632EC4F9AE02.roa (raw, json)
Hash identifier:          RzLAz49uNYEbzjghLROSt26QTaPjJAMTg8PAlAw1ytU=
Subject key identifier:   7F:36:9F:BF:EB:4D:F1:45:D1:0F:81:8D:16:D0:59:9A:F9:F8:7F:6A
Certificate issuer:       /CN=A912A455/serialNumber=0FAD1BD346184C71927C82C61D3FA6D7E472EE9E
Certificate serial:       0852
Authority key identifier: 0F:AD:1B:D3:46:18:4C:71:92:7C:82:C6:1D:3F:A6:D7:E4:72:EE:9E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D60b00YYTHGSfILGHT-m1-Ry7p4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912A455/841C8DDCB1D411EA92F6AA1BC4F9AE02/BED97520B1D911EA912C632EC4F9AE02.roa
Signing time:             Tue 24 Sep 2024 20:49:21 +0000
ROA not before:           Tue 24 Sep 2024 20:49:21 +0000
ROA not after:            Mon 01 Dec 2025 00:00:00 +0000
asID:                     133048
IP address blocks:        103.240.222.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912A455/841C8DDCB1D411EA92F6AA1BC4F9AE02/D60b00YYTHGSfILGHT-m1-Ry7p4.crl
                          rsync://rpki.apnic.net/member_repository/A912A455/841C8DDCB1D411EA92F6AA1BC4F9AE02/D60b00YYTHGSfILGHT-m1-Ry7p4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D60b00YYTHGSfILGHT-m1-Ry7p4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:23:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2130 (0x852)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912A455/serialNumber=0FAD1BD346184C71927C82C61D3FA6D7E472EE9E
        Validity
            Not Before: Sep 24 20:49:21 2024 GMT
            Not After : Dec  1 00:00:00 2025 GMT
        Subject: CN=66f325d0-a5c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:c6:0a:da:bf:bf:31:6a:9a:17:e6:9e:90:1b:
                    c2:53:2d:d1:e0:9f:a5:06:6a:13:82:71:6b:d0:57:
                    f8:47:c8:3d:d7:80:b1:22:de:50:ee:93:e0:04:54:
                    22:d0:7a:c6:6a:b4:a1:4b:a0:52:a5:11:6d:6e:82:
                    24:dc:0d:60:fb:34:c4:61:d6:f6:a8:33:85:d0:b6:
                    e5:cc:ad:e6:a3:d5:a7:b4:ee:37:8b:14:b1:2f:8c:
                    36:cf:d9:96:ee:4d:17:05:8d:93:4b:59:3a:5e:ee:
                    8c:72:49:61:02:6b:7b:1a:39:92:6e:9a:fd:ed:a7:
                    62:07:36:8a:f0:bd:03:07:5c:76:34:49:54:30:19:
                    45:38:18:ee:40:8f:f3:e1:4c:bd:be:cb:02:65:8d:
                    90:bf:a3:e0:bf:82:86:2e:3b:a5:a1:57:dd:3c:d9:
                    8d:16:fa:e6:8d:49:7f:06:53:20:e3:97:4d:6b:9d:
                    e5:ce:1d:f6:15:a2:ce:a6:4b:8e:0a:fa:fb:52:26:
                    d6:d5:1d:c5:97:4c:f8:e7:2f:93:c9:ff:c7:cc:78:
                    92:69:49:a0:39:d7:d5:c3:64:a9:f6:4b:d4:d9:b2:
                    ff:ec:9f:47:e3:e9:4b:4f:75:e0:3b:d3:76:6f:7e:
                    f5:4e:b0:2f:86:ae:d3:18:48:8c:72:81:fa:3a:07:
                    8b:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:36:9F:BF:EB:4D:F1:45:D1:0F:81:8D:16:D0:59:9A:F9:F8:7F:6A
            X509v3 Authority Key Identifier:
                keyid:0F:AD:1B:D3:46:18:4C:71:92:7C:82:C6:1D:3F:A6:D7:E4:72:EE:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912A455/841C8DDCB1D411EA92F6AA1BC4F9AE02/D60b00YYTHGSfILGHT-m1-Ry7p4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D60b00YYTHGSfILGHT-m1-Ry7p4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A455/841C8DDCB1D411EA92F6AA1BC4F9AE02/BED97520B1D911EA912C632EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.240.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:b7:41:c1:69:ef:20:52:53:90:5c:e0:2b:89:80:d3:70:54:
         3e:2b:52:28:15:be:ad:d0:fa:01:c8:94:6f:57:ef:1e:2c:e7:
         14:d8:a0:56:1c:0d:d6:78:29:cc:b1:3e:b5:03:18:29:42:90:
         d6:d0:16:97:40:83:bd:7a:4d:c7:1b:6d:1f:2d:0c:9d:69:c0:
         ea:e8:fa:ed:d7:be:ef:aa:d7:f6:a6:e4:b8:f1:bd:5d:b9:09:
         8e:27:c3:f3:45:f5:94:53:ae:40:9f:96:1c:e4:45:92:d5:29:
         41:09:93:7b:96:81:25:b4:7a:a4:e0:6c:49:96:ce:2c:ac:78:
         57:d5:6b:ff:e4:63:98:58:f2:e9:fb:47:80:1c:7f:4a:fa:db:
         21:c8:c3:35:82:e1:e4:ef:a9:22:f4:29:1a:fd:bb:4b:21:19:
         b0:a1:10:02:ed:c8:fa:cd:a6:0a:bd:f4:6b:f8:db:82:96:96:
         91:50:78:3e:26:ed:a1:ea:cb:2b:44:fe:04:e8:c2:dd:d9:0a:
         8e:3a:cb:45:20:0f:89:a3:98:7c:f4:71:ee:74:47:d1:00:02:
         0f:8a:83:5a:5d:05:94:01:16:5b:12:11:00:1e:3b:e4:31:58:
         ba:99:6b:ac:d7:1d:eb:79:d2:fb:33:39:d2:a9:88:9e:15:b3:
         17:55:ca:1c
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICCFIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkE0NTUxMTAvBgNVBAUTKDBGQUQxQkQzNDYxODRDNzE5MjdDODJDNjFEM0ZBNkQ3
RTQ3MkVFOUUwHhcNMjQwOTI0MjA0OTIxWhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmYzMjVkMC1hNWM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmsYK2r+/MWqaF+aekBvCUy3R4J+lBmoTgnFr0Ff4R8g914CxIt5Q7pPgBFQi
0HrGarShS6BSpRFtboIk3A1g+zTEYdb2qDOF0LblzK3mo9WntO43ixSxL4w2z9mW
7k0XBY2TS1k6Xu6McklhAmt7GjmSbpr97adiBzaK8L0DB1x2NElUMBlFOBjuQI/z
4Uy9vssCZY2Qv6Pgv4KGLjuloVfdPNmNFvrmjUl/BlMg45dNa53lzh32FaLOpkuO
Cvr7UibW1R3Fl0z45y+Tyf/HzHiSaUmgOdfVw2Sp9kvU2bL/7J9H4+lLT3XgO9N2
b371TrAvhq7TGEiMcoH6OgeL1QIDAQABo4IClTCCApEwHQYDVR0OBBYEFH82n7/r
TfFF0Q+BjRbQWZr5+H9qMB8GA1UdIwQYMBaAFA+tG9NGGExxknyCxh0/ptfkcu6e
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTQ1NS84NDFDOEREQ0Ix
RDQxMUVBOTJGNkFBMUJDNEY5QUUwMi9ENjBiMDBZWVRIR1NmSUxHSFQtbTEtUnk3
cDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0Q2MGIwMFlZVEhHU2ZJTEdIVC1tMS1SeTdwNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MkE0NTUvODQxQzhERENCMUQ0MTFFQTkyRjZBQTFCQzRGOUFFMDIvQkVEOTc1MjBC
MUQ5MTFFQTkxMkM2MzJFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABn8N4wDQYJKoZIhvcNAQELBQADggEBAHq3QcFp7yBSU5Bc
4CuJgNNwVD4rUigVvq3Q+gHIlG9X7x4s5xTYoFYcDdZ4KcyxPrUDGClCkNbQFpdA
g716TccbbR8tDJ1pwOro+u3Xvu+q1/am5LjxvV25CY4nw/NF9ZRTrkCflhzkRZLV
KUEJk3uWgSW0eqTgbEmWziyseFfVa//kY5hY8un7R4Acf0r62yHIwzWC4eTvqSL0
KRr9u0shGbChEALtyPrNpgq99Gv424KWlpFQeD4m7aHqyytE/gTowt3ZCo46y0Ug
D4mjmHz0ce50R9EAAg+Kg1pdBZQBFlsSEQAeO+QxWLqZa6zXHet50vszOdKpiJ4V
sxdVyhw=
-----END CERTIFICATE-----
Generated at Fri Nov 22 22:14:22 2024 by rpki-client on console-ams.rpki-client.org