Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912E82F/E9E0D67C8A1B11EA9DC84341C4F9AE02/B1E17EB08A1C11EAA328EB41C4F9AE02.roa
File:                     B1E17EB08A1C11EAA328EB41C4F9AE02.roa (raw, json)
Hash identifier:          obmE008LLIhjC+37VzTi0eM/jm/7H77XFXtUrjLHgRU=
Subject key identifier:   A4:50:40:40:C4:AC:1F:F6:04:49:E4:67:D4:C8:21:24:2F:06:BD:32
Certificate issuer:       /CN=A912E82F/serialNumber=0728EEADA18ECDE4FB7C502EB84BB6903D6532F1
Certificate serial:       08DB
Authority key identifier: 07:28:EE:AD:A1:8E:CD:E4:FB:7C:50:2E:B8:4B:B6:90:3D:65:32:F1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ByjuraGOzeT7fFAuuEu2kD1lMvE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912E82F/E9E0D67C8A1B11EA9DC84341C4F9AE02/B1E17EB08A1C11EAA328EB41C4F9AE02.roa
Signing time:             Tue 14 May 2024 21:30:58 +0000
ROA not before:           Tue 14 May 2024 21:30:58 +0000
ROA not after:            Wed 28 May 2025 00:00:00 +0000
asID:                     137405
IP address blocks:        103.149.83.0/24 maxlen: 24
                          2001:df3:1e80::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912E82F/E9E0D67C8A1B11EA9DC84341C4F9AE02/ByjuraGOzeT7fFAuuEu2kD1lMvE.crl
                          rsync://rpki.apnic.net/member_repository/A912E82F/E9E0D67C8A1B11EA9DC84341C4F9AE02/ByjuraGOzeT7fFAuuEu2kD1lMvE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ByjuraGOzeT7fFAuuEu2kD1lMvE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 19:56:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2267 (0x8db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912E82F/serialNumber=0728EEADA18ECDE4FB7C502EB84BB6903D6532F1
        Validity
            Not Before: May 14 21:30:58 2024 GMT
            Not After : May 28 00:00:00 2025 GMT
        Subject: CN=6643d812-47bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:88:b2:1b:04:0e:cf:5f:03:69:76:76:da:5e:
                    bc:77:88:aa:68:b9:c5:41:95:6a:93:22:a0:f3:da:
                    50:d5:7d:18:75:52:b9:6e:47:d2:30:26:8c:89:a4:
                    f5:60:b6:85:04:4f:31:8c:f9:a4:7e:a7:b5:e4:a1:
                    04:0c:5b:d4:7b:18:8e:c9:bb:cc:0f:46:f5:bf:af:
                    4c:a4:d8:f2:7b:a1:e8:a1:ef:2e:3d:2f:3e:55:94:
                    18:6e:89:d2:c0:15:2e:a4:c6:b4:dc:f2:a5:8f:a3:
                    b0:5d:21:61:10:21:82:45:c3:b5:5e:4a:f5:3f:98:
                    87:b2:21:74:f3:d6:8c:92:f4:15:ae:da:a5:a3:b9:
                    cc:5f:ab:24:f6:4c:3b:ec:0d:66:ad:71:2e:3c:74:
                    13:a3:86:a1:bf:48:8b:92:1e:85:ff:19:1f:bb:51:
                    e1:d9:a8:da:52:b2:17:48:2f:05:44:c0:0d:31:b6:
                    91:8f:61:c4:2f:47:f9:b7:8c:a9:c8:b3:13:67:9e:
                    62:05:30:cf:3e:41:cb:4b:05:e0:2a:0e:87:61:a6:
                    7b:9e:a5:4a:a5:ee:2a:2a:16:6e:e6:39:a2:cf:ea:
                    26:8c:d0:7d:0e:0c:3a:20:19:5c:64:f4:7a:09:b8:
                    52:ad:32:e8:2a:4b:8e:60:cd:7e:d6:c5:e5:cb:6b:
                    35:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:50:40:40:C4:AC:1F:F6:04:49:E4:67:D4:C8:21:24:2F:06:BD:32
            X509v3 Authority Key Identifier:
                keyid:07:28:EE:AD:A1:8E:CD:E4:FB:7C:50:2E:B8:4B:B6:90:3D:65:32:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912E82F/E9E0D67C8A1B11EA9DC84341C4F9AE02/ByjuraGOzeT7fFAuuEu2kD1lMvE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ByjuraGOzeT7fFAuuEu2kD1lMvE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E82F/E9E0D67C8A1B11EA9DC84341C4F9AE02/B1E17EB08A1C11EAA328EB41C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.149.83.0/24
                IPv6:
                  2001:df3:1e80::/48

    Signature Algorithm: sha256WithRSAEncryption
         7a:7b:e4:9a:28:e6:80:a7:28:92:94:78:0a:77:7b:06:3a:ac:
         27:83:1b:4e:63:74:f1:91:30:27:91:1b:0e:00:14:39:1f:89:
         d2:bd:bf:53:7c:49:ed:01:83:3b:ea:95:79:f4:6c:f0:ff:37:
         3d:1f:22:2f:14:5b:ce:11:e8:6f:c3:0b:97:c7:b9:a4:11:95:
         bb:2d:ac:28:23:72:6d:d7:3e:d7:82:1c:28:9f:ed:d1:1f:a1:
         78:46:90:e1:c9:01:77:8b:c6:52:43:ad:27:89:5b:04:ee:07:
         a0:2d:e4:d5:fe:fb:36:e4:71:1b:88:54:44:0f:85:dc:31:4e:
         54:94:4f:cd:33:61:56:a5:f6:ef:4b:3c:9d:e3:94:ea:a5:4a:
         82:05:8d:ae:d0:00:7e:bf:a9:a1:be:3b:22:15:04:da:e5:8d:
         77:8e:82:9f:a8:c1:cf:b7:c3:1a:cb:3b:3a:3d:75:bf:9f:5b:
         d5:44:bd:d9:9f:88:21:8a:ba:a9:37:50:04:ca:48:47:3f:d6:
         c4:fb:73:e6:98:41:05:20:bb:39:08:8f:69:9b:af:1f:c6:72:
         a1:aa:e5:a3:8b:21:eb:a3:11:88:29:25:ee:b5:26:e2:c8:d0:
         59:87:d7:1b:8c:ad:1b:d4:13:1f:d6:c0:08:b5:01:43:e8:e6:
         f3:99:1f:b3
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgICCNswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkU4MkYxMTAvBgNVBAUTKDA3MjhFRUFEQTE4RUNERTRGQjdDNTAyRUI4NEJCNjkw
M0Q2NTMyRjEwHhcNMjQwNTE0MjEzMDU4WhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02NjQzZDgxMi00N2JjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsIiyGwQOz18DaXZ22l68d4iqaLnFQZVqkyKg89pQ1X0YdVK5bkfSMCaMiaT1
YLaFBE8xjPmkfqe15KEEDFvUexiOybvMD0b1v69MpNjye6Hooe8uPS8+VZQYbonS
wBUupMa03PKlj6OwXSFhECGCRcO1Xkr1P5iHsiF089aMkvQVrtqlo7nMX6sk9kw7
7A1mrXEuPHQTo4ahv0iLkh6F/xkfu1Hh2ajaUrIXSC8FRMANMbaRj2HEL0f5t4yp
yLMTZ55iBTDPPkHLSwXgKg6HYaZ7nqVKpe4qKhZu5jmiz+omjNB9Dgw6IBlcZPR6
CbhSrTLoKkuOYM1+1sXly2s1aQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFKRQQEDE
rB/2BEnkZ9TIISQvBr0yMB8GA1UdIwQYMBaAFAco7q2hjs3k+3xQLrhLtpA9ZTLx
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTgyRi9FOUUwRDY3QzhB
MUIxMUVBOURDODQzNDFDNEY5QUUwMi9CeWp1cmFHT3plVDdmRkF1dUV1MmtEMWxN
dkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0J5anVyYUdPemVUN2ZGQXV1RXUya0QxbE12RS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MkU4MkYvRTlFMEQ2N0M4QTFCMTFFQTlEQzg0MzQxQzRGOUFFMDIvQjFFMTdFQjA4
QTFDMTFFQUEzMjhFQjQxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E
ITAfMAwEAgABMAYDBABnlVMwDwQCAAIwCQMHACABDfMegDANBgkqhkiG9w0BAQsF
AAOCAQEAenvkmijmgKcokpR4Cnd7BjqsJ4MbTmN08ZEwJ5EbDgAUOR+J0r2/U3xJ
7QGDO+qVefRs8P83PR8iLxRbzhHob8MLl8e5pBGVuy2sKCNybdc+14IcKJ/t0R+h
eEaQ4ckBd4vGUkOtJ4lbBO4HoC3k1f77NuRxG4hURA+F3DFOVJRPzTNhVqX270s8
neOU6qVKggWNrtAAfr+pob47IhUE2uWNd46Cn6jBz7fDGss7Oj11v59b1US92Z+I
IYq6qTdQBMpIRz/WxPtz5phBBSC7OQiPaZuvH8Zyoarlo4sh66MRiCkl7rUm4sjQ
WYfXG4ytG9QTH9bACLUBQ+jm85kfsw==
-----END CERTIFICATE-----
Generated at Fri Nov 22 21:05:27 2024 by rpki-client on console-fra.rpki-client.org