Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912FBD2/6D74978C6F5111EC9651DA09C4F9AE02/8A7E8D5C6F5511ECB5FAA20FC4F9AE02.roa
File:                     8A7E8D5C6F5511ECB5FAA20FC4F9AE02.roa (raw, json)
Hash identifier:          lpgIVVU0cv+cmcURAn8z405VuRQu+P37Bg9Ma7ssqFs=
Subject key identifier:   58:EA:6E:B3:EA:82:BB:59:E8:97:5A:06:A6:85:45:CD:FF:54:75:9D
Certificate issuer:       /CN=A912FBD2/serialNumber=55E485188C5C9D2E24C8345C97BC3462721C98CE
Certificate serial:       0328
Authority key identifier: 55:E4:85:18:8C:5C:9D:2E:24:C8:34:5C:97:BC:34:62:72:1C:98:CE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VeSFGIxcnS4kyDRcl7w0YnIcmM4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912FBD2/6D74978C6F5111EC9651DA09C4F9AE02/8A7E8D5C6F5511ECB5FAA20FC4F9AE02.roa
Signing time:             Tue 05 Mar 2024 02:44:33 +0000
ROA not before:           Tue 05 Mar 2024 02:44:33 +0000
ROA not after:            Thu 01 May 2025 00:00:00 +0000
asID:                     137199
IP address blocks:        203.8.160.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912FBD2/6D74978C6F5111EC9651DA09C4F9AE02/VeSFGIxcnS4kyDRcl7w0YnIcmM4.crl
                          rsync://rpki.apnic.net/member_repository/A912FBD2/6D74978C6F5111EC9651DA09C4F9AE02/VeSFGIxcnS4kyDRcl7w0YnIcmM4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VeSFGIxcnS4kyDRcl7w0YnIcmM4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 May 2024 02:50:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 808 (0x328)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912FBD2/serialNumber=55E485188C5C9D2E24C8345C97BC3462721C98CE
        Validity
            Not Before: Mar  5 02:44:33 2024 GMT
            Not After : May  1 00:00:00 2025 GMT
        Subject: CN=65e68711-1d2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ca:e2:b3:be:fb:cc:58:93:d7:29:a9:0b:56:
                    6e:9b:4d:2e:0b:0a:28:ab:78:f8:7c:4a:c0:14:1c:
                    65:8e:6b:ca:4b:1d:44:22:2c:7e:5a:15:d9:d3:dc:
                    54:dd:53:61:81:b9:ff:2d:69:da:be:7d:f2:b1:d0:
                    5a:f3:62:99:d3:c0:23:e1:e3:74:ed:e1:20:9a:e6:
                    54:f3:fa:1c:cc:5a:90:72:8d:4e:3e:e9:c7:6a:3c:
                    b6:1d:b4:51:78:c1:18:42:1b:5a:8e:6b:cc:fc:90:
                    11:16:cd:36:5f:a3:3a:4c:fa:37:7f:84:d4:05:5f:
                    a8:dc:e1:c3:51:db:14:6d:2c:a7:2e:24:a0:07:16:
                    bf:01:98:d7:db:7e:f5:d4:b0:5d:45:39:d6:6e:18:
                    05:b8:3d:e3:7a:44:3e:62:ea:a7:f3:2b:e0:12:5a:
                    d4:99:1f:a0:de:96:96:4c:d9:9b:3a:22:ea:5b:57:
                    ff:94:02:e9:96:98:a6:e7:87:19:e6:39:00:fe:83:
                    c9:ce:30:aa:01:ca:b7:65:30:58:c5:50:62:81:6c:
                    9c:57:cd:e7:93:9e:79:f5:ef:9a:a0:ba:da:c0:06:
                    2d:14:e5:0a:48:57:ca:a3:5f:3a:38:6a:25:9d:58:
                    df:d2:f2:a2:fe:73:ec:a0:27:86:00:84:f0:a9:5f:
                    34:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:EA:6E:B3:EA:82:BB:59:E8:97:5A:06:A6:85:45:CD:FF:54:75:9D
            X509v3 Authority Key Identifier:
                keyid:55:E4:85:18:8C:5C:9D:2E:24:C8:34:5C:97:BC:34:62:72:1C:98:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912FBD2/6D74978C6F5111EC9651DA09C4F9AE02/VeSFGIxcnS4kyDRcl7w0YnIcmM4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VeSFGIxcnS4kyDRcl7w0YnIcmM4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FBD2/6D74978C6F5111EC9651DA09C4F9AE02/8A7E8D5C6F5511ECB5FAA20FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.8.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:32:36:e4:55:35:6e:c5:c2:ba:d1:c7:b3:36:3a:e6:a4:f0:
         61:9a:72:2f:45:1f:db:ad:57:b1:1b:eb:20:17:a4:fa:23:a4:
         cf:32:e4:cc:bb:9c:9a:b9:ec:a5:a5:9f:4a:ab:cd:3a:ae:b9:
         09:b0:eb:5f:b2:9f:92:68:af:f2:3a:bf:f8:31:a5:43:82:ab:
         00:1e:13:a6:e9:19:a4:fd:59:e1:8a:49:58:f7:71:51:fd:17:
         64:7f:55:85:4b:67:1b:b4:4c:33:9b:b0:98:0e:dd:f1:ef:70:
         f6:7d:2c:d9:19:6e:ea:56:14:b3:08:f4:30:cc:7f:54:5e:d6:
         7e:c6:0e:00:ac:74:4e:07:e1:57:86:00:e8:a8:03:c6:c5:8f:
         84:1c:12:7c:26:1d:11:5d:47:c9:b5:f4:dc:e6:80:da:68:31:
         4a:55:12:9c:58:da:f8:fd:f1:dd:a4:b1:ab:24:9e:3f:a8:67:
         d2:04:2b:98:1d:24:3f:7d:e5:3b:4b:d2:44:22:3b:24:b5:94:
         51:63:89:9e:c8:0d:10:4e:b7:89:48:09:ee:6e:d9:72:ec:68:
         cf:b1:68:73:49:b2:15:38:e8:fe:13:4b:70:3f:3f:a4:67:54:
         bf:cc:bd:99:0e:62:ed:7f:46:6f:02:3e:92:aa:5b:b4:c8:99:
         23:38:1f:91
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAygwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkZCRDIxMTAvBgNVBAUTKDU1RTQ4NTE4OEM1QzlEMkUyNEM4MzQ1Qzk3QkMzNDYy
NzIxQzk4Q0UwHhcNMjQwMzA1MDI0NDMzWhcNMjUwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NWU2ODcxMS0xZDJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAw8ris777zFiT1ympC1Zum00uCwooq3j4fErAFBxljmvKSx1EIix+WhXZ09xU
3VNhgbn/LWnavn3ysdBa82KZ08Aj4eN07eEgmuZU8/oczFqQco1OPunHajy2HbRR
eMEYQhtajmvM/JARFs02X6M6TPo3f4TUBV+o3OHDUdsUbSynLiSgBxa/AZjX2371
1LBdRTnWbhgFuD3jekQ+Yuqn8yvgElrUmR+g3paWTNmbOiLqW1f/lALplpim54cZ
5jkA/oPJzjCqAcq3ZTBYxVBigWycV83nk5559e+aoLrawAYtFOUKSFfKo186OGol
nVjf0vKi/nPsoCeGAITwqV80rQIDAQABo4IClTCCApEwHQYDVR0OBBYEFFjqbrPq
grtZ6JdaBqaFRc3/VHWdMB8GA1UdIwQYMBaAFFXkhRiMXJ0uJMg0XJe8NGJyHJjO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkJEMi82RDc0OTc4QzZG
NTExMUVDOTY1MURBMDlDNEY5QUUwMi9WZVNGR0l4Y25TNGt5RFJjbDd3MFluSWNt
TTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1ZlU0ZHSXhjblM0a3lEUmNsN3cwWW5JY21NNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MkZCRDIvNkQ3NDk3OEM2RjUxMTFFQzk2NTFEQTA5QzRGOUFFMDIvOEE3RThENUM2
RjU1MTFFQ0I1RkFBMjBGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADLCKAwDQYJKoZIhvcNAQELBQADggEBAHcyNuRVNW7FwrrR
x7M2Ouak8GGaci9FH9utV7Eb6yAXpPojpM8y5My7nJq57KWln0qrzTquuQmw61+y
n5Jor/I6v/gxpUOCqwAeE6bpGaT9WeGKSVj3cVH9F2R/VYVLZxu0TDObsJgO3fHv
cPZ9LNkZbupWFLMI9DDMf1Re1n7GDgCsdE4H4VeGAOioA8bFj4QcEnwmHRFdR8m1
9NzmgNpoMUpVEpxY2vj98d2ksasknj+oZ9IEK5gdJD995TtL0kQiOyS1lFFjiZ7I
DRBOt4lICe5u2XLsaM+xaHNJshU46P4TS3A/P6RnVL/MvZkOYu1/Rm8CPpKqW7TI
mSM4H5E=
-----END CERTIFICATE-----
Generated at Tue May 7 03:49:57 2024 by rpki-client on console-ams.rpki-client.org