Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913149F/DF01580808FC11EAA891A575C4F9AE02/78550A2608FE11EAA003E778C4F9AE02.roa
File:                     78550A2608FE11EAA003E778C4F9AE02.roa (raw, json)
Hash identifier:          oFYr2yy9dMefE9Z1wzHmLqOiXmS6OATdYeTX4qCFAV0=
Subject key identifier:   66:AD:9E:7C:EA:3C:F4:CF:9F:3A:A6:64:0E:43:28:E1:72:1A:C5:6D
Certificate issuer:       /CN=A913149F/serialNumber=2ADD5AD8FB43ADD80D52BB583693C31B8D9AB2EC
Certificate serial:       0B42
Authority key identifier: 2A:DD:5A:D8:FB:43:AD:D8:0D:52:BB:58:36:93:C3:1B:8D:9A:B2:EC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kt1a2PtDrdgNUrtYNpPDG42asuw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913149F/DF01580808FC11EAA891A575C4F9AE02/78550A2608FE11EAA003E778C4F9AE02.roa
Signing time:             Sat 02 Mar 2024 19:28:15 +0000
ROA not before:           Sat 02 Mar 2024 19:28:15 +0000
ROA not after:            Thu 01 May 2025 00:00:00 +0000
asID:                     137415
IP address blocks:        103.107.184.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913149F/DF01580808FC11EAA891A575C4F9AE02/Kt1a2PtDrdgNUrtYNpPDG42asuw.crl
                          rsync://rpki.apnic.net/member_repository/A913149F/DF01580808FC11EAA891A575C4F9AE02/Kt1a2PtDrdgNUrtYNpPDG42asuw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kt1a2PtDrdgNUrtYNpPDG42asuw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 18:31:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2882 (0xb42)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913149F/serialNumber=2ADD5AD8FB43ADD80D52BB583693C31B8D9AB2EC
        Validity
            Not Before: Mar  2 19:28:15 2024 GMT
            Not After : May  1 00:00:00 2025 GMT
        Subject: CN=65e37dcf-22ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:34:00:71:52:23:ff:54:4c:23:6e:89:78:2a:
                    1a:65:b3:6e:00:2a:2c:d9:2b:87:66:4c:c8:25:a1:
                    24:aa:29:2f:76:53:c7:78:42:17:d6:19:27:a7:40:
                    6d:35:a9:e0:83:32:29:4f:e6:59:fa:c4:6c:95:1e:
                    64:32:26:66:72:57:80:1b:8d:95:86:51:25:e0:03:
                    90:01:a1:4f:3b:3a:71:b2:e4:8d:3d:64:f0:19:88:
                    a0:8e:69:48:7e:46:6e:2f:88:a1:31:ea:73:e5:35:
                    16:09:db:a3:98:a1:93:e7:15:a5:0e:9b:1c:48:b1:
                    d4:7d:c1:9a:1f:38:c2:87:8f:38:05:1c:0c:08:70:
                    d9:aa:07:89:8c:5d:6a:0a:30:46:60:49:20:0c:cf:
                    1a:da:4f:6a:1d:90:6f:22:4f:ed:a1:87:5e:db:7f:
                    e4:cb:53:81:a0:bd:63:be:96:ea:10:c9:29:ad:12:
                    a9:ce:d6:f6:83:67:aa:ec:b5:cf:ed:45:ef:d1:5c:
                    4b:48:73:ed:5c:bb:72:49:69:6c:b8:e0:31:71:c2:
                    2a:d1:77:13:d5:51:1d:d0:12:21:e4:a4:03:18:b6:
                    32:bb:2f:a6:56:a1:96:ae:ad:f9:c0:d8:7d:b5:8e:
                    fe:5a:b8:c3:a4:03:59:fb:42:29:5b:58:3e:62:3d:
                    cd:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:AD:9E:7C:EA:3C:F4:CF:9F:3A:A6:64:0E:43:28:E1:72:1A:C5:6D
            X509v3 Authority Key Identifier:
                keyid:2A:DD:5A:D8:FB:43:AD:D8:0D:52:BB:58:36:93:C3:1B:8D:9A:B2:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913149F/DF01580808FC11EAA891A575C4F9AE02/Kt1a2PtDrdgNUrtYNpPDG42asuw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kt1a2PtDrdgNUrtYNpPDG42asuw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913149F/DF01580808FC11EAA891A575C4F9AE02/78550A2608FE11EAA003E778C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.107.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:5d:da:2e:c0:16:d7:2f:4d:67:11:b7:0b:f5:fa:2a:18:bd:
         68:82:1a:f0:72:7f:8f:53:5d:e4:77:13:bd:36:fa:40:2e:ca:
         a5:c3:c5:d1:b1:6a:19:d0:34:17:75:60:f5:7d:2b:93:39:50:
         ac:9d:72:1d:23:d0:49:92:9a:3f:26:0c:37:86:8a:68:5e:48:
         b8:b9:9e:ea:9b:82:04:a1:80:ab:bf:d3:d7:16:34:62:d3:eb:
         9d:3d:26:fe:74:aa:4a:63:78:08:d7:98:ab:e8:97:1b:27:31:
         bd:ac:c6:bb:eb:6d:85:d8:60:3e:01:25:c3:f0:34:3d:18:bc:
         6a:29:b5:55:9d:c8:c6:55:d1:df:7d:9b:29:48:e1:8c:df:a1:
         ed:ef:fa:43:b8:e8:af:bf:ab:79:df:83:7e:e7:37:49:74:bc:
         65:fc:9e:63:29:6b:93:46:9d:aa:f4:f4:6e:cd:19:d4:4c:f5:
         d3:6a:39:16:10:df:3c:08:9f:00:02:5f:63:e9:34:8d:3d:0a:
         1a:ba:5c:b0:fe:0b:49:b8:15:91:eb:a2:fb:ba:97:7f:e3:b6:
         81:e6:5b:66:49:2f:64:ac:c9:ce:14:46:82:a1:8c:f1:87:27:
         68:a6:79:2e:b2:0a:ab:6f:1a:bc:0c:cb:b9:26:50:83:4d:8d:
         b8:eb:0a:e3
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICC0IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzE0OUYxMTAvBgNVBAUTKDJBREQ1QUQ4RkI0M0FERDgwRDUyQkI1ODM2OTNDMzFC
OEQ5QUIyRUMwHhcNMjQwMzAyMTkyODE1WhcNMjUwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NWUzN2RjZi0yMmVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxTQAcVIj/1RMI26JeCoaZbNuACos2SuHZkzIJaEkqikvdlPHeEIX1hknp0Bt
NanggzIpT+ZZ+sRslR5kMiZmcleAG42VhlEl4AOQAaFPOzpxsuSNPWTwGYigjmlI
fkZuL4ihMepz5TUWCdujmKGT5xWlDpscSLHUfcGaHzjCh484BRwMCHDZqgeJjF1q
CjBGYEkgDM8a2k9qHZBvIk/toYde23/ky1OBoL1jvpbqEMkprRKpztb2g2eq7LXP
7UXv0VxLSHPtXLtySWlsuOAxccIq0XcT1VEd0BIh5KQDGLYyuy+mVqGWrq35wNh9
tY7+WrjDpANZ+0IpW1g+Yj3NNQIDAQABo4IClTCCApEwHQYDVR0OBBYEFGatnnzq
PPTPnzqmZA5DKOFyGsVtMB8GA1UdIwQYMBaAFCrdWtj7Q63YDVK7WDaTwxuNmrLs
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTQ5Ri9ERjAxNTgwODA4
RkMxMUVBQTg5MUE1NzVDNEY5QUUwMi9LdDFhMlB0RHJkZ05VcnRZTnBQREc0MmFz
dXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0t0MWEyUHREcmRnTlVydFlOcFBERzQyYXN1dy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzE0OUYvREYwMTU4MDgwOEZDMTFFQUE4OTFBNTc1QzRGOUFFMDIvNzg1NTBBMjYw
OEZFMTFFQUEwMDNFNzc4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABna7gwDQYJKoZIhvcNAQELBQADggEBAHld2i7AFtcvTWcR
twv1+ioYvWiCGvByf49TXeR3E702+kAuyqXDxdGxahnQNBd1YPV9K5M5UKydch0j
0EmSmj8mDDeGimheSLi5nuqbggShgKu/09cWNGLT6509Jv50qkpjeAjXmKvolxsn
Mb2sxrvrbYXYYD4BJcPwND0YvGoptVWdyMZV0d99mylI4Yzfoe3v+kO46K+/q3nf
g37nN0l0vGX8nmMpa5NGnar09G7NGdRM9dNqORYQ3zwInwACX2PpNI09Chq6XLD+
C0m4FZHrovu6l3/jtoHmW2ZJL2Ssyc4URoKhjPGHJ2imeS6yCqtvGrwMy7kmUINN
jbjrCuM=
-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:57 2024 by rpki-client on console-fra.rpki-client.org