Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/E1201A0422D611EFAE700044C4F9AE02.roa
File:                     E1201A0422D611EFAE700044C4F9AE02.roa (raw, json)
Hash identifier:          6KG4K+YscUuCOPJskrNXUVs3OZB2ppYjCB4dtTgCAMw=
Subject key identifier:   4B:71:FE:25:48:31:45:41:9D:C8:11:17:EC:3E:0E:43:2D:F1:17:36
Certificate issuer:       /CN=A9132B4D/serialNumber=23F5D93A82E7D7840679B1C64DA37C37CFFE77EF
Certificate serial:       05A6
Authority key identifier: 23:F5:D9:3A:82:E7:D7:84:06:79:B1:C6:4D:A3:7C:37:CF:FE:77:EF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I_XZOoLn14QGebHGTaN8N8_-d-8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/E1201A0422D611EFAE700044C4F9AE02.roa
Signing time:             Wed 05 Jun 2024 00:59:37 +0000
ROA not before:           Wed 05 Jun 2024 00:59:37 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     209242
IP address blocks:        103.15.85.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/I_XZOoLn14QGebHGTaN8N8_-d-8.crl
                          rsync://rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/I_XZOoLn14QGebHGTaN8N8_-d-8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I_XZOoLn14QGebHGTaN8N8_-d-8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 20:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1446 (0x5a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9132B4D/serialNumber=23F5D93A82E7D7840679B1C64DA37C37CFFE77EF
        Validity
            Not Before: Jun  5 00:59:37 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=665fb878-5f79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:ef:13:69:60:27:fb:82:19:40:ea:af:71:12:
                    8d:f2:6b:22:19:80:63:b3:16:e5:55:b4:3b:3a:a4:
                    f7:d1:d2:a6:76:1f:87:fe:91:27:dc:23:53:19:3e:
                    02:80:aa:7d:46:8a:39:43:1e:a6:2c:49:65:46:d6:
                    17:4a:a4:b7:56:09:f1:be:90:75:15:4f:ef:97:3c:
                    61:da:5a:9f:dc:0c:e7:91:9e:ce:ef:2f:1f:41:7c:
                    c4:af:a4:3c:42:fa:f2:c7:43:7a:4c:51:41:26:c2:
                    4d:93:52:94:4f:6b:4a:1a:a1:d3:48:0f:2f:5c:f1:
                    10:11:2a:bf:36:47:c2:ec:72:32:1e:82:f6:5f:da:
                    ab:dc:4c:e6:c0:b2:15:dc:09:eb:39:b0:1c:46:fe:
                    0e:6b:f5:c1:d3:cd:c1:d0:d7:d7:01:5a:2e:d7:91:
                    f4:56:d2:1c:52:74:af:b2:d5:70:0c:70:1f:b5:91:
                    73:23:74:c8:ea:ab:e6:2a:c3:47:45:64:7b:8d:9c:
                    a4:af:3d:cc:a3:bf:c4:22:01:00:cd:17:50:58:02:
                    79:f5:9a:ed:dd:bc:21:54:bf:3b:6f:82:c9:94:9c:
                    24:99:b0:55:f0:47:5f:f1:23:bc:6e:52:00:f5:b3:
                    91:98:48:eb:eb:d5:f2:36:0f:fd:24:5a:cc:b0:bc:
                    a0:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:71:FE:25:48:31:45:41:9D:C8:11:17:EC:3E:0E:43:2D:F1:17:36
            X509v3 Authority Key Identifier:
                keyid:23:F5:D9:3A:82:E7:D7:84:06:79:B1:C6:4D:A3:7C:37:CF:FE:77:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/I_XZOoLn14QGebHGTaN8N8_-d-8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I_XZOoLn14QGebHGTaN8N8_-d-8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/E1201A0422D611EFAE700044C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.15.85.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:a0:c6:b1:e3:d0:40:6f:d9:a4:10:f9:72:16:00:35:77:f1:
         a2:4e:16:58:53:f8:84:e1:36:19:e1:44:93:df:25:67:7e:3c:
         45:8a:bb:a8:f5:32:4d:f6:f0:c1:93:fe:19:7f:b5:11:20:56:
         5a:b3:20:3a:2f:e5:35:b3:c1:fe:4a:9f:5f:e5:72:f9:ff:98:
         67:24:74:2a:8f:6e:6b:d4:a8:ab:fc:d7:14:bc:f4:a0:18:3c:
         11:b4:83:62:d6:a3:89:51:04:fd:34:ac:c1:bd:ef:23:d2:63:
         1b:9e:bf:cf:79:3c:b6:e5:42:1b:dd:6d:02:de:1e:80:af:e7:
         00:64:37:68:a7:18:bb:42:6e:ad:a3:7a:6a:5f:ed:ec:9c:58:
         ec:25:27:ba:2d:11:27:76:e7:dd:b5:c9:5d:29:ae:3b:09:6f:
         55:0c:5e:26:35:15:a8:f8:a8:24:25:b2:f7:da:e1:f5:06:98:
         44:77:81:cd:e9:87:d1:5e:c1:0d:14:fc:6c:61:c5:a5:2d:b9:
         c9:26:61:21:54:e0:1b:ef:2b:87:e4:a0:d5:c2:75:ff:4e:91:
         ec:48:65:ff:0e:c7:1d:be:a5:63:db:31:37:bd:b3:a0:7c:f6:
         54:03:bc:7a:bf:3c:d8:21:ff:d4:7a:13:65:64:08:f2:32:2d:
         5c:c2:63:d2
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBaYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzJCNEQxMTAvBgNVBAUTKDIzRjVEOTNBODJFN0Q3ODQwNjc5QjFDNjREQTM3QzM3
Q0ZGRTc3RUYwHhcNMjQwNjA1MDA1OTM3WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NjVmYjg3OC01Zjc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2e8TaWAn+4IZQOqvcRKN8msiGYBjsxblVbQ7OqT30dKmdh+H/pEn3CNTGT4C
gKp9Roo5Qx6mLEllRtYXSqS3VgnxvpB1FU/vlzxh2lqf3AznkZ7O7y8fQXzEr6Q8
Qvryx0N6TFFBJsJNk1KUT2tKGqHTSA8vXPEQESq/NkfC7HIyHoL2X9qr3EzmwLIV
3AnrObAcRv4Oa/XB083B0NfXAVou15H0VtIcUnSvstVwDHAftZFzI3TI6qvmKsNH
RWR7jZykrz3Mo7/EIgEAzRdQWAJ59Zrt3bwhVL87b4LJlJwkmbBV8Edf8SO8blIA
9bORmEjr69XyNg/9JFrMsLygbwIDAQABo4IClTCCApEwHQYDVR0OBBYEFEtx/iVI
MUVBncgRF+w+DkMt8Rc2MB8GA1UdIwQYMBaAFCP12TqC59eEBnmxxk2jfDfP/nfv
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMkI0RC9DMTk5RTAwNkIy
MDUxMUVCQUVBRTlGMTBDNEY5QUUwMi9JX1haT29MbjE0UUdlYkhHVGFOOE44Xy1k
LTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0lfWFpPb0xuMTRRR2ViSEdUYU44TjhfLWQtOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzJCNEQvQzE5OUUwMDZCMjA1MTFFQkFFQUU5RjEwQzRGOUFFMDIvRTEyMDFBMDQy
MkQ2MTFFRkFFNzAwMDQ0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnD1UwDQYJKoZIhvcNAQELBQADggEBAF+gxrHj0EBv2aQQ
+XIWADV38aJOFlhT+IThNhnhRJPfJWd+PEWKu6j1Mk328MGT/hl/tREgVlqzIDov
5TWzwf5Kn1/lcvn/mGckdCqPbmvUqKv81xS89KAYPBG0g2LWo4lRBP00rMG97yPS
Yxuev895PLblQhvdbQLeHoCv5wBkN2inGLtCbq2jempf7eycWOwlJ7otESd25921
yV0prjsJb1UMXiY1Faj4qCQlsvfa4fUGmER3gc3ph9FewQ0U/GxhxaUtuckmYSFU
4BvvK4fkoNXCdf9OkexIZf8Oxx2+pWPbMTe9s6B89lQDvHq/PNgh/9R6E2VkCPIy
LVzCY9I=
-----END CERTIFICATE-----
Generated at Thu Nov 21 00:21:19 2024 by rpki-client on console-fra.rpki-client.org