Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913367F/A2219058128B11EBBFA2C47EC4F9AE02/CD96463A902B11EF939FE054C4F9AE02.roa
File:                     CD96463A902B11EF939FE054C4F9AE02.roa (raw, json)
Hash identifier:          HHIIbsJLZJL+WWOwCq1yJgXWGAU9pZ/Tv7+hWTrKAIY=
Subject key identifier:   65:E6:D8:E3:97:60:5F:BE:00:AB:5E:A2:F5:A1:C7:FB:13:13:F7:DF
Certificate issuer:       /CN=A913367F/serialNumber=D4EA9464F322B26D7D2128DC3752F228880016DA
Certificate serial:       0737
Authority key identifier: D4:EA:94:64:F3:22:B2:6D:7D:21:28:DC:37:52:F2:28:88:00:16:DA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1OqUZPMism19ISjcN1LyKIgAFto.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913367F/A2219058128B11EBBFA2C47EC4F9AE02/CD96463A902B11EF939FE054C4F9AE02.roa
Signing time:             Sat 09 Nov 2024 17:27:21 +0000
ROA not before:           Sat 09 Nov 2024 17:27:21 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     132480
IP address blocks:        103.104.212.0/24 maxlen: 24
                          103.104.215.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913367F/A2219058128B11EBBFA2C47EC4F9AE02/1OqUZPMism19ISjcN1LyKIgAFto.crl
                          rsync://rpki.apnic.net/member_repository/A913367F/A2219058128B11EBBFA2C47EC4F9AE02/1OqUZPMism19ISjcN1LyKIgAFto.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1OqUZPMism19ISjcN1LyKIgAFto.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1847 (0x737)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913367F/serialNumber=D4EA9464F322B26D7D2128DC3752F228880016DA
        Validity
            Not Before: Nov  9 17:27:21 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=672f9b79-d1da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:be:25:7d:6f:91:08:56:6b:19:f4:fc:f1:a4:
                    c7:f8:f3:5d:96:09:4b:c9:4a:58:c9:4a:d5:8a:31:
                    d6:fe:d8:56:39:47:04:81:01:e9:53:37:07:91:13:
                    e8:9c:fd:05:66:ba:9c:5f:61:0e:1a:d6:63:ec:92:
                    fe:f6:35:4a:ef:36:9b:60:07:09:bf:01:f6:7f:da:
                    7a:64:88:62:1b:72:43:18:5c:95:70:92:ca:94:07:
                    57:a2:5c:c1:10:e9:3d:c9:a6:6a:b1:84:7c:3c:f3:
                    a6:24:f7:55:20:3a:1a:d2:9a:8e:e8:5a:ec:b5:11:
                    ca:8a:eb:f5:35:db:c7:b3:8b:ce:92:06:4c:86:f8:
                    bf:af:01:8a:2d:2c:61:c1:b8:27:7e:c7:5f:d6:55:
                    6d:d2:e6:35:9d:30:02:7b:fe:ab:2c:b3:6b:0f:24:
                    95:43:89:5e:f4:fb:6e:ad:8b:48:73:42:b5:0d:8e:
                    45:0e:4d:5e:61:f5:8d:89:1d:71:30:cd:68:a8:a4:
                    21:97:71:0f:9b:55:9f:8c:93:eb:1b:a1:76:45:96:
                    71:6e:60:ea:35:42:e0:0f:b9:17:79:69:c8:1a:55:
                    e5:bf:b5:37:66:6b:36:ce:65:0f:fa:d6:64:61:fa:
                    47:df:00:2f:7f:ce:12:60:33:64:1a:0d:d6:fb:ef:
                    8b:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:E6:D8:E3:97:60:5F:BE:00:AB:5E:A2:F5:A1:C7:FB:13:13:F7:DF
            X509v3 Authority Key Identifier:
                keyid:D4:EA:94:64:F3:22:B2:6D:7D:21:28:DC:37:52:F2:28:88:00:16:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913367F/A2219058128B11EBBFA2C47EC4F9AE02/1OqUZPMism19ISjcN1LyKIgAFto.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1OqUZPMism19ISjcN1LyKIgAFto.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913367F/A2219058128B11EBBFA2C47EC4F9AE02/CD96463A902B11EF939FE054C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.104.212.0/24
                  103.104.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:a1:b4:91:a1:76:88:7e:7f:4b:e8:80:57:1a:1d:8e:38:31:
         0d:90:3d:54:39:0b:2c:32:e4:7c:21:96:7f:16:86:e6:e4:8d:
         01:bf:af:42:77:a9:d1:32:0c:82:77:66:40:45:8e:dc:6d:3f:
         d6:fb:fd:91:ce:19:69:6a:33:2a:21:ed:02:a4:d7:54:1d:08:
         4f:cf:5e:b9:a5:5f:e7:27:1a:fb:97:d3:c4:98:3d:8a:44:c6:
         07:bc:42:61:95:48:4e:fa:05:a3:ad:4c:a4:b7:f4:f7:52:f4:
         58:51:5b:01:20:7b:3c:b5:d8:6b:c0:22:06:43:1a:c1:02:80:
         8e:23:c3:ea:ed:cc:e6:96:c1:07:b9:53:8a:43:b2:d4:8a:09:
         5e:90:bd:62:b0:30:d7:22:6d:a0:f1:17:00:ea:c6:56:03:2c:
         7a:21:7d:c6:58:b7:f4:bb:b5:f3:cf:b2:b7:db:25:45:d3:a8:
         49:de:c7:76:d2:48:94:68:92:56:b5:d6:22:a4:85:25:01:ff:
         e0:60:7a:d0:cf:3e:d2:5e:d8:3c:2d:47:b4:bb:11:4c:98:bf:
         8e:2f:97:44:1e:db:44:8f:b8:a6:ad:2c:f3:c2:05:1a:fd:ab:
         04:c3:ef:a2:25:80:ed:de:33:03:ec:2a:06:f3:1c:62:33:30:
         25:ca:11:3e
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICBzcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzM2N0YxMTAvBgNVBAUTKEQ0RUE5NDY0RjMyMkIyNkQ3RDIxMjhEQzM3NTJGMjI4
ODgwMDE2REEwHhcNMjQxMTA5MTcyNzIxWhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzJmOWI3OS1kMWRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsr4lfW+RCFZrGfT88aTH+PNdlglLyUpYyUrVijHW/thWOUcEgQHpUzcHkRPo
nP0FZrqcX2EOGtZj7JL+9jVK7zabYAcJvwH2f9p6ZIhiG3JDGFyVcJLKlAdXolzB
EOk9yaZqsYR8PPOmJPdVIDoa0pqO6FrstRHKiuv1NdvHs4vOkgZMhvi/rwGKLSxh
wbgnfsdf1lVt0uY1nTACe/6rLLNrDySVQ4le9PturYtIc0K1DY5FDk1eYfWNiR1x
MM1oqKQhl3EPm1WfjJPrG6F2RZZxbmDqNULgD7kXeWnIGlXlv7U3Zms2zmUP+tZk
YfpH3wAvf84SYDNkGg3W+++L7wIDAQABo4ICmzCCApcwHQYDVR0OBBYEFGXm2OOX
YF++AKteovWhx/sTE/ffMB8GA1UdIwQYMBaAFNTqlGTzIrJtfSEo3DdS8iiIABba
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMzY3Ri9BMjIxOTA1ODEy
OEIxMUVCQkZBMkM0N0VDNEY5QUUwMi8xT3FVWlBNaXNtMTlJU2pjTjFMeUtJZ0FG
dG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzFPcVVaUE1pc20xOUlTamNOMUx5S0lnQUZ0by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzM2N0YvQTIyMTkwNTgxMjhCMTFFQkJGQTJDNDdFQzRGOUFFMDIvQ0Q5NjQ2M0E5
MDJCMTFFRjkzOUZFMDU0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBABnaNQDBABnaNcwDQYJKoZIhvcNAQELBQADggEBAIChtJGh
doh+f0vogFcaHY44MQ2QPVQ5Cywy5Hwhln8WhubkjQG/r0J3qdEyDIJ3ZkBFjtxt
P9b7/ZHOGWlqMyoh7QKk11QdCE/PXrmlX+cnGvuX08SYPYpExge8QmGVSE76BaOt
TKS39PdS9FhRWwEgezy12GvAIgZDGsECgI4jw+rtzOaWwQe5U4pDstSKCV6QvWKw
MNcibaDxFwDqxlYDLHohfcZYt/S7tfPPsrfbJUXTqEnex3bSSJRokla11iKkhSUB
/+BgetDPPtJe2DwtR7S7EUyYv44vl0Qe20SPuKatLPPCBRr9qwTD76IlgO3eMwPs
KgbzHGIzMCXKET4=
-----END CERTIFICATE-----
Generated at Fri Nov 22 22:24:06 2024 by rpki-client on console-fra.rpki-client.org