Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137242/0B608796CA3411E9BC769055C4F9AE02/F6C5480A7C1011EF97676539C4F9AE02.roa
File:                     F6C5480A7C1011EF97676539C4F9AE02.roa (raw, json)
Hash identifier:          G5E0ld16/NxVRFhbaeBuIdJHmsDoeWhuRW6eAAixqEc=
Subject key identifier:   54:5D:23:09:BB:A5:37:61:05:76:6E:90:D9:7C:83:3D:CC:1B:AA:01
Certificate issuer:       /CN=A9137242/serialNumber=EAB24A90C6D046CD83FB5EF4A3C598E4EA9A168C
Certificate serial:       071D
Authority key identifier: EA:B2:4A:90:C6:D0:46:CD:83:FB:5E:F4:A3:C5:98:E4:EA:9A:16:8C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6rJKkMbQRs2D-170o8WY5OqaFow.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137242/0B608796CA3411E9BC769055C4F9AE02/F6C5480A7C1011EF97676539C4F9AE02.roa
Signing time:             Thu 26 Sep 2024 14:09:37 +0000
ROA not before:           Thu 26 Sep 2024 14:09:37 +0000
ROA not after:            Sun 31 Aug 2025 00:00:00 +0000
asID:                     149994
IP address blocks:        103.139.144.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137242/0B608796CA3411E9BC769055C4F9AE02/6rJKkMbQRs2D-170o8WY5OqaFow.crl
                          rsync://rpki.apnic.net/member_repository/A9137242/0B608796CA3411E9BC769055C4F9AE02/6rJKkMbQRs2D-170o8WY5OqaFow.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6rJKkMbQRs2D-170o8WY5OqaFow.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 17:59:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1821 (0x71d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137242/serialNumber=EAB24A90C6D046CD83FB5EF4A3C598E4EA9A168C
        Validity
            Not Before: Sep 26 14:09:37 2024 GMT
            Not After : Aug 31 00:00:00 2025 GMT
        Subject: CN=66f56b21-4305
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:56:2b:c4:a3:91:48:88:e5:82:12:99:13:00:
                    b2:3a:34:91:7c:ff:04:62:c4:c9:66:98:4f:cd:60:
                    fe:ec:8a:49:b2:f0:be:3f:0d:e9:13:aa:e9:0c:20:
                    24:cf:99:7d:00:a2:e0:ab:c5:7a:0c:0d:1c:a7:3f:
                    99:38:7e:fe:f4:de:95:73:bf:f3:e6:ae:2e:50:01:
                    58:c1:44:38:15:fe:4a:fd:3e:d2:e4:07:5c:1c:74:
                    61:d3:bd:8b:d4:24:24:e9:8b:26:63:05:03:14:50:
                    51:11:7a:ce:74:7b:59:8d:f8:96:74:44:5e:15:e0:
                    6b:70:50:9d:2e:a0:4c:b7:8e:40:68:25:fc:9e:7b:
                    a5:42:2a:99:1c:0a:36:31:bf:58:17:72:b3:ce:ab:
                    c1:89:0f:bc:1d:64:b6:45:31:ce:fd:3d:ad:ce:c3:
                    ce:2d:45:59:b5:9f:b1:00:ea:85:c8:75:df:e6:51:
                    d5:d4:67:16:a3:d3:06:d3:bd:0e:6c:48:21:7d:e5:
                    94:90:f5:e4:0a:db:97:43:2a:ad:4d:c3:87:3e:e0:
                    68:5e:eb:45:26:90:2a:65:f7:6d:bd:43:d1:e0:14:
                    9e:57:2d:91:0b:5b:ba:fd:f1:68:9a:c3:f1:ef:2e:
                    6e:42:05:dc:84:0d:5d:f2:31:c2:d4:76:ed:74:bf:
                    a6:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:5D:23:09:BB:A5:37:61:05:76:6E:90:D9:7C:83:3D:CC:1B:AA:01
            X509v3 Authority Key Identifier:
                keyid:EA:B2:4A:90:C6:D0:46:CD:83:FB:5E:F4:A3:C5:98:E4:EA:9A:16:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137242/0B608796CA3411E9BC769055C4F9AE02/6rJKkMbQRs2D-170o8WY5OqaFow.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6rJKkMbQRs2D-170o8WY5OqaFow.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137242/0B608796CA3411E9BC769055C4F9AE02/F6C5480A7C1011EF97676539C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.139.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:ae:fb:04:72:05:47:63:5b:88:0c:f7:f0:fb:ad:51:74:39:
         77:48:2c:b1:6f:cd:74:e6:a0:c0:b0:0b:3a:c9:87:3d:3b:8a:
         da:c9:23:35:02:ec:1a:74:94:8c:ff:3b:cc:38:a2:ab:8d:83:
         37:26:c4:83:75:0d:d6:ec:39:2e:88:03:a0:d7:29:65:d3:4b:
         3e:74:5f:48:4e:0d:b5:64:3e:1f:b2:e9:21:03:79:3c:a3:fb:
         13:03:42:27:f8:e9:55:29:a8:65:2b:d5:ac:77:aa:69:52:29:
         18:79:ac:3a:2e:d6:c7:f5:79:23:09:8a:12:d5:80:f8:26:d7:
         42:4b:c5:13:a2:39:ff:bb:bf:5e:fd:34:8b:f3:bd:53:3b:8f:
         91:6a:e2:4d:38:ee:c4:60:7e:8a:d3:80:57:da:56:35:0a:31:
         65:c1:78:0a:ff:ff:65:05:8c:54:0e:fd:d5:86:d4:ba:41:da:
         e9:6e:1d:c1:a9:75:2c:43:c1:ca:31:34:5f:1c:bc:ff:2d:b5:
         44:ad:a8:44:fb:2e:75:95:a1:69:e6:a5:57:f3:4d:07:ca:2e:
         ba:94:8b:fb:bd:b3:38:7b:35:6c:3c:d8:f2:bd:f4:e6:90:94:
         5f:9b:86:32:b1:5c:6a:7e:bd:b0:f9:6b:6c:03:e5:d1:fd:04:
         ed:5f:eb:f6
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBx0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzcyNDIxMTAvBgNVBAUTKEVBQjI0QTkwQzZEMDQ2Q0Q4M0ZCNUVGNEEzQzU5OEU0
RUE5QTE2OEMwHhcNMjQwOTI2MTQwOTM3WhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmY1NmIyMS00MzA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA+FYrxKORSIjlghKZEwCyOjSRfP8EYsTJZphPzWD+7IpJsvC+Pw3pE6rpDCAk
z5l9AKLgq8V6DA0cpz+ZOH7+9N6Vc7/z5q4uUAFYwUQ4Ff5K/T7S5AdcHHRh072L
1CQk6YsmYwUDFFBREXrOdHtZjfiWdEReFeBrcFCdLqBMt45AaCX8nnulQiqZHAo2
Mb9YF3KzzqvBiQ+8HWS2RTHO/T2tzsPOLUVZtZ+xAOqFyHXf5lHV1GcWo9MG070O
bEghfeWUkPXkCtuXQyqtTcOHPuBoXutFJpAqZfdtvUPR4BSeVy2RC1u6/fFomsPx
7y5uQgXchA1d8jHC1HbtdL+mzwIDAQABo4IClTCCApEwHQYDVR0OBBYEFFRdIwm7
pTdhBXZukNl8gz3MG6oBMB8GA1UdIwQYMBaAFOqySpDG0EbNg/te9KPFmOTqmhaM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNzI0Mi8wQjYwODc5NkNB
MzQxMUU5QkM3NjkwNTVDNEY5QUUwMi82ckpLa01iUVJzMkQtMTcwbzhXWTVPcWFG
b3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzZySktrTWJRUnMyRC0xNzBvOFdZNU9xYUZvdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzcyNDIvMEI2MDg3OTZDQTM0MTFFOUJDNzY5MDU1QzRGOUFFMDIvRjZDNTQ4MEE3
QzEwMTFFRjk3Njc2NTM5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABni5AwDQYJKoZIhvcNAQELBQADggEBAHyu+wRyBUdjW4gM
9/D7rVF0OXdILLFvzXTmoMCwCzrJhz07itrJIzUC7Bp0lIz/O8w4oquNgzcmxIN1
DdbsOS6IA6DXKWXTSz50X0hODbVkPh+y6SEDeTyj+xMDQif46VUpqGUr1ax3qmlS
KRh5rDou1sf1eSMJihLVgPgm10JLxROiOf+7v179NIvzvVM7j5Fq4k047sRgforT
gFfaVjUKMWXBeAr//2UFjFQO/dWG1LpB2uluHcGpdSxDwcoxNF8cvP8ttUStqET7
LnWVoWnmpVfzTQfKLrqUi/u9szh7NWw82PK99OaQlF+bhjKxXGp+vbD5a2wD5dH9
BO1f6/Y=
-----END CERTIFICATE-----
Generated at Fri Nov 22 19:49:59 2024 by rpki-client on console-ams.rpki-client.org