Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137730/3A49E70E12DD11EABD95596DC4F9AE02/1776D6CE16B111EAAD7D084AC4F9AE02.roa
File:                     1776D6CE16B111EAAD7D084AC4F9AE02.roa (raw, json)
Hash identifier:          zKVWIo/ijyHnnaofhrkb9doq9/PhIYNnKSPWfXTf04w=
Subject key identifier:   32:C4:BA:67:65:31:AB:A1:B2:18:F4:F4:51:95:E6:6C:97:3F:D6:5C
Certificate issuer:       /CN=A9137730/serialNumber=0E318A6A941E60C990861D869B203948C8B48841
Certificate serial:       0B7D
Authority key identifier: 0E:31:8A:6A:94:1E:60:C9:90:86:1D:86:9B:20:39:48:C8:B4:88:41
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DjGKapQeYMmQhh2GmyA5SMi0iEE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137730/3A49E70E12DD11EABD95596DC4F9AE02/1776D6CE16B111EAAD7D084AC4F9AE02.roa
Signing time:             Fri 30 Aug 2024 19:57:39 +0000
ROA not before:           Fri 30 Aug 2024 19:57:39 +0000
ROA not after:            Tue 30 Sep 2025 00:00:00 +0000
asID:                     4
IP address blocks:        103.140.158.0/24 maxlen: 24
                          103.140.159.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137730/3A49E70E12DD11EABD95596DC4F9AE02/DjGKapQeYMmQhh2GmyA5SMi0iEE.crl
                          rsync://rpki.apnic.net/member_repository/A9137730/3A49E70E12DD11EABD95596DC4F9AE02/DjGKapQeYMmQhh2GmyA5SMi0iEE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DjGKapQeYMmQhh2GmyA5SMi0iEE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 18:41:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2941 (0xb7d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137730/serialNumber=0E318A6A941E60C990861D869B203948C8B48841
        Validity
            Not Before: Aug 30 19:57:39 2024 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=66d22433-f36a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:cc:c0:12:32:2b:53:51:de:1e:f1:29:d1:e0:
                    02:ca:e4:da:66:aa:58:86:35:99:41:b6:39:fa:a6:
                    35:d5:64:46:d6:f3:6c:ff:46:90:86:26:ac:8c:20:
                    c8:e9:9f:13:1d:5a:04:96:40:36:53:7e:b3:19:51:
                    f5:4e:02:b7:80:8e:c0:50:71:90:dd:b2:c0:83:51:
                    12:fa:fe:0b:02:a7:49:9a:a6:b0:56:d3:4c:fe:11:
                    0a:3e:8f:a0:39:47:6d:c0:98:35:39:b5:b3:8a:0c:
                    d9:b8:a8:e4:ff:c9:1d:c4:e2:72:c4:2f:03:fd:ed:
                    34:61:ad:01:99:f7:63:14:a7:b9:b2:d2:21:75:37:
                    f2:1c:33:54:5e:27:ad:ef:89:bd:13:99:0c:e9:24:
                    d1:84:56:08:c8:28:f8:87:32:52:43:79:ec:78:54:
                    00:07:29:80:e4:53:80:52:62:58:38:7a:21:09:7e:
                    3f:04:2e:11:82:b0:dc:b8:0b:c3:1c:1a:89:e3:a7:
                    18:e6:03:0d:30:4b:5a:40:db:1f:27:95:22:95:d0:
                    db:d9:64:03:63:48:57:f9:92:fb:79:24:5b:81:fc:
                    bb:3b:43:c3:d3:e9:f7:a3:da:01:67:67:c5:aa:5a:
                    de:c3:a0:68:a8:cf:cd:a5:49:69:76:3d:f9:9e:be:
                    dc:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:C4:BA:67:65:31:AB:A1:B2:18:F4:F4:51:95:E6:6C:97:3F:D6:5C
            X509v3 Authority Key Identifier:
                keyid:0E:31:8A:6A:94:1E:60:C9:90:86:1D:86:9B:20:39:48:C8:B4:88:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137730/3A49E70E12DD11EABD95596DC4F9AE02/DjGKapQeYMmQhh2GmyA5SMi0iEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DjGKapQeYMmQhh2GmyA5SMi0iEE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137730/3A49E70E12DD11EABD95596DC4F9AE02/1776D6CE16B111EAAD7D084AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.140.158.0/23

    Signature Algorithm: sha256WithRSAEncryption
         26:22:47:c8:fc:95:44:ad:d1:53:08:81:f7:c9:88:35:ba:1e:
         09:1b:8f:20:dc:8a:e1:60:4c:a1:a8:0b:ca:6c:a6:4e:61:19:
         d7:58:ee:c7:9a:a8:eb:59:b7:1d:2e:41:d7:f6:a2:ea:23:f5:
         d4:47:e5:36:55:6a:45:f7:28:fb:ae:0d:17:44:8e:1a:32:3c:
         e1:44:3d:82:59:4e:47:8d:b3:f0:74:5c:b7:b6:14:7f:7f:42:
         ea:dc:52:df:08:38:59:75:ca:ac:1f:2a:71:36:58:ff:29:52:
         ac:98:e3:38:8d:40:41:35:fe:d8:4d:e2:c1:d3:e4:96:9a:66:
         07:60:7b:9e:15:6e:80:67:45:7f:8f:0b:ae:66:3c:7d:34:34:
         57:23:a2:01:2e:61:00:34:f1:12:54:64:56:26:9a:a9:06:6d:
         11:08:b4:d0:a5:69:6e:ee:e1:e1:fa:7e:08:01:73:8d:b0:24:
         6f:f6:78:d2:26:f1:86:49:00:64:a0:ff:10:fc:44:2b:37:8f:
         38:b0:31:22:9e:91:a5:20:ca:21:4b:bc:2d:af:a7:26:23:b0:
         9f:c4:d9:fa:2b:f2:28:1a:a6:b1:40:fc:4a:e1:39:ee:61:d9:
         b1:a7:df:fc:06:7d:fe:d3:7e:c0:5f:72:6b:19:be:a9:b5:3d:
         a1:0e:b9:50
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICC30wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Mzc3MzAxMTAvBgNVBAUTKDBFMzE4QTZBOTQxRTYwQzk5MDg2MUQ4NjlCMjAzOTQ4
QzhCNDg4NDEwHhcNMjQwODMwMTk1NzM5WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmQyMjQzMy1mMzZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtMzAEjIrU1HeHvEp0eACyuTaZqpYhjWZQbY5+qY11WRG1vNs/0aQhiasjCDI
6Z8THVoElkA2U36zGVH1TgK3gI7AUHGQ3bLAg1ES+v4LAqdJmqawVtNM/hEKPo+g
OUdtwJg1ObWzigzZuKjk/8kdxOJyxC8D/e00Ya0BmfdjFKe5stIhdTfyHDNUXiet
74m9E5kM6STRhFYIyCj4hzJSQ3nseFQABymA5FOAUmJYOHohCX4/BC4RgrDcuAvD
HBqJ46cY5gMNMEtaQNsfJ5UildDb2WQDY0hX+ZL7eSRbgfy7O0PD0+n3o9oBZ2fF
qlrew6BoqM/NpUlpdj35nr7c8wIDAQABo4IClTCCApEwHQYDVR0OBBYEFDLEumdl
Mauhshj09FGV5myXP9ZcMB8GA1UdIwQYMBaAFA4ximqUHmDJkIYdhpsgOUjItIhB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNzczMC8zQTQ5RTcwRTEy
REQxMUVBQkQ5NTU5NkRDNEY5QUUwMi9EakdLYXBRZVlNbVFoaDJHbXlBNVNNaTBp
RUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0RqR0thcFFlWU1tUWhoMkdteUE1U01pMGlFRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Mzc3MzAvM0E0OUU3MEUxMkREMTFFQUJEOTU1OTZEQzRGOUFFMDIvMTc3NkQ2Q0Ux
NkIxMTFFQUFEN0QwODRBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnjJ4wDQYJKoZIhvcNAQELBQADggEBACYiR8j8lUSt0VMI
gffJiDW6HgkbjyDciuFgTKGoC8pspk5hGddY7seaqOtZtx0uQdf2ouoj9dRH5TZV
akX3KPuuDRdEjhoyPOFEPYJZTkeNs/B0XLe2FH9/QurcUt8IOFl1yqwfKnE2WP8p
UqyY4ziNQEE1/thN4sHT5JaaZgdge54VboBnRX+PC65mPH00NFcjogEuYQA08RJU
ZFYmmqkGbREItNClaW7u4eH6fggBc42wJG/2eNIm8YZJAGSg/xD8RCs3jziwMSKe
kaUgyiFLvC2vpyYjsJ/E2for8igaprFA/ErhOe5h2bGn3/wGff7TfsBfcmsZvqm1
PaEOuVA=
-----END CERTIFICATE-----
Generated at Wed Nov 20 20:07:21 2024 by rpki-client on console-fra.rpki-client.org