Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913A74D/68A1D55AC72611EA9955E410C4F9AE02/833D8D9AC72711EA8890F311C4F9AE02.roa
File:                     833D8D9AC72711EA8890F311C4F9AE02.roa (raw, json)
Hash identifier:          GaNx+dXrsytUQ0749Aa4Y2z410Uh3udKHikqQ1quh+s=
Subject key identifier:   98:CD:BE:A4:B6:E3:9A:31:E6:B1:D2:C3:33:62:98:79:8C:C2:AF:D5
Certificate issuer:       /CN=A913A74D/serialNumber=D504D81902B1838B282AE9F45C4DC3F8178E24EE
Certificate serial:       070F
Authority key identifier: D5:04:D8:19:02:B1:83:8B:28:2A:E9:F4:5C:4D:C3:F8:17:8E:24:EE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1QTYGQKxg4soKun0XE3D-BeOJO4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913A74D/68A1D55AC72611EA9955E410C4F9AE02/833D8D9AC72711EA8890F311C4F9AE02.roa
Signing time:             Tue 08 Aug 2023 21:38:28 +0000
ROA not before:           Tue 08 Aug 2023 21:38:28 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     131240
IP address blocks:        103.68.107.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913A74D/68A1D55AC72611EA9955E410C4F9AE02/1QTYGQKxg4soKun0XE3D-BeOJO4.crl
                          rsync://rpki.apnic.net/member_repository/A913A74D/68A1D55AC72611EA9955E410C4F9AE02/1QTYGQKxg4soKun0XE3D-BeOJO4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1QTYGQKxg4soKun0XE3D-BeOJO4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 19:51:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1807 (0x70f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913A74D/serialNumber=D504D81902B1838B282AE9F45C4DC3F8178E24EE
        Validity
            Not Before: Aug  8 21:38:28 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=64d2b5d4-9437
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:bc:dc:56:d8:1c:13:2f:77:a0:57:89:51:95:
                    aa:f0:d0:ec:3f:a0:80:a9:d0:fd:52:74:13:bf:29:
                    71:56:d5:a0:83:4e:6b:5c:a1:e2:d8:8a:34:0c:f8:
                    42:d7:e0:f3:9b:62:c2:1f:03:0b:4d:38:1f:21:2f:
                    e5:1e:94:7d:a3:f5:c7:8e:89:1c:7e:b5:c8:df:5c:
                    f1:0d:0f:c7:8b:e5:11:1d:5d:22:4c:4d:0a:03:d4:
                    8e:ca:34:e0:4a:79:61:43:2d:59:9b:62:77:ad:9b:
                    8a:3d:d9:51:51:a7:8e:1a:d9:fc:2d:dc:06:08:d8:
                    3c:c5:49:a6:2a:17:93:12:4a:07:bc:69:06:3d:82:
                    59:a3:52:a6:e2:f8:85:ee:4e:34:9d:52:ae:02:db:
                    5a:a9:2b:43:5f:9f:b8:b9:f5:72:17:e4:74:80:80:
                    1e:c6:79:9e:cd:e3:3e:85:6d:9e:5d:30:4c:ef:b9:
                    f4:19:06:c2:88:78:a6:41:9b:94:fb:19:87:20:15:
                    90:71:63:32:16:90:ec:95:87:55:6b:30:be:a4:56:
                    ae:d8:8c:b6:40:33:71:e9:20:d9:a7:fc:8a:b5:50:
                    fb:d9:69:ea:47:8b:1c:b7:35:75:e4:a4:4d:da:78:
                    04:20:c1:3e:68:9e:a2:9b:d4:63:c0:29:97:2b:da:
                    5c:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:CD:BE:A4:B6:E3:9A:31:E6:B1:D2:C3:33:62:98:79:8C:C2:AF:D5
            X509v3 Authority Key Identifier:
                keyid:D5:04:D8:19:02:B1:83:8B:28:2A:E9:F4:5C:4D:C3:F8:17:8E:24:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913A74D/68A1D55AC72611EA9955E410C4F9AE02/1QTYGQKxg4soKun0XE3D-BeOJO4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1QTYGQKxg4soKun0XE3D-BeOJO4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A74D/68A1D55AC72611EA9955E410C4F9AE02/833D8D9AC72711EA8890F311C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.68.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:b2:9d:04:50:88:3d:63:21:2d:26:c5:78:30:4a:ac:15:16:
         27:31:04:9e:3c:9e:fb:78:c5:88:f7:f9:24:d1:99:5b:50:49:
         f4:37:bc:9a:08:05:e9:d3:db:f1:6f:05:d0:8d:ca:ca:6c:2f:
         91:11:fd:76:0a:2b:f3:4c:5b:ec:98:b0:2b:a0:25:2d:fd:fd:
         9f:0a:30:8e:71:6d:a5:64:21:4b:4d:c4:8c:15:f6:c3:22:e8:
         b6:b3:98:39:db:b4:c9:e1:72:71:d6:69:ed:5e:52:94:b0:3b:
         c6:d6:fb:05:7d:45:7c:dd:0d:bc:4e:23:72:0d:c9:50:8b:d7:
         18:d6:34:76:86:c1:ba:c8:ae:16:eb:42:f6:4f:99:4f:f3:8c:
         73:d6:71:e3:69:3c:f6:d6:b0:3f:3c:d0:13:95:19:18:d9:2b:
         37:20:bb:5e:7a:62:35:d1:05:f3:51:7e:2e:bb:a7:7d:5f:7d:
         67:b2:f4:fe:63:40:09:1d:f5:44:87:83:db:06:c7:9c:bd:2b:
         95:9e:b7:5a:5a:ec:48:96:39:4c:81:17:50:90:5e:a2:35:12:
         ec:b8:75:c1:9f:50:e7:ba:f6:33:33:bd:17:fa:62:32:6d:9f:
         9f:7f:d2:f5:a3:d5:70:d6:3a:6b:ed:03:b2:e1:dd:33:6f:ab:
         57:1a:df:33
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBw8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0E3NEQxMTAvBgNVBAUTKEQ1MDREODE5MDJCMTgzOEIyODJBRTlGNDVDNERDM0Y4
MTc4RTI0RUUwHhcNMjMwODA4MjEzODI4WhcNMjQwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NGQyYjVkNC05NDM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsLzcVtgcEy93oFeJUZWq8NDsP6CAqdD9UnQTvylxVtWgg05rXKHi2Io0DPhC
1+Dzm2LCHwMLTTgfIS/lHpR9o/XHjokcfrXI31zxDQ/Hi+URHV0iTE0KA9SOyjTg
SnlhQy1Zm2J3rZuKPdlRUaeOGtn8LdwGCNg8xUmmKheTEkoHvGkGPYJZo1Km4viF
7k40nVKuAttaqStDX5+4ufVyF+R0gIAexnmezeM+hW2eXTBM77n0GQbCiHimQZuU
+xmHIBWQcWMyFpDslYdVazC+pFau2Iy2QDNx6SDZp/yKtVD72WnqR4sctzV15KRN
2ngEIME+aJ6im9RjwCmXK9pc2QIDAQABo4IClTCCApEwHQYDVR0OBBYEFJjNvqS2
45ox5rHSwzNimHmMwq/VMB8GA1UdIwQYMBaAFNUE2BkCsYOLKCrp9FxNw/gXjiTu
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQTc0RC82OEExRDU1QUM3
MjYxMUVBOTk1NUU0MTBDNEY5QUUwMi8xUVRZR1FLeGc0c29LdW4wWEUzRC1CZU9K
TzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzFRVFlHUUt4ZzRzb0t1bjBYRTNELUJlT0pPNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
M0E3NEQvNjhBMUQ1NUFDNzI2MTFFQTk5NTVFNDEwQzRGOUFFMDIvODMzRDhEOUFD
NzI3MTFFQTg4OTBGMzExQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnRGswDQYJKoZIhvcNAQELBQADggEBAFCynQRQiD1jIS0m
xXgwSqwVFicxBJ48nvt4xYj3+STRmVtQSfQ3vJoIBenT2/FvBdCNyspsL5ER/XYK
K/NMW+yYsCugJS39/Z8KMI5xbaVkIUtNxIwV9sMi6LazmDnbtMnhcnHWae1eUpSw
O8bW+wV9RXzdDbxOI3INyVCL1xjWNHaGwbrIrhbrQvZPmU/zjHPWceNpPPbWsD88
0BOVGRjZKzcgu156YjXRBfNRfi67p31ffWey9P5jQAkd9USHg9sGx5y9K5Wet1pa
7EiWOUyBF1CQXqI1Euy4dcGfUOe69jMzvRf6YjJtn59/0vWj1XDWOmvtA7Lh3TNv
q1ca3zM=
-----END CERTIFICATE-----
Generated at Sun May 19 00:16:12 2024 by rpki-client on console-fra.rpki-client.org