Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913A8A4/790E610CE9C311E8A9CED648C4F9AE02/54581848BB1C11ECBF12EE13C4F9AE02.roa
File:                     54581848BB1C11ECBF12EE13C4F9AE02.roa (raw, json)
Hash identifier:          oDCBGGViAVElW64qKmesDuljzAM+qbpQYE3AsleW23E=
Subject key identifier:   24:23:47:07:80:AE:7D:BB:A8:07:F5:08:4A:E0:BE:12:FA:F8:D5:83
Certificate issuer:       /CN=A913A8A4/serialNumber=4D176A0B457A6E5695D37A7ECB8DCB3A73CB4812
Certificate serial:       10F7
Authority key identifier: 4D:17:6A:0B:45:7A:6E:56:95:D3:7A:7E:CB:8D:CB:3A:73:CB:48:12
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TRdqC0V6blaV03p-y43LOnPLSBI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913A8A4/790E610CE9C311E8A9CED648C4F9AE02/54581848BB1C11ECBF12EE13C4F9AE02.roa
Signing time:             Thu 02 Nov 2023 18:05:12 +0000
ROA not before:           Thu 02 Nov 2023 18:05:12 +0000
ROA not after:            Fri 31 Jan 2025 00:00:00 +0000
asID:                     131477
IP address blocks:        103.102.4.0/24 maxlen: 24
                          103.102.5.0/24 maxlen: 24
                          103.102.7.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913A8A4/790E610CE9C311E8A9CED648C4F9AE02/TRdqC0V6blaV03p-y43LOnPLSBI.crl
                          rsync://rpki.apnic.net/member_repository/A913A8A4/790E610CE9C311E8A9CED648C4F9AE02/TRdqC0V6blaV03p-y43LOnPLSBI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TRdqC0V6blaV03p-y43LOnPLSBI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 17:13:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4343 (0x10f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913A8A4/serialNumber=4D176A0B457A6E5695D37A7ECB8DCB3A73CB4812
        Validity
            Not Before: Nov  2 18:05:12 2023 GMT
            Not After : Jan 31 00:00:00 2025 GMT
        Subject: CN=6543e4d8-5d18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:78:76:b9:3d:08:c3:8f:ec:f5:6e:57:21:29:
                    2e:82:d7:bf:ec:46:44:b5:8c:99:32:07:79:08:45:
                    8f:ac:bd:27:c9:9e:40:3c:6b:8b:0a:d7:33:ad:7c:
                    10:61:55:18:78:6e:0e:b9:50:27:f3:e8:a7:cf:f2:
                    76:9f:c3:9b:a0:c0:18:d0:e6:e7:61:30:b9:ae:75:
                    96:4a:98:9b:01:a2:35:ab:43:7a:76:b5:37:28:ca:
                    d4:dc:4e:ad:70:25:6a:6b:88:3b:de:96:91:e4:52:
                    18:85:a8:27:33:18:d5:19:de:37:a5:58:e4:4e:d2:
                    a0:c2:1c:af:e5:a3:bc:98:22:4a:e7:15:7b:95:0f:
                    2a:bb:57:94:d0:ef:e2:5f:54:ba:e3:5f:3d:6c:99:
                    17:3a:86:6f:28:67:89:fb:f0:68:a1:19:7f:56:20:
                    e2:54:7c:e6:f9:9b:20:c7:a1:19:52:b3:1b:ea:6a:
                    4b:8c:f1:12:3f:f7:6c:e0:bb:97:14:d9:36:e8:f3:
                    8e:2c:f6:78:cf:0f:ee:61:24:03:63:be:18:ae:30:
                    af:4c:99:ec:06:27:69:dd:88:83:8d:19:f6:d4:9a:
                    4f:0d:53:e2:1a:4a:f5:94:e7:3f:c3:ed:03:b3:d3:
                    47:ef:83:3a:19:ff:19:49:91:4c:2e:7b:f5:d4:10:
                    cd:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:23:47:07:80:AE:7D:BB:A8:07:F5:08:4A:E0:BE:12:FA:F8:D5:83
            X509v3 Authority Key Identifier:
                keyid:4D:17:6A:0B:45:7A:6E:56:95:D3:7A:7E:CB:8D:CB:3A:73:CB:48:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913A8A4/790E610CE9C311E8A9CED648C4F9AE02/TRdqC0V6blaV03p-y43LOnPLSBI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TRdqC0V6blaV03p-y43LOnPLSBI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A8A4/790E610CE9C311E8A9CED648C4F9AE02/54581848BB1C11ECBF12EE13C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.102.4.0/23
                  103.102.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:7a:b9:21:8b:60:01:0f:21:61:3d:e5:84:16:83:95:04:58:
         3c:24:77:38:b5:e9:e7:fe:63:e0:73:cd:67:00:fe:ab:be:c2:
         d1:53:e8:dc:8f:4b:71:63:1d:9b:17:f9:d7:c7:f7:53:17:33:
         ea:08:d6:a0:4a:41:8b:cc:53:2b:25:2c:d7:0c:1b:ea:9a:f1:
         6c:65:0d:b3:d3:58:51:be:db:fd:1f:0b:78:50:76:ec:c7:d2:
         e9:e0:d3:62:79:c8:d2:f4:18:09:3b:1b:86:6f:8f:55:f4:21:
         6e:e3:27:b8:d6:92:11:57:c0:3a:db:38:7a:9a:ab:34:ac:f8:
         73:91:12:a1:70:a3:4b:dc:cb:25:b4:de:ff:67:8d:67:c4:d9:
         94:ff:da:e3:ea:4b:df:32:65:c8:96:75:91:8e:ca:24:4a:0f:
         88:44:3b:18:88:de:81:bd:e5:9a:b9:b8:4d:3c:5f:39:14:5e:
         e0:d7:cb:0b:66:36:57:1f:47:f3:cd:8f:f3:a9:65:f2:86:38:
         a1:79:51:5f:66:69:88:82:0b:24:8c:0f:ca:da:80:fd:3d:05:
         53:03:2b:bb:63:0f:ee:e4:da:76:56:ed:7b:aa:33:3f:8e:e6:
         20:fc:8a:c6:3e:6e:23:4d:27:80:65:6f:24:9f:44:a3:dd:54:
         ad:74:a6:fc
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICEPcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0E4QTQxMTAvBgNVBAUTKDREMTc2QTBCNDU3QTZFNTY5NUQzN0E3RUNCOERDQjNB
NzNDQjQ4MTIwHhcNMjMxMTAyMTgwNTEyWhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NTQzZTRkOC01ZDE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA93h2uT0Iw4/s9W5XISkugte/7EZEtYyZMgd5CEWPrL0nyZ5APGuLCtczrXwQ
YVUYeG4OuVAn8+inz/J2n8OboMAY0ObnYTC5rnWWSpibAaI1q0N6drU3KMrU3E6t
cCVqa4g73paR5FIYhagnMxjVGd43pVjkTtKgwhyv5aO8mCJK5xV7lQ8qu1eU0O/i
X1S64189bJkXOoZvKGeJ+/BooRl/ViDiVHzm+Zsgx6EZUrMb6mpLjPESP/ds4LuX
FNk26POOLPZ4zw/uYSQDY74YrjCvTJnsBidp3YiDjRn21JpPDVPiGkr1lOc/w+0D
s9NH74M6Gf8ZSZFMLnv11BDNLwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFCQjRweA
rn27qAf1CErgvhL6+NWDMB8GA1UdIwQYMBaAFE0XagtFem5WldN6fsuNyzpzy0gS
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQThBNC83OTBFNjEwQ0U5
QzMxMUU4QTlDRUQ2NDhDNEY5QUUwMi9UUmRxQzBWNmJsYVYwM3AteTQzTE9uUExT
QkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1RSZHFDMFY2YmxhVjAzcC15NDNMT25QTFNCSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
M0E4QTQvNzkwRTYxMENFOUMzMTFFOEE5Q0VENjQ4QzRGOUFFMDIvNTQ1ODE4NDhC
QjFDMTFFQ0JGMTJFRTEzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBAFnZgQDBABnZgcwDQYJKoZIhvcNAQELBQADggEBAE96uSGL
YAEPIWE95YQWg5UEWDwkdzi16ef+Y+BzzWcA/qu+wtFT6NyPS3FjHZsX+dfH91MX
M+oI1qBKQYvMUyslLNcMG+qa8WxlDbPTWFG+2/0fC3hQduzH0ung02J5yNL0GAk7
G4Zvj1X0IW7jJ7jWkhFXwDrbOHqaqzSs+HOREqFwo0vcyyW03v9njWfE2ZT/2uPq
S98yZciWdZGOyiRKD4hEOxiI3oG95Zq5uE08XzkUXuDXywtmNlcfR/PNj/OpZfKG
OKF5UV9maYiCCySMD8ragP09BVMDK7tjD+7k2nZW7XuqMz+O5iD8isY+biNNJ4Bl
bySfRKPdVK10pvw=
-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:57 2024 by rpki-client on console-fra.rpki-client.org