Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/20544B84F14511ECA1AE5F4EC4F9AE02.roa
File:                     20544B84F14511ECA1AE5F4EC4F9AE02.roa (raw, json)
Hash identifier:          FPAklaM71rdV3Mf7CFthJcOnotN1vw1BtN7p9xcPR+g=
Subject key identifier:   32:6E:47:B5:96:CB:C2:B6:0B:8C:C9:29:3E:F0:96:68:62:88:94:80
Certificate issuer:       /CN=A913E36B/serialNumber=DFAD386CAC92348380C57492DB18F2BC849C5286
Certificate serial:       087C
Authority key identifier: DF:AD:38:6C:AC:92:34:83:80:C5:74:92:DB:18:F2:BC:84:9C:52:86
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3604bKySNIOAxXSS2xjyvIScUoY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/20544B84F14511ECA1AE5F4EC4F9AE02.roa
Signing time:             Tue 04 Jun 2024 22:29:13 +0000
ROA not before:           Tue 04 Jun 2024 22:29:13 +0000
ROA not after:            Sun 31 Aug 2025 00:00:00 +0000
asID:                     136933
IP address blocks:        103.151.45.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.crl
                          rsync://rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3604bKySNIOAxXSS2xjyvIScUoY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 20:09:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2172 (0x87c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913E36B/serialNumber=DFAD386CAC92348380C57492DB18F2BC849C5286
        Validity
            Not Before: Jun  4 22:29:13 2024 GMT
            Not After : Aug 31 00:00:00 2025 GMT
        Subject: CN=665f9539-5008
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:22:58:cc:a8:85:69:23:3c:d0:4d:3e:6b:71:
                    94:62:d6:5f:12:f2:b8:bd:1a:4d:ff:a3:56:9b:4b:
                    05:e6:15:02:9a:58:74:72:2b:46:38:a1:89:3b:69:
                    3b:6c:1e:b4:59:f7:40:69:70:59:c3:f1:04:02:08:
                    3e:90:bf:8a:05:50:b3:66:44:d4:1d:79:db:5c:df:
                    d3:42:37:2f:09:d2:4a:ae:63:db:4c:e4:55:3a:25:
                    ac:23:aa:8e:35:93:d8:d8:64:a4:6b:00:93:13:17:
                    39:73:de:4d:e2:1d:bd:ee:95:33:38:14:ab:da:3d:
                    81:16:07:44:c1:fc:75:60:98:8e:60:0a:c7:0d:c3:
                    6b:4a:8c:77:c6:b4:8e:51:13:52:3e:00:e0:49:62:
                    68:ca:f6:07:3e:05:87:39:2b:16:54:2b:2a:39:1d:
                    91:d4:f2:ed:ee:13:dd:a1:6c:d3:5e:63:76:2b:b7:
                    b3:ff:39:ed:93:68:1f:05:91:4f:f4:2d:e6:1c:fc:
                    30:3b:85:17:d1:46:41:01:a2:c1:85:71:5f:f4:04:
                    80:11:71:dd:f1:e8:61:c7:20:73:da:c7:7c:af:ba:
                    df:29:d7:5a:cf:2f:fc:0a:65:53:ec:c4:11:4b:c7:
                    81:35:d7:08:d3:ef:50:6a:20:27:a1:c0:67:e1:c8:
                    cc:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:6E:47:B5:96:CB:C2:B6:0B:8C:C9:29:3E:F0:96:68:62:88:94:80
            X509v3 Authority Key Identifier:
                keyid:DF:AD:38:6C:AC:92:34:83:80:C5:74:92:DB:18:F2:BC:84:9C:52:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3604bKySNIOAxXSS2xjyvIScUoY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/20544B84F14511ECA1AE5F4EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.151.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:ca:f2:1b:19:be:6c:fd:e5:74:7d:e2:37:06:dd:59:e1:25:
         09:d2:80:ed:e0:c8:d7:32:77:d0:13:1d:7a:25:f7:ed:5b:a0:
         98:bd:92:84:3d:e4:43:fe:09:25:47:ba:14:54:66:15:16:e1:
         44:32:69:96:eb:1f:25:a6:cd:67:78:c6:2b:45:aa:21:f0:d6:
         29:2b:51:6c:36:05:02:0c:ff:6a:06:fe:d9:26:72:8e:47:f9:
         83:bd:3e:bb:55:77:3e:18:95:9d:d7:8a:c8:77:9e:71:af:f3:
         44:f9:1d:d3:90:73:06:16:cb:d8:e6:0f:d4:b3:ee:8b:5d:b4:
         c6:5a:71:19:8c:e1:ee:89:e6:a4:c5:91:8f:51:96:62:05:a3:
         36:db:bb:53:02:6e:fa:fd:5e:7d:13:5c:20:fd:39:10:03:cb:
         60:de:5e:3f:fe:6b:77:b2:26:1a:02:d1:18:ab:72:80:02:81:
         8e:f1:8b:d8:a1:c3:bc:01:83:6f:a3:c9:e1:fc:a9:c4:f0:04:
         92:86:99:ec:30:46:c1:2a:a7:37:e3:57:50:df:33:6f:d2:ff:
         14:a7:bc:96:ea:d9:cd:84:f6:21:e3:64:6f:b9:3f:f2:07:6c:
         b0:67:03:ce:a2:13:6a:98:c3:df:54:a6:41:8d:b3:f4:64:21:
         1e:cb:14:f4
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICCHwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0UzNkIxMTAvBgNVBAUTKERGQUQzODZDQUM5MjM0ODM4MEM1NzQ5MkRCMThGMkJD
ODQ5QzUyODYwHhcNMjQwNjA0MjIyOTEzWhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NjVmOTUzOS01MDA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuSJYzKiFaSM80E0+a3GUYtZfEvK4vRpN/6NWm0sF5hUCmlh0citGOKGJO2k7
bB60WfdAaXBZw/EEAgg+kL+KBVCzZkTUHXnbXN/TQjcvCdJKrmPbTORVOiWsI6qO
NZPY2GSkawCTExc5c95N4h297pUzOBSr2j2BFgdEwfx1YJiOYArHDcNrSox3xrSO
URNSPgDgSWJoyvYHPgWHOSsWVCsqOR2R1PLt7hPdoWzTXmN2K7ez/zntk2gfBZFP
9C3mHPwwO4UX0UZBAaLBhXFf9ASAEXHd8ehhxyBz2sd8r7rfKddazy/8CmVT7MQR
S8eBNdcI0+9QaiAnocBn4cjMIQIDAQABo4IClTCCApEwHQYDVR0OBBYEFDJuR7WW
y8K2C4zJKT7wlmhiiJSAMB8GA1UdIwQYMBaAFN+tOGyskjSDgMV0ktsY8ryEnFKG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRTM2Qi83QzJDNjI0MEEw
OTExMUVBQTk0MjdDNDRDNEY5QUUwMi8zNjA0Ykt5U05JT0F4WFNTMnhqeXZJU2NV
b1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzM2MDRiS3lTTklPQXhYU1MyeGp5dklTY1VvWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
M0UzNkIvN0MyQzYyNDBBMDkxMTFFQUE5NDI3QzQ0QzRGOUFFMDIvMjA1NDRCODRG
MTQ1MTFFQ0ExQUU1RjRFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnly0wDQYJKoZIhvcNAQELBQADggEBAGPK8hsZvmz95XR9
4jcG3VnhJQnSgO3gyNcyd9ATHXol9+1boJi9koQ95EP+CSVHuhRUZhUW4UQyaZbr
HyWmzWd4xitFqiHw1ikrUWw2BQIM/2oG/tkmco5H+YO9PrtVdz4YlZ3Xish3nnGv
80T5HdOQcwYWy9jmD9Sz7otdtMZacRmM4e6J5qTFkY9RlmIFozbbu1MCbvr9Xn0T
XCD9ORADy2DeXj/+a3eyJhoC0RircoACgY7xi9ihw7wBg2+jyeH8qcTwBJKGmeww
RsEqpzfjV1DfM2/S/xSnvJbq2c2E9iHjZG+5P/IHbLBnA86iE2qYw99UpkGNs/Rk
IR7LFPQ=
-----END CERTIFICATE-----
Generated at Wed Nov 20 21:52:37 2024 by rpki-client on console-fra.rpki-client.org