Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913FC26/FEA57E60B67711E8A0A0D332C4F9AE02/706382C2B67811E8A2696333C4F9AE02.roa
File:                     706382C2B67811E8A2696333C4F9AE02.roa (raw, json)
Hash identifier:          rzftRMPtJ5B6XfKei48LV2pqboch+DlK8AP2NtHbsfk=
Subject key identifier:   55:DB:D4:8E:42:89:65:67:91:28:36:8F:78:4C:7D:3E:BA:B8:D7:41
Certificate issuer:       /CN=A913FC26/serialNumber=6CA9E5F4D63F1F58EB9652A52B3B9CFBBBE741BC
Certificate serial:       126F
Authority key identifier: 6C:A9:E5:F4:D6:3F:1F:58:EB:96:52:A5:2B:3B:9C:FB:BB:E7:41:BC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKnl9NY_H1jrllKlKzuc-7vnQbw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913FC26/FEA57E60B67711E8A0A0D332C4F9AE02/706382C2B67811E8A2696333C4F9AE02.roa
Signing time:             Thu 26 Sep 2024 17:25:15 +0000
ROA not before:           Thu 26 Sep 2024 17:25:15 +0000
ROA not after:            Mon 01 Dec 2025 00:00:00 +0000
asID:                     138203
IP address blocks:        103.129.207.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913FC26/FEA57E60B67711E8A0A0D332C4F9AE02/bKnl9NY_H1jrllKlKzuc-7vnQbw.crl
                          rsync://rpki.apnic.net/member_repository/A913FC26/FEA57E60B67711E8A0A0D332C4F9AE02/bKnl9NY_H1jrllKlKzuc-7vnQbw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKnl9NY_H1jrllKlKzuc-7vnQbw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 16:30:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4719 (0x126f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913FC26/serialNumber=6CA9E5F4D63F1F58EB9652A52B3B9CFBBBE741BC
        Validity
            Not Before: Sep 26 17:25:15 2024 GMT
            Not After : Dec  1 00:00:00 2025 GMT
        Subject: CN=66f598fa-5d27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:62:97:ef:cd:35:8f:e1:95:e9:f0:a0:5c:24:
                    9f:02:43:77:78:1f:b6:96:3f:a9:db:f4:a0:ce:fc:
                    df:64:dc:e7:9b:fa:d7:d5:01:4b:b4:fd:fc:5e:16:
                    e5:75:31:86:ef:75:66:e1:4e:43:7e:14:82:3f:07:
                    6c:65:aa:87:71:18:9a:66:ff:2b:71:ee:c2:7c:99:
                    01:40:b6:2c:3a:98:14:47:5e:0c:a1:d8:b1:61:fc:
                    57:02:c8:5b:e1:6f:24:b6:21:6e:81:32:97:7d:b7:
                    8d:a8:9f:00:82:bd:3d:93:e6:46:6f:3f:c9:98:16:
                    59:b1:e8:01:ca:34:f0:f7:ed:07:91:09:9f:9c:67:
                    66:10:bb:41:0f:b8:9b:d7:59:e5:57:17:4c:22:d7:
                    04:f9:7c:93:1b:2f:e6:8e:eb:8b:76:3c:e1:2d:99:
                    e4:1b:da:26:f3:c5:53:dd:4f:cd:b8:71:33:31:2c:
                    2c:d1:f8:75:da:57:77:c7:99:f1:d1:80:49:d9:26:
                    1f:2c:8f:59:24:81:e7:89:c4:f4:f5:10:18:14:68:
                    df:da:89:96:22:17:36:6f:b2:a8:5d:ed:40:d2:15:
                    0d:fb:95:03:eb:63:8a:c9:c5:65:22:ef:93:58:4b:
                    d4:30:93:2a:73:1d:0a:f9:d5:46:fd:d9:1e:fa:12:
                    1c:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:DB:D4:8E:42:89:65:67:91:28:36:8F:78:4C:7D:3E:BA:B8:D7:41
            X509v3 Authority Key Identifier:
                keyid:6C:A9:E5:F4:D6:3F:1F:58:EB:96:52:A5:2B:3B:9C:FB:BB:E7:41:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913FC26/FEA57E60B67711E8A0A0D332C4F9AE02/bKnl9NY_H1jrllKlKzuc-7vnQbw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKnl9NY_H1jrllKlKzuc-7vnQbw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913FC26/FEA57E60B67711E8A0A0D332C4F9AE02/706382C2B67811E8A2696333C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.129.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ca:7c:b4:fa:5e:43:23:28:60:ac:66:f9:61:83:f0:21:b0:2b:
         71:dd:7e:83:d8:0b:d7:6f:fe:fa:f9:88:66:01:c7:ac:42:cd:
         43:94:fd:b0:6a:fb:4b:a1:09:e2:57:4b:0d:8d:b5:21:79:87:
         5c:27:c5:d0:33:43:08:d0:36:75:1c:dd:92:1a:8f:b9:1f:ea:
         6b:8d:38:de:4f:19:fe:bb:98:77:e6:3d:36:03:37:1d:47:53:
         6f:4d:ea:90:bf:a0:c2:4b:8c:3d:10:87:37:1f:01:12:39:8c:
         8a:01:3f:87:87:67:03:70:a9:9c:aa:44:87:72:2b:7f:5e:02:
         08:98:b5:fd:ca:4f:e0:47:96:d3:58:66:fe:a3:b2:96:84:df:
         7d:e9:74:0b:c9:e2:39:b0:e5:ee:80:49:88:01:d7:8e:87:4d:
         45:32:93:90:88:fd:44:85:66:6a:26:2d:fa:92:11:54:ab:00:
         b4:bf:f2:f5:19:c6:56:0c:19:87:30:76:db:54:75:9b:99:b2:
         99:52:dc:44:ce:e8:68:cf:ba:d8:08:e9:7f:20:01:61:d6:ff:
         12:42:4b:74:18:db:71:4e:be:c2:9d:0d:4c:2b:fb:98:bc:82:
         0b:c3:1c:72:93:39:c7:1e:41:93:18:f2:31:84:b5:7b:aa:c9:
         4e:55:35:f7
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICEm8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0ZDMjYxMTAvBgNVBAUTKDZDQTlFNUY0RDYzRjFGNThFQjk2NTJBNTJCM0I5Q0ZC
QkJFNzQxQkMwHhcNMjQwOTI2MTcyNTE1WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmY1OThmYS01ZDI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwWKX7801j+GV6fCgXCSfAkN3eB+2lj+p2/SgzvzfZNznm/rX1QFLtP38Xhbl
dTGG73Vm4U5DfhSCPwdsZaqHcRiaZv8rce7CfJkBQLYsOpgUR14ModixYfxXAshb
4W8ktiFugTKXfbeNqJ8Agr09k+ZGbz/JmBZZsegByjTw9+0HkQmfnGdmELtBD7ib
11nlVxdMItcE+XyTGy/mjuuLdjzhLZnkG9om88VT3U/NuHEzMSws0fh12ld3x5nx
0YBJ2SYfLI9ZJIHnicT09RAYFGjf2omWIhc2b7KoXe1A0hUN+5UD62OKycVlIu+T
WEvUMJMqcx0K+dVG/dke+hIcswIDAQABo4IClTCCApEwHQYDVR0OBBYEFFXb1I5C
iWVnkSg2j3hMfT66uNdBMB8GA1UdIwQYMBaAFGyp5fTWPx9Y65ZSpSs7nPu750G8
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRkMyNi9GRUE1N0U2MEI2
NzcxMUU4QTBBMEQzMzJDNEY5QUUwMi9iS25sOU5ZX0gxanJsbEtsS3p1Yy03dm5R
YncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2JLbmw5TllfSDFqcmxsS2xLenVjLTd2blFidy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
M0ZDMjYvRkVBNTdFNjBCNjc3MTFFOEEwQTBEMzMyQzRGOUFFMDIvNzA2MzgyQzJC
Njc4MTFFOEEyNjk2MzMzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABngc8wDQYJKoZIhvcNAQELBQADggEBAMp8tPpeQyMoYKxm
+WGD8CGwK3HdfoPYC9dv/vr5iGYBx6xCzUOU/bBq+0uhCeJXSw2NtSF5h1wnxdAz
QwjQNnUc3ZIaj7kf6muNON5PGf67mHfmPTYDNx1HU29N6pC/oMJLjD0QhzcfARI5
jIoBP4eHZwNwqZyqRIdyK39eAgiYtf3KT+BHltNYZv6jspaE333pdAvJ4jmw5e6A
SYgB146HTUUyk5CI/USFZmomLfqSEVSrALS/8vUZxlYMGYcwdttUdZuZsplS3ETO
6GjPutgI6X8gAWHW/xJCS3QY23FOvsKdDUwr+5i8ggvDHHKTOcceQZMY8jGEtXuq
yU5VNfc=
-----END CERTIFICATE-----
Generated at Fri Nov 22 17:55:41 2024 by rpki-client on console-fra.rpki-client.org