Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9140C62/6482C370D42B11ED847A1938C4F9AE02/0A624110067411EEA4A63A62C4F9AE02.roa
File:                     0A624110067411EEA4A63A62C4F9AE02.roa (raw, json)
Hash identifier:          mo3urbruKCb++NJ7Mc/Us+/yzo3s8TFQRP/5oVrtzgg=
Subject key identifier:   0D:3B:2A:DA:31:1E:4E:23:F1:59:00:34:1C:2E:C4:07:E9:68:B5:90
Certificate issuer:       /CN=A9140C62/serialNumber=48B1E8E3F2BC5429F8C679955D64D2249445E365
Certificate serial:       60
Authority key identifier: 48:B1:E8:E3:F2:BC:54:29:F8:C6:79:95:5D:64:D2:24:94:45:E3:65
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SLHo4_K8VCn4xnmVXWTSJJRF42U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9140C62/6482C370D42B11ED847A1938C4F9AE02/0A624110067411EEA4A63A62C4F9AE02.roa
Signing time:             Tue 19 Sep 2023 05:05:30 +0000
ROA not before:           Tue 19 Sep 2023 05:05:30 +0000
ROA not after:            Sun 01 Dec 2024 00:00:00 +0000
asID:                     137263
IP address blocks:        103.209.128.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9140C62/6482C370D42B11ED847A1938C4F9AE02/SLHo4_K8VCn4xnmVXWTSJJRF42U.crl
                          rsync://rpki.apnic.net/member_repository/A9140C62/6482C370D42B11ED847A1938C4F9AE02/SLHo4_K8VCn4xnmVXWTSJJRF42U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SLHo4_K8VCn4xnmVXWTSJJRF42U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 May 2024 05:33:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 96 (0x60)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9140C62/serialNumber=48B1E8E3F2BC5429F8C679955D64D2249445E365
        Validity
            Not Before: Sep 19 05:05:30 2023 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=65092c1a-bfc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:b8:2a:8f:b3:7d:94:85:d1:14:3a:ec:1c:b2:
                    d9:14:cb:c3:e5:bc:61:63:a9:af:0a:2c:97:91:ae:
                    c6:18:c5:f2:60:b7:9d:ff:60:7e:20:5c:6d:06:ef:
                    ac:9e:f5:34:75:08:41:b2:83:21:e1:db:4f:f4:fa:
                    39:3f:0c:96:d2:20:12:1c:f6:e5:37:a7:31:71:ea:
                    15:ec:38:ef:60:64:d1:34:33:ed:ea:7d:6e:0e:37:
                    ec:f8:c1:8a:59:48:5a:6f:ed:ab:35:65:3b:3b:2f:
                    12:be:cb:e0:73:3f:13:93:f6:56:42:0b:46:cd:32:
                    fe:44:b0:df:12:a5:9e:58:d1:5f:5c:e7:5e:d4:bb:
                    6a:fa:e0:79:bb:59:0f:67:ca:ba:bb:80:39:d9:8d:
                    e5:05:aa:a1:17:53:ce:45:95:1d:b2:a3:c5:84:e9:
                    a7:98:c6:8e:a4:ff:64:ba:05:51:46:89:0c:5a:e8:
                    cd:91:fc:34:6d:c2:c4:74:8b:ac:ce:0e:96:10:01:
                    92:21:d0:02:3b:af:19:f5:15:d7:c6:5f:94:e5:eb:
                    74:17:a3:24:68:36:c5:34:10:4e:86:3d:9c:85:19:
                    09:cc:0d:04:e2:d8:da:69:ef:a3:da:00:a2:15:17:
                    1a:6a:5f:bf:5e:5c:54:c9:53:5b:88:29:0d:49:a5:
                    9a:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:3B:2A:DA:31:1E:4E:23:F1:59:00:34:1C:2E:C4:07:E9:68:B5:90
            X509v3 Authority Key Identifier:
                keyid:48:B1:E8:E3:F2:BC:54:29:F8:C6:79:95:5D:64:D2:24:94:45:E3:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9140C62/6482C370D42B11ED847A1938C4F9AE02/SLHo4_K8VCn4xnmVXWTSJJRF42U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SLHo4_K8VCn4xnmVXWTSJJRF42U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140C62/6482C370D42B11ED847A1938C4F9AE02/0A624110067411EEA4A63A62C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.209.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:51:1d:06:33:8c:32:7f:5b:c6:9c:7f:c5:50:34:b3:fd:56:
         34:5d:f6:bc:19:87:4d:4b:31:8d:0a:69:c3:a4:ff:a3:06:ba:
         82:02:82:63:c3:21:ae:a4:1f:29:37:62:20:80:eb:58:e2:8c:
         82:65:a9:c8:6b:1a:68:34:00:0a:2f:be:b4:f2:20:3d:ec:dd:
         35:3d:c9:bc:c8:df:74:72:75:5d:82:24:95:ce:9e:0f:b8:6c:
         57:3d:a1:20:1d:df:f0:e4:f5:7d:7e:c9:2a:ee:69:72:32:9c:
         37:75:09:6e:d3:2d:be:80:c2:85:4d:23:e9:99:2a:c8:5e:a5:
         02:3f:f0:61:b8:89:73:36:73:1d:1e:95:5a:e9:ea:cc:1a:40:
         97:d8:c9:b4:1b:2f:0b:9a:1a:c1:fc:72:9a:04:17:2e:df:f1:
         9a:dd:93:29:b7:27:4e:bd:2b:7c:33:8e:3d:06:e0:7b:51:e7:
         bb:c1:50:8c:15:c9:3a:0a:bc:d0:5e:9c:a6:6d:03:46:0e:a0:
         8a:66:46:2a:8c:4c:3f:f9:a1:e8:06:cf:35:03:b5:29:88:a6:
         cb:9a:a2:71:b9:c8:64:98:2f:b5:8e:74:79:ba:27:e3:c1:98:
         d1:46:9d:f9:81:f0:df:7e:a5:dc:79:59:1a:7e:57:0f:8b:90:
         70:66:03:d5
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBYDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0
MEM2MjExMC8GA1UEBRMoNDhCMUU4RTNGMkJDNTQyOUY4QzY3OTk1NUQ2NEQyMjQ5
NDQ1RTM2NTAeFw0yMzA5MTkwNTA1MzBaFw0yNDEyMDEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY1MDkyYzFhLWJmYzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDMuCqPs32UhdEUOuwcstkUy8PlvGFjqa8KLJeRrsYYxfJgt53/YH4gXG0G76ye
9TR1CEGygyHh20/0+jk/DJbSIBIc9uU3pzFx6hXsOO9gZNE0M+3qfW4ON+z4wYpZ
SFpv7as1ZTs7LxK+y+BzPxOT9lZCC0bNMv5EsN8SpZ5Y0V9c517Uu2r64Hm7WQ9n
yrq7gDnZjeUFqqEXU85FlR2yo8WE6aeYxo6k/2S6BVFGiQxa6M2R/DRtwsR0i6zO
DpYQAZIh0AI7rxn1FdfGX5Tl63QXoyRoNsU0EE6GPZyFGQnMDQTi2Npp76PaAKIV
FxpqX79eXFTJU1uIKQ1JpZozAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUDTsq2jEe
TiPxWQA0HC7EB+lotZAwHwYDVR0jBBgwFoAUSLHo4/K8VCn4xnmVXWTSJJRF42Uw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQwQzYyLzY0ODJDMzcwRDQy
QjExRUQ4NDdBMTkzOEM0RjlBRTAyL1NMSG80X0s4VkNuNHhubVZYV1RTSkpSRjQy
VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvU0xIbzRfSzhWQ240eG5tVlhXVFNKSlJGNDJVLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
MEM2Mi82NDgyQzM3MEQ0MkIxMUVEODQ3QTE5MzhDNEY5QUUwMi8wQTYyNDExMDA2
NzQxMUVFQTRBNjNBNjJDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAGfRgDANBgkqhkiG9w0BAQsFAAOCAQEAflEdBjOMMn9bxpx/
xVA0s/1WNF32vBmHTUsxjQppw6T/owa6ggKCY8MhrqQfKTdiIIDrWOKMgmWpyGsa
aDQACi++tPIgPezdNT3JvMjfdHJ1XYIklc6eD7hsVz2hIB3f8OT1fX7JKu5pcjKc
N3UJbtMtvoDChU0j6ZkqyF6lAj/wYbiJczZzHR6VWunqzBpAl9jJtBsvC5oawfxy
mgQXLt/xmt2TKbcnTr0rfDOOPQbge1Hnu8FQjBXJOgq80F6cpm0DRg6gimZGKoxM
P/mh6AbPNQO1KYimy5qicbnIZJgvtY50ebon48GY0Uad+YHw336l3HlZGn5XD4uQ
cGYD1Q==
-----END CERTIFICATE-----
Generated at Tue May 21 06:39:21 2024 by rpki-client on console-fra.rpki-client.org