Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914334E/A0F07360A61411EDB1A42748C4F9AE02/DF49E576A61711ED887EC04CC4F9AE02.roa
File:                     DF49E576A61711ED887EC04CC4F9AE02.roa (raw, json)
Hash identifier:          HZ4GdE6kKtgZ+kEBUt7nAgr2e12et+2nAhVw9j2YEWc=
Subject key identifier:   5D:4E:2F:4E:05:A7:94:B2:16:8F:CF:1A:93:DA:98:A7:0D:75:28:B9
Certificate issuer:       /CN=A914334E/serialNumber=20098FB43BD90AC032DD50C9FAE7DABA20A0829E
Certificate serial:       BB
Authority key identifier: 20:09:8F:B4:3B:D9:0A:C0:32:DD:50:C9:FA:E7:DA:BA:20:A0:82:9E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAmPtDvZCsAy3VDJ-ufauiCggp4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914334E/A0F07360A61411EDB1A42748C4F9AE02/DF49E576A61711ED887EC04CC4F9AE02.roa
Signing time:             Sat 27 Jan 2024 05:06:50 +0000
ROA not before:           Sat 27 Jan 2024 05:06:50 +0000
ROA not after:            Mon 31 Mar 2025 00:00:00 +0000
asID:                     142127
IP address blocks:        103.83.30.0/24 maxlen: 24
                          103.83.31.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914334E/A0F07360A61411EDB1A42748C4F9AE02/IAmPtDvZCsAy3VDJ-ufauiCggp4.crl
                          rsync://rpki.apnic.net/member_repository/A914334E/A0F07360A61411EDB1A42748C4F9AE02/IAmPtDvZCsAy3VDJ-ufauiCggp4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAmPtDvZCsAy3VDJ-ufauiCggp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 08 May 2024 06:07:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 187 (0xbb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914334E/serialNumber=20098FB43BD90AC032DD50C9FAE7DABA20A0829E
        Validity
            Not Before: Jan 27 05:06:50 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=65b48f6a-7961
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:a4:7a:09:0f:96:55:26:56:a2:d9:74:f0:af:
                    23:e9:ce:e1:42:04:08:b7:73:8a:8b:b1:a6:0b:82:
                    e3:b4:30:b5:2b:22:c1:3a:7c:c1:6f:5b:56:6b:69:
                    e5:45:03:f6:bd:46:1f:36:a7:eb:6b:b9:50:8a:b0:
                    48:7d:fa:cd:b6:70:ab:36:77:43:9d:2e:b5:bf:50:
                    ce:2a:7a:bf:da:e9:d8:84:dd:37:f8:07:1f:2b:22:
                    a1:bd:e8:42:32:7b:1a:02:5c:40:29:c3:5d:70:c6:
                    65:61:8a:0f:72:21:94:2c:1b:68:0b:9e:61:32:fb:
                    fb:9d:83:ac:1f:8a:35:f5:62:75:3c:de:cf:ae:33:
                    d0:31:67:81:22:e4:a8:ec:2e:24:92:ae:50:cf:d6:
                    d8:25:b4:71:d9:33:57:95:0f:06:42:16:c9:bc:ed:
                    fc:1a:b2:42:d3:7a:3c:bc:30:48:25:09:50:4c:1a:
                    f5:2e:3a:94:f5:ea:f8:50:d7:0a:1e:59:d2:98:8c:
                    c8:5d:dd:9d:bf:05:f0:dd:ec:b3:14:a2:9b:dd:00:
                    f8:a0:d0:d7:90:85:61:37:55:15:59:c9:35:7a:99:
                    58:bf:d5:25:92:93:47:df:c4:8a:ed:a8:7b:43:1b:
                    b5:c3:90:48:33:15:aa:44:f7:ba:7c:f6:ff:dd:c5:
                    4f:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:4E:2F:4E:05:A7:94:B2:16:8F:CF:1A:93:DA:98:A7:0D:75:28:B9
            X509v3 Authority Key Identifier:
                keyid:20:09:8F:B4:3B:D9:0A:C0:32:DD:50:C9:FA:E7:DA:BA:20:A0:82:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914334E/A0F07360A61411EDB1A42748C4F9AE02/IAmPtDvZCsAy3VDJ-ufauiCggp4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAmPtDvZCsAy3VDJ-ufauiCggp4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914334E/A0F07360A61411EDB1A42748C4F9AE02/DF49E576A61711ED887EC04CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.83.30.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7f:2b:43:7b:e1:4e:55:85:e5:39:ab:01:91:cc:af:f1:be:17:
         43:c2:c3:82:8d:05:e6:d8:a2:2e:86:1d:3d:5e:c8:11:d2:66:
         49:0c:6e:b1:70:2a:fd:07:60:67:42:59:16:27:53:23:1a:59:
         30:dd:c7:a9:b9:04:40:12:e2:68:0f:e5:8c:4e:fb:e0:42:f0:
         d4:b0:d3:99:3a:6b:ed:99:0a:19:68:29:43:49:e6:29:1e:81:
         e8:ee:85:46:4c:dc:0a:33:47:5c:fd:48:66:f9:64:7f:d9:ea:
         fb:47:aa:ae:2c:a8:47:99:88:0b:7f:85:eb:19:94:fc:44:19:
         6d:46:23:d6:fc:95:1c:d2:54:f1:a9:76:20:eb:42:e3:65:c6:
         1f:da:80:3b:3d:5d:b9:e0:e5:00:be:23:dc:49:9f:c9:e1:84:
         c5:8b:90:16:ea:98:69:83:a5:51:92:0f:9b:98:b8:52:04:6c:
         f0:21:fa:a1:50:7a:39:30:f9:ee:56:cb:a4:1b:40:98:fa:1b:
         ef:b0:44:74:4b:a5:7a:83:b2:22:0c:e3:0f:4c:37:84:33:03:
         c0:7b:de:7a:14:8b:eb:cc:1a:f8:53:e2:99:52:32:15:25:85:
         83:df:a9:f6:53:42:54:9c:ae:fb:eb:a1:d7:27:5b:34:96:3f:
         fe:81:ff:f2
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICALswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDMzNEUxMTAvBgNVBAUTKDIwMDk4RkI0M0JEOTBBQzAzMkRENTBDOUZBRTdEQUJB
MjBBMDgyOUUwHhcNMjQwMTI3MDUwNjUwWhcNMjUwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NWI0OGY2YS03OTYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzqR6CQ+WVSZWotl08K8j6c7hQgQIt3OKi7GmC4LjtDC1KyLBOnzBb1tWa2nl
RQP2vUYfNqfra7lQirBIffrNtnCrNndDnS61v1DOKnq/2unYhN03+AcfKyKhvehC
MnsaAlxAKcNdcMZlYYoPciGULBtoC55hMvv7nYOsH4o19WJ1PN7PrjPQMWeBIuSo
7C4kkq5Qz9bYJbRx2TNXlQ8GQhbJvO38GrJC03o8vDBIJQlQTBr1LjqU9er4UNcK
HlnSmIzIXd2dvwXw3eyzFKKb3QD4oNDXkIVhN1UVWck1eplYv9UlkpNH38SK7ah7
Qxu1w5BIMxWqRPe6fPb/3cVPmwIDAQABo4IClTCCApEwHQYDVR0OBBYEFF1OL04F
p5SyFo/PGpPamKcNdSi5MB8GA1UdIwQYMBaAFCAJj7Q72QrAMt1Qyfrn2rogoIKe
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MzM0RS9BMEYwNzM2MEE2
MTQxMUVEQjFBNDI3NDhDNEY5QUUwMi9JQW1QdER2WkNzQXkzVkRKLXVmYXVpQ2dn
cDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0lBbVB0RHZaQ3NBeTNWREotdWZhdWlDZ2dwNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDMzNEUvQTBGMDczNjBBNjE0MTFFREIxQTQyNzQ4QzRGOUFFMDIvREY0OUU1NzZB
NjE3MTFFRDg4N0VDMDRDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnUx4wDQYJKoZIhvcNAQELBQADggEBAH8rQ3vhTlWF5Tmr
AZHMr/G+F0PCw4KNBebYoi6GHT1eyBHSZkkMbrFwKv0HYGdCWRYnUyMaWTDdx6m5
BEAS4mgP5YxO++BC8NSw05k6a+2ZChloKUNJ5ikegejuhUZM3AozR1z9SGb5ZH/Z
6vtHqq4sqEeZiAt/hesZlPxEGW1GI9b8lRzSVPGpdiDrQuNlxh/agDs9Xbng5QC+
I9xJn8nhhMWLkBbqmGmDpVGSD5uYuFIEbPAh+qFQejkw+e5Wy6QbQJj6G++wRHRL
pXqDsiIM4w9MN4QzA8B73noUi+vMGvhT4plSMhUlhYPfqfZTQlScrvvrodcnWzSW
P/6B//I=
-----END CERTIFICATE-----
Generated at Wed May 1 07:06:27 2024 by rpki-client on console-fra.rpki-client.org