Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914740F/4142D50ECC9411EA9B2DF753C4F9AE02/BACF0C72D46611ECA1A27035C4F9AE02.roa
File:                     BACF0C72D46611ECA1A27035C4F9AE02.roa (raw, json)
Hash identifier:          dS0nuMOC44kN2Ge9f2f/rwNoylbPx9kkV2qBs9koREw=
Subject key identifier:   53:2A:8C:E7:48:3A:68:D2:90:A6:07:6F:D1:F2:CB:AC:FF:E8:33:E0
Certificate issuer:       /CN=A914740F/serialNumber=415CDFC3E6CE653306EA95AD167D2E8975C5E403
Certificate serial:       075B
Authority key identifier: 41:5C:DF:C3:E6:CE:65:33:06:EA:95:AD:16:7D:2E:89:75:C5:E4:03
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVzfw-bOZTMG6pWtFn0uiXXF5AM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914740F/4142D50ECC9411EA9B2DF753C4F9AE02/BACF0C72D46611ECA1A27035C4F9AE02.roa
Signing time:             Fri 02 Feb 2024 22:20:09 +0000
ROA not before:           Fri 02 Feb 2024 22:20:09 +0000
ROA not after:            Mon 31 Mar 2025 00:00:00 +0000
asID:                     132325
IP address blocks:        103.127.80.0/22 maxlen: 22
                          103.127.80.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914740F/4142D50ECC9411EA9B2DF753C4F9AE02/QVzfw-bOZTMG6pWtFn0uiXXF5AM.crl
                          rsync://rpki.apnic.net/member_repository/A914740F/4142D50ECC9411EA9B2DF753C4F9AE02/QVzfw-bOZTMG6pWtFn0uiXXF5AM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVzfw-bOZTMG6pWtFn0uiXXF5AM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 May 2024 02:42:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1883 (0x75b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914740F/serialNumber=415CDFC3E6CE653306EA95AD167D2E8975C5E403
        Validity
            Not Before: Feb  2 22:20:09 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=65bd6a99-ce9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:52:fa:ca:36:86:af:69:ab:a7:3c:e9:30:10:
                    33:fe:f5:8b:ca:83:ca:90:e3:61:91:4d:ec:13:e1:
                    5a:89:89:6f:7d:06:de:7e:6d:52:b0:eb:d7:62:d9:
                    d4:32:7f:a9:ad:79:40:73:1a:8f:39:1d:6e:40:f3:
                    94:30:71:33:70:23:86:ce:aa:5d:27:93:d6:21:6b:
                    db:03:55:52:6b:bc:18:97:a7:a0:ca:a7:bf:ad:fa:
                    d4:e0:c6:37:20:08:c6:fb:b7:02:9a:42:6c:7b:e8:
                    ea:1d:95:2e:c0:28:0e:0a:48:33:26:61:ee:67:d7:
                    05:7a:7f:b3:1d:1a:78:a5:65:16:43:ee:47:8c:17:
                    07:55:db:a0:af:d9:85:e2:c8:f2:6a:eb:ea:fc:7a:
                    33:86:2d:eb:10:b1:2c:f7:e9:72:1d:44:b7:0f:e2:
                    5c:46:d7:ba:4b:27:bc:fd:f2:97:17:5f:55:a6:3c:
                    bc:76:c4:ca:56:e0:1c:9f:a2:ce:94:68:2d:c3:97:
                    70:3c:ae:2f:7f:6e:98:57:af:59:2a:a7:d3:b4:6f:
                    b4:be:b7:fd:11:82:9b:7e:88:1f:2d:11:f0:dc:f6:
                    bf:03:51:a1:47:96:0f:eb:da:7a:3a:09:5a:32:ae:
                    36:cc:47:ed:03:49:e5:41:e3:64:38:56:fb:06:2b:
                    d1:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:2A:8C:E7:48:3A:68:D2:90:A6:07:6F:D1:F2:CB:AC:FF:E8:33:E0
            X509v3 Authority Key Identifier:
                keyid:41:5C:DF:C3:E6:CE:65:33:06:EA:95:AD:16:7D:2E:89:75:C5:E4:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914740F/4142D50ECC9411EA9B2DF753C4F9AE02/QVzfw-bOZTMG6pWtFn0uiXXF5AM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVzfw-bOZTMG6pWtFn0uiXXF5AM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914740F/4142D50ECC9411EA9B2DF753C4F9AE02/BACF0C72D46611ECA1A27035C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.127.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6e:fa:84:fa:52:f8:9c:83:0d:b1:36:d6:dd:97:b3:18:42:ee:
         62:f9:87:0f:51:7e:c6:5c:2f:ae:ac:9b:87:c5:2e:08:50:cb:
         57:fe:e5:59:04:bc:78:2c:bc:04:64:fb:23:f2:49:87:94:6e:
         81:63:bf:89:ae:f1:2b:20:4d:bb:26:a3:da:8e:4e:09:86:bf:
         7c:2f:11:c2:22:0f:74:a4:ab:07:85:77:b7:22:75:d5:cd:60:
         f9:88:3a:24:36:56:db:a6:17:26:78:0f:c9:88:cb:54:da:15:
         3c:a3:ee:4b:7e:9a:cd:82:21:42:51:27:dc:ee:cb:51:9b:f4:
         36:06:42:64:44:12:c0:37:cf:af:86:81:b1:33:71:43:0f:29:
         e2:f2:a8:f6:3c:29:3d:d3:37:42:f4:6c:29:a2:34:2f:47:cf:
         61:64:ac:2c:12:8d:01:a6:99:b5:3d:fc:c4:bd:8d:28:4c:e2:
         c3:db:b8:a6:3a:77:2b:34:68:34:92:a1:23:5d:c9:17:a5:47:
         66:a7:58:51:63:24:e8:51:45:13:49:6c:b6:ff:f8:9b:88:e3:
         28:94:1f:8f:f3:b9:79:fb:41:70:e3:92:9d:1e:dd:0f:0e:a4:
         0c:b3:46:53:d5:25:14:ea:13:cd:f5:87:57:58:23:62:48:80:
         83:fd:d8:e8
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICB1swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDc0MEYxMTAvBgNVBAUTKDQxNUNERkMzRTZDRTY1MzMwNkVBOTVBRDE2N0QyRTg5
NzVDNUU0MDMwHhcNMjQwMjAyMjIyMDA5WhcNMjUwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NWJkNmE5OS1jZTliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAylL6yjaGr2mrpzzpMBAz/vWLyoPKkONhkU3sE+FaiYlvfQbefm1SsOvXYtnU
Mn+prXlAcxqPOR1uQPOUMHEzcCOGzqpdJ5PWIWvbA1VSa7wYl6egyqe/rfrU4MY3
IAjG+7cCmkJse+jqHZUuwCgOCkgzJmHuZ9cFen+zHRp4pWUWQ+5HjBcHVdugr9mF
4sjyauvq/Hozhi3rELEs9+lyHUS3D+JcRte6Sye8/fKXF19Vpjy8dsTKVuAcn6LO
lGgtw5dwPK4vf26YV69ZKqfTtG+0vrf9EYKbfogfLRHw3Pa/A1GhR5YP69p6Ogla
Mq42zEftA0nlQeNkOFb7BivRBQIDAQABo4IClTCCApEwHQYDVR0OBBYEFFMqjOdI
OmjSkKYHb9Hyy6z/6DPgMB8GA1UdIwQYMBaAFEFc38PmzmUzBuqVrRZ9Lol1xeQD
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzQwRi80MTQyRDUwRUND
OTQxMUVBOUIyREY3NTNDNEY5QUUwMi9RVnpmdy1iT1pUTUc2cFd0Rm4wdWlYWEY1
QU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1FWemZ3LWJPWlRNRzZwV3RGbjB1aVhYRjVBTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDc0MEYvNDE0MkQ1MEVDQzk0MTFFQTlCMkRGNzUzQzRGOUFFMDIvQkFDRjBDNzJE
NDY2MTFFQ0ExQTI3MDM1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAJnf1AwDQYJKoZIhvcNAQELBQADggEBAG76hPpS+JyDDbE2
1t2XsxhC7mL5hw9RfsZcL66sm4fFLghQy1f+5VkEvHgsvARk+yPySYeUboFjv4mu
8SsgTbsmo9qOTgmGv3wvEcIiD3SkqweFd7ciddXNYPmIOiQ2VtumFyZ4D8mIy1Ta
FTyj7kt+ms2CIUJRJ9zuy1Gb9DYGQmREEsA3z6+GgbEzcUMPKeLyqPY8KT3TN0L0
bCmiNC9Hz2FkrCwSjQGmmbU9/MS9jShM4sPbuKY6dys0aDSSoSNdyRelR2anWFFj
JOhRRRNJbLb/+JuI4yiUH4/zuXn7QXDjkp0e3Q8OpAyzRlPVJRTqE831h1dYI2JI
gIP92Og=
-----END CERTIFICATE-----
Generated at Fri May 10 23:04:05 2024 by rpki-client on console-ams.rpki-client.org