Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9148B83/77AA414687E111EBB501CB25C4F9AE02/65FE79B8885D11EB81454E41C4F9AE02.roa
File:                     65FE79B8885D11EB81454E41C4F9AE02.roa (raw, json)
Hash identifier:          327ah/e9fUSF5H9j9NGNYuwKtrueHyZEroURzg2Xyh8=
Subject key identifier:   48:39:BD:C7:0D:42:99:80:26:B2:98:20:8E:18:56:CC:F7:A6:8A:86
Certificate issuer:       /CN=A9148B83/serialNumber=C46D5913F6C250C6AEE2F3274535CE866295B9FA
Certificate serial:       05FD
Authority key identifier: C4:6D:59:13:F6:C2:50:C6:AE:E2:F3:27:45:35:CE:86:62:95:B9:FA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xG1ZE_bCUMau4vMnRTXOhmKVufo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9148B83/77AA414687E111EBB501CB25C4F9AE02/65FE79B8885D11EB81454E41C4F9AE02.roa
Signing time:             Wed 20 Nov 2024 22:41:45 +0000
ROA not before:           Wed 20 Nov 2024 22:41:45 +0000
ROA not after:            Sat 31 Jan 2026 00:00:00 +0000
asID:                     58507
IP address blocks:        103.103.108.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9148B83/77AA414687E111EBB501CB25C4F9AE02/xG1ZE_bCUMau4vMnRTXOhmKVufo.crl
                          rsync://rpki.apnic.net/member_repository/A9148B83/77AA414687E111EBB501CB25C4F9AE02/xG1ZE_bCUMau4vMnRTXOhmKVufo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xG1ZE_bCUMau4vMnRTXOhmKVufo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Dec 2024 17:11:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1533 (0x5fd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9148B83/serialNumber=C46D5913F6C250C6AEE2F3274535CE866295B9FA
        Validity
            Not Before: Nov 20 22:41:45 2024 GMT
            Not After : Jan 31 00:00:00 2026 GMT
        Subject: CN=673e65a9-aa98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:54:b0:f2:35:69:7d:fa:34:7d:95:89:0f:b7:
                    4d:18:1c:99:5e:2f:4c:25:65:22:07:a3:84:ca:d4:
                    3b:22:2a:16:1c:20:68:b8:ca:cf:60:70:aa:74:1e:
                    55:e2:21:90:b2:20:dd:ba:37:e1:11:78:bf:36:b6:
                    43:39:d1:76:ac:58:96:41:07:f0:b2:31:8c:2b:a2:
                    57:71:c1:ea:34:de:f1:eb:14:56:e8:3f:4e:5b:40:
                    45:40:a6:c4:0f:38:61:9b:87:fb:7e:e0:12:9f:da:
                    7a:17:c8:78:e0:42:30:c6:7a:65:d2:80:14:91:1c:
                    dd:05:da:10:96:70:37:19:e3:64:72:39:2d:4e:4b:
                    55:de:a0:98:75:e3:38:68:c8:3a:d6:67:89:3b:70:
                    fc:84:d9:f3:2f:4f:68:fc:83:80:c9:4b:69:4a:f0:
                    be:39:86:7c:d2:e9:7c:ba:40:b7:00:b3:37:7c:6e:
                    ce:50:b1:20:35:3d:78:b2:f3:d0:57:e1:37:17:d3:
                    39:48:05:d7:48:ef:4e:27:ae:b7:8b:31:59:d1:b2:
                    ae:b8:cc:b2:ac:0e:ef:da:75:79:c2:cc:4b:c6:06:
                    53:ef:5f:ec:42:e7:6a:90:66:37:fe:f1:94:d9:ad:
                    93:b0:0f:19:a0:02:e2:0d:e1:07:c3:12:dc:90:7c:
                    80:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:39:BD:C7:0D:42:99:80:26:B2:98:20:8E:18:56:CC:F7:A6:8A:86
            X509v3 Authority Key Identifier:
                keyid:C4:6D:59:13:F6:C2:50:C6:AE:E2:F3:27:45:35:CE:86:62:95:B9:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9148B83/77AA414687E111EBB501CB25C4F9AE02/xG1ZE_bCUMau4vMnRTXOhmKVufo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xG1ZE_bCUMau4vMnRTXOhmKVufo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148B83/77AA414687E111EBB501CB25C4F9AE02/65FE79B8885D11EB81454E41C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.103.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2b:53:74:50:7a:63:05:95:6f:2d:ab:66:26:52:0e:52:15:84:
         65:15:be:9b:92:2d:7a:4f:74:2c:9d:dc:75:0e:76:7d:cf:d8:
         02:d8:0d:ca:64:46:db:d5:b6:cc:b9:cb:89:9a:dc:cb:7a:eb:
         98:6f:aa:cf:f7:80:5d:9d:0f:36:f9:50:ed:f3:6d:fa:9c:b2:
         5b:80:ce:3e:73:00:33:18:89:ea:ec:ef:0d:9d:00:05:25:f6:
         2b:2e:d2:d2:a1:08:6a:36:8f:97:e1:df:08:ed:ec:7b:b2:c9:
         53:b6:e5:96:14:ed:19:b9:69:63:78:62:6e:35:c4:1d:6b:68:
         48:66:f7:0a:20:80:69:9c:70:ad:f3:4e:eb:e7:df:dc:de:01:
         2f:bc:8e:58:76:43:de:ea:8e:0b:cd:35:22:c0:4b:04:f4:ee:
         66:66:34:e5:b0:77:6b:f6:27:0f:ea:68:3a:e5:b4:18:5a:66:
         e2:7d:e3:6b:f6:e7:5c:d9:df:86:b0:eb:ef:82:8f:d1:e6:83:
         75:5e:1d:a1:47:51:48:59:2b:df:32:54:11:b0:61:94:12:42:
         a6:b5:a0:9f:2f:a7:89:e3:38:29:e3:10:af:3d:a4:e3:04:46:
         71:8b:5a:7a:81:0e:f5:b2:27:d1:bd:cd:8e:9c:01:d9:c3:d6:
         3d:39:c8:d4
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBf0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDhCODMxMTAvBgNVBAUTKEM0NkQ1OTEzRjZDMjUwQzZBRUUyRjMyNzQ1MzVDRTg2
NjI5NUI5RkEwHhcNMjQxMTIwMjI0MTQ1WhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzNlNjVhOS1hYTk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA01Sw8jVpffo0fZWJD7dNGByZXi9MJWUiB6OEytQ7IioWHCBouMrPYHCqdB5V
4iGQsiDdujfhEXi/NrZDOdF2rFiWQQfwsjGMK6JXccHqNN7x6xRW6D9OW0BFQKbE
Dzhhm4f7fuASn9p6F8h44EIwxnpl0oAUkRzdBdoQlnA3GeNkcjktTktV3qCYdeM4
aMg61meJO3D8hNnzL09o/IOAyUtpSvC+OYZ80ul8ukC3ALM3fG7OULEgNT14svPQ
V+E3F9M5SAXXSO9OJ663izFZ0bKuuMyyrA7v2nV5wsxLxgZT71/sQudqkGY3/vGU
2a2TsA8ZoALiDeEHwxLckHyAXwIDAQABo4IClTCCApEwHQYDVR0OBBYEFEg5vccN
QpmAJrKYII4YVsz3poqGMB8GA1UdIwQYMBaAFMRtWRP2wlDGruLzJ0U1zoZilbn6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEI4My83N0FBNDE0Njg3
RTExMUVCQjUwMUNCMjVDNEY5QUUwMi94RzFaRV9iQ1VNYXU0dk1uUlRYT2htS1Z1
Zm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3hHMVpFX2JDVU1hdTR2TW5SVFhPaG1LVnVmby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDhCODMvNzdBQTQxNDY4N0UxMTFFQkI1MDFDQjI1QzRGOUFFMDIvNjVGRTc5Qjg4
ODVEMTFFQjgxNDU0RTQxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAJnZ2wwDQYJKoZIhvcNAQELBQADggEBACtTdFB6YwWVby2r
ZiZSDlIVhGUVvpuSLXpPdCyd3HUOdn3P2ALYDcpkRtvVtsy5y4ma3Mt665hvqs/3
gF2dDzb5UO3zbfqcsluAzj5zADMYiers7w2dAAUl9isu0tKhCGo2j5fh3wjt7Huy
yVO25ZYU7Rm5aWN4Ym41xB1raEhm9woggGmccK3zTuvn39zeAS+8jlh2Q97qjgvN
NSLASwT07mZmNOWwd2v2Jw/qaDrltBhaZuJ942v251zZ34aw6++Cj9Hmg3VeHaFH
UUhZK98yVBGwYZQSQqa1oJ8vp4njOCnjEK89pOMERnGLWnqBDvWyJ9G9zY6cAdnD
1j05yNQ=
-----END CERTIFICATE-----
Generated at Sun Nov 24 23:07:48 2024 by rpki-client on console-ams.rpki-client.org