Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9148D53/D586F8F0307111EE8546A32FC4F9AE02/C724415E35F911EE9F140449C4F9AE02.roa
File:                     C724415E35F911EE9F140449C4F9AE02.roa (raw, json)
Hash identifier:          nuDbCIDvFkbgWJZBmhPhj2iFM+PRZiB3kT5Amg1RDjs=
Subject key identifier:   44:4B:A9:23:DC:6A:8F:AF:23:02:C1:D9:BF:7B:89:E2:50:AE:95:B8
Certificate issuer:       /CN=A9148D53/serialNumber=FDBD4C0D34492F5CEAE4879E4762796E527007EB
Certificate serial:       DD
Authority key identifier: FD:BD:4C:0D:34:49:2F:5C:EA:E4:87:9E:47:62:79:6E:52:70:07:EB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_b1MDTRJL1zq5IeeR2J5blJwB-s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9148D53/D586F8F0307111EE8546A32FC4F9AE02/C724415E35F911EE9F140449C4F9AE02.roa
Signing time:             Tue 27 Feb 2024 06:39:41 +0000
ROA not before:           Tue 27 Feb 2024 06:39:41 +0000
ROA not after:            Thu 01 May 2025 00:00:00 +0000
asID:                     137502
IP address blocks:        43.230.48.0/24 maxlen: 24
                          43.230.49.0/24 maxlen: 24
                          43.230.50.0/24 maxlen: 24
                          43.230.51.0/24 maxlen: 24
                          103.49.80.0/24 maxlen: 24
                          103.49.81.0/24 maxlen: 24
                          103.49.82.0/24 maxlen: 24
                          103.49.83.0/24 maxlen: 24
                          2401:fd80:1ff::/48 maxlen: 48
                          2401:fd80:400::/48 maxlen: 48
                          2401:fd80:401::/48 maxlen: 48
                          2401:fd80:402::/48 maxlen: 48
                          2401:fd80:403::/48 maxlen: 48
                          2401:fd80:404::/48 maxlen: 48
                          2401:fd80:405::/48 maxlen: 48
                          2401:fd80:406::/48 maxlen: 48
                          2401:fd80:407::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9148D53/D586F8F0307111EE8546A32FC4F9AE02/_b1MDTRJL1zq5IeeR2J5blJwB-s.crl
                          rsync://rpki.apnic.net/member_repository/A9148D53/D586F8F0307111EE8546A32FC4F9AE02/_b1MDTRJL1zq5IeeR2J5blJwB-s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_b1MDTRJL1zq5IeeR2J5blJwB-s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 221 (0xdd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9148D53/serialNumber=FDBD4C0D34492F5CEAE4879E4762796E527007EB
        Validity
            Not Before: Feb 27 06:39:41 2024 GMT
            Not After : May  1 00:00:00 2025 GMT
        Subject: CN=65dd83ac-a1ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:50:41:de:26:3a:e8:6b:3c:37:9c:ec:1b:1c:
                    b1:50:ab:e1:db:7f:5f:1f:f3:71:18:39:15:85:66:
                    fb:9f:2f:27:95:9b:a3:5a:6e:f3:ad:90:c5:b9:3e:
                    1e:9e:75:45:11:8e:86:0a:0c:0b:1b:c1:49:07:b5:
                    3c:08:e5:bd:9b:c8:c7:a5:6c:87:3c:8d:6f:ed:ba:
                    a3:cb:91:0f:a6:27:95:9a:7d:25:04:5b:00:14:ea:
                    b3:8d:a2:cc:59:71:5d:6c:33:64:0b:36:7c:11:a5:
                    6a:be:86:5b:9e:70:99:fd:62:77:a6:c6:11:97:4c:
                    e8:1f:0b:6d:75:31:dd:27:42:86:f9:34:7f:22:c6:
                    5d:5b:a9:8d:35:f7:e1:a5:d3:52:51:92:62:45:93:
                    af:f5:ba:18:25:56:cc:fa:33:d4:bf:05:f8:95:75:
                    b6:a1:0a:8f:b4:44:81:d0:9e:48:69:76:28:1c:76:
                    0e:4e:bd:ed:48:08:c3:d7:1c:cd:47:83:fd:29:8c:
                    e2:13:ab:7d:14:60:9a:7c:f1:0d:b6:c4:be:62:11:
                    02:6a:93:a9:65:b2:e1:96:55:37:9e:e0:95:6a:3c:
                    14:8f:56:1d:2e:7a:ad:ce:ce:fe:9c:9f:a7:36:16:
                    68:b7:6c:1d:9d:df:97:7b:3b:2f:d8:bf:f7:39:8a:
                    7e:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:4B:A9:23:DC:6A:8F:AF:23:02:C1:D9:BF:7B:89:E2:50:AE:95:B8
            X509v3 Authority Key Identifier:
                keyid:FD:BD:4C:0D:34:49:2F:5C:EA:E4:87:9E:47:62:79:6E:52:70:07:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9148D53/D586F8F0307111EE8546A32FC4F9AE02/_b1MDTRJL1zq5IeeR2J5blJwB-s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_b1MDTRJL1zq5IeeR2J5blJwB-s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148D53/D586F8F0307111EE8546A32FC4F9AE02/C724415E35F911EE9F140449C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.230.48.0/22
                  103.49.80.0/22
                IPv6:
                  2401:fd80:1ff::/48
                  2401:fd80:400::/45

    Signature Algorithm: sha256WithRSAEncryption
         50:5b:02:45:2e:8e:b6:8f:7f:6e:de:a6:ae:f4:05:bc:e2:8a:
         25:b4:f2:6b:38:e7:ad:d4:17:fa:ec:31:52:9f:4e:fa:68:91:
         3d:ef:08:80:89:77:d2:2b:f3:a8:19:06:f3:36:98:95:3d:d3:
         64:cc:7f:d2:e7:78:b7:46:f9:cf:b1:86:64:b6:da:ac:1d:14:
         2d:5c:f8:18:c4:50:8a:9c:7d:a5:e4:6d:ad:21:cb:1d:81:93:
         1e:92:f3:b0:7e:b5:52:5c:54:16:21:5f:5e:7e:9c:48:08:aa:
         de:ca:d0:96:c8:72:45:7c:d3:21:e9:c1:8f:fe:c6:ee:9e:a3:
         cb:53:7b:a2:9d:c9:27:59:66:a5:7e:d1:f1:73:11:81:1b:5c:
         78:2a:28:eb:5c:a3:8b:8a:5e:a4:9f:68:03:34:68:d0:d6:b6:
         67:7f:af:28:bb:6c:60:a2:f0:44:9c:00:3a:2f:a5:0f:40:a0:
         05:55:a7:04:19:7f:b3:3e:dd:10:99:c5:d0:ab:36:c3:b8:4f:
         70:fc:cc:b4:5c:b6:d2:10:da:18:bc:1e:a8:3a:a3:01:66:23:
         be:9e:fb:9e:c2:04:4b:bc:08:56:21:a3:f5:01:59:b5:96:12:
         1a:63:db:6c:01:39:e3:b4:82:62:4d:55:0f:9c:ee:13:30:cc:
         77:bd:ab:cb
-----BEGIN CERTIFICATE-----
MIIFkTCCBHmgAwIBAgICAN0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDhENTMxMTAvBgNVBAUTKEZEQkQ0QzBEMzQ0OTJGNUNFQUU0ODc5RTQ3NjI3OTZF
NTI3MDA3RUIwHhcNMjQwMjI3MDYzOTQxWhcNMjUwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NWRkODNhYy1hMWVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA11BB3iY66Gs8N5zsGxyxUKvh239fH/NxGDkVhWb7ny8nlZujWm7zrZDFuT4e
nnVFEY6GCgwLG8FJB7U8COW9m8jHpWyHPI1v7bqjy5EPpieVmn0lBFsAFOqzjaLM
WXFdbDNkCzZ8EaVqvoZbnnCZ/WJ3psYRl0zoHwttdTHdJ0KG+TR/IsZdW6mNNffh
pdNSUZJiRZOv9boYJVbM+jPUvwX4lXW2oQqPtESB0J5IaXYoHHYOTr3tSAjD1xzN
R4P9KYziE6t9FGCafPENtsS+YhECapOpZbLhllU3nuCVajwUj1YdLnqtzs7+nJ+n
NhZot2wdnd+Xezsv2L/3OYp+owIDAQABo4ICtTCCArEwHQYDVR0OBBYEFERLqSPc
ao+vIwLB2b97ieJQrpW4MB8GA1UdIwQYMBaAFP29TA00SS9c6uSHnkdieW5ScAfr
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEQ1My9ENTg2RjhGMDMw
NzExMUVFODU0NkEzMkZDNEY5QUUwMi9fYjFNRFRSSkwxenE1SWVlUjJKNWJsSndC
LXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL19iMU1EVFJKTDF6cTVJZWVSMko1YmxKd0Itcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDhENTMvRDU4NkY4RjAzMDcxMTFFRTg1NDZBMzJGQzRGOUFFMDIvQzcyNDQxNUUz
NUY5MTFFRTlGMTQwNDQ5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwPwYIKwYBBQUHAQcBAf8E
MDAuMBIEAgABMAwDBAIr5jADBAJnMVAwGAQCAAIwEgMHACQB/YAB/wMHAyQB/YAE
ADANBgkqhkiG9w0BAQsFAAOCAQEAUFsCRS6Oto9/bt6mrvQFvOKKJbTyazjnrdQX
+uwxUp9O+miRPe8IgIl30ivzqBkG8zaYlT3TZMx/0ud4t0b5z7GGZLbarB0ULVz4
GMRQipx9peRtrSHLHYGTHpLzsH61UlxUFiFfXn6cSAiq3srQlshyRXzTIenBj/7G
7p6jy1N7op3JJ1lmpX7R8XMRgRtceCoo61yji4pepJ9oAzRo0Na2Z3+vKLtsYKLw
RJwAOi+lD0CgBVWnBBl/sz7dEJnF0Ks2w7hPcPzMtFy20hDaGLweqDqjAWYjvp77
nsIES7wIViGj9QFZtZYSGmPbbAE547SCYk1VD5zuEzDMd72ryw==
-----END CERTIFICATE-----
Generated at Sat Nov 23 05:02:47 2024 by rpki-client on console-fra.rpki-client.org