Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9149ADB/81F38886C78C11EE97E4382FC4F9AE02/ADCDA1F83A0F11EFAB312630C4F9AE02.roa
File:                     ADCDA1F83A0F11EFAB312630C4F9AE02.roa (raw, json)
Hash identifier:          TuAyfKbGRFhHV9G3hUTl+QdiLnDpQyy2p+JhztZaeOo=
Subject key identifier:   CC:C4:B3:A8:AC:F2:90:0B:77:C9:F1:E2:A1:6F:7B:FB:9C:48:53:28
Certificate issuer:       /CN=A9149ADB/serialNumber=4431363815BC5D0BB7A42B61D9230B4DAE22C53C
Certificate serial:       4F
Authority key identifier: 44:31:36:38:15:BC:5D:0B:B7:A4:2B:61:D9:23:0B:4D:AE:22:C5:3C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RDE2OBW8XQu3pCth2SMLTa4ixTw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9149ADB/81F38886C78C11EE97E4382FC4F9AE02/ADCDA1F83A0F11EFAB312630C4F9AE02.roa
Signing time:             Thu 04 Jul 2024 14:14:09 +0000
ROA not before:           Thu 04 Jul 2024 14:14:09 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     7018
IP address blocks:        103.111.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9149ADB/81F38886C78C11EE97E4382FC4F9AE02/RDE2OBW8XQu3pCth2SMLTa4ixTw.crl
                          rsync://rpki.apnic.net/member_repository/A9149ADB/81F38886C78C11EE97E4382FC4F9AE02/RDE2OBW8XQu3pCth2SMLTa4ixTw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RDE2OBW8XQu3pCth2SMLTa4ixTw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 79 (0x4f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9149ADB
        Validity
            Not Before: Jul  4 14:14:09 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=6686ae30-9761
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e4:54:6c:c7:54:8e:84:7b:fa:86:2a:6d:dd:
                    68:78:d6:57:42:73:c4:fe:05:83:ff:bb:4c:a1:43:
                    cc:1a:b1:89:b5:1a:d7:05:e0:5c:fb:62:87:f5:f5:
                    6f:6c:b5:63:98:d7:6d:3d:73:51:77:9d:f8:70:dc:
                    85:2a:25:5a:f8:7f:0b:67:af:12:21:2e:84:ef:65:
                    b5:41:84:a0:0e:3d:1b:ac:d4:6f:92:05:0e:32:00:
                    13:82:5c:67:84:1e:83:40:50:07:f3:a0:6a:8a:2a:
                    97:49:74:53:bf:4f:6d:bd:43:bb:83:5e:67:1b:b8:
                    fa:9b:05:ed:d7:1b:5d:cd:e4:e8:3a:71:88:a9:8d:
                    c6:47:ea:7b:dc:ea:1d:30:3d:b4:e0:3d:d4:14:9a:
                    dd:7c:29:61:71:bb:ef:b0:c5:0c:f7:32:14:5e:50:
                    33:70:13:da:4f:a7:6f:62:c0:ab:63:84:05:e3:3b:
                    72:e3:1e:2f:9b:06:20:94:49:74:44:94:7a:a0:85:
                    90:1d:ca:61:2f:62:1f:f7:f3:72:69:07:2c:32:37:
                    d6:79:c9:9f:57:e8:2d:0f:3e:e7:3d:58:e6:7c:7e:
                    69:d4:fe:0c:cb:e1:b8:4f:fd:e0:56:87:c4:28:37:
                    f5:d9:aa:ff:95:e2:35:87:e8:cb:7e:0d:af:09:1a:
                    60:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:C4:B3:A8:AC:F2:90:0B:77:C9:F1:E2:A1:6F:7B:FB:9C:48:53:28
            X509v3 Authority Key Identifier:
                keyid:44:31:36:38:15:BC:5D:0B:B7:A4:2B:61:D9:23:0B:4D:AE:22:C5:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9149ADB/81F38886C78C11EE97E4382FC4F9AE02/RDE2OBW8XQu3pCth2SMLTa4ixTw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RDE2OBW8XQu3pCth2SMLTa4ixTw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149ADB/81F38886C78C11EE97E4382FC4F9AE02/ADCDA1F83A0F11EFAB312630C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.111.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:5c:fd:30:bf:fe:4e:94:e4:97:31:ce:69:30:43:83:3a:11:
         b6:89:c2:b4:19:54:92:06:2b:10:9b:f3:57:17:2e:f5:53:58:
         6f:73:0e:76:05:29:e3:7c:c4:b2:7c:b4:6a:a7:da:8e:58:20:
         2c:9a:8f:09:d9:e3:f3:10:bb:ec:19:18:7a:d5:e2:c7:6c:cb:
         ed:6d:1a:56:26:0d:96:1b:c1:0e:80:17:d4:ab:84:45:4f:5f:
         cb:31:a8:9d:98:fe:55:81:c4:8c:44:66:02:cd:f0:d6:5e:7a:
         e7:78:be:a5:9b:f3:5a:96:fc:77:ae:d0:aa:71:84:9f:92:d3:
         a5:2b:cd:f2:a5:54:ef:22:54:c3:bf:1b:02:4d:eb:b1:a0:bf:
         40:c3:06:69:88:61:78:ad:0f:8e:15:d7:e6:8e:37:20:76:c1:
         ee:dc:a7:53:71:cc:f6:ba:5d:2e:b6:c0:c6:f7:9e:dd:e5:b6:
         42:64:3c:3d:98:26:2a:2d:b7:9f:2d:cd:77:b9:5e:21:41:d1:
         71:23:93:50:4c:fe:e7:6a:9c:ba:cc:e0:53:69:30:12:4d:a8:
         ba:95:8f:2c:91:e7:05:3a:2d:f5:08:dc:c6:df:bb:a7:cc:19:
         79:df:1b:af:94:3b:ad:d2:16:b6:7f:f7:87:ce:45:5d:20:04:
         26:10:b2:2c
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBTzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0
OUFEQjExMC8GA1UEBRMoNDQzMTM2MzgxNUJDNUQwQkI3QTQyQjYxRDkyMzBCNERB
RTIyQzUzQzAeFw0yNDA3MDQxNDE0MDlaFw0yNTA3MDEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY2ODZhZTMwLTk3NjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCi5FRsx1SOhHv6hipt3Wh41ldCc8T+BYP/u0yhQ8wasYm1GtcF4Fz7Yof19W9s
tWOY1209c1F3nfhw3IUqJVr4fwtnrxIhLoTvZbVBhKAOPRus1G+SBQ4yABOCXGeE
HoNAUAfzoGqKKpdJdFO/T229Q7uDXmcbuPqbBe3XG13N5Og6cYipjcZH6nvc6h0w
PbTgPdQUmt18KWFxu++wxQz3MhReUDNwE9pPp29iwKtjhAXjO3LjHi+bBiCUSXRE
lHqghZAdymEvYh/383JpBywyN9Z5yZ9X6C0PPuc9WOZ8fmnU/gzL4bhP/eBWh8Qo
N/XZqv+V4jWH6Mt+Da8JGmDnAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUzMSzqKzy
kAt3yfHioW97+5xIUygwHwYDVR0jBBgwFoAURDE2OBW8XQu3pCth2SMLTa4ixTww
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ5QURCLzgxRjM4ODg2Qzc4
QzExRUU5N0U0MzgyRkM0RjlBRTAyL1JERTJPQlc4WFF1M3BDdGgyU01MVGE0aXhU
dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvUkRFMk9CVzhYUXUzcEN0aDJTTUxUYTRpeFR3LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
OUFEQi84MUYzODg4NkM3OEMxMUVFOTdFNDM4MkZDNEY5QUUwMi9BRENEQTFGODNB
MEYxMUVGQUIzMTI2MzBDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAGdvPzANBgkqhkiG9w0BAQsFAAOCAQEAF1z9ML/+TpTklzHO
aTBDgzoRtonCtBlUkgYrEJvzVxcu9VNYb3MOdgUp43zEsny0aqfajlggLJqPCdnj
8xC77BkYetXix2zL7W0aViYNlhvBDoAX1KuERU9fyzGonZj+VYHEjERmAs3w1l56
53i+pZvzWpb8d67QqnGEn5LTpSvN8qVU7yJUw78bAk3rsaC/QMMGaYhheK0PjhXX
5o43IHbB7tynU3HM9rpdLrbAxvee3eW2QmQ8PZgmKi23ny3Nd7leIUHRcSOTUEz+
52qcuszgU2kwEk2oupWPLJHnBTot9Qjcxt+7p8wZed8br5Q7rdIWtn/3h85FXSAE
JhCyLA==
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:28:05 2025 by rpki-client