Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914A554/79F89982935611EFA8EDEB33C4F9AE02/E188EE7A935711EFBE98944CC4F9AE02.roa
File:                     E188EE7A935711EFBE98944CC4F9AE02.roa (raw, json)
Hash identifier:          X4btbpCoiYoIXbuMOSmCOyUWCj9oTbrBupewiVqB8lU=
Subject key identifier:   4D:B8:6F:82:E6:76:F7:47:4A:98:92:CF:64:DE:6D:43:CD:8D:3C:D8
Certificate issuer:       /CN=A914A554/serialNumber=7920F8CA84EC913C69A98D54371209B434C33191
Certificate serial:       08
Authority key identifier: 79:20:F8:CA:84:EC:91:3C:69:A9:8D:54:37:12:09:B4:34:C3:31:91
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eSD4yoTskTxpqY1UNxIJtDTDMZE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914A554/79F89982935611EFA8EDEB33C4F9AE02/E188EE7A935711EFBE98944CC4F9AE02.roa
Signing time:             Sat 26 Oct 2024 05:39:12 +0000
ROA not before:           Sat 26 Oct 2024 05:39:12 +0000
ROA not after:            Sun 31 Aug 2025 00:00:00 +0000
asID:                     10096
IP address blocks:        203.104.68.0/23 maxlen: 23
                          203.104.71.0/24 maxlen: 24
                          203.104.72.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914A554/79F89982935611EFA8EDEB33C4F9AE02/eSD4yoTskTxpqY1UNxIJtDTDMZE.crl
                          rsync://rpki.apnic.net/member_repository/A914A554/79F89982935611EFA8EDEB33C4F9AE02/eSD4yoTskTxpqY1UNxIJtDTDMZE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eSD4yoTskTxpqY1UNxIJtDTDMZE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 05:18:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8 (0x8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914A554/serialNumber=7920F8CA84EC913C69A98D54371209B434C33191
        Validity
            Not Before: Oct 26 05:39:12 2024 GMT
            Not After : Aug 31 00:00:00 2025 GMT
        Subject: CN=671c8080-ef1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:3f:89:3e:53:e1:80:25:fb:84:76:35:84:3f:
                    56:94:b9:f9:f4:69:c9:eb:2b:21:8d:87:2d:c0:bf:
                    3f:1d:f8:e2:c7:8d:ea:00:b8:4f:b7:19:d5:fd:89:
                    57:2c:18:a4:ec:fd:45:f1:e3:c4:6d:43:51:43:97:
                    73:57:3e:02:79:9b:54:59:d8:dd:66:d6:21:69:1d:
                    f5:71:11:82:b7:bc:a5:44:89:94:1d:70:49:cd:bc:
                    18:3b:a7:91:19:f1:46:ca:19:a3:ee:c4:e3:06:ba:
                    45:5c:94:8f:73:bb:6e:1c:8e:5a:d7:59:b1:a6:50:
                    b6:c8:bf:b5:a2:c6:90:24:a5:36:9b:36:04:10:f2:
                    47:5c:80:c4:b1:b8:cb:81:58:9a:fa:b1:7a:f2:68:
                    95:af:4c:a1:e8:88:d3:97:f9:37:b7:8d:57:5f:99:
                    45:48:77:df:9b:d9:4a:82:8e:51:fb:3a:b7:14:fd:
                    ca:dd:14:26:47:50:3c:86:69:00:bb:38:2e:1b:9c:
                    34:68:da:f4:fa:96:e2:80:01:f1:68:82:64:da:2d:
                    6a:47:6f:a7:41:dd:26:5f:86:37:c7:5a:cf:b9:a4:
                    c7:65:3f:99:28:04:ad:48:49:cf:34:06:2e:ae:69:
                    3d:8e:98:d6:d2:cc:f5:70:4f:8d:83:cb:4a:54:07:
                    7e:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:B8:6F:82:E6:76:F7:47:4A:98:92:CF:64:DE:6D:43:CD:8D:3C:D8
            X509v3 Authority Key Identifier:
                keyid:79:20:F8:CA:84:EC:91:3C:69:A9:8D:54:37:12:09:B4:34:C3:31:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914A554/79F89982935611EFA8EDEB33C4F9AE02/eSD4yoTskTxpqY1UNxIJtDTDMZE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eSD4yoTskTxpqY1UNxIJtDTDMZE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A554/79F89982935611EFA8EDEB33C4F9AE02/E188EE7A935711EFBE98944CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.104.68.0/23
                  203.104.71.0-203.104.75.255

    Signature Algorithm: sha256WithRSAEncryption
         cf:4f:04:a2:da:5a:3d:3d:8e:90:2c:a7:c1:be:5b:13:cc:6b:
         18:46:0c:fd:7f:62:68:70:57:7e:7b:98:03:4b:c4:4e:03:65:
         9d:2b:a8:de:70:3c:ef:93:c8:63:1f:f5:2a:83:6e:0b:dd:4f:
         02:8f:d2:54:9f:5d:11:04:e4:19:d0:40:72:7f:23:7b:e3:e9:
         da:53:ba:85:de:a0:c7:b7:a4:37:91:a2:33:98:b3:9b:cd:40:
         69:36:5e:6d:33:bf:7e:cc:c9:f1:97:96:94:13:4f:af:3d:09:
         d6:36:b9:a8:fe:f7:2b:4e:1f:96:78:e5:af:00:25:f9:49:d3:
         62:ae:39:99:0f:c5:07:72:b3:f3:17:52:c2:b5:35:a1:bc:07:
         6f:ce:f5:0d:78:84:a9:be:a9:18:9d:08:a4:8c:e8:52:87:71:
         b7:db:22:2b:de:94:da:40:cc:61:a2:25:37:24:8c:5d:33:f8:
         f0:8d:72:4d:03:14:b5:e2:6d:62:d1:b6:2e:83:5e:88:3f:0f:
         d8:24:44:c5:af:8f:30:10:75:19:f7:1a:60:9f:b2:8e:67:cd:
         56:85:4f:28:c5:9f:00:fe:4d:fd:9e:91:40:ae:a6:cb:9d:d9:
         fb:e6:93:2c:1f:23:1e:ea:28:98:eb:e1:c2:64:fe:c6:0c:43:
         48:49:d5:0e
-----BEGIN CERTIFICATE-----
MIIFfjCCBGagAwIBAgIBCDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0
QTU1NDExMC8GA1UEBRMoNzkyMEY4Q0E4NEVDOTEzQzY5QTk4RDU0MzcxMjA5QjQz
NEMzMzE5MTAeFw0yNDEwMjYwNTM5MTJaFw0yNTA4MzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY3MWM4MDgwLWVmMWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCyP4k+U+GAJfuEdjWEP1aUufn0acnrKyGNhy3Avz8d+OLHjeoAuE+3GdX9iVcs
GKTs/UXx48RtQ1FDl3NXPgJ5m1RZ2N1m1iFpHfVxEYK3vKVEiZQdcEnNvBg7p5EZ
8UbKGaPuxOMGukVclI9zu24cjlrXWbGmULbIv7WixpAkpTabNgQQ8kdcgMSxuMuB
WJr6sXryaJWvTKHoiNOX+Te3jVdfmUVId9+b2UqCjlH7OrcU/crdFCZHUDyGaQC7
OC4bnDRo2vT6luKAAfFogmTaLWpHb6dB3SZfhjfHWs+5pMdlP5koBK1ISc80Bi6u
aT2OmNbSzPVwT42Dy0pUB34xAgMBAAGjggKjMIICnzAdBgNVHQ4EFgQUTbhvguZ2
90dKmJLPZN5tQ82NPNgwHwYDVR0jBBgwFoAUeSD4yoTskTxpqY1UNxIJtDTDMZEw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRBNTU0Lzc5Rjg5OTgyOTM1
NjExRUZBOEVERUIzM0M0RjlBRTAyL2VTRDR5b1Rza1R4cHFZMVVOeElKdERURE1a
RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvZVNENHlvVHNrVHhwcVkxVU54SUp0RFRETVpFLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
QTU1NC83OUY4OTk4MjkzNTYxMUVGQThFREVCMzNDNEY5QUUwMi9FMTg4RUU3QTkz
NTcxMUVGQkU5ODk0NENDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAtBggrBgEFBQcBBwEB/wQe
MBwwGgQCAAEwFAMEActoRDAMAwQAy2hHAwQCy2hIMA0GCSqGSIb3DQEBCwUAA4IB
AQDPTwSi2lo9PY6QLKfBvlsTzGsYRgz9f2JocFd+e5gDS8ROA2WdK6jecDzvk8hj
H/Uqg24L3U8Cj9JUn10RBOQZ0EByfyN74+naU7qF3qDHt6Q3kaIzmLObzUBpNl5t
M79+zMnxl5aUE0+vPQnWNrmo/vcrTh+WeOWvACX5SdNirjmZD8UHcrPzF1LCtTWh
vAdvzvUNeISpvqkYnQikjOhSh3G32yIr3pTaQMxhoiU3JIxdM/jwjXJNAxS14m1i
0bYug16IPw/YJETFr48wEHUZ9xpgn7KOZ81WhU8oxZ8A/k39npFArqbLndn75pMs
HyMe6iiY6+HCZP7GDENISdUO
-----END CERTIFICATE-----
Generated at Thu Nov 21 06:50:15 2024 by rpki-client on console-fra.rpki-client.org