Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914ED2B/8B6700A6F40811EA90AC566FC4F9AE02/D25A6970F40911EA8A5C9E70C4F9AE02.roa
File:                     D25A6970F40911EA8A5C9E70C4F9AE02.roa (raw, json)
Hash identifier:          Ka3pUjVhAjV8Jw2bqRS1fw1Jl4NqlRDOjR/Fjs/H0+M=
Subject key identifier:   0B:01:40:25:3A:62:B3:6B:02:3D:0B:38:C1:CB:B3:5B:8A:F7:36:CC
Certificate issuer:       /CN=A914ED2B/serialNumber=0FD97A1841C9974F1F49042EDA3E728421AAE5FE
Certificate serial:       0752
Authority key identifier: 0F:D9:7A:18:41:C9:97:4F:1F:49:04:2E:DA:3E:72:84:21:AA:E5:FE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D9l6GEHJl08fSQQu2j5yhCGq5f4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914ED2B/8B6700A6F40811EA90AC566FC4F9AE02/D25A6970F40911EA8A5C9E70C4F9AE02.roa
Signing time:             Fri 06 Sep 2024 22:10:59 +0000
ROA not before:           Fri 06 Sep 2024 22:10:59 +0000
ROA not after:            Mon 01 Dec 2025 00:00:00 +0000
asID:                     141155
IP address blocks:        103.155.119.0/24 maxlen: 24
                          2406:6dc0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914ED2B/8B6700A6F40811EA90AC566FC4F9AE02/D9l6GEHJl08fSQQu2j5yhCGq5f4.crl
                          rsync://rpki.apnic.net/member_repository/A914ED2B/8B6700A6F40811EA90AC566FC4F9AE02/D9l6GEHJl08fSQQu2j5yhCGq5f4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D9l6GEHJl08fSQQu2j5yhCGq5f4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1874 (0x752)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914ED2B/serialNumber=0FD97A1841C9974F1F49042EDA3E728421AAE5FE
        Validity
            Not Before: Sep  6 22:10:59 2024 GMT
            Not After : Dec  1 00:00:00 2025 GMT
        Subject: CN=66db7df2-8801
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:3c:f5:9a:9f:8b:74:1e:b2:9f:65:4e:6b:27:
                    5c:b2:c0:4f:48:c4:2f:01:be:31:a4:55:7d:5e:41:
                    88:a7:09:5f:b8:8d:64:3a:cb:f7:95:a0:8c:a6:2e:
                    63:a4:d2:95:a4:39:24:69:44:fb:8e:6c:9c:9e:92:
                    53:cc:94:7a:f3:10:be:9a:73:75:64:b7:f1:31:b1:
                    0c:08:5e:1e:d4:5c:6d:19:9a:33:c6:a6:83:f6:77:
                    b0:1f:8e:56:3a:16:e5:d1:01:e7:02:84:dc:3b:d7:
                    7d:45:ac:2f:dd:b1:d3:4f:b3:58:a0:28:c2:f4:e8:
                    6c:81:4e:fc:f1:66:38:ab:94:97:32:4f:48:3e:fa:
                    87:a0:e7:ad:bd:04:72:c2:04:1e:e1:da:54:79:cf:
                    58:f8:bf:5b:00:6a:33:89:46:c1:74:13:c3:e0:6a:
                    ac:1d:dd:e9:5a:33:0e:37:f4:22:d5:bf:89:44:c9:
                    76:4d:dd:7d:97:b5:2a:9d:52:73:04:b1:b8:84:20:
                    31:d1:d9:47:87:cd:bd:bf:f8:2c:68:a1:9b:be:64:
                    fe:62:f7:06:c1:e2:f4:6b:63:d6:fb:a2:13:96:7e:
                    76:3a:3f:92:99:a7:89:68:de:33:f2:86:45:d0:2f:
                    5e:cc:44:48:4d:c4:f0:9f:24:e5:9a:2d:e3:82:58:
                    7b:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:01:40:25:3A:62:B3:6B:02:3D:0B:38:C1:CB:B3:5B:8A:F7:36:CC
            X509v3 Authority Key Identifier:
                keyid:0F:D9:7A:18:41:C9:97:4F:1F:49:04:2E:DA:3E:72:84:21:AA:E5:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914ED2B/8B6700A6F40811EA90AC566FC4F9AE02/D9l6GEHJl08fSQQu2j5yhCGq5f4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D9l6GEHJl08fSQQu2j5yhCGq5f4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914ED2B/8B6700A6F40811EA90AC566FC4F9AE02/D25A6970F40911EA8A5C9E70C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.155.119.0/24
                IPv6:
                  2406:6dc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         94:93:05:ff:8c:cd:78:a8:aa:df:3d:23:46:6f:c3:12:24:ac:
         80:99:ed:94:e0:b2:8a:d0:7c:4d:6e:4e:76:ee:57:cb:c4:2a:
         0a:8b:2f:eb:c4:cc:5a:b4:97:ae:39:b7:5c:59:ca:77:d9:59:
         9f:a8:03:d8:eb:27:8d:8e:ee:d6:b2:5b:e4:4f:e9:00:e3:f8:
         fd:2d:5b:5e:eb:a6:2e:38:c0:d7:68:4c:34:85:f9:f1:83:7f:
         a0:ad:e1:43:cf:6b:84:e8:68:0b:6c:af:fa:f9:cd:d9:54:ce:
         e6:b6:28:06:a1:6d:cb:0e:9e:b1:1b:99:ba:cc:c1:99:23:61:
         b2:97:2a:91:4e:80:72:7c:fa:7a:7e:07:ca:86:2d:08:01:24:
         b3:09:5a:8e:19:37:a2:4c:c3:ae:b5:d4:04:86:19:57:3b:dc:
         e4:99:d8:4c:0a:96:e1:0b:00:b7:e7:5d:62:bb:ae:c6:26:7a:
         44:50:0b:4d:a4:96:93:b1:0e:2a:91:ba:db:04:ff:e6:b8:e4:
         c0:b6:87:01:bc:10:7f:11:2e:0f:52:50:76:66:67:e3:72:15:
         b8:da:47:07:1d:be:11:e9:86:3b:4a:10:f1:88:10:24:74:53:
         6f:eb:7f:13:4c:e8:1a:56:ab:ea:d2:e3:ee:a2:4d:45:d8:23:
         f7:33:cf:7f
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICB1IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEVEMkIxMTAvBgNVBAUTKDBGRDk3QTE4NDFDOTk3NEYxRjQ5MDQyRURBM0U3Mjg0
MjFBQUU1RkUwHhcNMjQwOTA2MjIxMDU5WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmRiN2RmMi04ODAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2Dz1mp+LdB6yn2VOaydcssBPSMQvAb4xpFV9XkGIpwlfuI1kOsv3laCMpi5j
pNKVpDkkaUT7jmycnpJTzJR68xC+mnN1ZLfxMbEMCF4e1FxtGZozxqaD9newH45W
Ohbl0QHnAoTcO9d9Rawv3bHTT7NYoCjC9OhsgU788WY4q5SXMk9IPvqHoOetvQRy
wgQe4dpUec9Y+L9bAGoziUbBdBPD4GqsHd3pWjMON/Qi1b+JRMl2Td19l7UqnVJz
BLG4hCAx0dlHh829v/gsaKGbvmT+YvcGweL0a2PW+6ITln52Oj+SmaeJaN4z8oZF
0C9ezERITcTwnyTlmi3jglh7qwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFAsBQCU6
YrNrAj0LOMHLs1uK9zbMMB8GA1UdIwQYMBaAFA/ZehhByZdPH0kELto+coQhquX+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUQyQi84QjY3MDBBNkY0
MDgxMUVBOTBBQzU2NkZDNEY5QUUwMi9EOWw2R0VISmwwOGZTUVF1Mmo1eWhDR3E1
ZjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0Q5bDZHRUhKbDA4ZlNRUXUyajV5aENHcTVmNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NEVEMkIvOEI2NzAwQTZGNDA4MTFFQTkwQUM1NjZGQzRGOUFFMDIvRDI1QTY5NzBG
NDA5MTFFQThBNUM5RTcwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E
HzAdMAwEAgABMAYDBABnm3cwDQQCAAIwBwMFACQGbcAwDQYJKoZIhvcNAQELBQAD
ggEBAJSTBf+MzXioqt89I0ZvwxIkrICZ7ZTgsorQfE1uTnbuV8vEKgqLL+vEzFq0
l645t1xZynfZWZ+oA9jrJ42O7tayW+RP6QDj+P0tW17rpi44wNdoTDSF+fGDf6Ct
4UPPa4ToaAtsr/r5zdlUzua2KAahbcsOnrEbmbrMwZkjYbKXKpFOgHJ8+np+B8qG
LQgBJLMJWo4ZN6JMw6611ASGGVc73OSZ2EwKluELALfnXWK7rsYmekRQC02klpOx
DiqRutsE/+a45MC2hwG8EH8RLg9SUHZmZ+NyFbjaRwcdvhHphjtKEPGIECR0U2/r
fxNM6BpWq+rS4+6iTUXYI/czz38=
-----END CERTIFICATE-----
Generated at Fri Nov 22 22:14:26 2024 by rpki-client on console-ams.rpki-client.org