Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914F349/C6F5001AEDB111ECAF435C5DC4F9AE02/E5A22A7CEDB811ECB7BDFF0AC4F9AE02.roa
File:                     E5A22A7CEDB811ECB7BDFF0AC4F9AE02.roa (raw, json)
Hash identifier:          iYkVHc+gEz+KBoaY/orgybHRRbhE8SWTurly5q5QifM=
Subject key identifier:   37:8D:51:12:59:D5:74:9D:A3:7A:32:B0:A8:81:FE:4C:DB:C4:57:B2
Certificate issuer:       /CN=A914F349/serialNumber=4D944F30B8C6E691988D302FBA6C2F9C574C04B0
Certificate serial:       0230
Authority key identifier: 4D:94:4F:30:B8:C6:E6:91:98:8D:30:2F:BA:6C:2F:9C:57:4C:04:B0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZRPMLjG5pGYjTAvumwvnFdMBLA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914F349/C6F5001AEDB111ECAF435C5DC4F9AE02/E5A22A7CEDB811ECB7BDFF0AC4F9AE02.roa
Signing time:             Mon 29 Jul 2024 03:04:53 +0000
ROA not before:           Mon 29 Jul 2024 03:04:53 +0000
ROA not after:            Tue 30 Sep 2025 00:00:00 +0000
asID:                     64073
IP address blocks:        103.189.192.0/24 maxlen: 24
                          103.189.193.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914F349/C6F5001AEDB111ECAF435C5DC4F9AE02/TZRPMLjG5pGYjTAvumwvnFdMBLA.crl
                          rsync://rpki.apnic.net/member_repository/A914F349/C6F5001AEDB111ECAF435C5DC4F9AE02/TZRPMLjG5pGYjTAvumwvnFdMBLA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZRPMLjG5pGYjTAvumwvnFdMBLA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Dec 2024 23:39:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 560 (0x230)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914F349/serialNumber=4D944F30B8C6E691988D302FBA6C2F9C574C04B0
        Validity
            Not Before: Jul 29 03:04:53 2024 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=66a706d5-27e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:df:1b:10:fb:09:ac:53:31:e2:d2:e9:1a:2b:
                    fe:86:2d:6c:b2:0b:ed:cc:74:2b:72:a3:ae:65:b2:
                    d3:6e:28:dd:cc:4c:3a:be:a6:bc:66:c8:08:66:66:
                    08:ba:08:e4:cc:0e:83:58:93:d5:4e:77:10:b8:89:
                    ec:9b:61:e3:a1:3d:21:ff:3d:91:03:76:96:51:6f:
                    93:7f:22:24:c7:79:45:ea:b5:33:d4:8b:2a:cb:6d:
                    c4:73:82:61:3d:85:b1:6f:2c:80:95:04:22:62:0b:
                    f6:a6:cf:32:28:de:d3:ec:0a:05:04:67:e7:6a:01:
                    b8:22:23:1b:e3:a0:3f:72:f0:d7:8b:4c:19:97:79:
                    d1:02:99:06:5a:49:43:39:ff:28:cf:4a:f5:8f:52:
                    67:8f:d1:d5:0e:f1:ec:86:06:25:cf:7c:af:7e:0f:
                    8f:4f:92:55:6e:0f:61:9b:bd:7e:16:ec:a1:38:8c:
                    68:75:43:d7:5c:95:d3:fe:61:6a:d7:2e:2a:0e:e6:
                    74:36:d5:5d:d4:14:97:47:83:37:34:28:28:f1:11:
                    f2:bd:37:c3:ac:02:d6:cb:59:ff:a9:14:e8:d6:f0:
                    8e:06:15:67:a3:e4:5f:3a:b5:03:1f:46:ba:7f:a4:
                    72:97:46:50:4f:b1:31:c0:04:b7:c9:1a:7e:99:a8:
                    29:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:8D:51:12:59:D5:74:9D:A3:7A:32:B0:A8:81:FE:4C:DB:C4:57:B2
            X509v3 Authority Key Identifier:
                keyid:4D:94:4F:30:B8:C6:E6:91:98:8D:30:2F:BA:6C:2F:9C:57:4C:04:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914F349/C6F5001AEDB111ECAF435C5DC4F9AE02/TZRPMLjG5pGYjTAvumwvnFdMBLA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZRPMLjG5pGYjTAvumwvnFdMBLA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F349/C6F5001AEDB111ECAF435C5DC4F9AE02/E5A22A7CEDB811ECB7BDFF0AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.189.192.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1f:9b:68:eb:b2:57:7e:cf:cd:bb:9d:22:0b:c0:d9:0e:ae:e1:
         2d:3b:94:4b:66:43:9d:a8:63:47:62:d4:a2:da:14:f3:1a:04:
         e9:54:21:ad:c5:b9:94:b7:8e:ec:5f:e8:4c:ea:e6:0d:92:bf:
         bb:fa:5b:e6:e9:6e:ca:e4:cb:6e:13:70:b8:28:ea:15:34:ed:
         ad:a1:ea:24:f5:87:da:39:8d:17:61:85:e8:24:c2:03:fb:bd:
         9c:4b:1d:7a:c3:d0:7a:0c:c7:19:cd:dd:5b:e5:00:de:df:60:
         d5:3c:0f:09:98:ad:05:a5:a5:06:03:ea:68:86:cf:4d:31:52:
         5f:f1:0e:fb:d2:74:91:41:3e:82:b1:e3:64:ce:52:39:ef:18:
         5e:87:41:b9:55:15:83:9f:9b:af:31:8d:2a:09:2e:7b:90:39:
         ea:8f:54:63:30:96:a9:f4:65:4d:72:d2:03:29:e5:31:eb:af:
         00:da:e7:3b:91:4e:3c:ac:af:d2:3c:55:c6:f6:c9:36:b6:87:
         40:a7:7c:dd:99:96:66:d7:0a:9d:fe:e5:e7:d4:ae:07:81:0d:
         ab:be:43:ae:1d:a9:1d:ce:5e:9f:a1:b0:17:61:01:f7:0a:7d:
         d1:af:66:01:42:a6:bf:c2:ec:1e:f4:cd:ef:76:42:01:e3:96:
         bf:41:5b:2f
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAjAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEYzNDkxMTAvBgNVBAUTKDREOTQ0RjMwQjhDNkU2OTE5ODhEMzAyRkJBNkMyRjlD
NTc0QzA0QjAwHhcNMjQwNzI5MDMwNDUzWhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmE3MDZkNS0yN2U2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArd8bEPsJrFMx4tLpGiv+hi1ssgvtzHQrcqOuZbLTbijdzEw6vqa8ZsgIZmYI
ugjkzA6DWJPVTncQuInsm2HjoT0h/z2RA3aWUW+TfyIkx3lF6rUz1Isqy23Ec4Jh
PYWxbyyAlQQiYgv2ps8yKN7T7AoFBGfnagG4IiMb46A/cvDXi0wZl3nRApkGWklD
Of8oz0r1j1Jnj9HVDvHshgYlz3yvfg+PT5JVbg9hm71+FuyhOIxodUPXXJXT/mFq
1y4qDuZ0NtVd1BSXR4M3NCgo8RHyvTfDrALWy1n/qRTo1vCOBhVno+RfOrUDH0a6
f6Ryl0ZQT7ExwAS3yRp+magprwIDAQABo4IClTCCApEwHQYDVR0OBBYEFDeNURJZ
1XSdo3oysKiB/kzbxFeyMB8GA1UdIwQYMBaAFE2UTzC4xuaRmI0wL7psL5xXTASw
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RjM0OS9DNkY1MDAxQUVE
QjExMUVDQUY0MzVDNURDNEY5QUUwMi9UWlJQTUxqRzVwR1lqVEF2dW13dm5GZE1C
TEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1RaUlBNTGpHNXBHWWpUQXZ1bXd2bkZkTUJMQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NEYzNDkvQzZGNTAwMUFFREIxMTFFQ0FGNDM1QzVEQzRGOUFFMDIvRTVBMjJBN0NF
REI4MTFFQ0I3QkRGRjBBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnvcAwDQYJKoZIhvcNAQELBQADggEBAB+baOuyV37Pzbud
IgvA2Q6u4S07lEtmQ52oY0di1KLaFPMaBOlUIa3FuZS3juxf6Ezq5g2Sv7v6W+bp
bsrky24TcLgo6hU07a2h6iT1h9o5jRdhhegkwgP7vZxLHXrD0HoMxxnN3VvlAN7f
YNU8DwmYrQWlpQYD6miGz00xUl/xDvvSdJFBPoKx42TOUjnvGF6HQblVFYOfm68x
jSoJLnuQOeqPVGMwlqn0ZU1y0gMp5THrrwDa5zuRTjysr9I8Vcb2yTa2h0CnfN2Z
lmbXCp3+5efUrgeBDau+Q64dqR3OXp+hsBdhAfcKfdGvZgFCpr/C7B70ze92QgHj
lr9BWy8=
-----END CERTIFICATE-----
Generated at Mon Nov 25 02:48:55 2024 by rpki-client on console-ams.rpki-client.org