Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9158568/3618AB6E72A311EE94557211C4F9AE02/203DB338782111EEAFDDBD86C4F9AE02.roa
File:                     203DB338782111EEAFDDBD86C4F9AE02.roa (raw, json)
Hash identifier:          bl0GHKiC7T7tXaNRCpxkPx+K/rr5owVX0QnJL/3VOow=
Subject key identifier:   42:22:6F:7F:11:70:EE:5B:F5:5D:66:42:36:C6:55:F8:5C:8C:33:03
Certificate issuer:       /CN=A9158568/serialNumber=943AD9BC6177AB8C2F8E8131C14A5465EC42954F
Certificate serial:       2E
Authority key identifier: 94:3A:D9:BC:61:77:AB:8C:2F:8E:81:31:C1:4A:54:65:EC:42:95:4F
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/lDrZvGF3q4wvjoExwUpUZexClU8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9158568/3618AB6E72A311EE94557211C4F9AE02/203DB338782111EEAFDDBD86C4F9AE02.roa
Signing time:             Sat 06 Jan 2024 19:57:36 +0000
ROA not before:           Sat 06 Jan 2024 19:57:36 +0000
ROA not after:            Mon 31 Mar 2025 00:00:00 +0000
asID:                     8739
IP address blocks:        37.139.131.0/24 maxlen: 24
                          193.47.63.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9158568/3618AB6E72A311EE94557211C4F9AE02/lDrZvGF3q4wvjoExwUpUZexClU8.crl
                          rsync://rpki.apnic.net/member_repository/A9158568/3618AB6E72A311EE94557211C4F9AE02/lDrZvGF3q4wvjoExwUpUZexClU8.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/lDrZvGF3q4wvjoExwUpUZexClU8.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:50:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 46 (0x2e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9158568/serialNumber=943AD9BC6177AB8C2F8E8131C14A5465EC42954F
        Validity
            Not Before: Jan  6 19:57:36 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=6599b0b0-dcd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:ce:47:84:b7:12:fb:77:06:a6:33:79:dc:b5:
                    05:c6:ad:f8:c6:ac:99:03:da:fe:5b:ec:5f:d5:04:
                    d1:fd:a9:f0:24:84:b9:0e:23:b2:96:25:34:14:c7:
                    cf:77:9b:47:92:a4:1b:7d:04:af:cc:9d:92:0a:df:
                    3a:55:ae:2c:31:62:2d:f3:6b:f0:4b:90:16:09:eb:
                    72:18:d4:b9:a7:ed:67:aa:3e:9b:67:f6:a5:c3:ed:
                    12:6b:eb:49:97:b7:da:cc:5c:37:18:07:41:26:92:
                    c6:10:21:9c:89:cb:0b:cb:a7:20:66:51:e6:ed:bb:
                    f2:cf:b6:db:46:68:8d:98:9e:6b:8f:c6:b3:53:11:
                    14:80:29:62:3d:d0:a7:be:9a:ca:f2:50:35:b3:17:
                    09:00:7a:84:5c:4d:42:c8:a4:39:9a:94:11:df:46:
                    34:7c:7d:65:5d:7a:91:14:20:19:8b:78:21:f1:7f:
                    46:19:f6:a4:cf:cf:df:53:12:a3:08:45:bc:ea:4d:
                    ec:e6:b4:db:4b:15:f9:88:ca:e8:a9:11:b7:12:86:
                    c6:32:ab:ef:79:ea:93:ea:93:ac:9f:80:14:0d:b8:
                    94:29:87:87:1b:13:96:5f:c6:a3:3d:b5:02:7d:90:
                    e2:d0:34:4a:3a:a7:e9:f8:92:e7:04:c7:e5:be:2b:
                    b0:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:22:6F:7F:11:70:EE:5B:F5:5D:66:42:36:C6:55:F8:5C:8C:33:03
            X509v3 Authority Key Identifier:
                keyid:94:3A:D9:BC:61:77:AB:8C:2F:8E:81:31:C1:4A:54:65:EC:42:95:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9158568/3618AB6E72A311EE94557211C4F9AE02/lDrZvGF3q4wvjoExwUpUZexClU8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/lDrZvGF3q4wvjoExwUpUZexClU8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158568/3618AB6E72A311EE94557211C4F9AE02/203DB338782111EEAFDDBD86C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.139.131.0/24
                  193.47.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:70:10:86:ee:cc:2c:e2:50:e1:33:4f:5e:1e:4b:8d:2c:c1:
         bc:4a:36:ca:9c:c2:1a:e1:8c:08:63:03:a7:77:fd:6e:27:3f:
         5d:92:8f:d1:d2:c0:3c:71:ef:31:d5:b1:f8:a7:5d:f4:e0:99:
         26:c1:bd:5c:25:e9:13:c7:69:6e:08:e8:85:5b:5d:5e:a9:8e:
         70:20:ab:c6:8e:60:96:92:1e:5f:d6:15:02:07:98:bd:78:70:
         a6:b2:bf:af:81:c4:e5:d5:77:bb:ca:ae:d2:58:12:c3:0d:75:
         f4:0d:52:c7:10:3c:fa:69:bd:7b:bb:13:07:f8:8e:50:d9:41:
         65:8d:f0:a4:22:d0:42:94:64:04:ef:6f:ef:d5:0a:7c:a8:63:
         7f:7e:e3:b6:04:bd:e2:d6:95:f5:dd:60:86:54:b4:d9:90:53:
         e8:aa:a5:fa:3d:6f:80:24:3e:f1:97:2b:d9:68:7a:d8:8f:fb:
         43:97:b0:59:cf:57:02:4c:5b:b8:2c:d8:34:77:97:8f:0d:8b:
         cd:c9:be:1c:ce:fa:21:ed:34:5f:a9:07:47:95:64:b5:f5:83:
         82:02:17:ee:14:ec:6c:21:a5:8f:f7:0e:6d:50:bb:fb:6e:82:
         d1:98:84:fd:82:27:ee:19:31:34:32:07:53:ca:04:cb:85:46:
         10:f3:a4:91
-----BEGIN CERTIFICATE-----
MIIFdjCCBF6gAwIBAgIBLjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1
ODU2ODExMC8GA1UEBRMoOTQzQUQ5QkM2MTc3QUI4QzJGOEU4MTMxQzE0QTU0NjVF
QzQyOTU0RjAeFw0yNDAxMDYxOTU3MzZaFw0yNTAzMzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY1OTliMGIwLWRjZDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDrzkeEtxL7dwamM3nctQXGrfjGrJkD2v5b7F/VBNH9qfAkhLkOI7KWJTQUx893
m0eSpBt9BK/MnZIK3zpVriwxYi3za/BLkBYJ63IY1Lmn7WeqPptn9qXD7RJr60mX
t9rMXDcYB0EmksYQIZyJywvLpyBmUebtu/LPtttGaI2YnmuPxrNTERSAKWI90Ke+
msryUDWzFwkAeoRcTULIpDmalBHfRjR8fWVdepEUIBmLeCHxf0YZ9qTPz99TEqMI
RbzqTezmtNtLFfmIyuipEbcShsYyq+956pPqk6yfgBQNuJQph4cbE5ZfxqM9tQJ9
kOLQNEo6p+n4kucEx+W+K7APAgMBAAGjggKbMIIClzAdBgNVHQ4EFgQUQiJvfxFw
7lv1XWZCNsZV+FyMMwMwHwYDVR0jBBgwFoAUlDrZvGF3q4wvjoExwUpUZexClU8w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU4NTY4LzM2MThBQjZFNzJB
MzExRUU5NDU1NzIxMUM0RjlBRTAyL2xEclp2R0YzcTR3dmpvRXh3VXBVWmV4Q2xV
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG
RDFGRjIvbERyWnZHRjNxNHd2am9FeHdVcFVaZXhDbFU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
ODU2OC8zNjE4QUI2RTcyQTMxMUVFOTQ1NTcyMTFDNEY5QUUwMi8yMDNEQjMzODc4
MjExMUVFQUZEREJEODZDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAlBggrBgEFBQcBBwEB/wQW
MBQwEgQCAAEwDAMEACWLgwMEAMEvPzANBgkqhkiG9w0BAQsFAAOCAQEALXAQhu7M
LOJQ4TNPXh5LjSzBvEo2ypzCGuGMCGMDp3f9bic/XZKP0dLAPHHvMdWx+Kdd9OCZ
JsG9XCXpE8dpbgjohVtdXqmOcCCrxo5glpIeX9YVAgeYvXhwprK/r4HE5dV3u8qu
0lgSww119A1SxxA8+mm9e7sTB/iOUNlBZY3wpCLQQpRkBO9v79UKfKhjf37jtgS9
4taV9d1ghlS02ZBT6Kql+j1vgCQ+8Zcr2Wh62I/7Q5ewWc9XAkxbuCzYNHeXjw2L
zcm+HM76Ie00X6kHR5VktfWDggIX7hTsbCGlj/cObVC7+26C0ZiE/YIn7hkxNDIH
U8oEy4VGEPOkkQ==
-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:58 2024 by rpki-client on console-fra.rpki-client.org