Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915C094/01F8EB92F68711E9A9FB9C55C4F9AE02/5630809A81B311EB9661A516C4F9AE02.roa
File:                     5630809A81B311EB9661A516C4F9AE02.roa (raw, json)
Hash identifier:          H+vg/v9F60XyYH+ZRi5aEl8KQ68wK4sTcaU7kwFiu9Y=
Subject key identifier:   F6:9D:38:50:07:F3:ED:77:84:25:2F:A9:7A:24:AF:5D:55:20:99:A0
Certificate issuer:       /CN=A915C094/serialNumber=4CF2DD66DCA42FEAF60C38E7695B03B43E7E7ADB
Certificate serial:       0BB1
Authority key identifier: 4C:F2:DD:66:DC:A4:2F:EA:F6:0C:38:E7:69:5B:03:B4:3E:7E:7A:DB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TPLdZtykL-r2DDjnaVsDtD5-ets.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915C094/01F8EB92F68711E9A9FB9C55C4F9AE02/5630809A81B311EB9661A516C4F9AE02.roa
Signing time:             Tue 06 Feb 2024 19:07:41 +0000
ROA not before:           Tue 06 Feb 2024 19:07:41 +0000
ROA not after:            Mon 31 Mar 2025 00:00:00 +0000
asID:                     137453
IP address blocks:        103.127.94.0/24 maxlen: 24
                          103.127.95.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915C094/01F8EB92F68711E9A9FB9C55C4F9AE02/TPLdZtykL-r2DDjnaVsDtD5-ets.crl
                          rsync://rpki.apnic.net/member_repository/A915C094/01F8EB92F68711E9A9FB9C55C4F9AE02/TPLdZtykL-r2DDjnaVsDtD5-ets.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TPLdZtykL-r2DDjnaVsDtD5-ets.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 18:14:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2993 (0xbb1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915C094/serialNumber=4CF2DD66DCA42FEAF60C38E7695B03B43E7E7ADB
        Validity
            Not Before: Feb  6 19:07:41 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=65c2837d-96a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d7:17:05:41:26:a6:fc:20:b3:77:69:a8:e3:
                    3b:79:2d:12:86:16:58:58:c0:6e:2c:f7:c8:6c:ff:
                    ba:cf:b5:33:7f:9f:ac:07:ac:09:37:00:26:5e:7e:
                    86:b3:09:43:2f:4c:63:49:d2:78:69:80:2b:bf:6a:
                    cc:e7:9f:de:4b:02:df:db:55:58:4b:b4:e7:a0:8e:
                    d2:89:dc:a4:66:0a:36:0e:81:a0:32:dd:9d:5b:59:
                    a9:1c:e7:cb:09:a9:54:88:a1:49:14:98:d7:fe:8c:
                    e1:e0:ff:d1:99:73:f9:1b:17:db:29:5a:6d:55:3f:
                    ad:59:26:b2:e7:26:b1:c9:82:4d:76:31:cb:c7:7b:
                    ca:4d:2a:2f:b0:a2:4b:5b:d3:82:d2:52:bb:84:9b:
                    80:3d:28:be:9b:d7:fb:e4:c2:f4:ef:b7:c6:af:16:
                    e9:ed:ed:0f:13:4c:c4:9b:aa:84:99:69:6b:53:02:
                    d9:df:4a:e2:b4:f2:df:be:ea:8e:c4:ce:6c:a8:6d:
                    c7:18:c6:b8:08:23:82:55:96:f1:52:69:ce:0a:58:
                    d6:0d:a3:79:92:8a:60:18:10:b3:7a:fa:96:3b:57:
                    ca:76:a6:7e:7a:ab:81:6f:05:6d:3c:6d:1d:56:7f:
                    29:4b:84:18:64:ac:92:cc:ea:eb:c4:75:ee:8a:f1:
                    69:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:9D:38:50:07:F3:ED:77:84:25:2F:A9:7A:24:AF:5D:55:20:99:A0
            X509v3 Authority Key Identifier:
                keyid:4C:F2:DD:66:DC:A4:2F:EA:F6:0C:38:E7:69:5B:03:B4:3E:7E:7A:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915C094/01F8EB92F68711E9A9FB9C55C4F9AE02/TPLdZtykL-r2DDjnaVsDtD5-ets.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TPLdZtykL-r2DDjnaVsDtD5-ets.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C094/01F8EB92F68711E9A9FB9C55C4F9AE02/5630809A81B311EB9661A516C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.127.94.0/23

    Signature Algorithm: sha256WithRSAEncryption
         19:e2:d1:56:27:de:b0:3a:f2:dd:0f:b6:82:03:fb:fa:f5:08:
         20:de:0a:be:89:62:d7:fa:81:04:e6:e8:91:97:25:e6:76:67:
         0a:93:f1:2c:ce:4c:fb:ed:a7:45:7d:80:9c:f1:8d:72:c5:ab:
         44:d4:d9:97:5a:3f:4b:4d:4b:5f:89:e2:16:e3:01:5c:7e:9a:
         04:77:7e:51:3f:fd:41:62:4c:f5:84:ca:e4:5c:fc:a5:1a:ed:
         d9:90:01:0d:2f:65:de:76:25:bc:7c:da:1a:0a:40:0c:f2:7a:
         0d:5e:6a:06:51:10:f6:da:bf:e0:57:c0:da:8d:57:27:4b:19:
         d7:c2:68:8b:3a:81:80:59:af:be:34:fc:85:db:c1:05:c2:28:
         6d:52:75:dd:32:85:64:af:b3:d3:5b:bf:58:0f:76:01:44:50:
         2f:bd:10:5b:27:0a:ff:2a:2a:0d:3e:c2:cb:0e:5b:cf:71:b2:
         dc:e0:5c:b6:b6:54:94:d0:92:77:fe:9b:28:5f:5e:53:f3:61:
         8a:be:f5:83:a3:12:72:b4:84:ab:a6:99:ca:32:28:a3:ce:99:
         98:e4:c9:b7:28:b2:47:c2:ce:3c:25:7a:f3:2c:ce:96:b3:d5:
         48:ec:8d:e2:b9:1b:bf:df:e6:13:19:0b:ef:d8:39:d1:6f:f5:
         6c:37:1c:2d
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICC7EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUMwOTQxMTAvBgNVBAUTKDRDRjJERDY2RENBNDJGRUFGNjBDMzhFNzY5NUIwM0I0
M0U3RTdBREIwHhcNMjQwMjA2MTkwNzQxWhcNMjUwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NWMyODM3ZC05NmE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAs9cXBUEmpvwgs3dpqOM7eS0ShhZYWMBuLPfIbP+6z7Uzf5+sB6wJNwAmXn6G
swlDL0xjSdJ4aYArv2rM55/eSwLf21VYS7TnoI7SidykZgo2DoGgMt2dW1mpHOfL
CalUiKFJFJjX/ozh4P/RmXP5GxfbKVptVT+tWSay5yaxyYJNdjHLx3vKTSovsKJL
W9OC0lK7hJuAPSi+m9f75ML077fGrxbp7e0PE0zEm6qEmWlrUwLZ30ritPLfvuqO
xM5sqG3HGMa4CCOCVZbxUmnOCljWDaN5kopgGBCzevqWO1fKdqZ+equBbwVtPG0d
Vn8pS4QYZKySzOrrxHXuivFptwIDAQABo4IClTCCApEwHQYDVR0OBBYEFPadOFAH
8+13hCUvqXokr11VIJmgMB8GA1UdIwQYMBaAFEzy3WbcpC/q9gw452lbA7Q+fnrb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QzA5NC8wMUY4RUI5MkY2
ODcxMUU5QTlGQjlDNTVDNEY5QUUwMi9UUExkWnR5a0wtcjJERGpuYVZzRHRENS1l
dHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1RQTGRadHlrTC1yMkREam5hVnNEdEQ1LWV0cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NUMwOTQvMDFGOEVCOTJGNjg3MTFFOUE5RkI5QzU1QzRGOUFFMDIvNTYzMDgwOUE4
MUIzMTFFQjk2NjFBNTE2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnf14wDQYJKoZIhvcNAQELBQADggEBABni0VYn3rA68t0P
toID+/r1CCDeCr6JYtf6gQTm6JGXJeZ2ZwqT8SzOTPvtp0V9gJzxjXLFq0TU2Zda
P0tNS1+J4hbjAVx+mgR3flE//UFiTPWEyuRc/KUa7dmQAQ0vZd52Jbx82hoKQAzy
eg1eagZREPbav+BXwNqNVydLGdfCaIs6gYBZr740/IXbwQXCKG1Sdd0yhWSvs9Nb
v1gPdgFEUC+9EFsnCv8qKg0+wssOW89xstzgXLa2VJTQknf+myhfXlPzYYq+9YOj
EnK0hKummcoyKKPOmZjkybcoskfCzjwlevMszpaz1UjsjeK5G7/f5hMZC+/YOdFv
9Ww3HC0=
-----END CERTIFICATE-----
Generated at Fri Nov 22 19:50:03 2024 by rpki-client on console-ams.rpki-client.org