Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915F912/3D8F0646FA1911EAB1704580C4F9AE02/B7DF4CB0143711ECA137850DC4F9AE02.roa
File:                     B7DF4CB0143711ECA137850DC4F9AE02.roa (raw, json)
Hash identifier:          UHXDMWaMF4j4QvTDDnj7fpF8e54veeD4dGxcEoD4ALo=
Subject key identifier:   BE:C7:11:22:45:FC:75:08:B4:56:86:F5:2D:2B:A9:35:DB:A1:7A:D4
Certificate issuer:       /CN=A915F912/serialNumber=7ADCA71EBE3E191330E03C94D2B4F4FF898845C5
Certificate serial:       075C
Authority key identifier: 7A:DC:A7:1E:BE:3E:19:13:30:E0:3C:94:D2:B4:F4:FF:89:88:45:C5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/etynHr4-GRMw4DyU0rT0_4mIRcU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915F912/3D8F0646FA1911EAB1704580C4F9AE02/B7DF4CB0143711ECA137850DC4F9AE02.roa
Signing time:             Thu 24 Oct 2024 21:40:29 +0000
ROA not before:           Thu 24 Oct 2024 21:40:29 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     19905
IP address blocks:        103.155.242.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915F912/3D8F0646FA1911EAB1704580C4F9AE02/etynHr4-GRMw4DyU0rT0_4mIRcU.crl
                          rsync://rpki.apnic.net/member_repository/A915F912/3D8F0646FA1911EAB1704580C4F9AE02/etynHr4-GRMw4DyU0rT0_4mIRcU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/etynHr4-GRMw4DyU0rT0_4mIRcU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 20:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1884 (0x75c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915F912/serialNumber=7ADCA71EBE3E191330E03C94D2B4F4FF898845C5
        Validity
            Not Before: Oct 24 21:40:29 2024 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=671abecc-352a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:f3:04:57:d7:b6:31:6f:a6:a7:84:bb:6e:eb:
                    9b:36:26:ae:3c:39:61:c7:28:6d:4d:03:43:90:cb:
                    35:3b:2c:da:8e:61:76:3b:39:e7:91:7c:8e:0f:ef:
                    42:b5:a3:59:98:95:3d:77:c4:b0:ff:1c:e0:9a:5f:
                    d7:73:a9:ea:6a:42:98:7e:e2:99:c4:14:fe:4b:93:
                    a7:4b:b7:37:f2:73:f6:33:ec:c9:3c:30:74:c3:90:
                    e3:ec:9a:c1:46:91:71:9c:51:cc:1d:15:16:ad:29:
                    0b:38:ec:8b:a3:65:5b:e7:11:ca:58:86:37:ac:09:
                    65:3b:29:d7:1e:69:3e:27:41:65:4e:e5:98:b8:8a:
                    44:af:c9:09:c3:29:84:17:75:2b:19:07:49:2c:a9:
                    d8:fb:aa:bb:27:ec:f6:cc:eb:c2:a5:26:6b:fc:ed:
                    92:52:d5:e0:f9:1b:d4:65:1f:e3:8a:cc:74:a3:6d:
                    26:c1:34:47:a0:e5:41:90:ca:8f:75:22:8d:b1:1d:
                    91:8f:33:e8:77:95:fd:59:b8:63:57:f2:73:d4:7c:
                    d2:a0:ae:0f:33:23:7c:92:17:ac:f6:d3:35:60:d7:
                    90:4a:8a:4c:97:68:54:ca:cf:cc:79:98:f2:a0:c2:
                    13:66:cb:cd:66:ba:64:1c:71:6e:a9:05:32:98:13:
                    1f:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:C7:11:22:45:FC:75:08:B4:56:86:F5:2D:2B:A9:35:DB:A1:7A:D4
            X509v3 Authority Key Identifier:
                keyid:7A:DC:A7:1E:BE:3E:19:13:30:E0:3C:94:D2:B4:F4:FF:89:88:45:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915F912/3D8F0646FA1911EAB1704580C4F9AE02/etynHr4-GRMw4DyU0rT0_4mIRcU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/etynHr4-GRMw4DyU0rT0_4mIRcU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F912/3D8F0646FA1911EAB1704580C4F9AE02/B7DF4CB0143711ECA137850DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.155.242.0/23

    Signature Algorithm: sha256WithRSAEncryption
         37:30:a9:fd:33:10:f4:79:40:cc:81:35:70:75:98:62:95:0f:
         be:d1:3c:30:43:a5:96:a3:db:e0:48:51:24:6c:10:ff:d3:c7:
         7b:db:46:c4:c2:a0:53:29:21:a7:44:d1:10:41:de:46:54:ed:
         c2:8e:f8:5d:5a:2e:b7:d1:d7:67:a8:4f:01:f9:5f:33:11:7b:
         9e:70:b3:9c:de:f7:0b:41:c7:63:68:16:c3:7d:4c:7b:5b:25:
         fc:15:7a:ff:cd:b6:74:b6:fa:b0:36:c2:a0:ce:92:0d:17:63:
         29:cf:1c:3b:06:04:33:ce:b0:32:72:53:0b:af:bc:28:e4:75:
         f1:7a:56:aa:42:bf:9b:c7:21:9c:89:fe:f4:a6:01:5b:d4:d8:
         cb:2a:f8:bf:1b:4d:b0:1d:fc:c6:50:08:1a:08:36:69:c5:f1:
         c4:b5:5a:9c:66:eb:3b:f1:dc:7b:58:c1:34:e5:aa:cc:e2:a7:
         17:6b:59:21:92:12:7c:11:b8:22:0c:dc:1b:cc:ea:a3:29:51:
         cd:c2:89:8f:4d:aa:14:70:de:04:68:82:18:9a:6a:14:64:3c:
         ce:7f:cb:b0:9b:e8:b7:62:e3:be:59:12:a8:45:71:8d:03:7a:
         b2:22:2f:b3:b5:3c:89:00:4f:56:b9:3f:be:25:67:a2:6b:dd:
         41:4e:7f:5f
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICB1wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUY5MTIxMTAvBgNVBAUTKDdBRENBNzFFQkUzRTE5MTMzMEUwM0M5NEQyQjRGNEZG
ODk4ODQ1QzUwHhcNMjQxMDI0MjE0MDI5WhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzFhYmVjYy0zNTJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1PMEV9e2MW+mp4S7buubNiauPDlhxyhtTQNDkMs1OyzajmF2OznnkXyOD+9C
taNZmJU9d8Sw/xzgml/Xc6nqakKYfuKZxBT+S5OnS7c38nP2M+zJPDB0w5Dj7JrB
RpFxnFHMHRUWrSkLOOyLo2Vb5xHKWIY3rAllOynXHmk+J0FlTuWYuIpEr8kJwymE
F3UrGQdJLKnY+6q7J+z2zOvCpSZr/O2SUtXg+RvUZR/jisx0o20mwTRHoOVBkMqP
dSKNsR2RjzPod5X9WbhjV/Jz1HzSoK4PMyN8khes9tM1YNeQSopMl2hUys/MeZjy
oMITZsvNZrpkHHFuqQUymBMf7wIDAQABo4IClTCCApEwHQYDVR0OBBYEFL7HESJF
/HUItFaG9S0rqTXboXrUMB8GA1UdIwQYMBaAFHrcpx6+PhkTMOA8lNK09P+JiEXF
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RjkxMi8zRDhGMDY0NkZB
MTkxMUVBQjE3MDQ1ODBDNEY5QUUwMi9ldHluSHI0LUdSTXc0RHlVMHJUMF80bUlS
Y1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2V0eW5IcjQtR1JNdzREeVUwclQwXzRtSVJjVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NUY5MTIvM0Q4RjA2NDZGQTE5MTFFQUIxNzA0NTgwQzRGOUFFMDIvQjdERjRDQjAx
NDM3MTFFQ0ExMzc4NTBEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnm/IwDQYJKoZIhvcNAQELBQADggEBADcwqf0zEPR5QMyB
NXB1mGKVD77RPDBDpZaj2+BIUSRsEP/Tx3vbRsTCoFMpIadE0RBB3kZU7cKO+F1a
LrfR12eoTwH5XzMRe55ws5ze9wtBx2NoFsN9THtbJfwVev/NtnS2+rA2wqDOkg0X
YynPHDsGBDPOsDJyUwuvvCjkdfF6VqpCv5vHIZyJ/vSmAVvU2Msq+L8bTbAd/MZQ
CBoINmnF8cS1Wpxm6zvx3HtYwTTlqszipxdrWSGSEnwRuCIM3BvM6qMpUc3CiY9N
qhRw3gRoghiaahRkPM5/y7Cb6Ldi475ZEqhFcY0DerIiL7O1PIkAT1a5P74lZ6Jr
3UFOf18=
-----END CERTIFICATE-----
Generated at Wed Nov 20 23:55:41 2024 by rpki-client on console-ams.rpki-client.org