Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915FC0B/BEE7558045B011EBA3696D63C4F9AE02/7A75D42E45B211EB99335867C4F9AE02.roa
File:                     7A75D42E45B211EB99335867C4F9AE02.roa (raw, json)
Hash identifier:          NsZ4F3z/UkG4nWlQYLX7FdM8TeLtW3jisug+AwHpPsg=
Subject key identifier:   E2:7A:3C:06:A5:EC:25:D3:19:9D:B9:C3:54:15:00:99:47:81:E0:6B
Certificate issuer:       /CN=A915FC0B/serialNumber=17948C8779C59E65CAFCE2EFDCB1CB509113844C
Certificate serial:       06A4
Authority key identifier: 17:94:8C:87:79:C5:9E:65:CA:FC:E2:EF:DC:B1:CB:50:91:13:84:4C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F5SMh3nFnmXK_OLv3LHLUJEThEw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915FC0B/BEE7558045B011EBA3696D63C4F9AE02/7A75D42E45B211EB99335867C4F9AE02.roa
Signing time:             Sat 16 Nov 2024 22:00:36 +0000
ROA not before:           Sat 16 Nov 2024 22:00:36 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     139668
IP address blocks:        103.143.91.0/24 maxlen: 24
                          103.177.19.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915FC0B/BEE7558045B011EBA3696D63C4F9AE02/F5SMh3nFnmXK_OLv3LHLUJEThEw.crl
                          rsync://rpki.apnic.net/member_repository/A915FC0B/BEE7558045B011EBA3696D63C4F9AE02/F5SMh3nFnmXK_OLv3LHLUJEThEw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F5SMh3nFnmXK_OLv3LHLUJEThEw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1700 (0x6a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915FC0B/serialNumber=17948C8779C59E65CAFCE2EFDCB1CB509113844C
        Validity
            Not Before: Nov 16 22:00:36 2024 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=67391604-d6c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:90:11:47:a2:42:75:c7:98:6f:c1:e3:fb:0b:
                    64:c9:e5:34:1c:27:dd:3c:8d:23:a4:1f:0d:5c:5b:
                    b7:cb:84:49:53:20:56:82:53:8b:e0:2d:fd:b0:6c:
                    7f:39:d9:66:bf:87:d4:ec:4f:d3:5c:b5:fa:13:ad:
                    c1:f8:e2:bd:2a:7f:4e:8d:62:18:e2:db:61:63:9a:
                    12:a1:dc:cb:0d:9e:a7:5a:59:4b:57:90:83:84:d6:
                    97:1c:b3:b2:d2:f5:08:94:02:93:04:fa:f3:0f:3c:
                    d2:44:d5:a5:7e:8a:d6:40:40:8c:89:2d:8d:ae:e1:
                    4a:9d:18:00:be:b6:92:c6:82:6e:03:06:79:86:f1:
                    16:16:16:9e:51:16:ba:e0:25:70:f4:5e:33:9a:5b:
                    4b:d5:05:d2:40:9c:aa:87:d5:40:fa:48:67:71:bb:
                    72:7e:f3:0d:69:84:49:de:ec:c9:5f:99:f3:7b:a0:
                    fe:e5:25:1c:36:01:b2:a8:78:1a:73:21:21:c1:c3:
                    f6:62:f1:38:cb:97:7a:7c:05:f6:bb:73:56:c1:d2:
                    d2:14:90:23:78:f9:fd:ee:e1:2f:09:ef:4a:fb:84:
                    87:bc:06:2e:a3:5b:ff:1d:6b:a5:56:dd:e9:ed:3a:
                    d4:19:74:e5:bb:e8:f2:15:53:de:1a:e1:0d:b3:49:
                    91:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:7A:3C:06:A5:EC:25:D3:19:9D:B9:C3:54:15:00:99:47:81:E0:6B
            X509v3 Authority Key Identifier:
                keyid:17:94:8C:87:79:C5:9E:65:CA:FC:E2:EF:DC:B1:CB:50:91:13:84:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915FC0B/BEE7558045B011EBA3696D63C4F9AE02/F5SMh3nFnmXK_OLv3LHLUJEThEw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F5SMh3nFnmXK_OLv3LHLUJEThEw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FC0B/BEE7558045B011EBA3696D63C4F9AE02/7A75D42E45B211EB99335867C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.143.91.0/24
                  103.177.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:cb:f2:8a:0a:62:3b:60:9d:80:0f:1b:10:ba:f5:7f:85:84:
         00:4b:ca:ce:85:42:40:b4:32:69:84:ee:c3:90:02:03:bd:00:
         1c:22:f7:95:b7:48:b1:43:ab:f2:e6:23:f1:82:80:2b:69:5a:
         ee:b5:b0:89:3d:01:4f:d8:07:db:c7:c9:c7:b3:97:6b:07:b8:
         4b:3e:ee:af:c9:b4:f6:37:de:85:f0:d9:ea:4d:25:16:26:1a:
         b3:39:81:ee:9c:0b:b6:4f:3b:50:ea:e4:c0:ec:29:37:7d:94:
         4c:c0:d4:4d:24:91:81:32:f0:a8:78:a0:95:47:46:40:d9:c8:
         08:d6:78:b3:65:a0:ab:22:5f:c5:03:d6:2a:93:63:9b:63:e6:
         99:5d:73:df:38:07:23:b6:2f:a6:d3:6f:91:28:f1:26:15:23:
         0e:b3:bd:47:0d:a6:90:07:db:8d:e6:5a:27:d8:02:94:e7:da:
         11:9a:b0:e8:66:c3:88:aa:4d:2e:b8:fa:1b:13:ff:60:cf:ea:
         b8:14:c3:1d:23:64:e8:e2:21:ab:fc:ce:fb:04:fc:a1:bb:61:
         fa:0d:6f:95:6b:4c:c3:06:01:b9:bc:ba:97:fd:f2:ef:a2:73:
         31:53:af:d9:69:bf:31:7b:6d:1e:96:c9:12:2b:45:06:0d:2f:
         0b:06:3d:22
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICBqQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUZDMEIxMTAvBgNVBAUTKDE3OTQ4Qzg3NzlDNTlFNjVDQUZDRTJFRkRDQjFDQjUw
OTExMzg0NEMwHhcNMjQxMTE2MjIwMDM2WhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzM5MTYwNC1kNmM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzJARR6JCdceYb8Hj+wtkyeU0HCfdPI0jpB8NXFu3y4RJUyBWglOL4C39sGx/
Odlmv4fU7E/TXLX6E63B+OK9Kn9OjWIY4tthY5oSodzLDZ6nWllLV5CDhNaXHLOy
0vUIlAKTBPrzDzzSRNWlforWQECMiS2NruFKnRgAvraSxoJuAwZ5hvEWFhaeURa6
4CVw9F4zmltL1QXSQJyqh9VA+khncbtyfvMNaYRJ3uzJX5nze6D+5SUcNgGyqHga
cyEhwcP2YvE4y5d6fAX2u3NWwdLSFJAjePn97uEvCe9K+4SHvAYuo1v/HWulVt3p
7TrUGXTlu+jyFVPeGuENs0mRnQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFOJ6PAal
7CXTGZ25w1QVAJlHgeBrMB8GA1UdIwQYMBaAFBeUjId5xZ5lyvzi79yxy1CRE4RM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RkMwQi9CRUU3NTU4MDQ1
QjAxMUVCQTM2OTZENjNDNEY5QUUwMi9GNVNNaDNuRm5tWEtfT0x2M0xITFVKRVRo
RXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0Y1U01oM25Gbm1YS19PTHYzTEhMVUpFVGhFdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NUZDMEIvQkVFNzU1ODA0NUIwMTFFQkEzNjk2RDYzQzRGOUFFMDIvN0E3NUQ0MkU0
NUIyMTFFQjk5MzM1ODY3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBABnj1sDBABnsRMwDQYJKoZIhvcNAQELBQADggEBAEbL8ooK
YjtgnYAPGxC69X+FhABLys6FQkC0MmmE7sOQAgO9ABwi95W3SLFDq/LmI/GCgCtp
Wu61sIk9AU/YB9vHycezl2sHuEs+7q/JtPY33oXw2epNJRYmGrM5ge6cC7ZPO1Dq
5MDsKTd9lEzA1E0kkYEy8Kh4oJVHRkDZyAjWeLNloKsiX8UD1iqTY5tj5pldc984
ByO2L6bTb5Eo8SYVIw6zvUcNppAH243mWifYApTn2hGasOhmw4iqTS64+hsT/2DP
6rgUwx0jZOjiIav8zvsE/KG7YfoNb5VrTMMGAbm8upf98u+iczFTr9lpvzF7bR6W
yRIrRQYNLwsGPSI=
-----END CERTIFICATE-----
Generated at Fri Nov 22 23:39:26 2024 by rpki-client on console-fra.rpki-client.org