Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916269D/78BF945032A111EA862BD517C4F9AE02/EDA2987A32A211EA87A1561DC4F9AE02.roa
File:                     EDA2987A32A211EA87A1561DC4F9AE02.roa (download)
Hash identifier:          ZfCF9DYT8E9IPjhG35+G24nVmHGunHclzATSk470BTc=
Subject key identifier:   30:04:3D:43:ED:0A:49:CD:53:C4:82:84:2C:93:8E:B8:BE:79:79:8E
Certificate issuer:       /CN=A916269D/serialNumber=FC3DF810BFC29BF1CFBF0AAFA56397EB9B4CAB77
Certificate serial:       0978
Authority key identifier: FC:3D:F8:10:BF:C2:9B:F1:CF:BF:0A:AF:A5:63:97:EB:9B:4C:AB:77
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_D34EL_Cm_HPvwqvpWOX65tMq3c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916269D/78BF945032A111EA862BD517C4F9AE02/EDA2987A32A211EA87A1561DC4F9AE02.roa
ROA valid until:          Dec 30 00:00:00 2023 GMT
asID:                     58895
IP address blocks:
    1: 103.94.244.0/24 maxlen: 24
    2: 103.102.38.0/24 maxlen: 24
    3: 103.102.40.0/23 maxlen: 24

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2424 (0x978)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916269D/serialNumber=FC3DF810BFC29BF1CFBF0AAFA56397EB9B4CAB77
        Validity
            Not Before: Nov  8 21:07:16 2022 GMT
            Not After : Dec 30 00:00:00 2023 GMT
        Subject: CN=636ac504-b492
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:e4:df:57:67:3b:38:2e:53:27:17:34:d8:c8:
                    4c:4f:49:c1:3c:7b:1f:6b:91:16:c8:3c:cf:ab:cd:
                    9b:d1:b2:12:fd:a4:35:f1:64:73:86:29:e5:90:f2:
                    a4:1c:09:ca:57:56:a3:c3:c2:5c:a6:c6:8e:fe:63:
                    5a:16:e5:97:72:05:68:63:23:8e:39:3d:2f:9c:e1:
                    77:65:da:49:90:60:38:cf:6f:1f:85:3c:aa:b5:b3:
                    29:73:cd:d3:5a:a7:28:b2:c6:48:ec:3b:70:3c:3b:
                    e5:af:5e:c1:77:c1:21:18:d9:66:7b:12:fa:74:dd:
                    2a:49:17:b6:89:05:66:68:34:cd:2c:96:81:d0:31:
                    ee:8d:3c:fc:e4:cd:fe:ad:cf:44:ee:56:3c:d1:a5:
                    db:af:d5:d8:30:26:36:78:ac:37:47:93:44:ed:f1:
                    a3:51:41:e0:aa:80:3f:1f:c7:d1:18:08:9d:24:8b:
                    f1:a7:6b:b8:c1:26:11:35:65:f3:3c:bc:f5:da:f1:
                    9e:81:12:c1:9c:0b:83:f6:16:71:45:85:f0:a6:ba:
                    c3:88:fc:b0:7b:b1:b0:07:16:ce:89:84:99:d0:79:
                    34:49:b0:6d:ce:45:47:e6:82:0a:21:5e:5e:61:cc:
                    18:97:fe:33:7d:28:fc:3a:fd:f5:85:fc:88:7b:83:
                    54:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                30:04:3D:43:ED:0A:49:CD:53:C4:82:84:2C:93:8E:B8:BE:79:79:8E
            X509v3 Authority Key Identifier: 
                keyid:FC:3D:F8:10:BF:C2:9B:F1:CF:BF:0A:AF:A5:63:97:EB:9B:4C:AB:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916269D/78BF945032A111EA862BD517C4F9AE02/_D34EL_Cm_HPvwqvpWOX65tMq3c.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_D34EL_Cm_HPvwqvpWOX65tMq3c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916269D/78BF945032A111EA862BD517C4F9AE02/EDA2987A32A211EA87A1561DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.94.244.0/24
                  103.102.38.0/24
                  103.102.40.0/23

    Signature Algorithm: sha256WithRSAEncryption
         cb:dd:ea:d0:1d:03:6a:55:1b:cc:81:1d:7a:98:8d:c9:73:76:
         1b:58:f6:e2:6e:82:06:e5:46:29:31:0d:fd:06:c1:bf:a8:28:
         6a:31:86:47:e4:86:78:c8:69:c4:53:55:34:e0:b4:df:51:d5:
         50:9c:2a:0c:9a:5a:bf:9f:8d:42:e2:60:b8:b6:20:cc:c6:1c:
         2c:33:e3:ba:40:c5:9b:05:da:bf:3e:f7:94:c2:45:27:d1:43:
         d6:4a:32:21:93:ff:3b:07:a5:7f:c3:ff:bc:e4:b6:b3:de:19:
         4f:a1:ec:00:91:02:e6:42:ce:e7:b6:66:34:9d:93:8e:b4:80:
         e5:ed:e3:07:e0:11:7b:a8:93:37:fe:39:5e:07:ee:99:4a:08:
         43:92:db:17:2b:e1:ff:88:48:7e:21:07:c9:62:2f:1d:73:f2:
         ba:27:a2:cc:e2:16:e5:ba:15:61:e9:10:6d:ff:8d:b8:a8:9e:
         c6:b9:a5:f7:62:13:37:75:a6:ee:78:3a:3d:10:2f:18:a5:da:
         a0:c3:34:64:6e:34:04:dd:38:d2:88:a1:3b:73:9c:72:6d:3c:
         46:5d:f2:7b:11:c4:e9:38:e9:3e:59:56:f8:fc:ad:be:66:6d:
         6f:3e:79:94:1c:e5:ab:a3:d3:f5:ec:4b:f1:6b:ce:22:66:f1:
         d9:84:b7:c3
-----BEGIN CERTIFICATE-----
MIIFfTCCBGWgAwIBAgICCXgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjI2OUQxMTAvBgNVBAUTKEZDM0RGODEwQkZDMjlCRjFDRkJGMEFBRkE1NjM5N0VC
OUI0Q0FCNzcwHhcNMjIxMTA4MjEwNzE2WhcNMjMxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02MzZhYzUwNC1iNDkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2eTfV2c7OC5TJxc02MhMT0nBPHsfa5EWyDzPq82b0bIS/aQ18WRzhinlkPKk
HAnKV1ajw8JcpsaO/mNaFuWXcgVoYyOOOT0vnOF3ZdpJkGA4z28fhTyqtbMpc83T
WqcossZI7DtwPDvlr17Bd8EhGNlmexL6dN0qSRe2iQVmaDTNLJaB0DHujTz85M3+
rc9E7lY80aXbr9XYMCY2eKw3R5NE7fGjUUHgqoA/H8fRGAidJIvxp2u4wSYRNWXz
PLz12vGegRLBnAuD9hZxRYXwprrDiPywe7GwBxbOiYSZ0Hk0SbBtzkVH5oIKIV5e
YcwYl/4zfSj8Ov31hfyIe4NUZQIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFDAEPUPt
CknNU8SChCyTjri+eXmOMB8GA1UdIwQYMBaAFPw9+BC/wpvxz78Kr6Vjl+ubTKt3
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MjY5RC83OEJGOTQ1MDMy
QTExMUVBODYyQkQ1MTdDNEY5QUUwMi9fRDM0RUxfQ21fSFB2d3F2cFdPWDY1dE1x
M2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL19EMzRFTF9DbV9IUHZ3cXZwV09YNjV0TXEzYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NjI2OUQvNzhCRjk0NTAzMkExMTFFQTg2MkJENTE3QzRGOUFFMDIvRURBMjk4N0Ez
MkEyMTFFQTg3QTE1NjFEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E
HDAaMBgEAgABMBIDBABnXvQDBABnZiYDBAFnZigwDQYJKoZIhvcNAQELBQADggEB
AMvd6tAdA2pVG8yBHXqYjclzdhtY9uJuggblRikxDf0Gwb+oKGoxhkfkhnjIacRT
VTTgtN9R1VCcKgyaWr+fjULiYLi2IMzGHCwz47pAxZsF2r8+95TCRSfRQ9ZKMiGT
/zsHpX/D/7zktrPeGU+h7ACRAuZCzue2ZjSdk460gOXt4wfgEXuokzf+OV4H7plK
CEOS2xcr4f+ISH4hB8liLx1z8ronosziFuW6FWHpEG3/jbionsa5pfdiEzd1pu54
Oj0QLxil2qDDNGRuNATdONKIoTtznHJtPEZd8nsRxOk46T5ZVvj8rb5mbW8+eZQc
5auj0/XsS/FrziJm8dmEt8M=
-----END CERTIFICATE-----
Generated at Fri Dec 9 02:50:31 2022 by rpki-client.