Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9163B62/4E9B76D2FBD211EDA0864345C4F9AE02/52CA5FA4FBDA11EDBC5C2B51C4F9AE02.roa
File:                     52CA5FA4FBDA11EDBC5C2B51C4F9AE02.roa (raw, json)
Hash identifier:          Pxm4f7x+lDVGmZDDz1zwJyjk4SQINSwd/O+ak1CuE3g=
Subject key identifier:   10:D0:A9:21:28:53:4A:9C:DB:90:2E:3D:F7:E2:30:63:04:85:06:10
Certificate issuer:       /CN=A9163B62/serialNumber=D3AE626449C3A9DD0E7798BCE8BCBB39662A27FF
Certificate serial:       C8
Authority key identifier: D3:AE:62:64:49:C3:A9:DD:0E:77:98:BC:E8:BC:BB:39:66:2A:27:FF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/065iZEnDqd0Od5i86Ly7OWYqJ_8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9163B62/4E9B76D2FBD211EDA0864345C4F9AE02/52CA5FA4FBDA11EDBC5C2B51C4F9AE02.roa
Signing time:             Fri 07 Jun 2024 07:41:20 +0000
ROA not before:           Fri 07 Jun 2024 07:41:20 +0000
ROA not after:            Sun 31 Aug 2025 00:00:00 +0000
asID:                     142631
IP address blocks:        103.208.66.0/24 maxlen: 24
                          103.229.232.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9163B62/4E9B76D2FBD211EDA0864345C4F9AE02/065iZEnDqd0Od5i86Ly7OWYqJ_8.crl
                          rsync://rpki.apnic.net/member_repository/A9163B62/4E9B76D2FBD211EDA0864345C4F9AE02/065iZEnDqd0Od5i86Ly7OWYqJ_8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/065iZEnDqd0Od5i86Ly7OWYqJ_8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 200 (0xc8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9163B62/serialNumber=D3AE626449C3A9DD0E7798BCE8BCBB39662A27FF
        Validity
            Not Before: Jun  7 07:41:20 2024 GMT
            Not After : Aug 31 00:00:00 2025 GMT
        Subject: CN=6662b9a0-7ae3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:da:87:d0:a6:ca:a0:81:7b:54:53:f2:0d:d3:
                    a2:13:65:48:00:e8:13:7b:c4:4c:80:93:9a:12:18:
                    45:8b:c6:0c:1a:88:7f:ad:6b:51:de:0d:0a:65:49:
                    43:c5:2d:af:7c:34:d2:3f:aa:47:bc:89:e4:8e:99:
                    7a:f2:d4:0f:86:6a:b8:7e:9d:4e:92:c1:98:e1:93:
                    97:87:34:cb:3a:d6:29:ba:c8:29:00:30:ed:e4:b2:
                    a7:d0:27:3a:77:d6:a7:c6:5d:79:72:8a:c3:24:0f:
                    28:0c:91:b9:1e:a4:69:9e:c7:b1:30:ce:ff:41:21:
                    83:21:90:dc:d3:63:f7:02:7a:1a:f8:cc:0a:b5:8d:
                    61:4b:ac:81:4e:2d:c9:9d:6b:a0:11:07:4a:1b:77:
                    30:a7:b3:b1:ea:9a:48:c4:8e:79:cc:1a:86:3b:5f:
                    a2:06:a4:c7:0d:ef:bf:1a:15:3a:11:76:28:19:f0:
                    87:59:7c:d4:70:8d:28:39:0b:b7:91:e5:8d:36:e3:
                    63:d2:e5:88:5d:77:d0:e6:97:45:fa:4e:88:a0:c4:
                    e2:cc:70:0a:39:67:21:7c:88:2f:24:36:e0:b4:55:
                    ab:25:b7:cb:73:84:b6:3f:bb:09:49:b9:8b:f0:35:
                    ff:e4:c2:2d:5a:7c:10:3e:05:67:b1:3e:13:1b:fc:
                    ce:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:D0:A9:21:28:53:4A:9C:DB:90:2E:3D:F7:E2:30:63:04:85:06:10
            X509v3 Authority Key Identifier:
                keyid:D3:AE:62:64:49:C3:A9:DD:0E:77:98:BC:E8:BC:BB:39:66:2A:27:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9163B62/4E9B76D2FBD211EDA0864345C4F9AE02/065iZEnDqd0Od5i86Ly7OWYqJ_8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/065iZEnDqd0Od5i86Ly7OWYqJ_8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163B62/4E9B76D2FBD211EDA0864345C4F9AE02/52CA5FA4FBDA11EDBC5C2B51C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.208.66.0/24
                  103.229.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:cd:16:bf:84:c7:74:15:e6:e9:32:3e:5f:ac:34:fc:7c:f2:
         e2:fb:eb:37:0b:cc:5c:f4:05:b6:f0:b3:2c:78:13:60:84:8e:
         c5:57:e6:6e:31:f5:02:96:4a:08:bd:39:ba:0b:4a:7a:0f:5d:
         80:df:99:38:4b:61:b9:52:ed:88:c0:65:b5:d3:60:51:dd:ee:
         fa:e2:a6:53:b3:9d:89:c9:8d:d6:d4:5d:c2:8e:6e:be:e7:5d:
         67:39:0a:3d:fd:e0:53:13:97:88:a8:c5:25:19:3a:4c:ca:5c:
         f8:bc:cb:ad:73:8c:46:37:70:b8:e9:88:94:29:ec:7b:9b:ff:
         71:c2:fa:b8:b8:d7:a5:1b:b0:19:c6:00:09:48:26:8c:78:5d:
         da:25:77:4d:2d:3a:6d:e0:86:c0:80:63:cb:2e:82:f9:ec:98:
         05:ba:7b:9c:12:01:be:8c:47:65:63:86:44:98:15:c3:69:6f:
         a8:8d:1a:77:27:a4:10:3f:cd:b9:ec:3e:ee:9c:ef:01:f1:e7:
         1a:9f:fa:59:e8:0c:be:5b:0a:f5:41:ea:f7:e8:2e:6f:dd:9f:
         ee:df:fb:64:44:b6:31:3c:2b:0d:34:73:e0:c8:76:32:4b:44:
         b6:5a:4a:a2:e8:b9:9b:2b:6a:09:dd:b6:f5:91:ca:4f:fc:b0:
         46:72:29:2c
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICAMgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjNCNjIxMTAvBgNVBAUTKEQzQUU2MjY0NDlDM0E5REQwRTc3OThCQ0U4QkNCQjM5
NjYyQTI3RkYwHhcNMjQwNjA3MDc0MTIwWhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NjYyYjlhMC03YWUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwdqH0KbKoIF7VFPyDdOiE2VIAOgTe8RMgJOaEhhFi8YMGoh/rWtR3g0KZUlD
xS2vfDTSP6pHvInkjpl68tQPhmq4fp1OksGY4ZOXhzTLOtYpusgpADDt5LKn0Cc6
d9anxl15corDJA8oDJG5HqRpnsexMM7/QSGDIZDc02P3Anoa+MwKtY1hS6yBTi3J
nWugEQdKG3cwp7Ox6ppIxI55zBqGO1+iBqTHDe+/GhU6EXYoGfCHWXzUcI0oOQu3
keWNNuNj0uWIXXfQ5pdF+k6IoMTizHAKOWchfIgvJDbgtFWrJbfLc4S2P7sJSbmL
8DX/5MItWnwQPgVnsT4TG/zOKQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFBDQqSEo
U0qc25AuPffiMGMEhQYQMB8GA1UdIwQYMBaAFNOuYmRJw6ndDneYvOi8uzlmKif/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2M0I2Mi80RTlCNzZEMkZC
RDIxMUVEQTA4NjQzNDVDNEY5QUUwMi8wNjVpWkVuRHFkME9kNWk4Nkx5N09XWXFK
XzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzA2NWlaRW5EcWQwT2Q1aTg2THk3T1dZcUpfOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NjNCNjIvNEU5Qjc2RDJGQkQyMTFFREEwODY0MzQ1QzRGOUFFMDIvNTJDQTVGQTRG
QkRBMTFFREJDNUMyQjUxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBABn0EIDBABn5egwDQYJKoZIhvcNAQELBQADggEBAGnNFr+E
x3QV5ukyPl+sNPx88uL76zcLzFz0Bbbwsyx4E2CEjsVX5m4x9QKWSgi9OboLSnoP
XYDfmThLYblS7YjAZbXTYFHd7vriplOznYnJjdbUXcKObr7nXWc5Cj394FMTl4io
xSUZOkzKXPi8y61zjEY3cLjpiJQp7Hub/3HC+ri416UbsBnGAAlIJox4Xdold00t
Om3ghsCAY8sugvnsmAW6e5wSAb6MR2VjhkSYFcNpb6iNGncnpBA/zbnsPu6c7wHx
5xqf+lnoDL5bCvVB6vfoLm/dn+7f+2REtjE8Kw00c+DIdjJLRLZaSqLouZsragnd
tvWRyk/8sEZyKSw=
-----END CERTIFICATE-----
Generated at Sat Nov 23 05:02:50 2024 by rpki-client on console-fra.rpki-client.org