Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/7A589CF6A39D11EDB714273AC4F9AE02.roa
File:                     7A589CF6A39D11EDB714273AC4F9AE02.roa (raw, json)
Hash identifier:          6lsGBtrnvcBm0t+pZh1ND+NZ7mAtIYzvny8VS286Y0o=
Subject key identifier:   06:06:61:A0:27:70:37:1E:40:FE:7B:32:60:11:8F:E6:8F:C5:D5:69
Certificate issuer:       /CN=A916557B/serialNumber=2853BDA1638C599A84C3095310E69BFD260AA978
Certificate serial:       025E
Authority key identifier: 28:53:BD:A1:63:8C:59:9A:84:C3:09:53:10:E6:9B:FD:26:0A:A9:78
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KFO9oWOMWZqEwwlTEOab_SYKqXg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/7A589CF6A39D11EDB714273AC4F9AE02.roa
Signing time:             Thu 07 Dec 2023 03:14:17 +0000
ROA not before:           Thu 07 Dec 2023 03:14:17 +0000
ROA not after:            Sun 02 Mar 2025 00:00:00 +0000
asID:                     40065
IP address blocks:        103.103.245.0/24 maxlen: 24
                          103.235.18.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/KFO9oWOMWZqEwwlTEOab_SYKqXg.crl
                          rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/KFO9oWOMWZqEwwlTEOab_SYKqXg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KFO9oWOMWZqEwwlTEOab_SYKqXg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 10 May 2024 03:38:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 606 (0x25e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916557B/serialNumber=2853BDA1638C599A84C3095310E69BFD260AA978
        Validity
            Not Before: Dec  7 03:14:17 2023 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=65713889-557d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:fd:5b:75:f1:0c:30:cf:c6:a3:0c:7a:b5:0a:
                    25:dd:ed:43:2d:68:d1:f2:c4:fc:b4:85:61:4c:7d:
                    d4:ca:ba:28:ef:1e:0e:96:9c:1f:75:02:d3:e6:78:
                    85:bf:8a:0f:39:5c:ee:03:35:d4:11:c1:68:0c:c8:
                    75:06:7a:10:ea:53:1d:e3:cc:c0:a3:43:51:e8:1e:
                    8a:40:7a:2c:a2:7a:69:d8:1a:1f:a5:03:e9:05:9b:
                    84:61:5f:67:17:1b:62:5f:fb:f8:ac:90:a1:87:32:
                    2f:c9:26:5c:50:57:2c:23:7e:09:9c:ab:33:77:22:
                    e8:30:3f:f8:d3:b0:29:8c:4c:23:2e:5b:d3:69:55:
                    e0:96:e2:07:0e:2c:8a:fa:10:1d:7d:d2:2d:72:d0:
                    1f:65:31:69:81:62:18:0f:fb:0a:52:af:17:5a:8d:
                    aa:1a:56:dd:dd:fa:62:00:ef:33:7b:49:54:97:42:
                    6a:00:8b:01:b6:7a:30:dc:bd:f6:a7:f0:48:75:84:
                    03:e6:94:4e:4a:bd:4d:a2:e7:e6:17:dd:7b:8b:1e:
                    f4:2c:bd:9e:54:73:1b:30:27:f8:04:0d:93:21:7d:
                    c4:0b:9f:60:25:3b:7c:a2:b7:df:9f:63:e9:94:ec:
                    bb:af:eb:a0:0f:6c:94:13:3e:8e:12:20:ce:7e:63:
                    0b:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:06:61:A0:27:70:37:1E:40:FE:7B:32:60:11:8F:E6:8F:C5:D5:69
            X509v3 Authority Key Identifier:
                keyid:28:53:BD:A1:63:8C:59:9A:84:C3:09:53:10:E6:9B:FD:26:0A:A9:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/KFO9oWOMWZqEwwlTEOab_SYKqXg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KFO9oWOMWZqEwwlTEOab_SYKqXg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/7A589CF6A39D11EDB714273AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.103.245.0/24
                  103.235.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:cb:08:72:71:79:69:38:51:4b:ad:8a:5f:e6:b6:67:9f:65:
         d8:a1:99:84:7d:35:96:30:bf:7b:40:97:24:50:9d:e6:99:ed:
         aa:3b:69:3f:50:3f:75:05:56:c8:18:21:76:6d:f1:49:9b:56:
         3a:93:b2:5b:fa:df:e0:f8:ab:d9:9f:a0:97:c6:ed:b6:86:60:
         d6:5f:28:33:01:ec:19:e5:b9:ea:16:df:fd:21:30:04:11:f8:
         eb:49:4b:5a:b6:35:64:6d:e7:f0:ca:06:16:e9:9a:11:88:67:
         77:68:a0:74:05:cd:60:a3:67:47:7e:31:74:3c:75:9e:fd:7e:
         09:72:a4:2e:d8:92:5d:f7:96:9a:d4:83:15:28:96:c9:ca:c7:
         7b:e1:7a:90:da:46:41:67:49:d7:2c:48:2a:4c:a5:ea:d3:49:
         75:d0:1e:e0:b5:2d:77:8c:40:a6:1c:c0:75:29:fa:ac:d2:d3:
         7c:11:87:e2:93:1e:74:fa:e3:f5:13:4e:eb:50:a3:42:af:19:
         55:93:84:d5:bb:e4:0c:7c:dc:05:a6:33:9a:19:7a:b3:77:fd:
         86:97:ac:7c:38:59:67:37:9b:dd:fb:c6:4e:64:e4:8a:8d:4b:
         d3:66:1c:6d:66:f7:f5:82:e9:d0:8b:c0:de:db:84:ae:f0:f2:
         dc:09:f9:08
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICAl4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjU1N0IxMTAvBgNVBAUTKDI4NTNCREExNjM4QzU5OUE4NEMzMDk1MzEwRTY5QkZE
MjYwQUE5NzgwHhcNMjMxMjA3MDMxNDE3WhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02NTcxMzg4OS01NTdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuv1bdfEMMM/Gowx6tQol3e1DLWjR8sT8tIVhTH3Uyroo7x4OlpwfdQLT5niF
v4oPOVzuAzXUEcFoDMh1BnoQ6lMd48zAo0NR6B6KQHosonpp2BofpQPpBZuEYV9n
FxtiX/v4rJChhzIvySZcUFcsI34JnKszdyLoMD/407ApjEwjLlvTaVXgluIHDiyK
+hAdfdItctAfZTFpgWIYD/sKUq8XWo2qGlbd3fpiAO8ze0lUl0JqAIsBtnow3L32
p/BIdYQD5pROSr1NoufmF917ix70LL2eVHMbMCf4BA2TIX3EC59gJTt8orffn2Pp
lOy7r+ugD2yUEz6OEiDOfmML9wIDAQABo4ICmzCCApcwHQYDVR0OBBYEFAYGYaAn
cDceQP57MmARj+aPxdVpMB8GA1UdIwQYMBaAFChTvaFjjFmahMMJUxDmm/0mCql4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTU3Qi84REE3MjY0MEMx
RkExMUVDQjMwRUUyMUFDNEY5QUUwMi9LRk85b1dPTVdacUV3d2xURU9hYl9TWUtx
WGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tGTzlvV09NV1pxRXd3bFRFT2FiX1NZS3FYZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NjU1N0IvOERBNzI2NDBDMUZBMTFFQ0IzMEVFMjFBQzRGOUFFMDIvN0E1ODlDRjZB
MzlEMTFFREI3MTQyNzNBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBABnZ/UDBABn6xIwDQYJKoZIhvcNAQELBQADggEBAA3LCHJx
eWk4UUutil/mtmefZdihmYR9NZYwv3tAlyRQneaZ7ao7aT9QP3UFVsgYIXZt8Umb
VjqTslv63+D4q9mfoJfG7baGYNZfKDMB7BnlueoW3/0hMAQR+OtJS1q2NWRt5/DK
BhbpmhGIZ3dooHQFzWCjZ0d+MXQ8dZ79fglypC7Ykl33lprUgxUolsnKx3vhepDa
RkFnSdcsSCpMperTSXXQHuC1LXeMQKYcwHUp+qzS03wRh+KTHnT64/UTTutQo0Kv
GVWThNW75Ax83AWmM5oZerN3/YaXrHw4WWc3m937xk5k5IqNS9NmHG1m9/WC6dCL
wN7bhK7w8twJ+Qg=
-----END CERTIFICATE-----
Generated at Fri May 3 04:45:15 2024 by rpki-client on console-fra.rpki-client.org