Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916A505/4A89D56220E511EC9022DD59C4F9AE02/BB682E3E81F711EF9D066A30C4F9AE02.roa
File:                     BB682E3E81F711EF9D066A30C4F9AE02.roa (raw, json)
Hash identifier:          mEfuBScZpZeFmMyueAWuPtuajKkOCOYKLfFZDW7f+W8=
Subject key identifier:   02:69:58:71:0F:9C:33:03:10:E4:7F:26:FD:5E:C9:19:D8:95:CB:54
Certificate issuer:       /CN=A916A505/serialNumber=84477A3CF003ABBCBC854E3F40C87CBCF2A158DF
Certificate serial:       047A
Authority key identifier: 84:47:7A:3C:F0:03:AB:BC:BC:85:4E:3F:40:C8:7C:BC:F2:A1:58:DF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hEd6PPADq7y8hU4_QMh8vPKhWN8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916A505/4A89D56220E511EC9022DD59C4F9AE02/BB682E3E81F711EF9D066A30C4F9AE02.roa
Signing time:             Sat 02 Nov 2024 23:43:09 +0000
ROA not before:           Sat 02 Nov 2024 23:43:09 +0000
ROA not after:            Mon 31 Mar 2025 00:00:00 +0000
asID:                     135512
IP address blocks:        103.131.42.0/24 maxlen: 24
                          103.131.43.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916A505/4A89D56220E511EC9022DD59C4F9AE02/hEd6PPADq7y8hU4_QMh8vPKhWN8.crl
                          rsync://rpki.apnic.net/member_repository/A916A505/4A89D56220E511EC9022DD59C4F9AE02/hEd6PPADq7y8hU4_QMh8vPKhWN8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hEd6PPADq7y8hU4_QMh8vPKhWN8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Dec 2024 22:11:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1146 (0x47a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916A505/serialNumber=84477A3CF003ABBCBC854E3F40C87CBCF2A158DF
        Validity
            Not Before: Nov  2 23:43:09 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=6726b90d-29b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ee:c7:3c:10:54:1a:f6:ad:b0:c0:a8:00:34:
                    fe:6a:0c:81:01:ae:e3:ef:6c:76:28:4a:51:65:b3:
                    bb:b7:9f:f7:92:57:50:1f:3f:c7:37:0c:5c:81:f2:
                    9a:c1:3a:f9:92:0e:db:4d:55:8a:9b:25:a1:7a:d8:
                    d8:f7:23:48:ba:f0:44:23:5c:a9:3e:28:68:35:83:
                    3f:47:1a:7d:65:61:92:df:8e:9b:c7:f8:d8:f4:57:
                    83:eb:48:95:fc:d5:a6:af:b6:98:cb:4d:f5:d0:e1:
                    21:56:4d:6d:ba:52:25:2a:eb:52:22:79:b7:1b:b6:
                    2a:64:77:c4:52:d8:fa:f3:b1:45:0c:64:cb:7f:76:
                    20:ab:c1:17:92:a0:ae:b3:bf:be:d0:80:71:02:fa:
                    89:df:e9:a0:a3:ef:b3:34:f5:05:b2:02:30:20:c3:
                    0b:e2:b8:91:0d:a1:fb:b6:80:80:d1:73:73:71:99:
                    51:c3:ae:00:48:71:13:d4:1a:d2:ee:b9:62:d4:41:
                    63:09:81:00:5c:63:b6:6a:d4:89:f8:bb:24:de:49:
                    13:04:97:c5:b3:96:31:62:2b:b3:49:bd:2d:dd:aa:
                    77:10:9e:fd:c7:16:7f:d4:e4:aa:f5:09:8f:6f:1e:
                    f3:06:b2:50:00:1e:02:cc:2d:7c:9f:15:4e:7b:7a:
                    d9:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:69:58:71:0F:9C:33:03:10:E4:7F:26:FD:5E:C9:19:D8:95:CB:54
            X509v3 Authority Key Identifier:
                keyid:84:47:7A:3C:F0:03:AB:BC:BC:85:4E:3F:40:C8:7C:BC:F2:A1:58:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916A505/4A89D56220E511EC9022DD59C4F9AE02/hEd6PPADq7y8hU4_QMh8vPKhWN8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hEd6PPADq7y8hU4_QMh8vPKhWN8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A505/4A89D56220E511EC9022DD59C4F9AE02/BB682E3E81F711EF9D066A30C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.131.42.0/23

    Signature Algorithm: sha256WithRSAEncryption
         18:8f:c7:97:f0:58:57:d2:62:f1:76:46:93:a2:a7:65:ba:0e:
         9e:f0:aa:f5:79:e4:d4:a1:76:f2:f3:ca:78:ba:b2:1c:7c:1f:
         8d:6e:37:40:9e:8a:0e:ef:0b:85:42:10:75:d8:9e:81:14:9a:
         df:46:37:c5:61:e5:35:c1:42:f8:d2:30:a5:c9:1f:11:ce:b7:
         db:d4:6e:a9:8e:3f:87:6d:d0:0e:31:4b:c6:a4:61:21:24:5d:
         11:5d:dd:e2:d3:13:bf:89:c6:c2:e5:fd:ba:15:b3:87:b5:75:
         9a:d1:1c:01:72:6d:3d:57:ee:9d:bc:c1:29:f3:c4:fb:dd:19:
         fe:eb:bd:b9:95:9a:fc:ba:26:7a:95:ed:a5:10:2e:fa:53:b9:
         f5:1b:69:a6:07:0f:3e:b7:b3:0a:df:52:c7:1e:60:bf:3a:b6:
         8a:5a:67:69:72:ae:3a:c2:8f:f3:10:f8:d1:c0:48:6d:a3:2a:
         8a:53:66:08:23:34:b6:f6:e4:33:62:05:14:f0:90:10:6b:d6:
         25:aa:70:af:f8:6f:62:7b:2b:7a:e6:eb:45:3f:1d:f1:e4:26:
         ce:f8:11:72:b2:32:e4:e8:cb:6e:56:f0:1c:db:0c:af:55:d8:
         10:e4:c6:f9:c7:24:88:0c:7e:d0:cc:37:ce:80:bc:7e:44:84:
         bc:51:52:38
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBHowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkE1MDUxMTAvBgNVBAUTKDg0NDc3QTNDRjAwM0FCQkNCQzg1NEUzRjQwQzg3Q0JD
RjJBMTU4REYwHhcNMjQxMTAyMjM0MzA5WhcNMjUwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzI2YjkwZC0yOWIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxO7HPBBUGvatsMCoADT+agyBAa7j72x2KEpRZbO7t5/3kldQHz/HNwxcgfKa
wTr5kg7bTVWKmyWhetjY9yNIuvBEI1ypPihoNYM/Rxp9ZWGS346bx/jY9FeD60iV
/NWmr7aYy0310OEhVk1tulIlKutSInm3G7YqZHfEUtj687FFDGTLf3Ygq8EXkqCu
s7++0IBxAvqJ3+mgo++zNPUFsgIwIMML4riRDaH7toCA0XNzcZlRw64ASHET1BrS
7rli1EFjCYEAXGO2atSJ+Lsk3kkTBJfFs5YxYiuzSb0t3ap3EJ79xxZ/1OSq9QmP
bx7zBrJQAB4CzC18nxVOe3rZUQIDAQABo4IClTCCApEwHQYDVR0OBBYEFAJpWHEP
nDMDEOR/Jv1eyRnYlctUMB8GA1UdIwQYMBaAFIRHejzwA6u8vIVOP0DIfLzyoVjf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTUwNS80QTg5RDU2MjIw
RTUxMUVDOTAyMkRENTlDNEY5QUUwMi9oRWQ2UFBBRHE3eThoVTRfUU1oOHZQS2hX
TjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2hFZDZQUEFEcTd5OGhVNF9RTWg4dlBLaFdOOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NkE1MDUvNEE4OUQ1NjIyMEU1MTFFQzkwMjJERDU5QzRGOUFFMDIvQkI2ODJFM0U4
MUY3MTFFRjlEMDY2QTMwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFngyowDQYJKoZIhvcNAQELBQADggEBABiPx5fwWFfSYvF2
RpOip2W6Dp7wqvV55NShdvLzyni6shx8H41uN0Ceig7vC4VCEHXYnoEUmt9GN8Vh
5TXBQvjSMKXJHxHOt9vUbqmOP4dt0A4xS8akYSEkXRFd3eLTE7+JxsLl/boVs4e1
dZrRHAFybT1X7p28wSnzxPvdGf7rvbmVmvy6JnqV7aUQLvpTufUbaaYHDz63swrf
UsceYL86topaZ2lyrjrCj/MQ+NHASG2jKopTZggjNLb25DNiBRTwkBBr1iWqcK/4
b2J7K3rm60U/HfHkJs74EXKyMuToy25W8BzbDK9V2BDkxvnHJIgMftDMN86AvH5E
hLxRUjg=
-----END CERTIFICATE-----
Generated at Wed Nov 27 00:32:47 2024 by rpki-client on console-fra.rpki-client.org