Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916C4FA/B89BCBF4BA6A11EC82AC0787C4F9AE02/C310EE5AACD311ED84BAA06EC4F9AE02.roa
File:                     C310EE5AACD311ED84BAA06EC4F9AE02.roa (raw, json)
Hash identifier:          NPYNnjaBYs2qmRUfu8/y0KOBedXU4EghxnWja8r1cbI=
Subject key identifier:   55:BB:FF:CE:BA:CD:E6:9B:1B:60:5B:54:38:1A:6A:60:3A:D7:12:65
Certificate issuer:       /CN=A916C4FA/serialNumber=96E7CC77A38E3E180BF7526BA1D95321804E35E6
Certificate serial:       0128
Authority key identifier: 96:E7:CC:77:A3:8E:3E:18:0B:F7:52:6B:A1:D9:53:21:80:4E:35:E6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lufMd6OOPhgL91JrodlTIYBONeY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916C4FA/B89BCBF4BA6A11EC82AC0787C4F9AE02/C310EE5AACD311ED84BAA06EC4F9AE02.roa
Signing time:             Tue 03 Sep 2024 02:45:55 +0000
ROA not before:           Tue 03 Sep 2024 02:45:55 +0000
ROA not after:            Mon 01 Dec 2025 00:00:00 +0000
asID:                     136744
IP address blocks:        103.141.224.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916C4FA/B89BCBF4BA6A11EC82AC0787C4F9AE02/lufMd6OOPhgL91JrodlTIYBONeY.crl
                          rsync://rpki.apnic.net/member_repository/A916C4FA/B89BCBF4BA6A11EC82AC0787C4F9AE02/lufMd6OOPhgL91JrodlTIYBONeY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lufMd6OOPhgL91JrodlTIYBONeY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 20:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 296 (0x128)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916C4FA/serialNumber=96E7CC77A38E3E180BF7526BA1D95321804E35E6
        Validity
            Not Before: Sep  3 02:45:55 2024 GMT
            Not After : Dec  1 00:00:00 2025 GMT
        Subject: CN=66d67863-282e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:46:a5:2f:2d:49:20:bf:0f:e6:a0:40:ae:71:
                    b4:b0:c8:49:ae:29:66:bf:f5:01:7d:c2:d2:72:ea:
                    d1:f1:e7:07:e8:51:2f:11:62:42:bf:76:a5:6a:d3:
                    47:f1:86:cb:b7:09:a9:30:0e:94:a5:41:05:5b:e0:
                    ab:23:b7:69:75:6a:dc:28:c6:f4:76:f4:11:51:d3:
                    32:82:5b:0b:b3:a8:8c:18:ef:d7:e3:7c:b5:21:80:
                    d8:4c:56:47:c1:9f:97:60:2d:9d:74:a5:82:95:3e:
                    75:a2:5a:c0:d2:9f:fa:95:7a:5a:71:dc:d7:3d:2a:
                    6e:b6:77:58:ab:71:15:22:e7:88:d2:92:2f:7b:33:
                    d0:ce:7f:23:98:3f:d2:dc:d0:af:bd:80:79:3f:28:
                    ed:38:b2:d0:db:83:33:bb:19:23:f8:e3:fa:5e:4c:
                    a5:55:8e:52:47:b7:01:61:25:42:50:6e:93:6e:7e:
                    7b:8a:e1:ed:b8:c4:bb:24:d6:cd:3a:40:2d:63:6a:
                    9a:7b:37:47:35:62:ea:ba:bb:8b:7f:07:9b:46:79:
                    ef:54:a5:e3:e9:30:39:1f:49:1b:13:07:88:b1:1f:
                    99:67:6c:39:f0:b3:31:6e:a6:d5:63:c7:71:d8:36:
                    d4:ff:73:d4:54:24:7a:72:73:11:bb:f1:16:ed:42:
                    ac:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:BB:FF:CE:BA:CD:E6:9B:1B:60:5B:54:38:1A:6A:60:3A:D7:12:65
            X509v3 Authority Key Identifier:
                keyid:96:E7:CC:77:A3:8E:3E:18:0B:F7:52:6B:A1:D9:53:21:80:4E:35:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916C4FA/B89BCBF4BA6A11EC82AC0787C4F9AE02/lufMd6OOPhgL91JrodlTIYBONeY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lufMd6OOPhgL91JrodlTIYBONeY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C4FA/B89BCBF4BA6A11EC82AC0787C4F9AE02/C310EE5AACD311ED84BAA06EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.141.224.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8d:18:0c:37:62:a8:36:9b:6c:54:ab:9c:d2:3e:12:15:d1:d2:
         ca:4d:26:fb:2d:f9:c2:44:81:46:75:4d:1d:9e:09:90:ba:ed:
         a8:7b:da:37:f8:2a:8e:be:98:b1:81:81:fb:f7:f1:dd:ee:66:
         a6:b2:06:6e:f6:f6:54:54:17:08:14:2e:fa:ad:56:b0:82:fa:
         d0:a8:af:a8:66:a2:51:02:d4:c6:bf:66:cd:93:ec:63:7a:c6:
         9a:a9:dd:0a:d2:08:db:84:ca:a9:0c:f3:9c:d4:c3:a0:a9:88:
         86:f9:80:12:40:e3:74:ea:ca:f3:36:9f:9e:d9:56:d2:99:80:
         36:89:27:70:94:2e:48:a5:7f:c4:55:c7:35:70:b6:06:86:74:
         c9:e8:9d:93:74:5f:e5:74:57:d5:f5:3a:7d:62:e3:49:9d:2f:
         08:4d:99:de:b4:a9:06:05:7d:27:0a:7f:6e:8c:31:51:0e:04:
         f4:5d:d0:05:6d:d8:82:a2:65:6c:3e:0f:ec:6f:1f:3d:69:ca:
         14:3a:54:54:22:38:4b:23:79:00:eb:19:74:d5:e6:a0:b8:31:
         16:c9:fc:c1:da:83:15:09:eb:14:5b:c6:1f:a0:6a:7e:55:8a:
         e7:76:ab:03:6c:ea:10:c1:03:99:2f:ed:41:77:7a:79:13:66:
         ef:f5:ec:20
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICASgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkM0RkExMTAvBgNVBAUTKDk2RTdDQzc3QTM4RTNFMTgwQkY3NTI2QkExRDk1MzIx
ODA0RTM1RTYwHhcNMjQwOTAzMDI0NTU1WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmQ2Nzg2My0yODJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAo0alLy1JIL8P5qBArnG0sMhJrilmv/UBfcLScurR8ecH6FEvEWJCv3alatNH
8YbLtwmpMA6UpUEFW+CrI7dpdWrcKMb0dvQRUdMyglsLs6iMGO/X43y1IYDYTFZH
wZ+XYC2ddKWClT51olrA0p/6lXpacdzXPSputndYq3EVIueI0pIvezPQzn8jmD/S
3NCvvYB5PyjtOLLQ24Mzuxkj+OP6XkylVY5SR7cBYSVCUG6Tbn57iuHtuMS7JNbN
OkAtY2qaezdHNWLquruLfwebRnnvVKXj6TA5H0kbEweIsR+ZZ2w58LMxbqbVY8dx
2DbU/3PUVCR6cnMRu/EW7UKs5QIDAQABo4IClTCCApEwHQYDVR0OBBYEFFW7/866
zeabG2BbVDgaamA61xJlMB8GA1UdIwQYMBaAFJbnzHejjj4YC/dSa6HZUyGATjXm
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzRGQS9CODlCQ0JGNEJB
NkExMUVDODJBQzA3ODdDNEY5QUUwMi9sdWZNZDZPT1BoZ0w5MUpyb2RsVElZQk9O
ZVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2x1Zk1kNk9PUGhnTDkxSnJvZGxUSVlCT05lWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NkM0RkEvQjg5QkNCRjRCQTZBMTFFQzgyQUMwNzg3QzRGOUFFMDIvQzMxMEVFNUFB
Q0QzMTFFRDg0QkFBMDZFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnjeAwDQYJKoZIhvcNAQELBQADggEBAI0YDDdiqDabbFSr
nNI+EhXR0spNJvst+cJEgUZ1TR2eCZC67ah72jf4Ko6+mLGBgfv38d3uZqayBm72
9lRUFwgULvqtVrCC+tCor6hmolEC1Ma/Zs2T7GN6xpqp3QrSCNuEyqkM85zUw6Cp
iIb5gBJA43TqyvM2n57ZVtKZgDaJJ3CULkilf8RVxzVwtgaGdMnonZN0X+V0V9X1
On1i40mdLwhNmd60qQYFfScKf26MMVEOBPRd0AVt2IKiZWw+D+xvHz1pyhQ6VFQi
OEsjeQDrGXTV5qC4MRbJ/MHagxUJ6xRbxh+gan5Viud2qwNs6hDBA5kv7UF3enkT
Zu/17CA=
-----END CERTIFICATE-----
Generated at Thu Nov 21 01:31:55 2024 by rpki-client on console-fra.rpki-client.org