Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916DC7C/6AE76152AB3811EC8BDB8C3CC4F9AE02/82FF48B4AB3C11EC9D6C1668C4F9AE02.roa
File:                     82FF48B4AB3C11EC9D6C1668C4F9AE02.roa (raw, json)
Hash identifier:          deXf14KsHTj6pfBYqF9cBs+V+3eFMnPwxxjR8ucX3ok=
Subject key identifier:   D4:61:E8:1C:D7:70:05:E0:53:E0:D5:C3:D1:11:55:C0:9C:48:40:F8
Certificate issuer:       /CN=A916DC7C/serialNumber=4F8300E10DCA24D565D33F02AD386E6F5738F90A
Certificate serial:       02AC
Authority key identifier: 4F:83:00:E1:0D:CA:24:D5:65:D3:3F:02:AD:38:6E:6F:57:38:F9:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T4MA4Q3KJNVl0z8CrThub1c4-Qo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916DC7C/6AE76152AB3811EC8BDB8C3CC4F9AE02/82FF48B4AB3C11EC9D6C1668C4F9AE02.roa
Signing time:             Fri 03 May 2024 03:46:11 +0000
ROA not before:           Fri 03 May 2024 03:46:11 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     136451
IP address blocks:        103.184.136.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916DC7C/6AE76152AB3811EC8BDB8C3CC4F9AE02/T4MA4Q3KJNVl0z8CrThub1c4-Qo.crl
                          rsync://rpki.apnic.net/member_repository/A916DC7C/6AE76152AB3811EC8BDB8C3CC4F9AE02/T4MA4Q3KJNVl0z8CrThub1c4-Qo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T4MA4Q3KJNVl0z8CrThub1c4-Qo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Jun 2024 02:50:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 684 (0x2ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916DC7C/serialNumber=4F8300E10DCA24D565D33F02AD386E6F5738F90A
        Validity
            Not Before: May  3 03:46:11 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=66345e02-fa1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:0e:80:4a:b6:52:dc:de:a1:61:e2:21:a8:b6:
                    a2:f0:aa:0b:79:20:1f:50:c3:2a:5c:36:8c:6a:ae:
                    9e:62:3a:c2:ec:db:46:e9:bc:3e:80:e2:b3:a7:36:
                    7c:78:77:48:6f:6d:22:de:a8:23:3e:f5:49:3d:b6:
                    14:44:22:37:78:6c:ab:f1:9a:21:21:40:32:be:d8:
                    32:2f:67:ba:3f:20:a4:0d:98:8b:77:54:d2:92:bb:
                    5d:5a:5f:73:0c:cc:3c:4e:cf:10:94:6e:9a:cc:06:
                    7d:79:1b:6f:53:4d:5a:c7:70:f7:5b:d6:01:0e:66:
                    2f:43:9e:d0:a2:a5:87:68:03:2e:8a:ca:4a:58:61:
                    0c:dd:e7:3c:e0:0c:e4:54:d4:3b:24:99:a7:97:62:
                    cd:18:9f:88:de:c9:84:39:ab:70:bb:32:80:3b:59:
                    9a:7e:25:0c:86:4d:a8:78:ec:49:54:96:23:05:c0:
                    71:d6:d9:69:a1:85:5e:2a:db:75:26:46:56:50:fe:
                    c9:ff:48:7c:b2:36:a2:89:a7:e9:80:be:f4:e7:76:
                    84:b9:06:cb:4b:b6:d0:63:a9:8b:75:1b:42:82:68:
                    18:9c:ba:30:ef:98:27:0c:4f:a5:ad:05:c5:e0:7d:
                    ef:3b:33:d3:f3:33:3c:b2:99:a1:a9:67:a9:ef:ae:
                    d4:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:61:E8:1C:D7:70:05:E0:53:E0:D5:C3:D1:11:55:C0:9C:48:40:F8
            X509v3 Authority Key Identifier:
                keyid:4F:83:00:E1:0D:CA:24:D5:65:D3:3F:02:AD:38:6E:6F:57:38:F9:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916DC7C/6AE76152AB3811EC8BDB8C3CC4F9AE02/T4MA4Q3KJNVl0z8CrThub1c4-Qo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T4MA4Q3KJNVl0z8CrThub1c4-Qo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DC7C/6AE76152AB3811EC8BDB8C3CC4F9AE02/82FF48B4AB3C11EC9D6C1668C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.184.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:af:c5:6b:7a:50:33:c8:64:49:15:8a:19:5b:3b:19:ac:b8:
         75:a5:3c:5b:70:43:80:5e:49:a9:f1:dd:d9:bd:d3:52:03:a1:
         b4:be:e4:ae:e1:a4:8a:61:58:8b:28:2b:58:eb:6f:23:ae:2f:
         fb:d5:b4:01:63:f9:14:b4:71:6d:77:c6:20:c8:86:a3:2f:a4:
         11:da:50:63:07:8b:c2:b8:bb:1b:86:2b:52:fc:a4:9b:1b:c6:
         7b:c7:d7:59:6f:90:25:54:d0:ab:a5:fe:43:a5:a1:9d:46:08:
         04:eb:f1:48:a0:46:73:c7:b5:86:3a:1b:67:33:74:30:ca:a7:
         ea:9a:34:e6:b3:f0:e5:cd:3f:d1:f0:2a:2a:74:bf:b9:7d:e6:
         6d:7b:e3:3f:e2:63:05:09:0b:6f:59:6e:89:a2:9b:8d:35:24:
         82:13:8e:32:eb:0c:81:00:6f:ca:a0:ef:ab:0a:25:da:d3:c4:
         ff:29:3e:46:53:33:86:dd:75:23:25:5a:9d:b0:db:0d:d9:7a:
         d4:43:ba:a4:e2:2b:12:2b:db:65:62:c7:50:bf:fa:07:86:e5:
         3b:53:70:95:f6:45:d9:aa:e9:b1:70:9d:93:7d:d9:c2:16:15:
         10:e2:07:d3:af:67:91:68:d3:20:32:71:59:69:31:14:66:3b:
         56:8a:0f:18
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAqwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkRDN0MxMTAvBgNVBAUTKDRGODMwMEUxMERDQTI0RDU2NUQzM0YwMkFEMzg2RTZG
NTczOEY5MEEwHhcNMjQwNTAzMDM0NjExWhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NjM0NWUwMi1mYTFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzA6ASrZS3N6hYeIhqLai8KoLeSAfUMMqXDaMaq6eYjrC7NtG6bw+gOKzpzZ8
eHdIb20i3qgjPvVJPbYURCI3eGyr8ZohIUAyvtgyL2e6PyCkDZiLd1TSkrtdWl9z
DMw8Ts8QlG6azAZ9eRtvU01ax3D3W9YBDmYvQ57QoqWHaAMuispKWGEM3ec84Azk
VNQ7JJmnl2LNGJ+I3smEOatwuzKAO1mafiUMhk2oeOxJVJYjBcBx1tlpoYVeKtt1
JkZWUP7J/0h8sjaiiafpgL7053aEuQbLS7bQY6mLdRtCgmgYnLow75gnDE+lrQXF
4H3vOzPT8zM8spmhqWep767UPQIDAQABo4IClTCCApEwHQYDVR0OBBYEFNRh6BzX
cAXgU+DVw9ERVcCcSED4MB8GA1UdIwQYMBaAFE+DAOENyiTVZdM/Aq04bm9XOPkK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2REM3Qy82QUU3NjE1MkFC
MzgxMUVDOEJEQjhDM0NDNEY5QUUwMi9UNE1BNFEzS0pOVmwwejhDclRodWIxYzQt
UW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1Q0TUE0UTNLSk5WbDB6OENyVGh1YjFjNC1Rby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NkRDN0MvNkFFNzYxNTJBQjM4MTFFQzhCREI4QzNDQzRGOUFFMDIvODJGRjQ4QjRB
QjNDMTFFQzlENkMxNjY4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnuIgwDQYJKoZIhvcNAQELBQADggEBAC2vxWt6UDPIZEkV
ihlbOxmsuHWlPFtwQ4BeSanx3dm901IDobS+5K7hpIphWIsoK1jrbyOuL/vVtAFj
+RS0cW13xiDIhqMvpBHaUGMHi8K4uxuGK1L8pJsbxnvH11lvkCVU0Kul/kOloZ1G
CATr8UigRnPHtYY6G2czdDDKp+qaNOaz8OXNP9HwKip0v7l95m174z/iYwUJC29Z
bomim401JIITjjLrDIEAb8qg76sKJdrTxP8pPkZTM4bddSMlWp2w2w3ZetRDuqTi
KxIr22Vix1C/+geG5TtTcJX2Rdmq6bFwnZN92cIWFRDiB9OvZ5Fo0yAycVlpMRRm
O1aKDxg=
-----END CERTIFICATE-----
Generated at Mon May 27 05:03:53 2024 by rpki-client on console-ams.rpki-client.org