Route Origin Authorization

$ cd rpki.apnic.net/member_repository/A9174EB5/AFEA29C2061911EA854A3516C4F9AE02/

$ rpki-client -vvf 5C7542F4060E11EB9A4BBF52C4F9AE02.roa
File:                     5C7542F4060E11EB9A4BBF52C4F9AE02.roa (download)
Hash identifier:          X7Frg1vZbxxmHcs6xAQlObRshfKMsbWjqHsT5rcxKAU=
Subject key identifier:   E0:53:4B:90:B0:73:A5:52:B6:F4:FB:67:67:43:86:14:E0:C3:AC:6C
Certificate issuer:       /CN=A9174EB5/serialNumber=48E99851C189FA921B86664E30BC57C20ED1A8C4
Certificate serial:       087B
Authority key identifier: 48:E9:98:51:C1:89:FA:92:1B:86:66:4E:30:BC:57:C2:0E:D1:A8:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9174EB5/AFEA29C2061911EA854A3516C4F9AE02/5C7542F4060E11EB9A4BBF52C4F9AE02.roa
ROA valid until:          May 01 00:00:00 2023 GMT
asID:                     135386
IP address blocks:
    1: 103.133.92.0/24 maxlen: 24
    2: 103.133.94.0/24 maxlen: 24

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2171 (0x87b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9174EB5/serialNumber=48E99851C189FA921B86664E30BC57C20ED1A8C4
        Validity
            Not Before: Jan 12 08:17:10 2022 GMT
            Not After : May  1 00:00:00 2023 GMT
        Subject: CN=61de8e85-f870
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:e9:e2:c5:df:b4:d9:fa:2b:06:df:27:96:c5:
                    0d:54:74:5c:50:ab:38:8a:fc:30:65:7f:5e:ef:27:
                    63:66:35:8c:e5:87:03:3c:cf:3c:66:76:63:80:21:
                    cd:f2:1b:45:3e:fc:14:70:56:ad:ab:8f:25:59:6f:
                    03:d0:fe:73:de:aa:ad:c4:d4:51:58:dd:16:b3:d4:
                    8e:15:e5:17:a9:04:ba:ec:d0:b6:87:4c:5b:73:db:
                    d7:16:48:1e:c3:03:83:2e:15:c5:7c:6a:ac:93:b6:
                    ea:94:b6:65:15:35:3c:0a:35:41:63:39:fd:43:43:
                    5f:d8:fa:2f:a9:71:5b:d1:99:d0:5a:4d:da:16:1b:
                    43:1e:97:de:91:57:a7:fb:2c:e8:b9:5c:00:e7:1f:
                    15:56:48:ce:f0:5f:d2:87:1b:04:0c:65:c5:0e:1f:
                    26:da:d6:47:b1:fb:51:ad:12:e2:3e:72:72:b6:ed:
                    25:ab:1a:5b:26:60:eb:d6:7d:6f:24:b9:01:e8:35:
                    8d:63:a2:84:ef:6d:30:ef:62:7d:31:4a:8d:38:4a:
                    fc:66:34:77:56:6b:6e:96:6f:b0:42:ee:9a:95:71:
                    2b:99:fd:ae:8d:47:3a:f4:70:d4:9c:d7:c6:2e:9f:
                    83:cb:32:04:b7:a0:99:e5:6c:d7:a3:14:13:bf:a0:
                    fe:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                E0:53:4B:90:B0:73:A5:52:B6:F4:FB:67:67:43:86:14:E0:C3:AC:6C
            X509v3 Authority Key Identifier: 
                keyid:48:E9:98:51:C1:89:FA:92:1B:86:66:4E:30:BC:57:C2:0E:D1:A8:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9174EB5/AFEA29C2061911EA854A3516C4F9AE02/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174EB5/AFEA29C2061911EA854A3516C4F9AE02/5C7542F4060E11EB9A4BBF52C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.133.92.0/24
                  103.133.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:9f:0d:6f:2d:5c:60:bd:c4:ae:97:39:12:90:02:9f:db:b0:
         17:c4:91:6b:a7:74:08:60:f8:ad:78:16:0c:df:2e:e0:e2:97:
         06:46:23:4f:8e:bb:55:02:c8:47:17:fb:8a:5b:80:6a:b1:33:
         40:91:48:54:74:9e:37:08:b0:b1:a3:42:33:e5:2c:bd:c0:6c:
         51:ea:2a:f8:b3:47:9b:65:7d:11:25:59:22:09:60:2b:08:61:
         26:c8:da:32:4a:a5:3a:a2:3c:d6:f6:f0:fc:ff:f7:19:40:b2:
         27:a4:26:dc:b2:08:c7:e6:e9:2d:b4:fe:dc:01:6a:ab:6a:b9:
         c4:9c:b1:c9:cd:51:5f:4b:4a:63:9a:0b:31:b2:39:6a:7b:1b:
         10:9e:bd:7d:ea:23:48:dd:fb:68:d8:f2:80:70:0f:69:0e:15:
         21:99:d5:f4:0a:9b:f7:d2:47:1b:ba:76:5a:03:09:d7:c2:1f:
         16:13:00:3d:a6:b8:58:3b:7c:a8:ee:8d:ef:06:d6:81:6e:60:
         55:61:38:f6:c2:7e:6f:5e:77:30:ec:f8:82:97:27:71:f8:8e:
         e4:1c:84:b0:2d:24:59:ba:0a:ad:02:4c:3c:27:c4:ca:46:02:
         ac:1e:d4:1c:5c:5b:bf:63:ca:59:95:ba:3a:c7:d9:0f:af:eb:
         b2:30:7e:28
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICCHswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzRFQjUxMTAvBgNVBAUTKDQ4RTk5ODUxQzE4OUZBOTIxQjg2NjY0RTMwQkM1N0My
MEVEMUE4QzQwHhcNMjIwMTEyMDgxNzEwWhcNMjMwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02MWRlOGU4NS1mODcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmunixd+02forBt8nlsUNVHRcUKs4ivwwZX9e7ydjZjWM5YcDPM88ZnZjgCHN
8htFPvwUcFatq48lWW8D0P5z3qqtxNRRWN0Ws9SOFeUXqQS67NC2h0xbc9vXFkge
wwODLhXFfGqsk7bqlLZlFTU8CjVBYzn9Q0Nf2PovqXFb0ZnQWk3aFhtDHpfekVen
+yzouVwA5x8VVkjO8F/ShxsEDGXFDh8m2tZHsftRrRLiPnJytu0lqxpbJmDr1n1v
JLkB6DWNY6KE720w72J9MUqNOEr8ZjR3Vmtulm+wQu6alXErmf2ujUc69HDUnNfG
Lp+DyzIEt6CZ5WzXoxQTv6D+dwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFOBTS5Cw
c6VStvT7Z2dDhhTgw6xsMB8GA1UdIwQYMBaAFEjpmFHBifqSG4ZmTjC8V8IO0ajE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NEVCNS9BRkVBMjlDMjA2
MTkxMUVBODU0QTM1MTZDNEY5QUUwMi9TT21ZVWNHSi1wSWJobVpPTUx4WHdnN1Jx
TVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1NPbVlVY0dKLXBJYmhtWk9NTHhYd2c3UnFNUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NzRFQjUvQUZFQTI5QzIwNjE5MTFFQTg1NEEzNTE2QzRGOUFFMDIvNUM3NTQyRjQw
NjBFMTFFQjlBNEJCRjUyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBABnhVwDBABnhV4wDQYJKoZIhvcNAQELBQADggEBACyfDW8t
XGC9xK6XORKQAp/bsBfEkWundAhg+K14FgzfLuDilwZGI0+Ou1UCyEcX+4pbgGqx
M0CRSFR0njcIsLGjQjPlLL3AbFHqKvizR5tlfRElWSIJYCsIYSbI2jJKpTqiPNb2
8Pz/9xlAsiekJtyyCMfm6S20/twBaqtqucScscnNUV9LSmOaCzGyOWp7GxCevX3q
I0jd+2jY8oBwD2kOFSGZ1fQKm/fSRxu6dloDCdfCHxYTAD2muFg7fKjuje8G1oFu
YFVhOPbCfm9edzDs+IKXJ3H4juQchLAtJFm6Cq0CTDwnxMpGAqwe1BxcW79jylmV
ujrH2Q+v67Iwfig=
-----END CERTIFICATE-----
Generated at Sat Dec 3 17:57:51 2022 by rpki-client.