Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9176FD9/98D666CC0FA311EFB43C9432C4F9AE02/878615B88D3211EF9E092384C4F9AE02.roa
File:                     878615B88D3211EF9E092384C4F9AE02.roa (raw, json)
Hash identifier:          q+Tk9tMLXZGyDR8qEuibZ0K/2qF5avUb5fU2EBmwtEQ=
Subject key identifier:   B9:D3:D9:4D:63:CB:B3:2B:3F:5C:06:98:1D:70:4A:72:56:66:32:4A
Certificate issuer:       /CN=A9176FD9/serialNumber=6223ABD6F6B67BAFEFE3E73646FD7A66E10214BE
Certificate serial:       5B
Authority key identifier: 62:23:AB:D6:F6:B6:7B:AF:EF:E3:E7:36:46:FD:7A:66:E1:02:14:BE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YiOr1va2e6_v4-c2Rv16ZuECFL4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9176FD9/98D666CC0FA311EFB43C9432C4F9AE02/878615B88D3211EF9E092384C4F9AE02.roa
Signing time:             Fri 18 Oct 2024 09:22:43 +0000
ROA not before:           Fri 18 Oct 2024 09:22:43 +0000
ROA not after:            Tue 30 Sep 2025 00:00:00 +0000
asID:                     4769
IP address blocks:        103.13.120.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9176FD9/98D666CC0FA311EFB43C9432C4F9AE02/YiOr1va2e6_v4-c2Rv16ZuECFL4.crl
                          rsync://rpki.apnic.net/member_repository/A9176FD9/98D666CC0FA311EFB43C9432C4F9AE02/YiOr1va2e6_v4-c2Rv16ZuECFL4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YiOr1va2e6_v4-c2Rv16ZuECFL4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 91 (0x5b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9176FD9/serialNumber=6223ABD6F6B67BAFEFE3E73646FD7A66E10214BE
        Validity
            Not Before: Oct 18 09:22:43 2024 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=671228e3-da3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:5b:bf:9a:85:77:68:81:3d:a5:1c:1b:b3:00:
                    5c:86:5d:db:d1:66:2f:6e:2e:13:c7:cf:9a:d3:cc:
                    65:fb:52:c6:b8:9b:78:d8:11:ed:51:e7:c1:1f:5b:
                    9b:10:4b:15:5a:20:8d:d8:7b:30:70:a4:55:fd:c9:
                    67:11:b2:8c:3f:35:7c:f5:38:fb:db:4a:00:90:b9:
                    98:a9:6a:a7:db:9e:c7:a3:bf:44:64:0c:fe:5d:ac:
                    6e:52:29:74:95:6b:61:e2:a1:70:83:ae:30:d6:0e:
                    ee:33:f6:96:3e:a4:6f:0a:8f:4b:f2:bc:11:af:d4:
                    c1:a4:e5:cd:bc:1a:0d:71:69:55:a5:ee:c1:8a:53:
                    72:54:78:ca:b3:b4:5a:ca:6d:4c:19:6a:ad:69:e2:
                    8d:02:14:75:03:20:69:80:db:9d:68:b3:ed:33:6c:
                    04:2b:24:b4:dc:4b:3e:ad:cc:fd:c2:c4:62:66:18:
                    0f:f5:cb:48:e4:42:f8:08:e2:57:5b:2f:f9:7c:55:
                    b2:c8:f7:83:0c:54:cf:70:f3:90:59:2f:79:db:b1:
                    bb:c0:0f:86:8a:f9:46:47:59:4d:1c:60:f2:0a:09:
                    66:ad:f4:4b:9c:8d:01:9f:70:96:09:cc:9f:df:b7:
                    91:17:62:1b:09:b0:67:91:53:8a:65:12:3c:38:4b:
                    67:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:D3:D9:4D:63:CB:B3:2B:3F:5C:06:98:1D:70:4A:72:56:66:32:4A
            X509v3 Authority Key Identifier:
                keyid:62:23:AB:D6:F6:B6:7B:AF:EF:E3:E7:36:46:FD:7A:66:E1:02:14:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9176FD9/98D666CC0FA311EFB43C9432C4F9AE02/YiOr1va2e6_v4-c2Rv16ZuECFL4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YiOr1va2e6_v4-c2Rv16ZuECFL4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176FD9/98D666CC0FA311EFB43C9432C4F9AE02/878615B88D3211EF9E092384C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.13.120.0/23

    Signature Algorithm: sha256WithRSAEncryption
         50:9c:e5:9d:77:d5:38:13:ca:15:59:bc:b0:a6:a4:49:21:bf:
         12:49:d6:20:05:e9:ae:2b:16:50:5d:c3:ff:13:54:a5:b2:3a:
         65:fe:c7:72:7a:69:df:2c:85:66:33:17:09:10:d8:f6:b0:1f:
         b9:ca:f9:95:a9:00:44:86:2b:82:ca:33:22:fd:29:39:a5:a0:
         0e:06:da:21:f7:64:01:7d:7f:a8:7b:ca:0f:b8:ef:36:62:21:
         cf:cb:d8:c3:8f:ca:2b:f1:b4:35:b7:1e:f1:77:25:17:3f:2f:
         c6:0a:f2:7a:cf:c8:67:7b:28:ab:6b:a6:8f:3d:51:cd:54:26:
         b6:2b:21:52:6f:d4:f2:a6:28:d3:3e:16:74:25:48:17:03:72:
         c4:ab:1d:39:2e:d5:8d:3d:6e:ca:12:f8:39:b0:28:0f:2c:99:
         32:74:52:c4:5f:7f:a7:47:2e:d9:44:12:e1:b5:af:21:93:52:
         9b:70:3e:a5:77:02:b3:86:c2:db:4b:8d:80:86:b6:04:21:36:
         c2:6a:a5:f6:08:5d:51:44:8f:9d:61:a0:db:6a:33:8a:86:9c:
         0f:c9:30:d9:2d:95:7c:f4:05:64:d5:02:0a:a6:7e:5e:6f:0e:
         5b:bc:81:fd:b4:3c:d5:32:f1:ae:ec:d9:63:bc:74:87:f8:42:
         b7:57:cc:9c
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBWzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3
NkZEOTExMC8GA1UEBRMoNjIyM0FCRDZGNkI2N0JBRkVGRTNFNzM2NDZGRDdBNjZF
MTAyMTRCRTAeFw0yNDEwMTgwOTIyNDNaFw0yNTA5MzAwMDAwMDBaMBgxFjAUBgNV
BAMTDTY3MTIyOGUzLWRhM2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDKW7+ahXdogT2lHBuzAFyGXdvRZi9uLhPHz5rTzGX7Usa4m3jYEe1R58EfW5sQ
SxVaII3YezBwpFX9yWcRsow/NXz1OPvbSgCQuZipaqfbnsejv0RkDP5drG5SKXSV
a2HioXCDrjDWDu4z9pY+pG8Kj0vyvBGv1MGk5c28Gg1xaVWl7sGKU3JUeMqztFrK
bUwZaq1p4o0CFHUDIGmA251os+0zbAQrJLTcSz6tzP3CxGJmGA/1y0jkQvgI4ldb
L/l8VbLI94MMVM9w85BZL3nbsbvAD4aK+UZHWU0cYPIKCWat9EucjQGfcJYJzJ/f
t5EXYhsJsGeRU4plEjw4S2fHAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUudPZTWPL
sys/XAaYHXBKclZmMkowHwYDVR0jBBgwFoAUYiOr1va2e6/v4+c2Rv16ZuECFL4w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc2RkQ5Lzk4RDY2NkNDMEZB
MzExRUZCNDNDOTQzMkM0RjlBRTAyL1lpT3IxdmEyZTZfdjQtYzJSdjE2WnVFQ0ZM
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvWWlPcjF2YTJlNl92NC1jMlJ2MTZadUVDRkw0LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
NkZEOS85OEQ2NjZDQzBGQTMxMUVGQjQzQzk0MzJDNEY5QUUwMi84Nzg2MTVCODhE
MzIxMUVGOUUwOTIzODRDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAWcNeDANBgkqhkiG9w0BAQsFAAOCAQEAUJzlnXfVOBPKFVm8
sKakSSG/EknWIAXprisWUF3D/xNUpbI6Zf7Hcnpp3yyFZjMXCRDY9rAfucr5lakA
RIYrgsozIv0pOaWgDgbaIfdkAX1/qHvKD7jvNmIhz8vYw4/KK/G0Nbce8XclFz8v
xgryes/IZ3soq2umjz1RzVQmtishUm/U8qYo0z4WdCVIFwNyxKsdOS7VjT1uyhL4
ObAoDyyZMnRSxF9/p0cu2UQS4bWvIZNSm3A+pXcCs4bC20uNgIa2BCE2wmql9ghd
UUSPnWGg22ozioacD8kw2S2VfPQFZNUCCqZ+Xm8OW7yB/bQ81TLxruzZY7x0h/hC
t1fMnA==
-----END CERTIFICATE-----
Generated at Sat Nov 23 06:21:26 2024 by rpki-client on console-fra.rpki-client.org