Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9176FD9/98D666CC0FA311EFB43C9432C4F9AE02/884A59828D3211EF9E092384C4F9AE02.roa
File:                     884A59828D3211EF9E092384C4F9AE02.roa (raw, json)
Hash identifier:          GqBUNYobHpDctK2tEnk2wHBO+0ezgYbmfu4uXv2cQjU=
Subject key identifier:   2F:1C:C5:D0:E3:BE:75:A2:AA:05:4B:A1:6C:68:CE:43:32:1C:0F:CE
Certificate issuer:       /CN=A9176FD9/serialNumber=6223ABD6F6B67BAFEFE3E73646FD7A66E10214BE
Certificate serial:       5C
Authority key identifier: 62:23:AB:D6:F6:B6:7B:AF:EF:E3:E7:36:46:FD:7A:66:E1:02:14:BE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YiOr1va2e6_v4-c2Rv16ZuECFL4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9176FD9/98D666CC0FA311EFB43C9432C4F9AE02/884A59828D3211EF9E092384C4F9AE02.roa
Signing time:             Fri 18 Oct 2024 09:22:45 +0000
ROA not before:           Fri 18 Oct 2024 09:22:45 +0000
ROA not after:            Tue 30 Sep 2025 00:00:00 +0000
asID:                     55405
IP address blocks:        103.13.122.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9176FD9/98D666CC0FA311EFB43C9432C4F9AE02/YiOr1va2e6_v4-c2Rv16ZuECFL4.crl
                          rsync://rpki.apnic.net/member_repository/A9176FD9/98D666CC0FA311EFB43C9432C4F9AE02/YiOr1va2e6_v4-c2Rv16ZuECFL4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YiOr1va2e6_v4-c2Rv16ZuECFL4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 92 (0x5c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9176FD9/serialNumber=6223ABD6F6B67BAFEFE3E73646FD7A66E10214BE
        Validity
            Not Before: Oct 18 09:22:45 2024 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=671228e4-8f80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:01:5e:b4:48:ce:98:be:cf:10:d4:65:ce:31:
                    a5:df:6e:32:28:cd:f1:e0:10:d8:29:ef:b4:d0:57:
                    30:09:b8:32:74:6d:cc:f9:ed:f1:e3:28:9a:0d:ac:
                    2e:ca:57:57:7b:f1:7a:6d:8f:d4:cc:65:60:eb:91:
                    d1:2c:2c:55:ba:5e:55:5f:b0:1e:0a:fc:7c:a7:ab:
                    4c:d6:47:ac:6f:66:66:77:b9:79:54:5a:75:35:ea:
                    70:90:78:a6:bc:aa:75:af:41:3c:44:23:73:1e:a5:
                    8d:9a:df:6f:74:12:b9:23:02:84:84:77:73:59:73:
                    78:81:02:22:e4:76:8e:10:ca:da:27:7d:0f:a9:b4:
                    60:e3:74:91:9a:44:46:52:2b:71:b9:3c:90:22:01:
                    31:46:b2:94:2c:b9:89:1a:40:d6:03:ec:38:8d:00:
                    bc:30:9a:56:01:0d:bc:17:55:2f:b8:13:d0:39:f1:
                    dc:a0:09:28:70:ab:a9:d7:a9:f2:29:cc:23:ba:b8:
                    cb:4b:1f:1c:6e:91:c6:03:b9:a1:47:80:6c:7a:50:
                    36:35:7a:71:27:13:fd:cc:55:2c:be:f4:9f:27:8e:
                    80:76:d0:f8:7b:90:68:bc:e1:a4:4e:95:ed:79:b8:
                    0b:f7:9c:18:58:ae:91:c2:67:7d:dd:84:3b:b3:d0:
                    50:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:1C:C5:D0:E3:BE:75:A2:AA:05:4B:A1:6C:68:CE:43:32:1C:0F:CE
            X509v3 Authority Key Identifier:
                keyid:62:23:AB:D6:F6:B6:7B:AF:EF:E3:E7:36:46:FD:7A:66:E1:02:14:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9176FD9/98D666CC0FA311EFB43C9432C4F9AE02/YiOr1va2e6_v4-c2Rv16ZuECFL4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YiOr1va2e6_v4-c2Rv16ZuECFL4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176FD9/98D666CC0FA311EFB43C9432C4F9AE02/884A59828D3211EF9E092384C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.13.122.0/23

    Signature Algorithm: sha256WithRSAEncryption
         39:a4:d3:20:7a:88:c4:fc:56:d7:69:6c:c2:f4:52:75:36:cf:
         2f:16:16:f6:4e:ec:4e:8a:65:69:3d:b4:70:f6:11:2e:0d:b3:
         53:0b:ee:ee:6a:ad:c5:91:e2:46:1b:2f:50:81:8c:e1:ed:1e:
         ab:04:eb:c2:b9:6b:4e:e6:59:93:7c:d4:6d:24:fa:34:22:8c:
         68:5c:8e:93:1f:74:6a:55:b7:63:0c:d0:3b:af:a1:bf:d5:7f:
         3c:ba:4e:ad:9d:49:02:bc:41:ff:d1:24:a1:96:87:8c:f0:2c:
         bb:f6:e0:4a:14:6c:48:98:59:73:e0:79:6d:2e:27:c3:af:ea:
         0c:d7:c2:bb:59:98:bf:6d:e0:6f:64:2e:78:a1:75:3c:25:3d:
         c3:33:ab:f7:3d:9d:50:5a:7f:2a:8f:9a:a0:44:17:76:0d:66:
         ff:22:a8:3d:46:40:0a:de:6a:2c:69:e2:bf:91:11:ad:1b:58:
         9b:e6:90:3d:4e:4d:49:6a:38:64:e9:0f:c5:e6:28:ae:4b:d4:
         1b:66:03:d7:08:bc:91:d8:fd:ea:31:ef:3d:90:92:89:7b:b3:
         d7:6c:f4:b5:90:6c:7f:ce:3f:2f:ec:82:93:9b:fb:c5:b6:59:
         f1:15:bd:b9:b0:5e:ad:71:01:43:f3:48:51:56:2b:35:b5:a7:
         16:75:a2:bb
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBXDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3
NkZEOTExMC8GA1UEBRMoNjIyM0FCRDZGNkI2N0JBRkVGRTNFNzM2NDZGRDdBNjZF
MTAyMTRCRTAeFw0yNDEwMTgwOTIyNDVaFw0yNTA5MzAwMDAwMDBaMBgxFjAUBgNV
BAMTDTY3MTIyOGU0LThmODAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDfAV60SM6Yvs8Q1GXOMaXfbjIozfHgENgp77TQVzAJuDJ0bcz57fHjKJoNrC7K
V1d78Xptj9TMZWDrkdEsLFW6XlVfsB4K/Hynq0zWR6xvZmZ3uXlUWnU16nCQeKa8
qnWvQTxEI3MepY2a3290ErkjAoSEd3NZc3iBAiLkdo4QytonfQ+ptGDjdJGaREZS
K3G5PJAiATFGspQsuYkaQNYD7DiNALwwmlYBDbwXVS+4E9A58dygCShwq6nXqfIp
zCO6uMtLHxxukcYDuaFHgGx6UDY1enEnE/3MVSy+9J8njoB20Ph7kGi84aROle15
uAv3nBhYrpHCZ33dhDuz0FDdAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQULxzF0OO+
daKqBUuhbGjOQzIcD84wHwYDVR0jBBgwFoAUYiOr1va2e6/v4+c2Rv16ZuECFL4w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc2RkQ5Lzk4RDY2NkNDMEZB
MzExRUZCNDNDOTQzMkM0RjlBRTAyL1lpT3IxdmEyZTZfdjQtYzJSdjE2WnVFQ0ZM
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvWWlPcjF2YTJlNl92NC1jMlJ2MTZadUVDRkw0LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
NkZEOS85OEQ2NjZDQzBGQTMxMUVGQjQzQzk0MzJDNEY5QUUwMi84ODRBNTk4MjhE
MzIxMUVGOUUwOTIzODRDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAWcNejANBgkqhkiG9w0BAQsFAAOCAQEAOaTTIHqIxPxW12ls
wvRSdTbPLxYW9k7sToplaT20cPYRLg2zUwvu7mqtxZHiRhsvUIGM4e0eqwTrwrlr
TuZZk3zUbST6NCKMaFyOkx90alW3YwzQO6+hv9V/PLpOrZ1JArxB/9EkoZaHjPAs
u/bgShRsSJhZc+B5bS4nw6/qDNfCu1mYv23gb2QueKF1PCU9wzOr9z2dUFp/Ko+a
oEQXdg1m/yKoPUZACt5qLGniv5ERrRtYm+aQPU5NSWo4ZOkPxeYorkvUG2YD1wi8
kdj96jHvPZCSiXuz12z0tZBsf84/L+yCk5v7xbZZ8RW9ubBerXEBQ/NIUVYrNbWn
FnWiuw==
-----END CERTIFICATE-----
Generated at Sat Nov 23 06:13:09 2024 by rpki-client on console-ams.rpki-client.org