Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9178ACB/523A8F560BA711ED8B0E4C43C4F9AE02/F82824B4163311EDA7687F1CC4F9AE02.roa
File:                     F82824B4163311EDA7687F1CC4F9AE02.roa (raw, json)
Hash identifier:          mdNnumQ5YiPoV1OJ4uam9G3UP6D/angADBcavXL7QI8=
Subject key identifier:   EE:3D:0B:34:B9:D4:D3:AE:D5:29:39:E7:17:B2:B7:69:46:36:9F:99
Certificate issuer:       /CN=A9178ACB/serialNumber=5C27D53D0F23813C8EA1638AF06C8D34D8F2DFF1
Certificate serial:       01DA
Authority key identifier: 5C:27:D5:3D:0F:23:81:3C:8E:A1:63:8A:F0:6C:8D:34:D8:F2:DF:F1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XCfVPQ8jgTyOoWOK8GyNNNjy3_E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9178ACB/523A8F560BA711ED8B0E4C43C4F9AE02/F82824B4163311EDA7687F1CC4F9AE02.roa
Signing time:             Fri 05 Jul 2024 03:45:01 +0000
ROA not before:           Fri 05 Jul 2024 03:45:01 +0000
ROA not after:            Sun 31 Aug 2025 00:00:00 +0000
asID:                     149851
IP address blocks:        103.188.134.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9178ACB/523A8F560BA711ED8B0E4C43C4F9AE02/XCfVPQ8jgTyOoWOK8GyNNNjy3_E.crl
                          rsync://rpki.apnic.net/member_repository/A9178ACB/523A8F560BA711ED8B0E4C43C4F9AE02/XCfVPQ8jgTyOoWOK8GyNNNjy3_E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XCfVPQ8jgTyOoWOK8GyNNNjy3_E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 01:29:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 474 (0x1da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9178ACB/serialNumber=5C27D53D0F23813C8EA1638AF06C8D34D8F2DFF1
        Validity
            Not Before: Jul  5 03:45:01 2024 GMT
            Not After : Aug 31 00:00:00 2025 GMT
        Subject: CN=66876c3c-1177
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:6b:91:a1:8f:5e:fb:d0:64:b4:02:c8:df:56:
                    20:4c:4f:9d:17:98:91:c2:93:51:55:07:83:fc:9a:
                    98:b2:85:4e:79:33:b9:7b:28:f7:48:9a:f8:59:d0:
                    8b:d7:97:13:01:e1:e2:81:4f:c7:ef:43:30:33:e5:
                    da:22:f4:64:6a:ed:54:48:2f:4e:75:05:7e:30:33:
                    cc:de:58:5a:7d:b4:f1:f2:8e:b6:8d:14:7a:83:fa:
                    81:66:4f:22:26:a2:69:15:c5:42:9f:dc:5f:08:d3:
                    6b:08:38:be:d8:8d:a2:9b:69:3a:f4:dd:6a:d6:4f:
                    7b:ef:00:6e:84:e3:16:fe:40:84:b8:84:a1:1a:86:
                    8c:c3:5a:ab:3c:7f:d9:a0:a5:ac:b1:1a:c4:7a:79:
                    22:45:6b:65:69:8d:ba:d6:f8:14:5e:c1:50:da:04:
                    1b:ff:a7:cd:77:a1:95:46:e5:14:21:40:5b:9b:b8:
                    f9:dc:5f:68:f1:a0:1b:2d:00:f8:85:6f:30:85:f5:
                    05:ac:10:90:8f:be:ac:28:91:3e:88:8c:a5:d4:d2:
                    3d:7d:d0:88:50:14:d3:c1:56:3a:2d:05:73:84:c5:
                    38:54:f8:56:eb:f8:a2:ef:4a:96:45:ad:fb:52:6b:
                    9c:60:72:0b:1f:0c:25:5a:da:25:95:e1:f0:45:d5:
                    68:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:3D:0B:34:B9:D4:D3:AE:D5:29:39:E7:17:B2:B7:69:46:36:9F:99
            X509v3 Authority Key Identifier:
                keyid:5C:27:D5:3D:0F:23:81:3C:8E:A1:63:8A:F0:6C:8D:34:D8:F2:DF:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9178ACB/523A8F560BA711ED8B0E4C43C4F9AE02/XCfVPQ8jgTyOoWOK8GyNNNjy3_E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XCfVPQ8jgTyOoWOK8GyNNNjy3_E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178ACB/523A8F560BA711ED8B0E4C43C4F9AE02/F82824B4163311EDA7687F1CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.188.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b4:dc:14:02:be:17:5e:31:3a:d2:e6:ef:8c:1a:5a:ce:de:74:
         af:1e:41:ff:3b:a4:ea:30:b7:ee:72:4d:1f:c2:e3:a8:a4:b4:
         7b:ff:a7:8e:09:17:de:67:0f:84:1f:31:e8:0c:f5:88:3f:eb:
         5d:15:06:87:5d:f1:e4:c4:fa:18:cf:d1:0a:4b:e0:02:60:11:
         5b:75:45:39:c1:b4:5b:b6:c2:7e:b2:6c:83:6b:75:57:62:04:
         cb:84:a9:49:46:06:59:4c:8e:5d:17:72:70:54:7d:27:c9:7b:
         f7:49:a6:68:05:2d:81:23:f1:79:2d:d7:9d:33:ea:ec:6e:b0:
         aa:ab:e4:dc:0f:6c:73:18:0d:a4:c7:32:22:92:0b:f7:da:6b:
         ff:99:8e:ad:ca:89:c8:79:8d:46:01:52:87:ad:0e:68:da:15:
         99:b7:eb:fe:ee:d7:86:9e:73:5e:fe:89:0d:bf:8c:5b:04:cc:
         4f:52:5d:7c:c4:8e:b0:19:1e:7e:bb:09:ec:08:0b:5a:32:10:
         da:ac:4c:f1:62:0e:08:06:da:5b:4e:2c:07:64:ea:72:ab:bb:
         97:a3:76:0c:13:03:fd:be:53:a4:70:2c:54:7e:0f:a4:6d:84:
         36:e7:b5:57:0a:03:91:2c:a1:90:40:02:85:7e:6c:5a:dd:1a:
         4e:41:c8:1e
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAdowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzhBQ0IxMTAvBgNVBAUTKDVDMjdENTNEMEYyMzgxM0M4RUExNjM4QUYwNkM4RDM0
RDhGMkRGRjEwHhcNMjQwNzA1MDM0NTAxWhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02Njg3NmMzYy0xMTc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAq2uRoY9e+9BktALI31YgTE+dF5iRwpNRVQeD/JqYsoVOeTO5eyj3SJr4WdCL
15cTAeHigU/H70MwM+XaIvRkau1USC9OdQV+MDPM3lhafbTx8o62jRR6g/qBZk8i
JqJpFcVCn9xfCNNrCDi+2I2im2k69N1q1k977wBuhOMW/kCEuIShGoaMw1qrPH/Z
oKWssRrEenkiRWtlaY261vgUXsFQ2gQb/6fNd6GVRuUUIUBbm7j53F9o8aAbLQD4
hW8whfUFrBCQj76sKJE+iIyl1NI9fdCIUBTTwVY6LQVzhMU4VPhW6/ii70qWRa37
UmucYHILHwwlWtolleHwRdVo8wIDAQABo4IClTCCApEwHQYDVR0OBBYEFO49CzS5
1NOu1Sk55xeyt2lGNp+ZMB8GA1UdIwQYMBaAFFwn1T0PI4E8jqFjivBsjTTY8t/x
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OEFDQi81MjNBOEY1NjBC
QTcxMUVEOEIwRTRDNDNDNEY5QUUwMi9YQ2ZWUFE4amdUeU9vV09LOEd5Tk5Oankz
X0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1hDZlZQUThqZ1R5T29XT0s4R3lOTk5qeTNfRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NzhBQ0IvNTIzQThGNTYwQkE3MTFFRDhCMEU0QzQzQzRGOUFFMDIvRjgyODI0QjQx
NjMzMTFFREE3Njg3RjFDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnvIYwDQYJKoZIhvcNAQELBQADggEBALTcFAK+F14xOtLm
74waWs7edK8eQf87pOowt+5yTR/C46iktHv/p44JF95nD4QfMegM9Yg/610VBodd
8eTE+hjP0QpL4AJgEVt1RTnBtFu2wn6ybINrdVdiBMuEqUlGBllMjl0XcnBUfSfJ
e/dJpmgFLYEj8Xkt150z6uxusKqr5NwPbHMYDaTHMiKSC/faa/+Zjq3Kich5jUYB
UoetDmjaFZm36/7u14aec17+iQ2/jFsEzE9SXXzEjrAZHn67CewIC1oyENqsTPFi
DggG2ltOLAdk6nKru5ejdgwTA/2+U6RwLFR+D6RthDbntVcKA5EsoZBAAoV+bFrd
Gk5ByB4=
-----END CERTIFICATE-----
Generated at Sat Nov 23 03:58:43 2024 by rpki-client on console-ams.rpki-client.org