Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917C6D9/6A5F13244FD111EBAFB1676BC4F9AE02/8F1629524FD411EB9F1A0673C4F9AE02.roa
File:                     8F1629524FD411EB9F1A0673C4F9AE02.roa (raw, json)
Hash identifier:          umfOmYx1C1o3wC/2Ke3RN9zKbrXOV6GEbkjUeV3fdUA=
Subject key identifier:   BC:1E:0F:35:AC:B2:DF:D4:EB:F8:22:14:4E:7F:35:0D:9F:8F:E5:93
Certificate issuer:       /CN=A917C6D9/serialNumber=6969D150AD03482081BB1BD7C13BE5F00DC53A38
Certificate serial:       060C
Authority key identifier: 69:69:D1:50:AD:03:48:20:81:BB:1B:D7:C1:3B:E5:F0:0D:C5:3A:38
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWnRUK0DSCCBuxvXwTvl8A3FOjg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917C6D9/6A5F13244FD111EBAFB1676BC4F9AE02/8F1629524FD411EB9F1A0673C4F9AE02.roa
Signing time:             Fri 22 Mar 2024 23:32:55 +0000
ROA not before:           Fri 22 Mar 2024 23:32:55 +0000
ROA not after:            Thu 01 May 2025 00:00:00 +0000
asID:                     18001
IP address blocks:        103.87.12.0/22 maxlen: 22
                          116.204.212.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917C6D9/6A5F13244FD111EBAFB1676BC4F9AE02/aWnRUK0DSCCBuxvXwTvl8A3FOjg.crl
                          rsync://rpki.apnic.net/member_repository/A917C6D9/6A5F13244FD111EBAFB1676BC4F9AE02/aWnRUK0DSCCBuxvXwTvl8A3FOjg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWnRUK0DSCCBuxvXwTvl8A3FOjg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 May 2024 02:42:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1548 (0x60c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917C6D9/serialNumber=6969D150AD03482081BB1BD7C13BE5F00DC53A38
        Validity
            Not Before: Mar 22 23:32:55 2024 GMT
            Not After : May  1 00:00:00 2025 GMT
        Subject: CN=65fe1527-8b45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:47:a0:82:7a:61:ad:c2:6b:ce:bf:ac:27:81:
                    b4:81:48:21:17:ed:a9:a6:45:48:9a:de:aa:65:c3:
                    92:73:78:1b:7b:e7:a8:aa:ff:d3:e4:ea:12:14:2a:
                    47:ff:6f:f1:9f:23:28:7c:3f:a7:54:75:0d:91:09:
                    9c:19:0e:e1:71:88:d0:84:a0:30:a9:12:d7:25:55:
                    e3:a8:b9:b8:52:b9:f7:da:21:8d:89:50:63:1b:c8:
                    4e:b3:ff:67:fc:6f:a1:aa:7b:1b:b6:e8:62:a0:e8:
                    a9:e0:ab:c8:e5:5a:26:b7:4c:9f:2c:41:28:dc:88:
                    19:f4:58:1b:66:78:6a:e7:ce:8a:f4:35:39:02:d9:
                    8a:48:cc:c7:1b:1e:29:cf:f9:14:ca:83:e2:23:c1:
                    7a:f1:a4:40:40:d7:7a:2c:69:9c:7e:66:c6:bf:e1:
                    a0:14:4b:d6:5d:dd:9c:2f:5c:0e:34:35:5f:56:99:
                    f3:dc:b4:76:a3:2b:cc:87:70:2e:b1:c5:bb:3b:e8:
                    a6:7f:11:a3:25:55:29:2d:dd:1c:46:a2:ae:06:68:
                    d2:8f:d3:e9:53:56:75:58:00:7a:76:79:9a:d9:60:
                    f6:de:44:67:2a:78:fe:aa:27:1f:2b:c7:b2:57:9e:
                    bf:e5:cd:5b:a7:3c:d4:3f:4a:d3:8d:84:7a:94:bf:
                    04:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:1E:0F:35:AC:B2:DF:D4:EB:F8:22:14:4E:7F:35:0D:9F:8F:E5:93
            X509v3 Authority Key Identifier:
                keyid:69:69:D1:50:AD:03:48:20:81:BB:1B:D7:C1:3B:E5:F0:0D:C5:3A:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917C6D9/6A5F13244FD111EBAFB1676BC4F9AE02/aWnRUK0DSCCBuxvXwTvl8A3FOjg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWnRUK0DSCCBuxvXwTvl8A3FOjg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C6D9/6A5F13244FD111EBAFB1676BC4F9AE02/8F1629524FD411EB9F1A0673C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.87.12.0/22
                  116.204.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         20:e3:c7:be:19:29:e7:0a:e5:d1:44:69:ce:40:57:7a:da:0b:
         a7:50:66:66:28:26:ad:8c:3d:b8:7b:ac:b5:98:3f:4a:b3:07:
         a2:28:eb:a7:d3:01:c7:2c:82:75:81:2d:cc:48:49:7b:6d:0c:
         b6:4b:79:ae:e4:52:cd:7b:c7:3e:b1:c6:cb:c0:b3:df:e2:77:
         99:3a:5a:89:7a:1e:b5:1c:55:ae:1b:80:2b:5e:ef:0a:97:a3:
         0e:8c:c3:c9:69:39:0d:ec:01:ef:e6:e8:9d:ab:99:6c:5f:75:
         6a:d6:2a:83:e5:17:17:34:59:9a:34:46:65:86:39:8c:8a:ca:
         4c:4a:5d:7d:71:80:e2:3f:18:56:a9:c2:ec:ab:b4:47:2e:fc:
         b5:5c:41:d2:df:f3:61:60:05:ef:ac:37:80:88:1b:7b:14:1c:
         62:f4:e1:a1:d7:1e:1d:2e:cc:da:1b:aa:44:35:d0:7d:d8:03:
         34:ce:5c:7c:72:5f:2d:76:d9:c1:50:85:77:0e:dc:a9:67:1f:
         77:2e:e3:67:2d:34:b2:bd:58:08:92:a5:cb:14:6f:ac:9f:6d:
         23:12:20:e8:d1:b1:49:a5:e1:83:8a:5d:dd:ae:4f:b8:21:5d:
         13:0e:3a:8a:40:39:29:17:98:79:5c:2e:8a:12:2d:a8:00:c7:
         ca:fd:c1:bd
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICBgwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0M2RDkxMTAvBgNVBAUTKDY5NjlEMTUwQUQwMzQ4MjA4MUJCMUJEN0MxM0JFNUYw
MERDNTNBMzgwHhcNMjQwMzIyMjMzMjU1WhcNMjUwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NWZlMTUyNy04YjQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwEeggnphrcJrzr+sJ4G0gUghF+2ppkVImt6qZcOSc3gbe+eoqv/T5OoSFCpH
/2/xnyMofD+nVHUNkQmcGQ7hcYjQhKAwqRLXJVXjqLm4Urn32iGNiVBjG8hOs/9n
/G+hqnsbtuhioOip4KvI5Vomt0yfLEEo3IgZ9FgbZnhq586K9DU5AtmKSMzHGx4p
z/kUyoPiI8F68aRAQNd6LGmcfmbGv+GgFEvWXd2cL1wONDVfVpnz3LR2oyvMh3Au
scW7O+imfxGjJVUpLd0cRqKuBmjSj9PpU1Z1WAB6dnma2WD23kRnKnj+qicfK8ey
V56/5c1bpzzUP0rTjYR6lL8EtwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFLweDzWs
st/U6/giFE5/NQ2fj+WTMB8GA1UdIwQYMBaAFGlp0VCtA0gggbsb18E75fANxTo4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzZEOS82QTVGMTMyNDRG
RDExMUVCQUZCMTY3NkJDNEY5QUUwMi9hV25SVUswRFNDQ0J1eHZYd1R2bDhBM0ZP
amcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FXblJVSzBEU0NDQnV4dlh3VHZsOEEzRk9qZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
N0M2RDkvNkE1RjEzMjQ0RkQxMTFFQkFGQjE2NzZCQzRGOUFFMDIvOEYxNjI5NTI0
RkQ0MTFFQjlGMUEwNjczQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBAJnVwwDBAJ0zNQwDQYJKoZIhvcNAQELBQADggEBACDjx74Z
KecK5dFEac5AV3raC6dQZmYoJq2MPbh7rLWYP0qzB6Io66fTAccsgnWBLcxISXtt
DLZLea7kUs17xz6xxsvAs9/id5k6Wol6HrUcVa4bgCte7wqXow6Mw8lpOQ3sAe/m
6J2rmWxfdWrWKoPlFxc0WZo0RmWGOYyKykxKXX1xgOI/GFapwuyrtEcu/LVcQdLf
82FgBe+sN4CIG3sUHGL04aHXHh0uzNobqkQ10H3YAzTOXHxyXy122cFQhXcO3Kln
H3cu42ctNLK9WAiSpcsUb6yfbSMSIOjRsUml4YOKXd2uT7ghXRMOOopAOSkXmHlc
LooSLagAx8r9wb0=
-----END CERTIFICATE-----
Generated at Sat May 11 01:30:14 2024 by rpki-client on console-ams.rpki-client.org