Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917CEE3/9A77AA2A059411EC9F646854C4F9AE02/7A532A308E1D11EE9CC5535CC4F9AE02.roa
File:                     7A532A308E1D11EE9CC5535CC4F9AE02.roa (raw, json)
Hash identifier:          /+OweeXh479/cD9G0b5e+2Jv53y0ihaHpeHFAQKxiuY=
Subject key identifier:   C8:4E:8C:56:5E:DE:CC:BE:9A:99:3F:64:47:A9:D2:1A:F8:08:87:A4
Certificate issuer:       /CN=A917CEE3/serialNumber=30E0803DEBA600AC9A92644C96F78A8E885D7C50
Certificate serial:       04D7
Authority key identifier: 30:E0:80:3D:EB:A6:00:AC:9A:92:64:4C:96:F7:8A:8E:88:5D:7C:50
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOCAPeumAKyakmRMlveKjohdfFA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917CEE3/9A77AA2A059411EC9F646854C4F9AE02/7A532A308E1D11EE9CC5535CC4F9AE02.roa
Signing time:             Sat 02 Nov 2024 23:42:41 +0000
ROA not before:           Sat 02 Nov 2024 23:42:41 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     24499
IP address blocks:        103.123.115.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917CEE3/9A77AA2A059411EC9F646854C4F9AE02/MOCAPeumAKyakmRMlveKjohdfFA.crl
                          rsync://rpki.apnic.net/member_repository/A917CEE3/9A77AA2A059411EC9F646854C4F9AE02/MOCAPeumAKyakmRMlveKjohdfFA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOCAPeumAKyakmRMlveKjohdfFA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1239 (0x4d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917CEE3/serialNumber=30E0803DEBA600AC9A92644C96F78A8E885D7C50
        Validity
            Not Before: Nov  2 23:42:41 2024 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=6726b8f0-b416
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:da:5e:90:7d:dc:b9:47:e5:0e:8a:6d:17:7a:
                    21:10:b9:9a:e4:32:f1:7e:7f:e3:02:6c:db:ce:4d:
                    f0:84:d1:7f:80:c1:6c:5d:f4:9b:9d:1f:f7:10:8f:
                    fa:bd:15:16:2a:42:f3:52:89:c1:b5:1b:42:e8:d8:
                    49:2a:e5:a4:29:e7:4a:c1:5e:63:41:3f:07:12:93:
                    54:9d:fb:ec:ed:0d:f2:dc:ba:3a:5e:c8:b2:20:28:
                    5b:b0:55:b2:bd:0d:63:32:8c:17:8f:c9:ba:28:23:
                    58:de:0e:5a:72:5e:d9:90:90:ed:5c:70:09:1d:9f:
                    6f:5a:ab:41:70:3b:c2:87:ad:0f:1f:d0:c6:6c:99:
                    d8:88:b0:a3:e0:2c:5d:2f:61:90:0c:3a:9d:51:af:
                    7b:62:ce:2d:a3:90:4e:f5:66:aa:c0:41:36:09:19:
                    ce:42:c9:8d:eb:02:1c:a8:c2:4c:6a:3c:b9:70:e6:
                    b9:fa:70:0d:2a:a1:a9:81:0b:13:54:78:7a:60:f1:
                    bc:2a:bf:2f:89:a3:cb:3d:c1:a7:a1:19:74:30:a8:
                    70:b1:69:d4:10:25:20:66:c6:bc:44:1c:24:bf:fc:
                    1d:7e:7e:66:82:28:fc:9c:89:de:b3:eb:9e:b8:90:
                    c7:52:89:2f:c8:09:77:2c:b7:3f:23:65:ce:d6:f9:
                    74:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:4E:8C:56:5E:DE:CC:BE:9A:99:3F:64:47:A9:D2:1A:F8:08:87:A4
            X509v3 Authority Key Identifier:
                keyid:30:E0:80:3D:EB:A6:00:AC:9A:92:64:4C:96:F7:8A:8E:88:5D:7C:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917CEE3/9A77AA2A059411EC9F646854C4F9AE02/MOCAPeumAKyakmRMlveKjohdfFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOCAPeumAKyakmRMlveKjohdfFA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917CEE3/9A77AA2A059411EC9F646854C4F9AE02/7A532A308E1D11EE9CC5535CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.123.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b4:67:d1:e6:a2:c5:c7:b0:76:2c:3a:16:a3:ef:41:46:67:fa:
         dc:ba:74:e0:59:17:16:e7:9b:f5:31:16:a6:1f:50:af:fa:fc:
         9f:e0:bc:6e:4e:0d:14:30:dc:3d:97:8a:3d:7c:a4:9e:89:65:
         cf:70:6d:19:87:c5:92:bf:0c:94:ac:67:0c:5a:8d:5a:0d:20:
         2d:59:e9:94:fc:e5:14:db:5a:19:65:e7:49:ad:96:11:56:0c:
         2c:7c:56:2e:d9:cf:f6:c5:6e:f1:12:77:f9:e5:cf:a8:b6:c0:
         18:f6:67:84:dd:da:11:cd:0e:95:b7:0f:68:f5:55:a0:2c:6c:
         2e:51:b5:bd:93:bb:fb:fb:54:00:e0:0c:64:05:ee:08:80:d4:
         28:86:ed:75:af:22:13:a1:be:c3:19:99:4b:21:74:3a:7d:15:
         67:93:68:74:a3:fb:84:73:e6:8c:df:b0:ad:05:22:6c:29:46:
         d8:c7:ca:94:5f:5e:b1:65:a6:1f:9e:d0:97:9b:f2:42:29:e7:
         49:60:9a:cf:2a:be:e4:85:eb:15:b9:b5:fb:df:8a:a6:2d:65:
         82:18:85:34:59:82:b7:9e:ff:20:98:1c:6a:54:ba:70:17:ad:
         6a:58:2f:52:1c:ff:5b:5e:7a:3d:96:90:f5:f8:ec:b2:4c:b7:
         4a:b0:3a:9a
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBNcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0NFRTMxMTAvBgNVBAUTKDMwRTA4MDNERUJBNjAwQUM5QTkyNjQ0Qzk2Rjc4QThF
ODg1RDdDNTAwHhcNMjQxMTAyMjM0MjQxWhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzI2YjhmMC1iNDE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxdpekH3cuUflDoptF3ohELma5DLxfn/jAmzbzk3whNF/gMFsXfSbnR/3EI/6
vRUWKkLzUonBtRtC6NhJKuWkKedKwV5jQT8HEpNUnfvs7Q3y3Lo6XsiyIChbsFWy
vQ1jMowXj8m6KCNY3g5acl7ZkJDtXHAJHZ9vWqtBcDvCh60PH9DGbJnYiLCj4Cxd
L2GQDDqdUa97Ys4to5BO9WaqwEE2CRnOQsmN6wIcqMJMajy5cOa5+nANKqGpgQsT
VHh6YPG8Kr8viaPLPcGnoRl0MKhwsWnUECUgZsa8RBwkv/wdfn5mgij8nInes+ue
uJDHUokvyAl3LLc/I2XO1vl0PQIDAQABo4IClTCCApEwHQYDVR0OBBYEFMhOjFZe
3sy+mpk/ZEep0hr4CIekMB8GA1UdIwQYMBaAFDDggD3rpgCsmpJkTJb3io6IXXxQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Q0VFMy85QTc3QUEyQTA1
OTQxMUVDOUY2NDY4NTRDNEY5QUUwMi9NT0NBUGV1bUFLeWFrbVJNbHZlS2pvaGRm
RkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL01PQ0FQZXVtQUt5YWttUk1sdmVLam9oZGZGQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
N0NFRTMvOUE3N0FBMkEwNTk0MTFFQzlGNjQ2ODU0QzRGOUFFMDIvN0E1MzJBMzA4
RTFEMTFFRTlDQzU1MzVDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABne3MwDQYJKoZIhvcNAQELBQADggEBALRn0eaixcewdiw6
FqPvQUZn+ty6dOBZFxbnm/UxFqYfUK/6/J/gvG5ODRQw3D2Xij18pJ6JZc9wbRmH
xZK/DJSsZwxajVoNIC1Z6ZT85RTbWhll50mtlhFWDCx8Vi7Zz/bFbvESd/nlz6i2
wBj2Z4Td2hHNDpW3D2j1VaAsbC5Rtb2Tu/v7VADgDGQF7giA1CiG7XWvIhOhvsMZ
mUshdDp9FWeTaHSj+4Rz5ozfsK0FImwpRtjHypRfXrFlph+e0Jeb8kIp50lgms8q
vuSF6xW5tfvfiqYtZYIYhTRZgree/yCYHGpUunAXrWpYL1Ic/1teej2WkPX47LJM
t0qwOpo=
-----END CERTIFICATE-----
Generated at Sat Nov 23 01:27:23 2024 by rpki-client on console-ams.rpki-client.org