Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918664E/DF900E36CEE211EDA41C381CC4F9AE02/DCD00D5E337311EE808C9F28C4F9AE02.roa
File:                     DCD00D5E337311EE808C9F28C4F9AE02.roa (raw, json)
Hash identifier:          ySXjF1xBAk8OsHptg9s9NB6sRiRqQTgqPDDPgfQLxuM=
Subject key identifier:   0C:80:56:65:F3:8B:15:FE:09:4B:E9:44:46:C5:7F:D9:05:A9:E3:0B
Certificate issuer:       /CN=A918664E/serialNumber=4C05BA8935E8DF3CC23250B567F2056B850715B9
Certificate serial:       0137
Authority key identifier: 4C:05:BA:89:35:E8:DF:3C:C2:32:50:B5:67:F2:05:6B:85:07:15:B9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TAW6iTXo3zzCMlC1Z_IFa4UHFbk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918664E/DF900E36CEE211EDA41C381CC4F9AE02/DCD00D5E337311EE808C9F28C4F9AE02.roa
Signing time:             Wed 09 Oct 2024 03:47:18 +0000
ROA not before:           Wed 09 Oct 2024 03:47:18 +0000
ROA not after:            Sun 02 Mar 2025 00:00:00 +0000
asID:                     24499
IP address blocks:        103.122.223.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918664E/DF900E36CEE211EDA41C381CC4F9AE02/TAW6iTXo3zzCMlC1Z_IFa4UHFbk.crl
                          rsync://rpki.apnic.net/member_repository/A918664E/DF900E36CEE211EDA41C381CC4F9AE02/TAW6iTXo3zzCMlC1Z_IFa4UHFbk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TAW6iTXo3zzCMlC1Z_IFa4UHFbk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:45:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 311 (0x137)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918664E/serialNumber=4C05BA8935E8DF3CC23250B567F2056B850715B9
        Validity
            Not Before: Oct  9 03:47:18 2024 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=6705fcc6-20e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:0e:d3:32:c1:67:48:9d:81:ac:cc:95:17:c6:
                    cb:3c:ae:d2:df:f6:c5:f3:2b:a1:cb:b1:15:3c:79:
                    52:58:5f:60:30:28:38:c1:cb:c1:28:6d:4a:ba:a4:
                    41:8b:cb:f7:5a:70:a1:fe:b4:3d:ac:02:06:f2:73:
                    67:a2:cf:9e:ab:3d:84:e7:67:50:fb:16:dd:ac:e1:
                    41:a6:ed:69:22:de:90:5d:75:ca:e3:87:33:58:e0:
                    24:e4:64:5e:1c:f6:9b:0d:e6:40:96:87:9d:94:51:
                    05:bb:6b:cf:1e:21:dd:19:d9:37:b2:17:b6:4a:e1:
                    68:06:3a:0b:38:1d:66:9e:ea:6c:f7:b6:79:c4:31:
                    00:c1:20:7a:28:df:23:5f:cc:62:0a:b5:2b:a0:62:
                    98:36:03:83:b5:d5:b5:26:b7:0a:83:52:ee:84:2d:
                    c3:59:37:60:f5:80:98:49:f4:7c:dd:43:1b:49:7e:
                    ca:67:f0:8b:70:67:a0:f1:24:7a:29:1b:00:c7:bf:
                    81:e0:7a:df:45:17:1f:26:d3:6b:99:c2:79:ba:cd:
                    0b:2d:83:a2:83:2a:d0:a9:c0:72:69:15:2e:82:d9:
                    3a:99:17:6c:77:1f:ec:2a:89:8f:c2:0b:ee:4e:19:
                    02:f0:74:45:6d:23:e8:9f:73:57:00:dd:07:45:c4:
                    aa:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:80:56:65:F3:8B:15:FE:09:4B:E9:44:46:C5:7F:D9:05:A9:E3:0B
            X509v3 Authority Key Identifier:
                keyid:4C:05:BA:89:35:E8:DF:3C:C2:32:50:B5:67:F2:05:6B:85:07:15:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918664E/DF900E36CEE211EDA41C381CC4F9AE02/TAW6iTXo3zzCMlC1Z_IFa4UHFbk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TAW6iTXo3zzCMlC1Z_IFa4UHFbk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918664E/DF900E36CEE211EDA41C381CC4F9AE02/DCD00D5E337311EE808C9F28C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.122.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:b3:9c:1e:23:c2:53:71:23:80:41:c5:50:c8:e1:e9:c6:8f:
         02:e9:0e:ec:4c:01:11:fa:b3:a0:fe:34:5f:ef:5b:df:2c:ab:
         b6:b0:d7:37:a6:b2:08:83:fa:51:e2:89:72:17:b1:09:3f:50:
         1a:e3:27:73:fb:72:9f:f5:11:72:2e:cd:3e:51:b0:39:9f:19:
         ff:0e:24:d1:5c:63:d5:9e:99:c8:19:9a:54:ca:16:e7:ed:d7:
         68:14:1f:d9:3d:7b:0f:26:6b:ad:02:f9:c4:cf:17:77:7d:4a:
         be:92:18:45:54:57:e6:f7:0d:d4:84:05:1f:53:cd:71:f2:14:
         d7:85:65:71:52:06:3d:d7:bd:03:8d:66:71:fb:67:da:c0:c2:
         82:7b:30:c1:6b:35:8f:a0:4a:70:3b:6b:64:3b:25:41:79:93:
         48:de:10:0e:fd:8f:23:de:6b:92:f9:7e:3d:ee:24:79:a9:25:
         b3:ef:45:b7:4e:6f:47:45:06:0a:09:4e:0d:fb:87:5a:d4:71:
         3a:c3:51:8e:79:3a:34:ed:ed:85:fd:6d:43:06:41:49:df:4c:
         97:4f:36:5b:00:84:9a:d9:0c:b7:ce:b4:16:e3:b9:00:13:56:
         48:60:af:bd:c9:56:51:68:dd:d2:7a:a7:2e:eb:a0:ff:b0:77:
         a2:71:9f:31
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICATcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODY2NEUxMTAvBgNVBAUTKDRDMDVCQTg5MzVFOERGM0NDMjMyNTBCNTY3RjIwNTZC
ODUwNzE1QjkwHhcNMjQxMDA5MDM0NzE4WhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzA1ZmNjNi0yMGU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxA7TMsFnSJ2BrMyVF8bLPK7S3/bF8yuhy7EVPHlSWF9gMCg4wcvBKG1KuqRB
i8v3WnCh/rQ9rAIG8nNnos+eqz2E52dQ+xbdrOFBpu1pIt6QXXXK44czWOAk5GRe
HPabDeZAloedlFEFu2vPHiHdGdk3she2SuFoBjoLOB1mnups97Z5xDEAwSB6KN8j
X8xiCrUroGKYNgODtdW1JrcKg1LuhC3DWTdg9YCYSfR83UMbSX7KZ/CLcGeg8SR6
KRsAx7+B4HrfRRcfJtNrmcJ5us0LLYOigyrQqcByaRUugtk6mRdsdx/sKomPwgvu
ThkC8HRFbSPon3NXAN0HRcSqjwIDAQABo4IClTCCApEwHQYDVR0OBBYEFAyAVmXz
ixX+CUvpREbFf9kFqeMLMB8GA1UdIwQYMBaAFEwFuok16N88wjJQtWfyBWuFBxW5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjY0RS9ERjkwMEUzNkNF
RTIxMUVEQTQxQzM4MUNDNEY5QUUwMi9UQVc2aVRYbzN6ekNNbEMxWl9JRmE0VUhG
YmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1RBVzZpVFhvM3p6Q01sQzFaX0lGYTRVSEZiay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODY2NEUvREY5MDBFMzZDRUUyMTFFREE0MUMzODFDQzRGOUFFMDIvRENEMDBENUUz
MzczMTFFRTgwOEM5RjI4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnet8wDQYJKoZIhvcNAQELBQADggEBADWznB4jwlNxI4BB
xVDI4enGjwLpDuxMARH6s6D+NF/vW98sq7aw1zemsgiD+lHiiXIXsQk/UBrjJ3P7
cp/1EXIuzT5RsDmfGf8OJNFcY9WemcgZmlTKFuft12gUH9k9ew8ma60C+cTPF3d9
Sr6SGEVUV+b3DdSEBR9TzXHyFNeFZXFSBj3XvQONZnH7Z9rAwoJ7MMFrNY+gSnA7
a2Q7JUF5k0jeEA79jyPea5L5fj3uJHmpJbPvRbdOb0dFBgoJTg37h1rUcTrDUY55
OjTt7YX9bUMGQUnfTJdPNlsAhJrZDLfOtBbjuQATVkhgr73JVlFo3dJ6py7roP+w
d6JxnzE=
-----END CERTIFICATE-----
Generated at Sat Nov 23 05:02:52 2024 by rpki-client on console-fra.rpki-client.org