Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9187000/067D6FA2478911E889D5DB49C4F9AE02/FC45B5BE63A911EF954C7983C4F9AE02.roa
File:                     FC45B5BE63A911EF954C7983C4F9AE02.roa (raw, json)
Hash identifier:          vrCV2cvfB8WdbRn0Uoy+kWpWz93WOhrgMiccdZKbwQ0=
Subject key identifier:   73:D2:CB:EB:A0:D8:57:57:49:F1:BE:44:9E:A7:14:70:B5:54:41:9D
Certificate issuer:       /CN=A9187000/serialNumber=9E92826CF47DAEC885C99810287DB86E695768EA
Certificate serial:       14C6
Authority key identifier: 9E:92:82:6C:F4:7D:AE:C8:85:C9:98:10:28:7D:B8:6E:69:57:68:EA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/npKCbPR9rsiFyZgQKH24bmlXaOo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9187000/067D6FA2478911E889D5DB49C4F9AE02/FC45B5BE63A911EF954C7983C4F9AE02.roa
Signing time:             Mon 26 Aug 2024 12:52:00 +0000
ROA not before:           Mon 26 Aug 2024 12:52:00 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     150001
IP address blocks:        103.114.39.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9187000/067D6FA2478911E889D5DB49C4F9AE02/npKCbPR9rsiFyZgQKH24bmlXaOo.crl
                          rsync://rpki.apnic.net/member_repository/A9187000/067D6FA2478911E889D5DB49C4F9AE02/npKCbPR9rsiFyZgQKH24bmlXaOo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/npKCbPR9rsiFyZgQKH24bmlXaOo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 16:30:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5318 (0x14c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9187000/serialNumber=9E92826CF47DAEC885C99810287DB86E695768EA
        Validity
            Not Before: Aug 26 12:52:00 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=66cc7a70-5895
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:7d:c0:cc:6f:65:fc:85:5b:73:fe:e2:09:22:
                    92:fc:ab:18:db:5c:6e:51:16:54:ec:77:05:04:01:
                    98:d6:ad:47:64:a1:b6:40:14:19:39:0e:ad:2e:ae:
                    2c:e3:e6:d1:de:ec:bd:98:05:a7:15:66:53:0f:07:
                    07:1b:51:b7:cc:f5:e5:22:d0:ad:12:07:ec:50:e6:
                    a9:9a:be:1a:b1:4b:f4:83:eb:b8:d2:ca:2d:ce:45:
                    ed:47:07:3e:07:5b:28:df:2e:2c:c8:e3:1c:ef:28:
                    99:49:00:00:27:e8:3d:94:4d:18:a0:e6:c8:a4:e3:
                    1c:30:37:e3:30:35:09:1b:5e:0b:da:70:66:08:8f:
                    1f:2d:0b:c2:4a:b4:98:6e:d7:9f:61:98:96:66:d5:
                    75:b4:c3:34:5b:b4:d5:4d:14:68:21:0b:57:c1:8b:
                    0a:0c:cd:21:b6:82:61:7e:ab:d4:db:fa:14:49:48:
                    3b:dc:79:83:8f:dc:e2:6c:72:23:5f:a8:f7:d6:e9:
                    d6:b9:3e:fa:32:f9:b8:96:e4:47:f2:46:86:1d:14:
                    08:ad:cc:89:35:3b:cb:6d:24:84:b9:e7:fd:59:74:
                    ba:2f:7f:f7:2a:76:2a:95:8c:4d:2c:f8:64:76:bc:
                    69:1a:fe:d8:0d:63:73:c1:16:88:5d:6a:e1:e6:da:
                    6f:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:D2:CB:EB:A0:D8:57:57:49:F1:BE:44:9E:A7:14:70:B5:54:41:9D
            X509v3 Authority Key Identifier:
                keyid:9E:92:82:6C:F4:7D:AE:C8:85:C9:98:10:28:7D:B8:6E:69:57:68:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9187000/067D6FA2478911E889D5DB49C4F9AE02/npKCbPR9rsiFyZgQKH24bmlXaOo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/npKCbPR9rsiFyZgQKH24bmlXaOo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187000/067D6FA2478911E889D5DB49C4F9AE02/FC45B5BE63A911EF954C7983C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.114.39.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:e5:8f:85:d0:11:5d:9c:0d:24:35:9e:52:fd:e4:24:67:0c:
         7b:6b:02:33:cc:3c:92:c5:ac:48:31:58:76:db:d3:e9:a3:89:
         bb:ad:5f:2c:37:ce:27:7f:35:bf:88:71:e0:28:d7:8b:85:60:
         ba:6b:94:d1:d2:38:d0:3f:b7:37:9d:1b:1a:6d:79:fa:42:a2:
         41:33:f5:8e:ca:1f:35:b9:9f:d6:29:ac:a6:c1:30:8b:d8:c1:
         49:8a:ca:ea:c0:e3:54:82:68:48:1c:c2:31:40:8f:bc:6f:57:
         3c:37:97:44:da:34:55:7d:fa:d2:77:65:3e:48:e1:7f:d0:ba:
         0c:4c:5e:aa:81:37:e6:fe:99:23:51:c0:0b:9e:cc:07:fa:71:
         b1:5a:9a:c0:99:4f:60:35:a6:9f:9f:0b:0e:a7:36:fa:a5:06:
         a6:24:0e:f8:4a:4e:4e:43:53:ec:17:8a:87:7a:56:b5:92:aa:
         bb:26:66:67:3c:6d:ad:fe:84:54:c9:a7:71:60:34:6e:4f:82:
         9b:ba:b3:35:27:e2:50:fd:9e:d9:c3:55:55:51:c3:56:14:9e:
         57:39:55:80:9b:22:49:e7:b5:08:a0:fb:32:dc:bb:79:79:ad:
         1e:0d:ef:de:15:e0:25:2a:a9:49:bd:35:34:25:aa:23:10:5f:
         68:6d:70:cf
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICFMYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODcwMDAxMTAvBgNVBAUTKDlFOTI4MjZDRjQ3REFFQzg4NUM5OTgxMDI4N0RCODZF
Njk1NzY4RUEwHhcNMjQwODI2MTI1MjAwWhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmNjN2E3MC01ODk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAx33AzG9l/IVbc/7iCSKS/KsY21xuURZU7HcFBAGY1q1HZKG2QBQZOQ6tLq4s
4+bR3uy9mAWnFWZTDwcHG1G3zPXlItCtEgfsUOapmr4asUv0g+u40sotzkXtRwc+
B1so3y4syOMc7yiZSQAAJ+g9lE0YoObIpOMcMDfjMDUJG14L2nBmCI8fLQvCSrSY
btefYZiWZtV1tMM0W7TVTRRoIQtXwYsKDM0htoJhfqvU2/oUSUg73HmDj9zibHIj
X6j31unWuT76Mvm4luRH8kaGHRQIrcyJNTvLbSSEuef9WXS6L3/3KnYqlYxNLPhk
drxpGv7YDWNzwRaIXWrh5tpv/wIDAQABo4IClTCCApEwHQYDVR0OBBYEFHPSy+ug
2FdXSfG+RJ6nFHC1VEGdMB8GA1UdIwQYMBaAFJ6Sgmz0fa7IhcmYECh9uG5pV2jq
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzAwMC8wNjdENkZBMjQ3
ODkxMUU4ODlENURCNDlDNEY5QUUwMi9ucEtDYlBSOXJzaUZ5WmdRS0gyNGJtbFhh
T28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL25wS0NiUFI5cnNpRnlaZ1FLSDI0Ym1sWGFPby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODcwMDAvMDY3RDZGQTI0Nzg5MTFFODg5RDVEQjQ5QzRGOUFFMDIvRkM0NUI1QkU2
M0E5MTFFRjk1NEM3OTgzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABncicwDQYJKoZIhvcNAQELBQADggEBADrlj4XQEV2cDSQ1
nlL95CRnDHtrAjPMPJLFrEgxWHbb0+mjibutXyw3zid/Nb+IceAo14uFYLprlNHS
ONA/tzedGxptefpCokEz9Y7KHzW5n9YprKbBMIvYwUmKyurA41SCaEgcwjFAj7xv
Vzw3l0TaNFV9+tJ3ZT5I4X/QugxMXqqBN+b+mSNRwAuezAf6cbFamsCZT2A1pp+f
Cw6nNvqlBqYkDvhKTk5DU+wXiod6VrWSqrsmZmc8ba3+hFTJp3FgNG5Pgpu6szUn
4lD9ntnDVVVRw1YUnlc5VYCbIknntQig+zLcu3l5rR4N794V4CUqqUm9NTQlqiMQ
X2htcM8=
-----END CERTIFICATE-----
Generated at Fri Nov 22 17:55:51 2024 by rpki-client on console-fra.rpki-client.org