Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918A132/1F4AC61EE72511EEA830D62AC4F9AE02/1CDA8D8A613A11EF81FCD418C4F9AE02.roa
File:                     1CDA8D8A613A11EF81FCD418C4F9AE02.roa (raw, json)
Hash identifier:          QQs8h4jdTkNaQT5337oxXY+eSQhm5umaOiBO/ygxY+w=
Subject key identifier:   BE:B6:CE:3C:EA:09:54:91:AA:F7:85:10:C5:0F:35:25:52:90:7D:32
Certificate issuer:       /CN=A918A132/serialNumber=016569C3CF8E700932F14E482C56AA66BBAF2B61
Certificate serial:       51
Authority key identifier: 01:65:69:C3:CF:8E:70:09:32:F1:4E:48:2C:56:AA:66:BB:AF:2B:61
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AWVpw8-OcAky8U5ILFaqZruvK2E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918A132/1F4AC61EE72511EEA830D62AC4F9AE02/1CDA8D8A613A11EF81FCD418C4F9AE02.roa
Signing time:             Fri 23 Aug 2024 10:26:09 +0000
ROA not before:           Fri 23 Aug 2024 10:26:09 +0000
ROA not after:            Thu 01 May 2025 00:00:00 +0000
asID:                     141718
IP address blocks:        103.163.132.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918A132/1F4AC61EE72511EEA830D62AC4F9AE02/AWVpw8-OcAky8U5ILFaqZruvK2E.crl
                          rsync://rpki.apnic.net/member_repository/A918A132/1F4AC61EE72511EEA830D62AC4F9AE02/AWVpw8-OcAky8U5ILFaqZruvK2E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AWVpw8-OcAky8U5ILFaqZruvK2E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 04:47:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 81 (0x51)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918A132/serialNumber=016569C3CF8E700932F14E482C56AA66BBAF2B61
        Validity
            Not Before: Aug 23 10:26:09 2024 GMT
            Not After : May  1 00:00:00 2025 GMT
        Subject: CN=66c863c1-1e42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:e5:d1:7e:05:46:a4:e0:0a:2b:06:69:dd:8f:
                    87:5c:b8:2e:63:66:39:6c:fb:67:a3:33:05:4f:d4:
                    65:aa:95:0f:37:63:de:3c:b6:5e:a0:ba:ab:b7:32:
                    8c:cb:ba:47:0f:28:0b:c1:d9:c1:89:e9:0b:19:9e:
                    e1:24:ec:c7:5d:9a:44:ae:dd:6d:b2:0b:76:65:a6:
                    69:b1:1e:8b:db:e6:44:1f:da:d1:50:5e:c7:97:b7:
                    70:7b:47:89:a6:7d:29:32:68:4c:7d:44:33:5b:26:
                    1a:cf:97:05:b8:d2:56:06:d0:8a:84:fe:35:f8:f6:
                    e4:e6:85:b5:8d:4a:00:e6:28:dd:fd:76:cf:bb:19:
                    1a:c5:18:bf:db:d2:c1:f3:d9:25:38:8b:93:77:45:
                    d3:ec:9f:5b:c6:a7:c2:1b:5c:cb:69:4c:3f:d0:34:
                    31:23:47:c4:d9:2b:4c:dc:cc:a3:d6:d4:6b:8c:a1:
                    59:3f:51:b0:7b:10:7d:9c:cc:10:20:19:26:67:91:
                    58:b1:95:06:a3:84:90:48:5d:e1:da:e7:14:c9:33:
                    0b:08:19:32:13:a5:5d:a0:02:87:c3:9d:c3:73:16:
                    53:20:f7:ba:27:27:6e:76:a0:74:89:f2:23:0b:a0:
                    79:be:da:be:75:4b:7a:3f:8a:c9:59:02:74:5b:ff:
                    3a:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:B6:CE:3C:EA:09:54:91:AA:F7:85:10:C5:0F:35:25:52:90:7D:32
            X509v3 Authority Key Identifier:
                keyid:01:65:69:C3:CF:8E:70:09:32:F1:4E:48:2C:56:AA:66:BB:AF:2B:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918A132/1F4AC61EE72511EEA830D62AC4F9AE02/AWVpw8-OcAky8U5ILFaqZruvK2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AWVpw8-OcAky8U5ILFaqZruvK2E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A132/1F4AC61EE72511EEA830D62AC4F9AE02/1CDA8D8A613A11EF81FCD418C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.163.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:29:3a:63:f2:6a:07:c1:63:b8:b3:4f:c1:02:83:53:38:0e:
         77:2d:77:86:ca:e1:fc:09:36:a4:3e:bb:46:7b:d2:70:a3:81:
         ef:ed:e3:e9:57:84:44:12:84:07:d8:eb:5b:93:fa:ea:ac:e7:
         cb:39:36:b2:36:83:58:44:99:8f:d7:57:da:f7:c3:da:42:4f:
         86:46:3a:bd:63:ef:43:e6:a7:92:a1:52:84:f4:0f:81:80:df:
         f5:0f:d8:27:9e:77:47:a9:01:26:b9:46:aa:d0:fd:f4:0a:7f:
         31:61:e0:c6:71:0e:46:81:3f:be:08:90:c0:e5:59:1a:23:8e:
         00:0f:41:06:bc:ba:69:4c:fb:9b:ac:56:19:42:54:58:63:3d:
         b8:2f:b0:27:58:ba:c4:9d:89:b9:be:c2:8b:4b:6d:25:a1:e0:
         22:46:2a:23:6a:62:f8:7f:89:73:1a:4b:4c:e5:1c:ca:5c:e0:
         2f:e6:9d:1b:d6:65:ba:1d:cb:c1:bf:b6:f7:56:ae:3e:1f:c4:
         5f:48:59:c2:db:8b:7e:54:8a:6a:18:73:1d:a7:cf:16:04:c2:
         67:08:32:aa:b0:fa:52:1e:36:b3:e6:4b:ed:a1:c0:d3:1b:00:
         0a:e6:48:bb:0a:15:ef:86:1e:cb:91:9a:d7:e5:28:a8:3e:c9:
         31:b1:76:ec
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBUTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4
QTEzMjExMC8GA1UEBRMoMDE2NTY5QzNDRjhFNzAwOTMyRjE0RTQ4MkM1NkFBNjZC
QkFGMkI2MTAeFw0yNDA4MjMxMDI2MDlaFw0yNTA1MDEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY2Yzg2M2MxLTFlNDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDU5dF+BUak4AorBmndj4dcuC5jZjls+2ejMwVP1GWqlQ83Y948tl6guqu3MozL
ukcPKAvB2cGJ6QsZnuEk7MddmkSu3W2yC3ZlpmmxHovb5kQf2tFQXseXt3B7R4mm
fSkyaEx9RDNbJhrPlwW40lYG0IqE/jX49uTmhbWNSgDmKN39ds+7GRrFGL/b0sHz
2SU4i5N3RdPsn1vGp8IbXMtpTD/QNDEjR8TZK0zczKPW1GuMoVk/UbB7EH2czBAg
GSZnkVixlQajhJBIXeHa5xTJMwsIGTITpV2gAofDncNzFlMg97onJ252oHSJ8iML
oHm+2r51S3o/islZAnRb/zrXAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUvrbOPOoJ
VJGq94UQxQ81JVKQfTIwHwYDVR0jBBgwFoAUAWVpw8+OcAky8U5ILFaqZruvK2Ew
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThBMTMyLzFGNEFDNjFFRTcy
NTExRUVBODMwRDYyQUM0RjlBRTAyL0FXVnB3OC1PY0FreThVNUlMRmFxWnJ1dksy
RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvQVdWcHc4LU9jQWt5OFU1SUxGYXFacnV2SzJFLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
QTEzMi8xRjRBQzYxRUU3MjUxMUVFQTgzMEQ2MkFDNEY5QUUwMi8xQ0RBOEQ4QTYx
M0ExMUVGODFGQ0Q0MThDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAGejhDANBgkqhkiG9w0BAQsFAAOCAQEAdyk6Y/JqB8FjuLNP
wQKDUzgOdy13hsrh/Ak2pD67RnvScKOB7+3j6VeERBKEB9jrW5P66qznyzk2sjaD
WESZj9dX2vfD2kJPhkY6vWPvQ+ankqFShPQPgYDf9Q/YJ553R6kBJrlGqtD99Ap/
MWHgxnEORoE/vgiQwOVZGiOOAA9BBry6aUz7m6xWGUJUWGM9uC+wJ1i6xJ2Jub7C
i0ttJaHgIkYqI2pi+H+JcxpLTOUcylzgL+adG9Zluh3Lwb+291auPh/EX0hZwtuL
flSKahhzHafPFgTCZwgyqrD6Uh42s+ZL7aHA0xsACuZIuwoV74Yey5Ga1+UoqD7J
MbF27A==
-----END CERTIFICATE-----
Generated at Thu Nov 21 06:50:18 2024 by rpki-client on console-fra.rpki-client.org