Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/57B4ADB0066A11ECA8CBA567C4F9AE02.roa
File:                     57B4ADB0066A11ECA8CBA567C4F9AE02.roa (raw, json)
Hash identifier:          p6juw9z05JKLoRkeL5VF2fxGnmWPMirQiqcUxx8CQHk=
Subject key identifier:   F9:7C:89:AB:D3:DB:D0:5D:15:D8:4D:10:00:0A:D0:99:08:A2:B3:31
Certificate issuer:       /CN=A918D7D0/serialNumber=FE907DA7A7F99379A6FD463DD17D25B4D501DFE8
Certificate serial:       0758
Authority key identifier: FE:90:7D:A7:A7:F9:93:79:A6:FD:46:3D:D1:7D:25:B4:D5:01:DF:E8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_pB9p6f5k3mm_UY90X0ltNUB3-g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/57B4ADB0066A11ECA8CBA567C4F9AE02.roa
Signing time:             Mon 24 Jun 2024 19:20:29 +0000
ROA not before:           Mon 24 Jun 2024 19:20:29 +0000
ROA not after:            Sun 31 Aug 2025 00:00:00 +0000
asID:                     137823
IP address blocks:        103.115.24.0/22 maxlen: 22
                          103.115.24.0/23 maxlen: 23
                          103.115.24.0/24 maxlen: 24
                          103.115.25.0/24 maxlen: 24
                          103.115.26.0/23 maxlen: 23
                          103.115.26.0/24 maxlen: 24
                          103.115.27.0/24 maxlen: 24
                          2402:dbc0::/32 maxlen: 32
                          2402:dbc0:4000::/34 maxlen: 34
                          2402:dbc0:4000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/_pB9p6f5k3mm_UY90X0ltNUB3-g.crl
                          rsync://rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/_pB9p6f5k3mm_UY90X0ltNUB3-g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_pB9p6f5k3mm_UY90X0ltNUB3-g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 18:20:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1880 (0x758)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918D7D0/serialNumber=FE907DA7A7F99379A6FD463DD17D25B4D501DFE8
        Validity
            Not Before: Jun 24 19:20:29 2024 GMT
            Not After : Aug 31 00:00:00 2025 GMT
        Subject: CN=6679c6fd-b4d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:95:1f:fc:cf:e3:9a:f6:c6:76:6e:25:e5:79:
                    03:9f:cd:e3:2b:72:05:04:93:2a:c5:02:07:a6:89:
                    9a:a5:08:0b:58:0e:32:ea:07:af:1f:4e:13:b4:42:
                    7e:40:38:30:b1:6f:58:27:c5:74:74:19:15:ae:75:
                    45:a7:13:b8:6b:15:b5:ef:eb:12:3a:28:f0:4f:b7:
                    19:4f:e2:60:f7:a1:bc:bb:e7:b9:37:13:56:59:3d:
                    de:70:c6:1f:d7:62:cf:cd:0f:1c:72:b8:3c:aa:f6:
                    1f:ea:ba:c1:74:8a:fe:b4:b7:76:fc:b2:63:bc:5e:
                    0e:d0:3d:92:f5:6e:d5:c0:b4:23:46:57:ef:83:fb:
                    3e:e2:f6:12:9f:fd:2c:31:3f:1a:95:d6:de:91:4e:
                    f0:41:5f:66:01:8f:1e:c6:a2:6f:44:1a:47:7e:18:
                    f3:e1:9a:de:8f:4a:7e:87:0b:d1:d8:d5:a5:05:62:
                    73:c8:3f:25:64:93:fd:7f:94:fe:6a:a8:4d:a7:0c:
                    f4:c2:d7:f1:1c:9e:ca:dd:1d:17:16:a2:c6:fd:a5:
                    a5:e6:03:8e:1d:f7:43:53:39:b0:d3:c0:55:2b:84:
                    df:77:65:41:a0:10:ff:db:b8:8c:6a:08:98:2a:3e:
                    4e:55:b6:bd:51:f1:f5:d3:39:79:52:0d:73:bd:0a:
                    85:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:7C:89:AB:D3:DB:D0:5D:15:D8:4D:10:00:0A:D0:99:08:A2:B3:31
            X509v3 Authority Key Identifier:
                keyid:FE:90:7D:A7:A7:F9:93:79:A6:FD:46:3D:D1:7D:25:B4:D5:01:DF:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/_pB9p6f5k3mm_UY90X0ltNUB3-g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_pB9p6f5k3mm_UY90X0ltNUB3-g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/57B4ADB0066A11ECA8CBA567C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.115.24.0/22
                IPv6:
                  2402:dbc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         7f:65:a4:80:fc:a9:86:9e:33:6d:92:6e:a2:70:15:52:86:13:
         c5:fb:45:6b:f1:38:5d:f0:f8:46:77:54:d4:10:c8:bf:d5:34:
         ad:0f:5c:62:86:10:45:53:e9:06:d2:a2:bd:5b:7f:c1:5a:09:
         1d:56:73:aa:91:f1:4a:57:4c:d8:dd:f3:7c:bf:44:46:9e:9b:
         d8:d2:1b:e9:f4:45:ee:d0:a2:94:f3:c6:0a:8d:2e:8a:2b:a8:
         9b:4c:4d:6b:a2:8c:6f:28:32:9b:90:41:45:3f:63:b1:f4:d9:
         c9:3d:7b:ee:15:c7:fe:43:f1:78:5e:34:3e:c2:d3:b9:2f:b3:
         f2:30:59:af:fa:55:b8:11:f2:2d:21:20:0a:1b:9b:5e:e8:38:
         bb:3b:9d:39:c8:cf:2c:b2:7b:9c:dc:e0:ac:46:da:fe:d1:8d:
         11:63:b6:b0:73:4a:03:b8:eb:d2:05:8c:bc:f7:ce:5b:2c:b7:
         f1:4e:31:b9:bc:f4:81:3c:a9:36:e8:0a:26:df:ca:a2:34:8c:
         df:49:15:e4:10:72:d1:ae:be:20:89:8c:51:33:d4:50:8c:8d:
         79:1a:2b:4e:bd:15:8e:e4:d9:03:35:3e:a1:77:29:4a:14:ab:
         4d:ae:d1:ee:89:c2:9d:4d:c8:60:be:55:ce:3f:1b:29:11:f9:
         3a:e3:49:3e
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICB1gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEQ3RDAxMTAvBgNVBAUTKEZFOTA3REE3QTdGOTkzNzlBNkZENDYzREQxN0QyNUI0
RDUwMURGRTgwHhcNMjQwNjI0MTkyMDI5WhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02Njc5YzZmZC1iNGQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2pUf/M/jmvbGdm4l5XkDn83jK3IFBJMqxQIHpomapQgLWA4y6gevH04TtEJ+
QDgwsW9YJ8V0dBkVrnVFpxO4axW17+sSOijwT7cZT+Jg96G8u+e5NxNWWT3ecMYf
12LPzQ8ccrg8qvYf6rrBdIr+tLd2/LJjvF4O0D2S9W7VwLQjRlfvg/s+4vYSn/0s
MT8aldbekU7wQV9mAY8exqJvRBpHfhjz4Zrej0p+hwvR2NWlBWJzyD8lZJP9f5T+
aqhNpwz0wtfxHJ7K3R0XFqLG/aWl5gOOHfdDUzmw08BVK4Tfd2VBoBD/27iMagiY
Kj5OVba9UfH10zl5Ug1zvQqF4QIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFPl8iavT
29BdFdhNEAAK0JkIorMxMB8GA1UdIwQYMBaAFP6Qfaen+ZN5pv1GPdF9JbTVAd/o
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDdEMC85ODJCMkQ1QTAw
ODIxMUVBQjcxRjRBMkJDNEY5QUUwMi9fcEI5cDZmNWszbW1fVVk5MFgwbHROVUIz
LWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL19wQjlwNmY1azNtbV9VWTkwWDBsdE5VQjMtZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEQ3RDAvOTgyQjJENUEwMDgyMTFFQUI3MUY0QTJCQzRGOUFFMDIvNTdCNEFEQjAw
NjZBMTFFQ0E4Q0JBNTY3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E
HzAdMAwEAgABMAYDBAJncxgwDQQCAAIwBwMFACQC28AwDQYJKoZIhvcNAQELBQAD
ggEBAH9lpID8qYaeM22SbqJwFVKGE8X7RWvxOF3w+EZ3VNQQyL/VNK0PXGKGEEVT
6QbSor1bf8FaCR1Wc6qR8UpXTNjd83y/REaem9jSG+n0Re7QopTzxgqNLoorqJtM
TWuijG8oMpuQQUU/Y7H02ck9e+4Vx/5D8XheND7C07kvs/IwWa/6VbgR8i0hIAob
m17oOLs7nTnIzyyye5zc4KxG2v7RjRFjtrBzSgO469IFjLz3zlsst/FOMbm89IE8
qTboCibfyqI0jN9JFeQQctGuviCJjFEz1FCMjXkaK069FY7k2QM1PqF3KUoUq02u
0e6Jwp1NyGC+Vc4/GykR+TrjST4=
-----END CERTIFICATE-----
Generated at Fri Nov 22 19:45:00 2024 by rpki-client on console-fra.rpki-client.org