Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E20E/23AAD98E1FC811EA84594F5EC4F9AE02/BFA3B5F81FC911EA8CF04E61C4F9AE02.roa
File:                     BFA3B5F81FC911EA8CF04E61C4F9AE02.roa (raw, json)
Hash identifier:          4sB4DOt4CW4eHB/ZFEI2UI4R45G3Zj008UjXQgkb7Gc=
Subject key identifier:   93:30:AC:3A:D7:72:9C:E1:FF:FB:96:99:8E:E5:16:42:43:F9:28:EC
Certificate issuer:       /CN=A918E20E/serialNumber=AF6A18DB3A071EF18CCA5BE8B35433DF544F0FB2
Certificate serial:       0A60
Authority key identifier: AF:6A:18:DB:3A:07:1E:F1:8C:CA:5B:E8:B3:54:33:DF:54:4F:0F:B2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r2oY2zoHHvGMylvos1Qz31RPD7I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E20E/23AAD98E1FC811EA84594F5EC4F9AE02/BFA3B5F81FC911EA8CF04E61C4F9AE02.roa
Signing time:             Mon 24 Jul 2023 19:36:57 +0000
ROA not before:           Mon 24 Jul 2023 19:36:57 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     137981
IP address blocks:        103.119.75.0/24 maxlen: 24
                          103.143.252.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E20E/23AAD98E1FC811EA84594F5EC4F9AE02/r2oY2zoHHvGMylvos1Qz31RPD7I.crl
                          rsync://rpki.apnic.net/member_repository/A918E20E/23AAD98E1FC811EA84594F5EC4F9AE02/r2oY2zoHHvGMylvos1Qz31RPD7I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r2oY2zoHHvGMylvos1Qz31RPD7I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Jun 2024 19:28:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2656 (0xa60)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E20E/serialNumber=AF6A18DB3A071EF18CCA5BE8B35433DF544F0FB2
        Validity
            Not Before: Jul 24 19:36:57 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=64bed2d8-da3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:cc:63:df:e5:00:60:e3:12:b6:b0:78:0d:66:
                    37:da:b8:cc:8a:d2:47:37:55:73:76:18:25:45:4a:
                    e2:ad:21:1e:d4:c5:66:f4:06:6d:25:d5:1d:78:75:
                    91:91:78:e4:23:72:22:2c:d7:ec:d3:b1:31:3c:e2:
                    7d:ba:75:5d:fd:db:0d:5e:09:64:25:c3:aa:d1:63:
                    d3:2b:a8:c2:25:61:f7:82:dd:09:19:b0:69:e5:10:
                    3f:38:16:d4:e8:21:dc:e0:b3:a4:29:aa:5d:ff:31:
                    c9:5b:9a:08:67:e6:2d:55:fa:b9:b2:30:20:d1:60:
                    0e:2c:49:51:30:a1:41:3b:75:29:65:ce:a8:7d:06:
                    91:d5:48:be:fe:2f:98:8f:ef:dd:14:8b:a5:3e:c7:
                    2a:7f:10:30:05:85:74:2a:bf:be:f1:60:69:a9:15:
                    d8:35:22:2e:48:7b:a7:c1:51:5d:b1:d0:d7:70:7b:
                    f1:ee:18:47:93:fa:37:87:fa:5f:1b:47:6c:fa:62:
                    fa:7b:e9:23:c9:c3:5e:80:38:92:94:0f:db:16:79:
                    76:a4:7f:47:33:66:04:0d:81:c7:f7:9b:51:14:1d:
                    73:79:56:d3:c5:f5:4f:32:b4:27:ce:8a:32:2f:83:
                    87:a8:7b:59:02:6a:9e:0d:3f:db:9e:67:e6:4d:81:
                    e5:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:30:AC:3A:D7:72:9C:E1:FF:FB:96:99:8E:E5:16:42:43:F9:28:EC
            X509v3 Authority Key Identifier:
                keyid:AF:6A:18:DB:3A:07:1E:F1:8C:CA:5B:E8:B3:54:33:DF:54:4F:0F:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E20E/23AAD98E1FC811EA84594F5EC4F9AE02/r2oY2zoHHvGMylvos1Qz31RPD7I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r2oY2zoHHvGMylvos1Qz31RPD7I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E20E/23AAD98E1FC811EA84594F5EC4F9AE02/BFA3B5F81FC911EA8CF04E61C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.119.75.0/24
                  103.143.252.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:8f:8b:3d:e5:f8:d2:9d:26:77:14:f9:01:32:31:86:fa:65:
         ed:1c:c0:74:fd:33:28:fb:be:e8:c1:8c:9e:89:cf:ca:73:7e:
         8f:f2:83:a1:c0:82:12:d9:3f:bb:c4:2b:ad:b6:57:88:df:39:
         4e:c2:8f:3a:6f:bc:3b:d5:53:f4:86:7e:f6:b3:21:e5:c6:91:
         51:ee:4e:bc:ee:4a:cc:2d:7b:36:12:37:47:6e:c7:49:38:64:
         54:cf:4b:b3:bc:bd:5c:d8:98:7d:ec:55:27:a8:5d:8d:13:8e:
         3f:4f:b2:a2:f5:5e:ae:80:3c:e5:1f:d1:a4:ea:32:81:22:e3:
         3f:24:11:85:cc:6c:7f:61:75:62:21:4b:c9:50:14:cf:18:67:
         cd:20:4b:01:6a:8f:e7:83:ae:f2:4c:d1:bb:0f:27:70:e3:fa:
         f1:e9:bd:11:47:dd:9c:fc:33:a8:17:26:4c:d8:7e:a9:2c:51:
         fa:fd:5d:73:b1:23:29:36:28:ca:1d:eb:9e:e1:81:43:07:9c:
         52:ca:d0:03:56:70:59:45:a2:3a:19:fe:cb:2b:24:d9:2c:cb:
         12:5b:4a:0d:1c:c9:bc:05:a5:9e:1b:d7:cf:0a:e2:2b:25:a4:
         d6:5d:c3:e8:2b:11:9b:48:ab:33:08:65:36:c3:97:43:4b:6f:
         fd:10:1b:f9
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICCmAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEUyMEUxMTAvBgNVBAUTKEFGNkExOERCM0EwNzFFRjE4Q0NBNUJFOEIzNTQzM0RG
NTQ0RjBGQjIwHhcNMjMwNzI0MTkzNjU3WhcNMjQwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NGJlZDJkOC1kYTNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzcxj3+UAYOMStrB4DWY32rjMitJHN1VzdhglRUrirSEe1MVm9AZtJdUdeHWR
kXjkI3IiLNfs07ExPOJ9unVd/dsNXglkJcOq0WPTK6jCJWH3gt0JGbBp5RA/OBbU
6CHc4LOkKapd/zHJW5oIZ+YtVfq5sjAg0WAOLElRMKFBO3UpZc6ofQaR1Ui+/i+Y
j+/dFIulPscqfxAwBYV0Kr++8WBpqRXYNSIuSHunwVFdsdDXcHvx7hhHk/o3h/pf
G0ds+mL6e+kjycNegDiSlA/bFnl2pH9HM2YEDYHH95tRFB1zeVbTxfVPMrQnzooy
L4OHqHtZAmqeDT/bnmfmTYHlwQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFJMwrDrX
cpzh//uWmY7lFkJD+SjsMB8GA1UdIwQYMBaAFK9qGNs6Bx7xjMpb6LNUM99UTw+y
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTIwRS8yM0FBRDk4RTFG
QzgxMUVBODQ1OTRGNUVDNEY5QUUwMi9yMm9ZMnpvSEh2R015bHZvczFRejMxUlBE
N0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3Iyb1kyem9ISHZHTXlsdm9zMVF6MzFSUEQ3SS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEUyMEUvMjNBQUQ5OEUxRkM4MTFFQTg0NTk0RjVFQzRGOUFFMDIvQkZBM0I1Rjgx
RkM5MTFFQThDRjA0RTYxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBABnd0sDBABnj/wwDQYJKoZIhvcNAQELBQADggEBAGiPiz3l
+NKdJncU+QEyMYb6Ze0cwHT9Myj7vujBjJ6Jz8pzfo/yg6HAghLZP7vEK622V4jf
OU7CjzpvvDvVU/SGfvazIeXGkVHuTrzuSswtezYSN0dux0k4ZFTPS7O8vVzYmH3s
VSeoXY0Tjj9PsqL1Xq6APOUf0aTqMoEi4z8kEYXMbH9hdWIhS8lQFM8YZ80gSwFq
j+eDrvJM0bsPJ3Dj+vHpvRFH3Zz8M6gXJkzYfqksUfr9XXOxIyk2KMod657hgUMH
nFLK0ANWcFlFojoZ/ssrJNksyxJbSg0cybwFpZ4b188K4islpNZdw+grEZtIqzMI
ZTbDl0NLb/0QG/k=
-----END CERTIFICATE-----
Generated at Sun May 26 20:45:21 2024 by rpki-client on console-fra.rpki-client.org