Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EAFB/094F746E54F711EA838FA84FC4F9AE02/FDF734905C9D11EA91DB3C7CC4F9AE02.roa
File:                     FDF734905C9D11EA91DB3C7CC4F9AE02.roa (raw, json)
Hash identifier:          vXdhueOKeH2L+EhcuXNxIR6NEBaIJ+rO+WquQADkcYg=
Subject key identifier:   CC:A4:4B:52:8D:B3:06:0C:C0:59:E2:92:A3:DA:04:1E:C3:F8:6C:6E
Certificate issuer:       /CN=A918EAFB/serialNumber=F61FBAA61929D100FA99DBD480CE8C2C4EE73FF1
Certificate serial:       0A24
Authority key identifier: F6:1F:BA:A6:19:29:D1:00:FA:99:DB:D4:80:CE:8C:2C:4E:E7:3F:F1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9h-6phkp0QD6mdvUgM6MLE7nP_E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EAFB/094F746E54F711EA838FA84FC4F9AE02/FDF734905C9D11EA91DB3C7CC4F9AE02.roa
Signing time:             Wed 14 Aug 2024 20:18:16 +0000
ROA not before:           Wed 14 Aug 2024 20:18:16 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     396982
IP address blocks:        103.246.36.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EAFB/094F746E54F711EA838FA84FC4F9AE02/9h-6phkp0QD6mdvUgM6MLE7nP_E.crl
                          rsync://rpki.apnic.net/member_repository/A918EAFB/094F746E54F711EA838FA84FC4F9AE02/9h-6phkp0QD6mdvUgM6MLE7nP_E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9h-6phkp0QD6mdvUgM6MLE7nP_E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 19 Mar 2025 19:23:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2596 (0xa24)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EAFB
        Validity
            Not Before: Aug 14 20:18:16 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=66bd1108-7a44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:fd:ae:8d:ba:03:a6:69:34:34:b3:ab:26:28:
                    ea:9e:e6:6f:12:d6:7d:42:b1:d4:6f:8f:a6:e3:56:
                    40:ad:b4:64:1e:e4:af:cc:fd:37:5c:c8:d2:10:d7:
                    f9:a4:e8:2e:ba:3c:a1:4e:6f:42:77:2a:cc:5e:1f:
                    31:9a:d8:79:0c:75:28:0f:3b:21:61:db:17:23:a0:
                    0f:2e:a1:80:ac:49:5e:e7:cb:22:43:fd:26:04:0d:
                    83:41:5d:23:62:5c:89:8c:cd:83:2e:74:e7:2c:64:
                    50:db:5f:1b:a8:6c:88:fc:6e:9c:9b:bd:d6:83:3b:
                    a6:bf:d9:fc:51:a8:fe:94:32:36:88:33:12:8f:06:
                    aa:cb:46:c5:d6:52:f2:c5:75:bc:64:6c:eb:15:79:
                    ad:92:75:8f:95:af:34:f2:6a:b0:81:07:b3:7e:1f:
                    8c:7d:a1:13:db:02:6c:c1:67:5e:74:d8:b9:b2:99:
                    cd:b4:5a:ab:1a:52:71:27:de:38:58:da:73:70:b9:
                    bc:3c:c9:6c:69:38:b5:e7:82:23:fd:32:7a:ad:a3:
                    41:b0:07:b1:97:18:e1:e9:9c:46:a0:16:93:11:eb:
                    5b:e1:60:e6:fc:1c:61:45:f0:cb:8f:42:77:f2:2a:
                    72:0b:22:94:d9:0a:37:84:49:b0:4c:78:07:9c:6d:
                    7d:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:A4:4B:52:8D:B3:06:0C:C0:59:E2:92:A3:DA:04:1E:C3:F8:6C:6E
            X509v3 Authority Key Identifier:
                keyid:F6:1F:BA:A6:19:29:D1:00:FA:99:DB:D4:80:CE:8C:2C:4E:E7:3F:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EAFB/094F746E54F711EA838FA84FC4F9AE02/9h-6phkp0QD6mdvUgM6MLE7nP_E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9h-6phkp0QD6mdvUgM6MLE7nP_E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EAFB/094F746E54F711EA838FA84FC4F9AE02/FDF734905C9D11EA91DB3C7CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.246.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ab:df:84:a8:4d:2e:c7:57:0b:4a:9d:ea:1a:4d:cc:7b:fe:8a:
         45:13:1f:14:83:b0:38:1f:7a:1b:ff:16:21:80:e9:ff:b4:95:
         b7:47:91:86:de:90:21:f4:bb:5e:92:7e:35:39:66:77:99:bd:
         fb:1d:cc:eb:be:b1:8c:b3:c6:e0:fa:35:bd:65:74:79:25:dd:
         9e:df:cc:ec:bb:95:3e:33:42:ac:a5:23:33:69:b3:10:c6:ba:
         8b:9c:17:2c:84:c2:e1:a5:c0:97:ac:7d:1b:c9:ff:60:5c:20:
         fa:c6:fd:8a:5b:81:2a:e2:2f:19:d3:d9:fb:e2:c7:76:02:45:
         bc:d0:81:93:40:d5:0c:6f:22:05:3b:b0:87:b1:a1:9f:95:28:
         40:f1:b0:1f:32:11:2e:91:5f:52:13:76:66:86:cc:05:88:0d:
         a3:22:a7:06:16:36:fe:4b:e8:1a:98:f6:de:1c:41:ae:46:e3:
         35:57:55:f6:13:77:f8:61:ee:20:b5:8d:99:88:47:99:65:74:
         65:a3:44:82:b4:d1:09:66:95:84:29:3e:9b:49:c1:81:17:5a:
         9a:0e:7c:c2:22:aa:86:09:93:68:63:bb:ce:11:88:82:e3:df:
         83:11:d4:60:7f:18:49:63:53:95:39:6d:70:fb:cd:e6:9f:b4:
         0f:36:5a:a1
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICCiQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVBRkIxMTAvBgNVBAUTKEY2MUZCQUE2MTkyOUQxMDBGQTk5REJENDgwQ0U4QzJD
NEVFNzNGRjEwHhcNMjQwODE0MjAxODE2WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmJkMTEwOC03YTQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAl/2ujboDpmk0NLOrJijqnuZvEtZ9QrHUb4+m41ZArbRkHuSvzP03XMjSENf5
pOguujyhTm9CdyrMXh8xmth5DHUoDzshYdsXI6APLqGArEle58siQ/0mBA2DQV0j
YlyJjM2DLnTnLGRQ218bqGyI/G6cm73Wgzumv9n8Uaj+lDI2iDMSjwaqy0bF1lLy
xXW8ZGzrFXmtknWPla808mqwgQezfh+MfaET2wJswWdedNi5spnNtFqrGlJxJ944
WNpzcLm8PMlsaTi154Ij/TJ6raNBsAexlxjh6ZxGoBaTEetb4WDm/BxhRfDLj0J3
8ipyCyKU2Qo3hEmwTHgHnG193wIDAQABo4IClTCCApEwHQYDVR0OBBYEFMykS1KN
swYMwFnikqPaBB7D+GxuMB8GA1UdIwQYMBaAFPYfuqYZKdEA+pnb1IDOjCxO5z/x
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RUFGQi8wOTRGNzQ2RTU0
RjcxMUVBODM4RkE4NEZDNEY5QUUwMi85aC02cGhrcDBRRDZtZHZVZ002TUxFN25Q
X0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzloLTZwaGtwMFFENm1kdlVnTTZNTEU3blBfRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVBRkIvMDk0Rjc0NkU1NEY3MTFFQTgzOEZBODRGQzRGOUFFMDIvRkRGNzM0OTA1
QzlEMTFFQTkxREIzQzdDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAJn9iQwDQYJKoZIhvcNAQELBQADggEBAKvfhKhNLsdXC0qd
6hpNzHv+ikUTHxSDsDgfehv/FiGA6f+0lbdHkYbekCH0u16SfjU5ZneZvfsdzOu+
sYyzxuD6Nb1ldHkl3Z7fzOy7lT4zQqylIzNpsxDGuoucFyyEwuGlwJesfRvJ/2Bc
IPrG/YpbgSriLxnT2fvix3YCRbzQgZNA1QxvIgU7sIexoZ+VKEDxsB8yES6RX1IT
dmaGzAWIDaMipwYWNv5L6BqY9t4cQa5G4zVXVfYTd/hh7iC1jZmIR5lldGWjRIK0
0QlmlYQpPptJwYEXWpoOfMIiqoYJk2hju84RiILj34MR1GB/GEljU5U5bXD7zeaf
tA82WqE=
-----END CERTIFICATE-----
Generated at Thu Mar 13 21:56:58 2025 by rpki-client