Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/246131A2D82A11EDB5522639C4F9AE02.roa
File:                     246131A2D82A11EDB5522639C4F9AE02.roa (raw, json)
Hash identifier:          oWQwW3XvJf/G3Tnmy+s5GkmBJgcQ9Z9VfVPbo3Q7maU=
Subject key identifier:   F7:80:A0:C3:9E:D8:3D:6C:B9:02:18:95:D3:4A:C1:DD:C0:76:2C:8D
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       704E
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/246131A2D82A11EDB5522639C4F9AE02.roa
Signing time:             Wed 10 May 2023 16:42:59 +0000
ROA not before:           Wed 10 May 2023 16:42:59 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     149259
IP address blocks:        103.212.210.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 15:38:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28750 (0x704e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 10 16:42:59 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=645bc992-1535
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:30:2e:26:b0:4e:1f:fb:6b:88:34:0f:0f:69:
                    c4:0c:70:46:f3:cf:8e:ac:1f:48:82:20:67:b7:b6:
                    98:89:e2:83:56:4d:c7:08:8c:6e:58:e4:9e:cd:4d:
                    3e:50:6d:61:6b:e9:32:b2:7b:11:3b:86:7d:57:d7:
                    b8:80:8b:5f:64:b2:a7:77:bb:89:f0:4d:de:b2:60:
                    06:dd:ac:3d:27:02:36:4a:3c:4c:55:f0:b8:31:12:
                    07:57:78:60:f0:7a:f0:3e:a4:62:b3:20:de:b5:77:
                    ba:70:b1:7e:7d:c1:30:bd:cc:38:74:3d:44:77:02:
                    38:6a:f4:c9:3c:9f:d5:9a:9b:a0:29:a7:f8:e4:34:
                    9a:1c:bf:bc:c4:78:b8:63:4f:ce:94:7b:b8:6c:6f:
                    14:2f:f4:63:68:ee:02:08:4e:43:ae:3b:ba:7d:af:
                    00:6f:4d:28:6d:8c:21:d8:db:dd:2a:53:47:8f:d4:
                    b9:10:24:fe:a7:5c:f0:3b:11:a2:18:61:6d:d1:a1:
                    0b:e6:1e:32:45:4e:3a:65:aa:0c:24:fc:59:d3:68:
                    15:d0:81:c2:d6:d7:d5:94:1a:d3:29:87:cc:a9:bc:
                    31:f2:2e:01:7a:01:fb:d6:7f:8b:e0:cd:c2:57:5b:
                    e3:1b:57:0e:8d:a3:06:9d:15:00:84:81:64:04:80:
                    76:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:80:A0:C3:9E:D8:3D:6C:B9:02:18:95:D3:4A:C1:DD:C0:76:2C:8D
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/246131A2D82A11EDB5522639C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.212.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:d7:38:b5:54:2c:e9:d0:6b:bd:29:9e:4b:de:83:29:77:07:
         c9:8f:9a:f6:81:f6:d7:23:8f:5f:f1:6b:3a:77:99:e0:f4:3a:
         38:3d:a7:c7:13:ae:2f:f2:40:ab:08:ef:e6:f3:cf:5b:3b:d9:
         ea:f3:6e:8a:e0:d9:84:3a:f1:3c:43:55:9f:fb:c1:5d:b9:ad:
         42:50:2a:03:51:4f:ed:b1:01:a8:57:45:e4:56:4c:20:f7:75:
         a6:03:da:2d:03:b3:3e:6f:51:12:5b:db:0b:77:74:71:a7:18:
         a8:33:ca:31:21:ac:1a:48:9c:6b:6d:f0:77:d8:ba:80:4d:09:
         6a:9e:92:31:f8:58:b9:9d:fc:e4:11:01:69:1b:55:fa:5b:17:
         5c:83:89:1f:52:0b:47:cf:5b:e6:3d:79:81:c6:aa:ac:24:b8:
         ad:f8:70:71:e7:f1:ad:50:6a:8b:42:ee:0c:b6:b5:30:a3:92:
         7a:87:a4:8c:6c:a1:1e:10:0b:e1:95:97:bf:14:ec:c7:35:11:
         ac:bb:3f:3b:80:99:11:fc:bc:12:97:ca:66:ad:eb:45:64:64:
         ac:f5:13:ba:42:a3:94:76:e8:67:09:95:1f:7b:d6:f3:5c:1c:
         44:0a:5f:de:02:c2:9a:be:d0:37:1c:97:9d:2f:09:ac:b7:94:
         ae:39:56:d3
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICcE4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz
RTNBQkM4MjMwHhcNMjMwNTEwMTY0MjU5WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NDViYzk5Mi0xNTM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAszAuJrBOH/triDQPD2nEDHBG88+OrB9IgiBnt7aYieKDVk3HCIxuWOSezU0+
UG1ha+kysnsRO4Z9V9e4gItfZLKnd7uJ8E3esmAG3aw9JwI2SjxMVfC4MRIHV3hg
8HrwPqRisyDetXe6cLF+fcEwvcw4dD1EdwI4avTJPJ/VmpugKaf45DSaHL+8xHi4
Y0/OlHu4bG8UL/RjaO4CCE5Drju6fa8Ab00obYwh2NvdKlNHj9S5ECT+p1zwOxGi
GGFt0aEL5h4yRU46ZaoMJPxZ02gV0IHC1tfVlBrTKYfMqbwx8i4BegH71n+L4M3C
V1vjG1cOjaMGnRUAhIFkBIB23wIDAQABo4IClTCCApEwHQYDVR0OBBYEFPeAoMOe
2D1suQIYldNKwd3AdiyNMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5
Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMjQ2MTMxQTJE
ODJBMTFFREI1NTIyNjM5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABn1NIwDQYJKoZIhvcNAQELBQADggEBAAXXOLVULOnQa70p
nkvegyl3B8mPmvaB9tcjj1/xazp3meD0Ojg9p8cTri/yQKsI7+bzz1s72erzborg
2YQ68TxDVZ/7wV25rUJQKgNRT+2xAahXReRWTCD3daYD2i0Dsz5vURJb2wt3dHGn
GKgzyjEhrBpInGtt8HfYuoBNCWqekjH4WLmd/OQRAWkbVfpbF1yDiR9SC0fPW+Y9
eYHGqqwkuK34cHHn8a1QaotC7gy2tTCjknqHpIxsoR4QC+GVl78U7Mc1Eay7PzuA
mRH8vBKXymat60VkZKz1E7pCo5R26GcJlR971vNcHEQKX94Cwpq+0Dccl50vCay3
lK45VtM=
-----END CERTIFICATE-----
Generated at Sat Apr 27 10:19:28 2024 by rpki-client on console-ams.rpki-client.org