Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3A55E2B2457411ED80D0EA42C4F9AE02.roa
File:                     3A55E2B2457411ED80D0EA42C4F9AE02.roa (raw, json)
Hash identifier:          uvbakQ53opWTmJWWXyiciWLBRRjIUlUBfyiaPQcXI2M=
Subject key identifier:   78:58:E8:79:5E:2B:51:C1:6B:DD:5B:43:08:8F:AE:0D:32:B0:70:1A
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       70E1
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3A55E2B2457411ED80D0EA42C4F9AE02.roa
Signing time:             Wed 10 May 2023 16:45:37 +0000
ROA not before:           Wed 10 May 2023 16:45:37 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     150077
IP address blocks:        103.231.24.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 15:38:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28897 (0x70e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 10 16:45:37 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=645bca31-6c20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:d6:de:8d:af:af:09:6b:17:74:b9:43:15:8d:
                    14:f6:24:7a:fd:48:d4:40:66:97:bf:d1:90:d4:c1:
                    82:d8:56:80:c3:e6:63:f0:75:b4:b1:4b:b1:1b:c9:
                    10:50:10:0f:ce:2c:ea:33:80:51:e9:05:5a:f6:af:
                    30:c8:2a:80:bf:7b:d8:9a:2f:54:02:94:8b:07:da:
                    35:71:87:b7:d2:dc:d3:bd:9e:0a:32:e5:f1:cf:d1:
                    fd:d1:5e:0c:8d:f8:47:f4:93:2b:4e:52:fe:2d:a3:
                    6d:c1:2e:72:fb:89:69:86:b2:93:e6:6a:26:99:20:
                    87:fb:51:39:37:1e:15:31:2c:be:93:73:d7:7f:fd:
                    b3:4c:07:7e:0d:28:4d:ea:64:18:41:a2:b4:fb:38:
                    e2:4b:a1:e8:3a:6a:77:66:7e:3a:d4:8b:58:ec:02:
                    29:cf:3e:22:73:d6:e6:ab:06:6f:58:4d:ca:18:ba:
                    e0:01:a0:f5:96:18:db:44:f8:88:6d:f9:e6:1d:6f:
                    89:2b:f2:f1:2a:55:69:3b:41:42:3e:27:6d:cb:df:
                    53:2c:1e:03:95:cc:0b:f0:c0:6e:66:73:fd:93:78:
                    03:77:75:ac:46:35:81:eb:9e:a0:1a:b6:8a:35:97:
                    d9:a6:dd:f4:3c:56:e3:cc:fc:af:00:5e:1a:77:58:
                    03:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:58:E8:79:5E:2B:51:C1:6B:DD:5B:43:08:8F:AE:0D:32:B0:70:1A
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3A55E2B2457411ED80D0EA42C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.231.24.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4e:1e:f1:a2:cf:00:d5:f3:88:d1:5e:4b:64:71:59:0b:c3:8f:
         fb:d6:b9:04:17:d0:ca:02:32:7e:26:9f:99:ef:cf:53:b2:e1:
         f2:b4:a1:14:2c:d2:a1:d6:01:f0:ec:dc:e7:8a:a9:ca:72:fb:
         52:e3:15:30:66:32:b5:a2:c8:70:48:cb:ab:73:82:32:72:8e:
         9b:b3:67:5d:49:f8:ce:24:b8:43:ad:0d:37:ca:f1:39:21:c5:
         95:99:0d:4a:41:56:3f:db:7f:a2:4e:58:5b:56:47:5d:6a:36:
         9b:34:04:06:41:04:45:45:98:6d:99:ea:0b:91:37:d9:ba:4c:
         5b:3f:2e:4a:6a:f0:2f:c4:c7:51:db:29:79:92:73:e7:6b:50:
         97:70:5b:c4:72:ad:61:79:4f:27:53:34:bb:87:39:37:f8:02:
         61:40:d6:41:27:a2:02:28:ce:c0:91:1f:85:48:b3:66:fb:07:
         3e:49:74:cb:3a:c0:80:e0:8f:59:a7:a9:e1:e3:4c:be:f1:d7:
         24:83:32:bd:38:7b:c7:55:70:ed:6c:cc:ca:81:3d:3b:5e:46:
         52:64:b5:8f:ad:c1:d6:46:f3:92:94:2d:a1:15:64:0b:32:82:
         97:cc:54:2b:db:fd:4e:6f:bf:2b:ef:80:8e:9c:cd:6c:e0:49:
         2b:be:e5:33
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICcOEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz
RTNBQkM4MjMwHhcNMjMwNTEwMTY0NTM3WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NDViY2EzMS02YzIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAptbeja+vCWsXdLlDFY0U9iR6/UjUQGaXv9GQ1MGC2FaAw+Zj8HW0sUuxG8kQ
UBAPzizqM4BR6QVa9q8wyCqAv3vYmi9UApSLB9o1cYe30tzTvZ4KMuXxz9H90V4M
jfhH9JMrTlL+LaNtwS5y+4lphrKT5mommSCH+1E5Nx4VMSy+k3PXf/2zTAd+DShN
6mQYQaK0+zjiS6HoOmp3Zn461ItY7AIpzz4ic9bmqwZvWE3KGLrgAaD1lhjbRPiI
bfnmHW+JK/LxKlVpO0FCPidty99TLB4DlcwL8MBuZnP9k3gDd3WsRjWB656gGraK
NZfZpt30PFbjzPyvAF4ad1gDCwIDAQABo4IClTCCApEwHQYDVR0OBBYEFHhY6Hle
K1HBa91bQwiPrg0ysHAaMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5
Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvM0E1NUUyQjI0
NTc0MTFFRDgwRDBFQTQyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFn5xgwDQYJKoZIhvcNAQELBQADggEBAE4e8aLPANXziNFe
S2RxWQvDj/vWuQQX0MoCMn4mn5nvz1Oy4fK0oRQs0qHWAfDs3OeKqcpy+1LjFTBm
MrWiyHBIy6tzgjJyjpuzZ11J+M4kuEOtDTfK8TkhxZWZDUpBVj/bf6JOWFtWR11q
Nps0BAZBBEVFmG2Z6guRN9m6TFs/Lkpq8C/Ex1HbKXmSc+drUJdwW8RyrWF5TydT
NLuHOTf4AmFA1kEnogIozsCRH4VIs2b7Bz5JdMs6wIDgj1mnqeHjTL7x1ySDMr04
e8dVcO1szMqBPTteRlJktY+twdZG85KULaEVZAsygpfMVCvb/U5vvyvvgI6czWzg
SSu+5TM=
-----END CERTIFICATE-----
Generated at Sat Apr 27 10:19:30 2024 by rpki-client on console-ams.rpki-client.org