Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6C09F55C458F11EEABAEF868C4F9AE02.roa
File:                     6C09F55C458F11EEABAEF868C4F9AE02.roa (raw, json)
Hash identifier:          iuUpc4Dfo4L1apfEoQzpAMWI3uynDM7GamMdgCMj+NE=
Subject key identifier:   5C:8B:5B:48:7A:81:B6:DE:85:4B:47:E8:E4:28:81:13:A1:FB:31:A0
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       78BD
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6C09F55C458F11EEABAEF868C4F9AE02.roa
Signing time:             Mon 28 Aug 2023 10:41:19 +0000
ROA not before:           Mon 28 Aug 2023 10:41:19 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     141486
IP address blocks:        103.162.124.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 15:38:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30909 (0x78bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Aug 28 10:41:19 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=64ec79cf-05bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:16:dc:5d:dc:08:f6:5b:67:0c:23:60:1e:02:
                    84:6d:91:3b:a0:0f:cf:e7:a4:81:db:28:f1:58:99:
                    9e:58:e6:78:cc:8f:03:c4:32:32:25:f3:86:4f:59:
                    47:3a:82:05:35:e5:e9:10:66:59:53:be:c2:bb:38:
                    03:b7:98:66:44:69:07:d2:ad:b0:e5:5f:5c:03:53:
                    4f:b4:61:f5:f2:e0:e9:70:63:50:55:62:87:28:5a:
                    4f:72:fe:81:f2:1d:e0:36:a6:c7:0f:08:f2:4f:ac:
                    ad:d3:62:2f:fb:5d:db:db:28:02:1f:54:66:f5:a6:
                    81:95:36:a0:1b:d7:99:04:9e:f0:36:1d:e9:d4:cd:
                    7e:95:8f:d9:8f:4c:b8:3d:db:01:04:53:74:6a:d6:
                    bd:87:18:a3:2e:88:9b:1c:eb:1a:f5:8f:1c:0f:df:
                    f5:6c:b5:ae:f0:ce:24:50:19:c9:e0:9a:c1:95:f5:
                    ab:47:3d:9a:45:8e:24:3d:6e:c3:91:6e:99:b0:db:
                    e0:8d:3e:0b:ee:b8:62:b1:f5:f8:07:4d:43:60:6a:
                    77:c2:2b:f9:af:2e:68:30:4a:69:c5:9c:2a:33:7e:
                    57:30:9d:14:24:8f:a4:b5:df:49:e0:b6:cc:47:5b:
                    d2:5f:db:29:29:5e:8d:29:44:6f:3b:ff:28:6d:c1:
                    73:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:8B:5B:48:7A:81:B6:DE:85:4B:47:E8:E4:28:81:13:A1:FB:31:A0
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6C09F55C458F11EEABAEF868C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.162.124.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b7:b0:73:22:70:19:d6:0e:cd:f0:d0:fb:35:8d:16:7e:57:57:
         db:81:b7:b0:3e:3b:fb:4d:e7:33:b1:13:58:c9:28:3a:68:88:
         e4:c5:d5:87:5a:75:24:6b:bf:06:ee:bd:dc:23:82:5c:e4:24:
         96:ba:f4:36:da:03:e5:01:0e:f2:17:99:e9:50:97:0c:40:6c:
         d1:9a:6c:a3:6c:d3:3f:a8:d3:96:94:8d:23:4c:d3:89:ce:c2:
         bc:a5:26:f7:ab:ad:cf:f7:f1:52:5b:e7:63:c1:f5:c3:f3:b0:
         8b:75:11:35:69:a4:9d:af:ef:11:0f:23:75:63:bb:bb:a5:96:
         48:f0:b1:f7:7f:01:5e:b4:05:75:22:64:56:e7:44:54:d4:18:
         24:a0:0c:b5:c4:46:56:ff:fa:42:9a:02:dc:c1:e7:68:08:21:
         fa:a1:47:33:dc:fb:02:c1:ad:44:a5:7e:fc:4f:45:78:55:1a:
         d2:8c:0b:b2:cd:13:4f:cf:40:06:c2:20:87:e9:6a:10:da:1a:
         b4:24:f6:7a:bf:27:12:36:c2:9a:3c:a7:10:01:1d:d4:69:77:
         15:1e:74:31:0e:e7:b5:4d:6b:22:01:92:a0:6f:d1:d9:af:4a:
         90:50:65:ec:b5:e0:a8:41:fa:7f:83:5a:bc:cc:00:63:fa:f7:
         de:98:8b:df
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICeL0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz
RTNBQkM4MjMwHhcNMjMwODI4MTA0MTE5WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NGVjNzljZi0wNWJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyBbcXdwI9ltnDCNgHgKEbZE7oA/P56SB2yjxWJmeWOZ4zI8DxDIyJfOGT1lH
OoIFNeXpEGZZU77CuzgDt5hmRGkH0q2w5V9cA1NPtGH18uDpcGNQVWKHKFpPcv6B
8h3gNqbHDwjyT6yt02Iv+13b2ygCH1Rm9aaBlTagG9eZBJ7wNh3p1M1+lY/Zj0y4
PdsBBFN0ata9hxijLoibHOsa9Y8cD9/1bLWu8M4kUBnJ4JrBlfWrRz2aRY4kPW7D
kW6ZsNvgjT4L7rhisfX4B01DYGp3wiv5ry5oMEppxZwqM35XMJ0UJI+ktd9J4LbM
R1vSX9spKV6NKURvO/8obcFzoQIDAQABo4IClTCCApEwHQYDVR0OBBYEFFyLW0h6
gbbehUtH6OQogROh+zGgMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5
Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNkMwOUY1NUM0
NThGMTFFRUFCQUVGODY4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnonwwDQYJKoZIhvcNAQELBQADggEBALewcyJwGdYOzfDQ
+zWNFn5XV9uBt7A+O/tN5zOxE1jJKDpoiOTF1YdadSRrvwbuvdwjglzkJJa69Dba
A+UBDvIXmelQlwxAbNGabKNs0z+o05aUjSNM04nOwrylJverrc/38VJb52PB9cPz
sIt1ETVppJ2v7xEPI3Vju7ullkjwsfd/AV60BXUiZFbnRFTUGCSgDLXERlb/+kKa
AtzB52gIIfqhRzPc+wLBrUSlfvxPRXhVGtKMC7LNE0/PQAbCIIfpahDaGrQk9nq/
JxI2wpo8pxABHdRpdxUedDEO57VNayIBkqBv0dmvSpBQZey14KhB+n+DWrzMAGP6
996Yi98=
-----END CERTIFICATE-----
Generated at Sat Apr 27 10:19:36 2024 by rpki-client on console-ams.rpki-client.org