Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/77792B8C0C2411EEBD6B7E83C4F9AE02.roa
File:                     77792B8C0C2411EEBD6B7E83C4F9AE02.roa (raw, json)
Hash identifier:          KsjbWKe9xA80V5PbOpDE/1Hm9r1RQ+N5E9j2RBG/2Pg=
Subject key identifier:   BA:13:56:BD:D8:4E:97:3C:72:38:E7:38:ED:4D:C9:E8:15:A9:93:3B
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       7419
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/77792B8C0C2411EEBD6B7E83C4F9AE02.roa
Signing time:             Fri 16 Jun 2023 09:02:06 +0000
ROA not before:           Fri 16 Jun 2023 09:02:06 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     151119
IP address blocks:        103.215.115.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 15:38:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 29721 (0x7419)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jun 16 09:02:06 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=648c250e-8804
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:f4:b9:98:4a:d1:dd:f0:1f:09:99:a3:49:d9:
                    68:b9:5e:82:bf:17:89:64:93:da:26:88:b5:d7:09:
                    e9:83:f0:a1:40:1a:3e:7a:19:cf:c7:12:5e:f8:23:
                    64:5c:eb:eb:7b:02:3c:49:06:f9:4d:52:b4:b7:24:
                    64:e2:03:fc:65:57:27:46:06:99:5f:25:1a:32:cd:
                    77:ea:82:62:89:c0:3b:e6:c6:5c:a6:67:8c:ec:ba:
                    d0:08:92:f0:6d:93:ba:30:0f:0d:b5:a4:00:0b:d4:
                    9b:7e:ad:ef:fa:eb:0e:35:2c:e4:e0:72:b9:49:8e:
                    47:f6:04:1b:30:83:fe:2d:8d:a4:be:d6:6e:bc:14:
                    6d:5b:29:82:3c:60:67:55:e3:35:b0:86:dc:6d:8e:
                    bc:c2:79:02:f1:60:16:9f:e6:c5:81:4f:42:94:51:
                    c8:61:92:e1:38:90:37:24:9b:49:c7:bb:b9:d6:bb:
                    18:d3:5c:25:a8:5f:62:9b:5b:cb:91:71:05:5d:16:
                    cd:1e:f9:fe:e3:e5:7b:49:4d:55:22:3b:7f:17:69:
                    dd:73:2a:10:18:54:8a:d8:5c:15:49:a5:4b:92:af:
                    df:e4:4c:ed:5e:ee:3a:07:2c:fe:09:a7:39:33:b2:
                    ec:7c:b2:44:d5:b0:84:aa:b3:16:17:5a:17:24:87:
                    39:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:13:56:BD:D8:4E:97:3C:72:38:E7:38:ED:4D:C9:E8:15:A9:93:3B
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/77792B8C0C2411EEBD6B7E83C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.215.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b8:a3:69:6d:01:9d:17:5a:ec:54:50:41:b5:c1:90:36:87:e6:
         d6:4d:c4:bb:8b:e4:e2:a4:07:8b:6b:1a:6a:23:07:93:dd:e5:
         7c:6a:e1:31:8c:33:f6:9d:00:9b:22:41:e8:bb:c0:2d:0d:ac:
         d6:45:cc:1f:0f:ec:61:56:cc:d0:e3:0d:4a:19:0b:42:47:92:
         0f:7d:c6:32:c6:70:8d:10:97:3f:ee:19:c8:d5:96:1b:2e:e0:
         a2:c0:5a:1a:45:36:6b:4d:6a:42:a5:79:da:b3:3d:f1:3c:ab:
         98:77:05:24:cc:db:47:6a:6d:9e:c2:48:9b:33:4b:1f:c4:e7:
         42:3a:f1:f5:56:fa:46:1c:92:8a:fe:14:3b:c2:41:d3:95:1b:
         57:48:54:68:36:e1:03:2a:f2:3a:7c:98:ef:b0:c4:55:a0:c4:
         2d:e9:0a:76:ff:25:fb:50:4e:43:61:d0:de:8b:b0:76:09:53:
         da:a8:f9:04:58:29:0f:46:a1:a7:bc:44:fb:85:8b:ef:0a:91:
         6d:8b:95:5b:13:6f:f5:29:91:b8:fc:44:67:44:af:12:a8:cf:
         6f:24:7b:a5:47:10:3b:14:3b:40:f5:5f:39:9f:ef:63:dd:fb:
         0f:a9:f5:b8:21:e4:0e:28:b8:dc:55:0a:b5:ae:00:10:e0:e1:
         94:a9:d8:cf
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICdBkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz
RTNBQkM4MjMwHhcNMjMwNjE2MDkwMjA2WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NDhjMjUwZS04ODA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2/S5mErR3fAfCZmjSdlouV6CvxeJZJPaJoi11wnpg/ChQBo+ehnPxxJe+CNk
XOvrewI8SQb5TVK0tyRk4gP8ZVcnRgaZXyUaMs136oJiicA75sZcpmeM7LrQCJLw
bZO6MA8NtaQAC9Sbfq3v+usONSzk4HK5SY5H9gQbMIP+LY2kvtZuvBRtWymCPGBn
VeM1sIbcbY68wnkC8WAWn+bFgU9ClFHIYZLhOJA3JJtJx7u51rsY01wlqF9im1vL
kXEFXRbNHvn+4+V7SU1VIjt/F2ndcyoQGFSK2FwVSaVLkq/f5EztXu46Byz+Cac5
M7LsfLJE1bCEqrMWF1oXJIc53QIDAQABo4IClTCCApEwHQYDVR0OBBYEFLoTVr3Y
Tpc8cjjnOO1NyegVqZM7MB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5
Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNzc3OTJCOEMw
QzI0MTFFRUJENkI3RTgzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABn13MwDQYJKoZIhvcNAQELBQADggEBALijaW0BnRda7FRQ
QbXBkDaH5tZNxLuL5OKkB4trGmojB5Pd5Xxq4TGMM/adAJsiQei7wC0NrNZFzB8P
7GFWzNDjDUoZC0JHkg99xjLGcI0Qlz/uGcjVlhsu4KLAWhpFNmtNakKledqzPfE8
q5h3BSTM20dqbZ7CSJszSx/E50I68fVW+kYckor+FDvCQdOVG1dIVGg24QMq8jp8
mO+wxFWgxC3pCnb/JftQTkNh0N6LsHYJU9qo+QRYKQ9Goae8RPuFi+8KkW2LlVsT
b/Upkbj8RGdErxKoz28ke6VHEDsUO0D1Xzmf72Pd+w+p9bgh5A4ouNxVCrWuABDg
4ZSp2M8=
-----END CERTIFICATE-----
Generated at Sat Apr 27 10:19:37 2024 by rpki-client on console-ams.rpki-client.org