Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/92465626DD2711EAB180E653C4F9AE02.roa
File:                     92465626DD2711EAB180E653C4F9AE02.roa (raw, json)
Hash identifier:          R0LTNpLT+ahHui0VMsE+HeJ9Y5rCZLiLNJOb0fWQf7U=
Subject key identifier:   47:C8:E7:D4:1A:08:5F:87:98:51:29:4A:2C:E6:7E:09:32:0D:BF:38
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       6AD2
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/92465626DD2711EAB180E653C4F9AE02.roa
Signing time:             Wed 10 May 2023 16:16:39 +0000
ROA not before:           Wed 10 May 2023 16:16:39 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     133980
IP address blocks:        43.239.132.0/22 maxlen: 24
                          103.55.40.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 15:38:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 27346 (0x6ad2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 10 16:16:39 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=645bc367-bce7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:04:7b:0c:fd:81:4b:41:24:51:f2:ec:d2:1f:
                    2b:e3:ad:93:cc:43:94:bd:05:e0:d3:79:2e:81:f4:
                    2f:1f:11:9e:08:cf:c9:f0:ff:7b:e3:6d:2e:f5:7d:
                    88:7b:0f:d2:97:44:bf:7f:f9:21:d1:e7:8d:80:f2:
                    ff:e4:2e:3f:85:6a:3f:12:fa:05:2a:ce:cb:e0:15:
                    f2:6b:72:ff:a2:0e:d0:96:1a:31:7c:f1:d9:b2:3c:
                    d1:a5:48:b9:22:e9:e1:c0:48:d1:5d:14:cb:3e:48:
                    db:f1:0f:e7:e8:98:96:0f:81:cf:42:8d:a7:fc:ec:
                    00:ea:26:58:f0:37:20:32:aa:a9:11:28:24:5a:b0:
                    11:2b:e2:34:3e:a5:95:37:4f:e3:ff:23:ee:87:27:
                    c4:49:1a:08:40:9c:f9:d5:73:9d:98:e9:f1:ca:8e:
                    d2:80:c2:f2:97:a8:65:54:a9:d9:da:ac:3b:9d:e5:
                    00:05:3b:00:40:94:b5:f8:32:12:74:94:18:f4:d7:
                    13:09:41:4f:8b:78:2f:19:17:89:50:e4:39:2b:5c:
                    b1:d8:47:ce:2a:e6:39:b5:fe:dc:42:78:75:c1:f0:
                    d9:ab:76:81:1f:e1:8d:38:e6:88:a3:7c:4f:ce:2c:
                    d0:ff:53:d1:9e:50:36:82:c5:54:53:87:82:a4:6d:
                    3a:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:C8:E7:D4:1A:08:5F:87:98:51:29:4A:2C:E6:7E:09:32:0D:BF:38
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/92465626DD2711EAB180E653C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.239.132.0/22
                  103.55.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0e:aa:52:f4:66:9e:dc:a2:f0:6e:25:58:e5:67:1e:c1:9a:b9:
         f0:1f:0e:1f:73:a6:1e:c8:ef:3c:6d:b2:a8:2e:03:0c:a8:51:
         0d:a7:74:45:d4:52:fa:f2:a1:cf:aa:53:8f:90:c4:8b:1f:da:
         0f:1f:07:8c:c2:fc:9f:04:be:50:bc:ab:e9:94:f0:fd:6f:07:
         94:8e:8a:b2:79:78:a4:de:78:05:64:bf:48:68:c3:d6:70:54:
         5e:3b:27:d3:21:6d:a5:76:6a:d7:2d:2c:ed:42:39:94:7a:f2:
         d2:a6:21:44:ac:11:56:bb:c5:a9:59:ce:43:e7:8b:85:80:06:
         30:6e:e7:89:f5:00:12:e6:31:a3:d6:f1:3d:96:73:d3:f2:f7:
         71:a9:33:7d:4b:8b:e4:dc:cc:d0:36:ae:99:5b:02:dc:ad:74:
         bb:fd:63:b3:dd:4e:33:76:f6:22:71:5e:86:e1:e1:38:42:87:
         f8:14:75:50:31:43:6d:1f:44:73:c4:c9:3f:d1:d4:cc:79:02:
         ea:19:ea:3c:f5:49:4e:60:e7:98:8e:f7:a3:22:86:95:97:9d:
         13:8a:3a:f8:b2:71:78:16:30:91:da:28:cf:dc:80:df:05:ab:
         71:04:15:cf:a0:ce:65:bd:ea:cd:ea:f4:0a:38:0e:cc:93:5d:
         c8:ae:1c:be
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICatIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz
RTNBQkM4MjMwHhcNMjMwNTEwMTYxNjM5WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NDViYzM2Ny1iY2U3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0wR7DP2BS0EkUfLs0h8r462TzEOUvQXg03kugfQvHxGeCM/J8P97420u9X2I
ew/Sl0S/f/kh0eeNgPL/5C4/hWo/EvoFKs7L4BXya3L/og7QlhoxfPHZsjzRpUi5
IunhwEjRXRTLPkjb8Q/n6JiWD4HPQo2n/OwA6iZY8DcgMqqpESgkWrARK+I0PqWV
N0/j/yPuhyfESRoIQJz51XOdmOnxyo7SgMLyl6hlVKnZ2qw7neUABTsAQJS1+DIS
dJQY9NcTCUFPi3gvGReJUOQ5K1yx2EfOKuY5tf7cQnh1wfDZq3aBH+GNOOaIo3xP
zizQ/1PRnlA2gsVUU4eCpG06PQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFEfI59Qa
CF+HmFEpSizmfgkyDb84MB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5
Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvOTI0NjU2MjZE
RDI3MTFFQUIxODBFNjUzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBAIr74QDBAJnNygwDQYJKoZIhvcNAQELBQADggEBAA6qUvRm
ntyi8G4lWOVnHsGaufAfDh9zph7I7zxtsqguAwyoUQ2ndEXUUvryoc+qU4+QxIsf
2g8fB4zC/J8EvlC8q+mU8P1vB5SOirJ5eKTeeAVkv0how9ZwVF47J9MhbaV2atct
LO1COZR68tKmIUSsEVa7xalZzkPni4WABjBu54n1ABLmMaPW8T2Wc9Py93GpM31L
i+TczNA2rplbAtytdLv9Y7PdTjN29iJxXobh4ThCh/gUdVAxQ20fRHPEyT/R1Mx5
AuoZ6jz1SU5g55iO96MihpWXnROKOviycXgWMJHaKM/cgN8Fq3EEFc+gzmW96s3q
9Ao4DsyTXciuHL4=
-----END CERTIFICATE-----
Generated at Sat Apr 27 10:19:39 2024 by rpki-client on console-ams.rpki-client.org