Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/92682DF6091011EEB5BA8D7DC4F9AE02.roa
File:                     92682DF6091011EEB5BA8D7DC4F9AE02.roa (raw, json)
Hash identifier:          mXKaM9EgsbqMGoGchVIyMbJEwMRFhDpTi4wMMiuoqIQ=
Subject key identifier:   12:43:92:14:B6:97:BE:54:97:9F:67:59:B5:A6:E7:7A:78:10:99:6E
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       73F3
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/92682DF6091011EEB5BA8D7DC4F9AE02.roa
Signing time:             Wed 14 Jun 2023 08:42:12 +0000
ROA not before:           Wed 14 Jun 2023 08:42:12 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     50839
IP address blocks:        103.139.190.0/24 maxlen: 24
                          103.139.191.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 15:38:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 29683 (0x73f3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jun 14 08:42:12 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=64897d63-3452
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:bd:9b:15:54:b6:f9:ad:83:35:da:88:f9:a6:
                    fd:5a:d1:0c:f4:9c:4e:c6:2d:b0:fa:6a:7c:75:64:
                    15:9e:8f:e5:dd:ff:f8:ee:e4:0e:7b:be:88:27:8a:
                    2b:d7:78:79:f9:af:b4:69:f8:74:7e:f2:3a:5f:3f:
                    eb:6f:58:fb:71:b9:6f:90:8d:9b:10:dc:39:b0:9e:
                    0b:9e:cd:a1:91:54:cc:f1:9e:fa:01:37:41:dd:46:
                    2e:10:56:26:19:ba:4a:1a:db:12:12:7c:90:ed:da:
                    64:19:8a:55:a5:45:0a:df:6c:01:39:eb:de:28:24:
                    27:7f:b4:f0:1b:7e:15:48:16:48:d0:14:12:63:3b:
                    9a:9f:9e:06:0c:bc:0b:11:5b:72:fd:dc:c2:26:2d:
                    bb:6a:3b:41:2e:10:e0:fc:1f:5c:6f:a4:df:43:5c:
                    ed:c9:e5:5b:ee:c0:4e:17:0d:c7:36:ac:16:15:7e:
                    62:35:b5:6f:95:4f:fa:9b:51:0c:10:4e:0d:1d:55:
                    83:53:f3:61:83:91:a1:57:50:62:9b:5c:04:0f:d8:
                    ca:99:11:a7:66:09:89:2c:37:33:f9:ff:74:e8:03:
                    fc:7f:00:b4:f0:e2:b6:44:d8:9b:48:db:86:d0:4f:
                    6b:56:0c:bb:ad:6a:46:2e:a7:0f:61:9e:cb:a2:6e:
                    08:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:43:92:14:B6:97:BE:54:97:9F:67:59:B5:A6:E7:7A:78:10:99:6E
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/92682DF6091011EEB5BA8D7DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.139.190.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3e:da:65:0e:89:8b:1e:ad:8c:74:12:e9:d7:d9:8f:36:36:2c:
         97:1b:ac:be:38:83:ed:c1:44:c8:b0:72:39:8d:44:33:a0:bc:
         eb:9e:12:60:99:79:69:b2:29:37:de:91:b3:c2:04:0e:2b:8b:
         3c:fa:67:2c:27:30:7c:3b:8c:92:1f:ae:a5:5c:17:e0:90:3e:
         e1:be:a9:09:a3:a2:7d:bf:15:5e:08:17:4c:f2:62:ca:03:9a:
         6e:fa:7f:62:24:ce:aa:ec:0d:df:eb:6a:a4:7c:41:bb:90:84:
         cc:03:15:49:44:15:37:ca:c3:a3:de:9e:21:06:bb:6c:5b:3f:
         76:09:0d:bd:e9:11:4c:28:c5:89:d1:fd:c9:6a:9c:6a:b2:d3:
         30:5d:7b:e7:5a:32:b0:f3:07:b6:54:5d:b9:be:3d:85:da:7c:
         c4:1a:eb:80:c4:03:4a:34:b9:d6:0d:f6:ab:8e:7a:28:f7:48:
         06:29:71:2b:7e:6a:c4:3c:de:eb:a3:fa:fc:39:8d:25:3a:a4:
         80:f8:5f:45:0f:66:88:b9:16:2f:86:17:d1:d8:cc:4f:e0:64:
         5f:54:11:d9:aa:aa:11:c1:0d:d3:3a:a2:10:87:11:4e:b7:a6:
         a4:49:a6:9f:97:b2:cd:f2:9d:6a:c6:0b:9e:6b:3c:dd:46:8e:
         fd:70:6f:e8
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICc/MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz
RTNBQkM4MjMwHhcNMjMwNjE0MDg0MjEyWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NDg5N2Q2My0zNDUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzr2bFVS2+a2DNdqI+ab9WtEM9JxOxi2w+mp8dWQVno/l3f/47uQOe76IJ4or
13h5+a+0afh0fvI6Xz/rb1j7cblvkI2bENw5sJ4Lns2hkVTM8Z76ATdB3UYuEFYm
GbpKGtsSEnyQ7dpkGYpVpUUK32wBOeveKCQnf7TwG34VSBZI0BQSYzuan54GDLwL
EVty/dzCJi27ajtBLhDg/B9cb6TfQ1ztyeVb7sBOFw3HNqwWFX5iNbVvlU/6m1EM
EE4NHVWDU/Nhg5GhV1Bim1wED9jKmRGnZgmJLDcz+f906AP8fwC08OK2RNibSNuG
0E9rVgy7rWpGLqcPYZ7Lom4IxwIDAQABo4IClTCCApEwHQYDVR0OBBYEFBJDkhS2
l75Ul59nWbWm53p4EJluMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5
Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvOTI2ODJERjYw
OTEwMTFFRUI1QkE4RDdEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFni74wDQYJKoZIhvcNAQELBQADggEBAD7aZQ6Jix6tjHQS
6dfZjzY2LJcbrL44g+3BRMiwcjmNRDOgvOueEmCZeWmyKTfekbPCBA4rizz6Zywn
MHw7jJIfrqVcF+CQPuG+qQmjon2/FV4IF0zyYsoDmm76f2IkzqrsDd/raqR8QbuQ
hMwDFUlEFTfKw6PeniEGu2xbP3YJDb3pEUwoxYnR/clqnGqy0zBde+daMrDzB7ZU
Xbm+PYXafMQa64DEA0o0udYN9quOeij3SAYpcSt+asQ83uuj+vw5jSU6pID4X0UP
Zoi5Fi+GF9HYzE/gZF9UEdmqqhHBDdM6ohCHEU63pqRJpp+Xss3ynWrGC55rPN1G
jv1wb+g=
-----END CERTIFICATE-----
Generated at Sat Apr 27 10:19:39 2024 by rpki-client on console-ams.rpki-client.org