Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A5DF962040AC11EEA7B76745C4F9AE02.roa
File:                     A5DF962040AC11EEA7B76745C4F9AE02.roa (raw, json)
Hash identifier:          Srw70uFTiy+SLbPuWoday7uJ8MKBqrOinf+4CNFRcrY=
Subject key identifier:   39:B7:69:5D:2A:8A:E3:94:CF:61:5D:F4:40:F1:7C:D1:C5:A3:4E:CC
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       7825
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A5DF962040AC11EEA7B76745C4F9AE02.roa
Signing time:             Tue 22 Aug 2023 05:27:56 +0000
ROA not before:           Tue 22 Aug 2023 05:27:56 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     133591
IP address blocks:        103.181.6.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 15:38:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30757 (0x7825)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Aug 22 05:27:56 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=64e4475b-2155
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:0c:f0:72:aa:87:40:5b:58:47:2e:95:a0:e5:
                    09:f4:f6:85:40:9b:0d:b5:03:8f:ec:ec:11:8c:f9:
                    87:d8:bf:7a:66:83:55:56:87:51:df:9b:31:d9:6f:
                    19:8c:63:f8:ab:8e:3a:87:2d:7d:28:b7:59:f2:e5:
                    cd:d9:ad:e4:8c:6c:96:02:40:d9:54:7c:f2:77:f2:
                    fa:6f:87:c1:12:97:c7:8b:f1:7d:f7:73:ae:9a:df:
                    52:d2:99:cd:0b:70:6e:01:98:08:74:29:30:30:fd:
                    0c:3e:00:3c:7a:13:93:77:ef:60:fc:e5:7a:59:5f:
                    5e:5c:4f:81:28:aa:68:68:40:d2:21:76:44:0e:c0:
                    f4:a7:e0:9a:a8:fe:90:10:e1:75:1d:29:15:58:c4:
                    c7:b0:6b:27:46:e4:cc:eb:63:8d:d4:e6:b6:2b:0e:
                    19:ea:1c:41:f9:94:51:c7:ef:12:1a:7f:81:ed:2f:
                    86:10:a6:f1:02:c4:83:50:bf:3f:ef:03:c9:1b:a3:
                    89:d2:c6:c8:6b:00:91:4f:b1:3e:2b:38:e6:ae:ba:
                    13:de:80:f7:28:a0:c9:12:ac:c8:34:53:87:29:43:
                    88:08:7e:c6:4c:47:93:91:c2:be:ad:f5:04:62:98:
                    d3:9b:45:cf:8b:a5:de:f5:f0:04:20:43:5b:95:e7:
                    d4:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:B7:69:5D:2A:8A:E3:94:CF:61:5D:F4:40:F1:7C:D1:C5:A3:4E:CC
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A5DF962040AC11EEA7B76745C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.181.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:94:06:67:fa:95:22:ba:7a:1d:26:16:88:30:97:2c:cd:70:
         c5:b9:79:26:d2:13:5f:95:e6:bd:ca:9d:a1:3e:4d:d5:45:09:
         28:54:f8:d7:80:f0:d7:79:80:a4:dc:dc:7a:2f:1c:0a:05:5c:
         b1:6a:2c:f9:5f:a5:53:5e:bd:4d:0b:7e:05:3e:9f:bb:07:b8:
         3a:76:30:83:23:fe:46:14:25:41:ad:86:e8:90:7e:e6:00:ac:
         6c:f3:f8:ca:d2:70:a9:7b:04:67:da:4f:ab:ab:7e:4b:4a:b5:
         5d:45:ba:e2:fc:aa:61:c1:f3:74:bf:3b:f9:fb:70:b8:cc:6f:
         96:94:cb:11:98:fc:6d:aa:d4:c6:45:71:b7:a9:94:42:0b:48:
         92:40:e5:7a:8b:f5:41:5a:5b:91:ae:e8:fd:c5:bc:93:50:79:
         da:96:29:ea:0d:f4:d4:56:4f:c3:47:4e:ef:b6:00:b8:5f:27:
         81:d5:47:01:01:f7:8e:9b:12:3a:b0:3d:aa:8d:74:df:c7:e7:
         03:fb:76:3b:69:7e:08:56:1f:cf:46:bd:30:bb:86:96:cf:d4:
         1e:69:eb:c1:6a:f1:57:6e:4b:f1:72:1a:9f:31:ba:c0:c8:2c:
         da:94:ed:75:86:6b:cc:1a:ac:9a:7f:b0:48:8a:c4:f1:40:6d:
         57:1e:96:29
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICeCUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz
RTNBQkM4MjMwHhcNMjMwODIyMDUyNzU2WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NGU0NDc1Yi0yMTU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAugzwcqqHQFtYRy6VoOUJ9PaFQJsNtQOP7OwRjPmH2L96ZoNVVodR35sx2W8Z
jGP4q446hy19KLdZ8uXN2a3kjGyWAkDZVHzyd/L6b4fBEpfHi/F993Oumt9S0pnN
C3BuAZgIdCkwMP0MPgA8ehOTd+9g/OV6WV9eXE+BKKpoaEDSIXZEDsD0p+CaqP6Q
EOF1HSkVWMTHsGsnRuTM62ON1Oa2Kw4Z6hxB+ZRRx+8SGn+B7S+GEKbxAsSDUL8/
7wPJG6OJ0sbIawCRT7E+KzjmrroT3oD3KKDJEqzINFOHKUOICH7GTEeTkcK+rfUE
YpjTm0XPi6Xe9fAEIENblefU8wIDAQABo4IClTCCApEwHQYDVR0OBBYEFDm3aV0q
iuOUz2Fd9EDxfNHFo07MMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5
Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvQTVERjk2MjA0
MEFDMTFFRUE3Qjc2NzQ1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABntQYwDQYJKoZIhvcNAQELBQADggEBAG+UBmf6lSK6eh0m
FogwlyzNcMW5eSbSE1+V5r3KnaE+TdVFCShU+NeA8Nd5gKTc3HovHAoFXLFqLPlf
pVNevU0LfgU+n7sHuDp2MIMj/kYUJUGthuiQfuYArGzz+MrScKl7BGfaT6urfktK
tV1FuuL8qmHB83S/O/n7cLjMb5aUyxGY/G2q1MZFcbeplEILSJJA5XqL9UFaW5Gu
6P3FvJNQedqWKeoN9NRWT8NHTu+2ALhfJ4HVRwEB946bEjqwPaqNdN/H5wP7djtp
fghWH89GvTC7hpbP1B5p68Fq8VduS/FyGp8xusDILNqU7XWGa8warJp/sEiKxPFA
bVcelik=
-----END CERTIFICATE-----
Generated at Sat Apr 27 10:19:41 2024 by rpki-client on console-ams.rpki-client.org