Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E793271002E011EBA3243F2DC4F9AE02.roa
File:                     E793271002E011EBA3243F2DC4F9AE02.roa (raw, json)
Hash identifier:          oaJ88QPJMjCKSLfts3BkbWU8vNE4Ql8FJGLgTTrpmq8=
Subject key identifier:   2D:15:61:21:BA:F6:1A:C5:96:48:55:CF:D0:AB:BB:E5:9C:38:25:12
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       6A59
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E793271002E011EBA3243F2DC4F9AE02.roa
Signing time:             Wed 10 May 2023 16:14:21 +0000
ROA not before:           Wed 10 May 2023 16:14:21 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     133241
IP address blocks:        103.138.211.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 15:38:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 27225 (0x6a59)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 10 16:14:21 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=645bc2dd-d780
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ce:9d:3e:37:5e:c0:e5:1d:74:d4:90:3d:a9:
                    5e:4b:10:7a:5d:82:3c:ca:b7:7b:24:64:ae:07:d8:
                    57:56:5e:54:7c:3f:93:74:0d:27:03:39:a0:22:27:
                    ff:eb:b1:12:fb:28:9b:9a:81:16:be:54:a8:82:5d:
                    e6:10:08:da:ce:df:14:9d:13:9a:33:92:22:4e:02:
                    2f:fd:9d:45:d8:f7:be:98:ee:7f:77:0d:77:a4:68:
                    9a:88:3e:dc:65:1a:71:cf:73:bd:2b:95:42:fc:92:
                    af:64:9e:cc:f6:c2:c9:dd:13:08:44:ac:e7:30:47:
                    73:6d:e5:a5:30:5b:29:af:56:d6:be:48:f0:96:c6:
                    8a:8f:37:96:4c:83:42:07:ac:2d:fe:76:41:35:e3:
                    97:e2:4b:18:ee:00:d1:85:70:f9:a5:dc:e1:07:2f:
                    87:a7:dd:f2:7f:7e:9e:5b:62:90:ef:39:ca:39:ab:
                    7e:e4:f5:10:54:42:c4:0b:19:70:a1:04:11:01:1b:
                    9a:54:d9:b6:b6:da:1d:7a:23:8a:4b:ab:59:e7:48:
                    e5:8a:f3:8f:fc:30:d5:79:10:3a:d4:d4:a4:c9:a9:
                    b1:cf:a3:a4:3f:04:b2:6c:de:64:bc:41:67:68:e0:
                    5d:b5:f0:64:44:9e:ca:25:14:05:b7:75:ff:07:2c:
                    1f:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:15:61:21:BA:F6:1A:C5:96:48:55:CF:D0:AB:BB:E5:9C:38:25:12
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E793271002E011EBA3243F2DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.138.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:1a:6f:c3:42:65:0e:69:60:9d:1b:18:bd:92:75:34:9e:48:
         42:1d:f9:c8:3c:a1:61:91:21:a1:09:65:c4:23:2c:31:c7:8a:
         8a:d5:a8:b0:f4:c0:86:fd:29:3d:05:89:05:7b:ba:29:af:3d:
         a1:4c:79:17:7a:da:3f:12:8e:4a:b3:b4:d4:67:d7:05:68:89:
         21:bf:7e:3b:cf:e4:42:0e:93:30:b5:14:a9:3e:21:69:31:20:
         1f:cb:a5:90:82:12:2a:cc:5f:36:d0:ee:5f:06:be:c4:f4:3d:
         6c:cf:3d:65:4f:a1:a0:9a:9e:32:f9:4a:c9:ae:07:4f:44:91:
         b4:94:53:ff:39:3d:87:0f:62:1d:29:34:d1:d7:a7:3b:d0:a9:
         69:2d:aa:a1:42:03:b0:58:61:00:6b:37:86:39:34:08:33:b8:
         40:7e:65:49:cd:63:3d:bf:49:6d:9e:1b:f0:04:1f:06:e8:d7:
         bd:2d:38:70:ee:e3:fa:0e:8a:07:57:08:85:4b:3e:c8:1b:c2:
         20:5f:fc:86:ab:68:17:b4:c7:e8:91:d4:e5:96:7f:6c:b3:0a:
         0c:c9:ff:bb:fc:58:a5:d3:90:eb:40:01:79:ff:af:51:9f:e8:
         3b:e6:52:76:29:f1:07:db:5b:dd:69:e8:78:e5:5d:7c:f8:7f:
         d0:b7:f4:70
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICalkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz
RTNBQkM4MjMwHhcNMjMwNTEwMTYxNDIxWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NDViYzJkZC1kNzgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzM6dPjdewOUddNSQPaleSxB6XYI8yrd7JGSuB9hXVl5UfD+TdA0nAzmgIif/
67ES+yibmoEWvlSogl3mEAjazt8UnROaM5IiTgIv/Z1F2Pe+mO5/dw13pGiaiD7c
ZRpxz3O9K5VC/JKvZJ7M9sLJ3RMIRKznMEdzbeWlMFspr1bWvkjwlsaKjzeWTINC
B6wt/nZBNeOX4ksY7gDRhXD5pdzhBy+Hp93yf36eW2KQ7znKOat+5PUQVELECxlw
oQQRARuaVNm2ttodeiOKS6tZ50jlivOP/DDVeRA61NSkyamxz6OkPwSybN5kvEFn
aOBdtfBkRJ7KJRQFt3X/BywfWwIDAQABo4IClTCCApEwHQYDVR0OBBYEFC0VYSG6
9hrFlkhVz9Cru+WcOCUSMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5
Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvRTc5MzI3MTAw
MkUwMTFFQkEzMjQzRjJEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnitMwDQYJKoZIhvcNAQELBQADggEBABcab8NCZQ5pYJ0b
GL2SdTSeSEId+cg8oWGRIaEJZcQjLDHHiorVqLD0wIb9KT0FiQV7uimvPaFMeRd6
2j8SjkqztNRn1wVoiSG/fjvP5EIOkzC1FKk+IWkxIB/LpZCCEirMXzbQ7l8GvsT0
PWzPPWVPoaCanjL5SsmuB09EkbSUU/85PYcPYh0pNNHXpzvQqWktqqFCA7BYYQBr
N4Y5NAgzuEB+ZUnNYz2/SW2eG/AEHwbo170tOHDu4/oOigdXCIVLPsgbwiBf/Iar
aBe0x+iR1OWWf2yzCgzJ/7v8WKXTkOtAAXn/r1Gf6DvmUnYp8QfbW91p6HjlXXz4
f9C39HA=
-----END CERTIFICATE-----
Generated at Sat Apr 27 10:19:48 2024 by rpki-client on console-ams.rpki-client.org