Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9191436/AAB802E8C78C11E8A76CD914C4F9AE02/0396C48E5E7011EDAD328E21C4F9AE02.roa
File:                     0396C48E5E7011EDAD328E21C4F9AE02.roa (raw, json)
Hash identifier:          MZBSloCp4vIpAqSRxYYda+A/wH0ayd7dOXpKnFdSxPc=
Subject key identifier:   F3:A6:52:57:BD:A4:00:E8:2B:84:0B:6C:F6:7A:93:F5:C9:8D:99:4E
Certificate issuer:       /CN=A9191436/serialNumber=2DA251C11AC68814F527F22E55DE9AC8C57FD66C
Certificate serial:       1266
Authority key identifier: 2D:A2:51:C1:1A:C6:88:14:F5:27:F2:2E:55:DE:9A:C8:C5:7F:D6:6C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LaJRwRrGiBT1J_IuVd6ayMV_1mw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9191436/AAB802E8C78C11E8A76CD914C4F9AE02/0396C48E5E7011EDAD328E21C4F9AE02.roa
Signing time:             Tue 02 Apr 2024 17:55:56 +0000
ROA not before:           Tue 02 Apr 2024 17:55:56 +0000
ROA not after:            Wed 28 May 2025 00:00:00 +0000
asID:                     55002
IP address blocks:        202.124.46.0/24 maxlen: 24
                          203.80.160.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9191436/AAB802E8C78C11E8A76CD914C4F9AE02/LaJRwRrGiBT1J_IuVd6ayMV_1mw.crl
                          rsync://rpki.apnic.net/member_repository/A9191436/AAB802E8C78C11E8A76CD914C4F9AE02/LaJRwRrGiBT1J_IuVd6ayMV_1mw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LaJRwRrGiBT1J_IuVd6ayMV_1mw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 May 2024 17:46:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4710 (0x1266)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9191436/serialNumber=2DA251C11AC68814F527F22E55DE9AC8C57FD66C
        Validity
            Not Before: Apr  2 17:55:56 2024 GMT
            Not After : May 28 00:00:00 2025 GMT
        Subject: CN=660c46ac-f402
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:d4:73:96:41:4d:88:c1:33:b1:92:77:84:cb:
                    a6:82:84:32:bd:04:02:a9:8b:91:50:28:3e:ab:07:
                    ef:fd:c4:a7:30:ab:7e:23:75:af:c4:6b:97:a2:6d:
                    47:c9:d1:df:04:07:3c:12:e4:4e:05:6c:f5:bd:1f:
                    82:96:54:28:32:1b:e8:61:f5:17:9f:97:8e:6d:aa:
                    3d:1c:27:c6:37:f4:f9:15:fe:82:0f:48:4d:f2:07:
                    96:c1:25:88:10:7f:30:ea:05:97:33:9b:87:1f:a2:
                    58:13:01:e8:82:a4:c6:24:03:ee:7c:aa:c3:be:80:
                    50:4c:0f:ba:74:86:c5:10:fd:96:99:56:bf:e5:5c:
                    08:dd:6e:39:d5:ea:64:11:54:35:ce:95:5d:d2:6a:
                    2b:7c:38:5d:9c:65:40:00:9f:5f:c3:21:31:35:26:
                    ab:34:72:95:be:ec:6e:af:d3:94:65:d1:ff:c1:9a:
                    45:79:fb:80:a1:f9:93:97:fe:aa:2b:9e:33:e4:e2:
                    1b:ff:86:8e:ad:54:23:b4:9d:de:2f:60:2e:a1:1f:
                    e3:ea:e7:a4:13:8a:78:b9:5b:bc:eb:7b:ce:ad:a9:
                    8d:f4:3e:5c:53:87:ee:97:2c:bb:2e:27:91:2a:39:
                    b8:d6:06:18:21:84:53:11:b4:2d:c4:bc:67:c8:95:
                    61:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:A6:52:57:BD:A4:00:E8:2B:84:0B:6C:F6:7A:93:F5:C9:8D:99:4E
            X509v3 Authority Key Identifier:
                keyid:2D:A2:51:C1:1A:C6:88:14:F5:27:F2:2E:55:DE:9A:C8:C5:7F:D6:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9191436/AAB802E8C78C11E8A76CD914C4F9AE02/LaJRwRrGiBT1J_IuVd6ayMV_1mw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LaJRwRrGiBT1J_IuVd6ayMV_1mw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191436/AAB802E8C78C11E8A76CD914C4F9AE02/0396C48E5E7011EDAD328E21C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.124.46.0/24
                  203.80.160.0/21

    Signature Algorithm: sha256WithRSAEncryption
         78:ec:7b:e4:17:34:f4:aa:67:a4:14:f4:ed:37:8d:52:56:42:
         f5:53:9f:09:4d:6b:37:53:19:0d:1d:5c:12:24:1e:e8:7a:ef:
         f6:c8:9c:20:0a:ca:4d:a0:8c:b6:79:42:d3:db:25:dc:b6:c3:
         cd:f6:7e:75:86:f6:8e:be:22:75:52:88:7d:f2:7f:1c:a1:1e:
         93:76:7e:3f:3b:2e:31:63:83:ab:e5:fd:74:6f:fb:8a:4f:83:
         04:a6:4c:35:6b:02:5c:b0:26:82:ee:fd:be:7a:d4:07:58:4f:
         57:95:72:92:00:b1:f1:c3:48:e1:4e:d0:ba:53:9b:f3:45:5e:
         ca:f5:75:9f:3e:a2:e1:d8:77:6a:d1:cf:03:f0:12:0f:59:be:
         7b:a7:89:f0:06:4c:b2:66:36:ed:7a:4f:4f:62:b2:20:aa:17:
         b9:82:48:d8:13:c3:a3:43:59:8d:5b:83:69:ce:2d:93:3c:33:
         33:a1:09:a0:6a:da:4a:51:74:ab:88:d1:06:b1:30:8d:ad:22:
         5c:ae:e2:b3:bf:48:f6:c5:01:ff:03:7a:04:7f:b3:6e:e3:85:
         95:d5:b5:3c:5f:12:2e:04:01:9a:a0:9b:fa:9a:48:d0:12:d2:
         ed:e3:75:46:76:1e:89:87:2e:24:06:23:0f:e7:e5:19:b0:65:
         19:e8:82:c2
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICEmYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTE0MzYxMTAvBgNVBAUTKDJEQTI1MUMxMUFDNjg4MTRGNTI3RjIyRTU1REU5QUM4
QzU3RkQ2NkMwHhcNMjQwNDAyMTc1NTU2WhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02NjBjNDZhYy1mNDAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3dRzlkFNiMEzsZJ3hMumgoQyvQQCqYuRUCg+qwfv/cSnMKt+I3WvxGuXom1H
ydHfBAc8EuROBWz1vR+CllQoMhvoYfUXn5eObao9HCfGN/T5Ff6CD0hN8geWwSWI
EH8w6gWXM5uHH6JYEwHogqTGJAPufKrDvoBQTA+6dIbFEP2WmVa/5VwI3W451epk
EVQ1zpVd0morfDhdnGVAAJ9fwyExNSarNHKVvuxur9OUZdH/wZpFefuAofmTl/6q
K54z5OIb/4aOrVQjtJ3eL2AuoR/j6uekE4p4uVu863vOramN9D5cU4fulyy7LieR
Kjm41gYYIYRTEbQtxLxnyJVhiQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFPOmUle9
pADoK4QLbPZ6k/XJjZlOMB8GA1UdIwQYMBaAFC2iUcEaxogU9SfyLlXemsjFf9Zs
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTQzNi9BQUI4MDJFOEM3
OEMxMUU4QTc2Q0Q5MTRDNEY5QUUwMi9MYUpSd1JyR2lCVDFKX0l1VmQ2YXlNVl8x
bXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0xhSlJ3UnJHaUJUMUpfSXVWZDZheU1WXzFtdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTE0MzYvQUFCODAyRThDNzhDMTFFOEE3NkNEOTE0QzRGOUFFMDIvMDM5NkM0OEU1
RTcwMTFFREFEMzI4RTIxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBADKfC4DBAPLUKAwDQYJKoZIhvcNAQELBQADggEBAHjse+QX
NPSqZ6QU9O03jVJWQvVTnwlNazdTGQ0dXBIkHuh67/bInCAKyk2gjLZ5QtPbJdy2
w832fnWG9o6+InVSiH3yfxyhHpN2fj87LjFjg6vl/XRv+4pPgwSmTDVrAlywJoLu
/b561AdYT1eVcpIAsfHDSOFO0LpTm/NFXsr1dZ8+ouHYd2rRzwPwEg9ZvnunifAG
TLJmNu16T09isiCqF7mCSNgTw6NDWY1bg2nOLZM8MzOhCaBq2kpRdKuI0QaxMI2t
Ilyu4rO/SPbFAf8DegR/s27jhZXVtTxfEi4EAZqgm/qaSNAS0u3jdUZ2HomHLiQG
Iw/n5RmwZRnogsI=
-----END CERTIFICATE-----
Generated at Wed May 22 18:46:48 2024 by rpki-client on console-fra.rpki-client.org