Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919188A/C96357CAAA9411EDB0774F45C4F9AE02/12AE9E92AA9711EDAAEB8345C4F9AE02.roa
File:                     12AE9E92AA9711EDAAEB8345C4F9AE02.roa (raw, json)
Hash identifier:          Q8NJ1HkvlonTTd6dT/uijJxHGIltrUcP5WUwngsD98I=
Subject key identifier:   60:92:FE:28:79:BA:B0:D0:0F:FF:41:C2:0C:1F:96:B5:48:DB:EC:B8
Certificate issuer:       /CN=A919188A/serialNumber=02811C31D50C91FFFD5EDA68B9EF81C3F9E9FB12
Certificate serial:       CA
Authority key identifier: 02:81:1C:31:D5:0C:91:FF:FD:5E:DA:68:B9:EF:81:C3:F9:E9:FB:12
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AoEcMdUMkf_9Xtpoue-Bw_np-xI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919188A/C96357CAAA9411EDB0774F45C4F9AE02/12AE9E92AA9711EDAAEB8345C4F9AE02.roa
Signing time:             Thu 29 Feb 2024 05:23:03 +0000
ROA not before:           Thu 29 Feb 2024 05:23:03 +0000
ROA not after:            Thu 31 Oct 2024 00:00:00 +0000
asID:                     131684
IP address blocks:        103.69.172.0/24 maxlen: 24
                          103.69.174.0/24 maxlen: 24
                          103.69.175.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919188A/C96357CAAA9411EDB0774F45C4F9AE02/AoEcMdUMkf_9Xtpoue-Bw_np-xI.crl
                          rsync://rpki.apnic.net/member_repository/A919188A/C96357CAAA9411EDB0774F45C4F9AE02/AoEcMdUMkf_9Xtpoue-Bw_np-xI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AoEcMdUMkf_9Xtpoue-Bw_np-xI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 May 2024 05:49:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 202 (0xca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919188A/serialNumber=02811C31D50C91FFFD5EDA68B9EF81C3F9E9FB12
        Validity
            Not Before: Feb 29 05:23:03 2024 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=65e014b7-ee25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:84:c2:37:a0:dc:45:ab:c5:e8:b2:71:4b:ea:
                    8a:36:29:b7:d7:35:2f:39:26:8b:f9:34:5c:7f:b2:
                    f6:45:76:0b:16:b8:ea:77:2a:99:32:06:2c:e3:bd:
                    6a:9b:84:bd:cd:75:5b:89:2a:3d:b0:23:79:b9:8d:
                    95:a0:be:6f:d5:18:0b:90:44:c5:3f:4c:8d:94:ef:
                    74:52:0b:93:52:3a:9a:ae:1b:b6:6a:53:38:f0:e1:
                    98:c6:c7:50:09:b8:20:d1:04:32:dc:d7:62:97:3f:
                    d8:a2:a8:09:dd:e3:46:e6:b6:5d:53:f8:f3:c8:70:
                    84:99:30:cf:22:ee:4d:89:b9:5c:12:0c:b6:65:9c:
                    40:68:f5:d5:fb:60:33:f3:35:82:c6:b3:8e:f9:0f:
                    4f:1b:a6:d0:9c:1d:cf:ac:bc:cc:eb:92:02:c7:e4:
                    74:ff:56:a0:2a:6c:b4:94:69:bf:8e:f8:60:79:f0:
                    7b:1c:a0:28:91:fb:8d:e0:5f:b5:16:a0:11:9b:54:
                    ef:f2:a6:d6:2d:31:3b:fc:76:5a:23:ab:f6:40:59:
                    4b:73:9c:cb:f2:08:a7:2d:44:4b:b3:06:1b:f5:79:
                    fb:4d:e9:38:fe:0a:58:2b:20:29:60:9a:2c:d5:c4:
                    3c:41:32:ea:4b:97:aa:a8:52:08:bd:48:35:2a:38:
                    d4:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:92:FE:28:79:BA:B0:D0:0F:FF:41:C2:0C:1F:96:B5:48:DB:EC:B8
            X509v3 Authority Key Identifier:
                keyid:02:81:1C:31:D5:0C:91:FF:FD:5E:DA:68:B9:EF:81:C3:F9:E9:FB:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919188A/C96357CAAA9411EDB0774F45C4F9AE02/AoEcMdUMkf_9Xtpoue-Bw_np-xI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AoEcMdUMkf_9Xtpoue-Bw_np-xI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919188A/C96357CAAA9411EDB0774F45C4F9AE02/12AE9E92AA9711EDAAEB8345C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.69.172.0/24
                  103.69.174.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1f:cb:b9:7c:d2:f5:4a:cc:52:2f:ea:dc:29:ac:3e:2e:0f:f5:
         b8:ff:88:db:f9:8c:13:0a:5f:0c:76:2d:9f:61:dd:3a:f6:bb:
         d3:67:08:3f:52:23:fc:b5:ea:0b:e6:da:28:18:d7:e7:c1:7c:
         aa:42:1b:e7:48:df:1c:16:0b:69:c9:de:b4:59:81:3b:63:4d:
         56:70:c8:06:3f:62:0b:a2:72:78:36:a3:37:08:d0:94:47:9c:
         dd:5f:1d:4a:01:1c:cc:46:8e:64:48:85:e3:e8:6e:63:e9:9c:
         77:09:97:57:ae:39:b2:5c:16:e2:c8:e6:aa:a0:e6:32:90:d9:
         93:e6:f1:ea:42:38:90:bf:a8:10:fd:40:20:ae:be:b1:79:4e:
         53:6c:31:60:a3:12:b6:94:c9:22:27:b9:f8:1d:9f:5b:0a:d9:
         1f:f9:70:05:1b:bd:a6:68:17:88:aa:20:e4:58:12:54:60:e1:
         30:4b:c0:83:65:3f:a8:a5:4d:b7:a9:5d:36:35:45:63:f5:f4:
         50:82:70:03:74:17:cc:cb:af:56:40:ec:c1:b2:77:b5:a8:88:
         22:05:32:b2:35:05:d8:0a:2a:d0:08:9c:6c:a0:f3:83:ec:9d:
         4e:c7:bf:9e:8d:ff:35:f1:39:d4:3f:b2:b8:70:8c:da:ee:07:
         3a:f5:a1:6f
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICAMowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTE4OEExMTAvBgNVBAUTKDAyODExQzMxRDUwQzkxRkZGRDVFREE2OEI5RUY4MUMz
RjlFOUZCMTIwHhcNMjQwMjI5MDUyMzAzWhcNMjQxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NWUwMTRiNy1lZTI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvoTCN6DcRavF6LJxS+qKNim31zUvOSaL+TRcf7L2RXYLFrjqdyqZMgYs471q
m4S9zXVbiSo9sCN5uY2VoL5v1RgLkETFP0yNlO90UguTUjqarhu2alM48OGYxsdQ
Cbgg0QQy3Ndilz/YoqgJ3eNG5rZdU/jzyHCEmTDPIu5NiblcEgy2ZZxAaPXV+2Az
8zWCxrOO+Q9PG6bQnB3PrLzM65ICx+R0/1agKmy0lGm/jvhgefB7HKAokfuN4F+1
FqARm1Tv8qbWLTE7/HZaI6v2QFlLc5zL8ginLURLswYb9Xn7Tek4/gpYKyApYJos
1cQ8QTLqS5eqqFIIvUg1KjjUhQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFGCS/ih5
urDQD/9BwgwflrVI2+y4MB8GA1UdIwQYMBaAFAKBHDHVDJH//V7aaLnvgcP56fsS
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTg4QS9DOTYzNTdDQUFB
OTQxMUVEQjA3NzRGNDVDNEY5QUUwMi9Bb0VjTWRVTWtmXzlYdHBvdWUtQndfbnAt
eEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0FvRWNNZFVNa2ZfOVh0cG91ZS1Cd19ucC14SS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTE4OEEvQzk2MzU3Q0FBQTk0MTFFREIwNzc0RjQ1QzRGOUFFMDIvMTJBRTlFOTJB
QTk3MTFFREFBRUI4MzQ1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBABnRawDBAFnRa4wDQYJKoZIhvcNAQELBQADggEBAB/LuXzS
9UrMUi/q3CmsPi4P9bj/iNv5jBMKXwx2LZ9h3Tr2u9NnCD9SI/y16gvm2igY1+fB
fKpCG+dI3xwWC2nJ3rRZgTtjTVZwyAY/Yguicng2ozcI0JRHnN1fHUoBHMxGjmRI
hePobmPpnHcJl1euObJcFuLI5qqg5jKQ2ZPm8epCOJC/qBD9QCCuvrF5TlNsMWCj
EraUySInufgdn1sK2R/5cAUbvaZoF4iqIORYElRg4TBLwINlP6ilTbepXTY1RWP1
9FCCcAN0F8zLr1ZA7MGyd7WoiCIFMrI1BdgKKtAInGyg84PsnU7Hv56N/zXxOdQ/
srhwjNruBzr1oW8=
-----END CERTIFICATE-----
Generated at Tue May 7 06:20:53 2024 by rpki-client on console-fra.rpki-client.org