Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9194692/885A32FE429411EB90491A34C4F9AE02/B3878620B15E11EE9521E85BC4F9AE02.roa
File:                     B3878620B15E11EE9521E85BC4F9AE02.roa (raw, json)
Hash identifier:          le+pL78T/5WOyWn02JNH/JXNPs9vefxlfUt8ab1FKYI=
Subject key identifier:   23:6B:EC:29:56:F4:5E:86:36:70:DF:B7:BB:F6:6B:2E:23:1A:7A:EA
Certificate issuer:       /CN=A9194692/serialNumber=AFE5B3CD2DC567AB8A58EB3980D5E5E784290A40
Certificate serial:       0611
Authority key identifier: AF:E5:B3:CD:2D:C5:67:AB:8A:58:EB:39:80:D5:E5:E7:84:29:0A:40
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-WzzS3FZ6uKWOs5gNXl54QpCkA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9194692/885A32FE429411EB90491A34C4F9AE02/B3878620B15E11EE9521E85BC4F9AE02.roa
Signing time:             Fri 12 Jan 2024 23:31:25 +0000
ROA not before:           Fri 12 Jan 2024 23:31:25 +0000
ROA not after:            Fri 31 Jan 2025 00:00:00 +0000
asID:                     141418
IP address blocks:        103.158.210.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9194692/885A32FE429411EB90491A34C4F9AE02/r-WzzS3FZ6uKWOs5gNXl54QpCkA.crl
                          rsync://rpki.apnic.net/member_repository/A9194692/885A32FE429411EB90491A34C4F9AE02/r-WzzS3FZ6uKWOs5gNXl54QpCkA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-WzzS3FZ6uKWOs5gNXl54QpCkA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1553 (0x611)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9194692/serialNumber=AFE5B3CD2DC567AB8A58EB3980D5E5E784290A40
        Validity
            Not Before: Jan 12 23:31:25 2024 GMT
            Not After : Jan 31 00:00:00 2025 GMT
        Subject: CN=65a1cbcd-f74a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:22:96:f3:cd:a9:fa:bc:0b:aa:1b:a2:b8:5f:
                    c7:e7:16:17:74:1d:c8:f2:5b:3a:d0:12:72:59:61:
                    83:ff:5d:ac:e4:7b:52:5a:e3:6d:dd:1a:0e:16:80:
                    43:92:a7:b8:88:1a:c2:0a:8a:f0:d4:f4:1a:46:59:
                    36:ed:c3:32:34:30:9b:28:31:45:7c:e3:f6:3a:80:
                    f8:71:54:10:56:5a:1f:f2:13:be:84:d2:e0:7b:b4:
                    5f:1c:74:bf:f4:44:06:dd:58:ab:a2:71:1d:f6:12:
                    cb:bd:67:34:e8:3c:bf:b1:13:64:e6:82:dc:28:98:
                    13:3c:46:2d:6b:6d:23:cd:35:6c:64:e9:b9:53:0d:
                    cc:b0:b4:bb:5c:8b:df:e0:f0:cd:49:cc:c3:65:fb:
                    dc:24:23:6b:7a:f8:41:ab:35:8b:67:f1:99:1a:3d:
                    c6:80:28:10:e0:c8:ec:38:27:aa:d1:d2:8b:46:af:
                    57:2e:1c:82:48:c6:34:93:cb:c4:00:d5:5b:1f:16:
                    db:18:9d:ad:0d:25:42:cc:71:f5:85:1b:90:9a:9b:
                    b1:da:d3:9a:ae:40:6e:12:e3:16:95:e1:a9:1f:33:
                    27:c8:34:ed:2e:1b:ec:44:6c:d5:71:4a:ae:85:3b:
                    ac:0e:01:64:b8:b7:aa:27:20:43:5d:e1:09:18:74:
                    bf:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:6B:EC:29:56:F4:5E:86:36:70:DF:B7:BB:F6:6B:2E:23:1A:7A:EA
            X509v3 Authority Key Identifier:
                keyid:AF:E5:B3:CD:2D:C5:67:AB:8A:58:EB:39:80:D5:E5:E7:84:29:0A:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9194692/885A32FE429411EB90491A34C4F9AE02/r-WzzS3FZ6uKWOs5gNXl54QpCkA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-WzzS3FZ6uKWOs5gNXl54QpCkA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194692/885A32FE429411EB90491A34C4F9AE02/B3878620B15E11EE9521E85BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.158.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:22:6b:05:00:b5:b6:5f:4f:f0:ab:58:95:93:af:c5:21:2d:
         2a:24:12:0a:ef:d9:5d:2b:e9:0d:15:e1:69:8b:5d:a7:22:d1:
         cf:6d:a1:a0:8e:fa:59:90:47:51:93:bf:63:ff:61:2f:89:c3:
         59:9a:c5:8d:eb:18:b0:11:3c:b0:0c:be:6e:a3:cb:f3:12:83:
         bb:f1:58:fc:2c:66:0f:d7:8b:bb:3d:2f:ea:ba:72:08:ca:e5:
         8c:ea:2d:6b:d3:1d:c0:5f:77:3f:25:16:ce:7a:0a:19:02:4a:
         ed:5b:43:00:fb:bb:f4:9c:d4:b8:41:51:52:c2:57:0d:56:6e:
         8e:87:f8:09:2a:1f:5f:6b:ec:e9:67:6d:44:1d:6f:76:a6:48:
         6d:6c:6c:a9:8c:97:96:29:48:15:cc:b4:ea:39:de:08:91:8b:
         6e:c5:75:1a:4a:7d:7d:e8:74:aa:d7:14:4c:06:34:cc:ee:d4:
         23:17:1e:56:95:10:51:aa:c1:de:a4:cc:f0:c1:bf:7b:b5:50:
         70:ec:51:29:77:1e:7e:cf:52:ba:70:e0:53:98:29:51:4c:65:
         7a:d3:ce:d3:3e:18:af:da:19:04:d7:6c:26:ae:92:a7:ca:4a:
         3b:df:22:da:9a:2e:a9:58:58:60:b4:d8:89:88:5e:d1:c4:84:
         ce:ab:ec:2f
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBhEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTQ2OTIxMTAvBgNVBAUTKEFGRTVCM0NEMkRDNTY3QUI4QTU4RUIzOTgwRDVFNUU3
ODQyOTBBNDAwHhcNMjQwMTEyMjMzMTI1WhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NWExY2JjZC1mNzRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzCKW882p+rwLqhuiuF/H5xYXdB3I8ls60BJyWWGD/12s5HtSWuNt3RoOFoBD
kqe4iBrCCorw1PQaRlk27cMyNDCbKDFFfOP2OoD4cVQQVlof8hO+hNLge7RfHHS/
9EQG3VironEd9hLLvWc06Dy/sRNk5oLcKJgTPEYta20jzTVsZOm5Uw3MsLS7XIvf
4PDNSczDZfvcJCNrevhBqzWLZ/GZGj3GgCgQ4MjsOCeq0dKLRq9XLhyCSMY0k8vE
ANVbHxbbGJ2tDSVCzHH1hRuQmpux2tOarkBuEuMWleGpHzMnyDTtLhvsRGzVcUqu
hTusDgFkuLeqJyBDXeEJGHS/MwIDAQABo4IClTCCApEwHQYDVR0OBBYEFCNr7ClW
9F6GNnDft7v2ay4jGnrqMB8GA1UdIwQYMBaAFK/ls80txWeriljrOYDV5eeEKQpA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDY5Mi84ODVBMzJGRTQy
OTQxMUVCOTA0OTFBMzRDNEY5QUUwMi9yLVd6elMzRlo2dUtXT3M1Z05YbDU0UXBD
a0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ItV3p6UzNGWjZ1S1dPczVnTlhsNTRRcENrQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTQ2OTIvODg1QTMyRkU0Mjk0MTFFQjkwNDkxQTM0QzRGOUFFMDIvQjM4Nzg2MjBC
MTVFMTFFRTk1MjFFODVCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnntIwDQYJKoZIhvcNAQELBQADggEBABAiawUAtbZfT/Cr
WJWTr8UhLSokEgrv2V0r6Q0V4WmLXaci0c9toaCO+lmQR1GTv2P/YS+Jw1maxY3r
GLARPLAMvm6jy/MSg7vxWPwsZg/Xi7s9L+q6cgjK5YzqLWvTHcBfdz8lFs56ChkC
Su1bQwD7u/Sc1LhBUVLCVw1Wbo6H+AkqH19r7OlnbUQdb3amSG1sbKmMl5YpSBXM
tOo53giRi27FdRpKfX3odKrXFEwGNMzu1CMXHlaVEFGqwd6kzPDBv3u1UHDsUSl3
Hn7PUrpw4FOYKVFMZXrTztM+GK/aGQTXbCaukqfKSjvfItqaLqlYWGC02ImIXtHE
hM6r7C8=
-----END CERTIFICATE-----
Generated at Sat Nov 23 00:08:45 2024 by rpki-client on console-ams.rpki-client.org