Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919887F/AB569998B9A811EA8483543FC4F9AE02/1C0E3F82B9AA11EAA5AA3A44C4F9AE02.roa
File:                     1C0E3F82B9AA11EAA5AA3A44C4F9AE02.roa (raw, json)
Hash identifier:          6D+05PkkEBLLvv2UgX08yRx5GMb9vhbOIwJ+Ku99Ia0=
Subject key identifier:   5C:08:82:8D:0B:94:33:D8:2D:14:6F:F0:40:8A:FA:3B:C2:AE:6D:D5
Certificate issuer:       /CN=A919887F/serialNumber=1546C335BED5F2A5EEE58AE0D263671159D278BA
Certificate serial:       0834
Authority key identifier: 15:46:C3:35:BE:D5:F2:A5:EE:E5:8A:E0:D2:63:67:11:59:D2:78:BA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FUbDNb7V8qXu5Yrg0mNnEVnSeLo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919887F/AB569998B9A811EA8483543FC4F9AE02/1C0E3F82B9AA11EAA5AA3A44C4F9AE02.roa
Signing time:             Mon 14 Oct 2024 20:59:25 +0000
ROA not before:           Mon 14 Oct 2024 20:59:25 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     137032
IP address blocks:        103.102.164.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919887F/AB569998B9A811EA8483543FC4F9AE02/FUbDNb7V8qXu5Yrg0mNnEVnSeLo.crl
                          rsync://rpki.apnic.net/member_repository/A919887F/AB569998B9A811EA8483543FC4F9AE02/FUbDNb7V8qXu5Yrg0mNnEVnSeLo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FUbDNb7V8qXu5Yrg0mNnEVnSeLo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:26:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2100 (0x834)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919887F/serialNumber=1546C335BED5F2A5EEE58AE0D263671159D278BA
        Validity
            Not Before: Oct 14 20:59:25 2024 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=670d862d-43cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:8d:95:c7:9b:f7:86:e3:7e:47:23:00:b2:f5:
                    2e:5a:37:da:82:25:b1:6a:0c:0b:d2:d1:98:5c:2a:
                    89:63:8a:a1:f9:6c:78:f9:2f:e5:eb:ed:1b:51:4e:
                    06:4d:35:56:d3:a7:f2:ec:5d:94:bb:b3:93:e2:55:
                    48:5e:da:e7:ea:21:9a:b9:70:50:91:2a:28:41:38:
                    16:fc:61:01:db:d4:01:3a:e4:62:99:24:35:a0:f1:
                    4b:e6:6b:c4:ba:ab:b4:df:9a:6d:4a:4c:de:a0:69:
                    b8:b9:b9:1c:c2:33:21:f5:e0:34:9b:b3:09:89:33:
                    98:fb:9d:1f:36:8c:c4:ac:37:5d:4c:f1:37:ac:1a:
                    9a:2d:83:cf:06:98:7d:d8:65:d7:99:6a:85:db:ed:
                    cf:04:30:c3:81:cb:ee:25:c5:69:d3:62:3a:47:c4:
                    c1:04:8a:56:28:2d:c7:01:9b:b5:35:65:d3:00:54:
                    14:2a:b8:e9:ef:5f:21:55:50:98:5b:8f:64:fe:3e:
                    45:0b:be:df:a8:97:96:6e:f5:bf:88:96:07:53:be:
                    2c:ca:a7:c9:df:e2:57:87:78:20:6b:0c:d2:d0:ca:
                    7b:a5:ce:96:f3:1c:f1:03:cb:b5:ba:dd:b3:0c:21:
                    10:5b:fb:ee:00:04:6a:4d:df:8c:10:da:68:82:7d:
                    fe:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:08:82:8D:0B:94:33:D8:2D:14:6F:F0:40:8A:FA:3B:C2:AE:6D:D5
            X509v3 Authority Key Identifier:
                keyid:15:46:C3:35:BE:D5:F2:A5:EE:E5:8A:E0:D2:63:67:11:59:D2:78:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919887F/AB569998B9A811EA8483543FC4F9AE02/FUbDNb7V8qXu5Yrg0mNnEVnSeLo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FUbDNb7V8qXu5Yrg0mNnEVnSeLo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919887F/AB569998B9A811EA8483543FC4F9AE02/1C0E3F82B9AA11EAA5AA3A44C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.102.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:dd:5f:0f:e8:94:6f:e4:9e:25:ef:cb:fa:c8:21:7a:a2:86:
         98:65:6d:18:4b:13:08:49:e4:2d:f3:4b:4f:cc:3b:5f:fe:b4:
         75:7a:0d:7c:93:a8:a4:e6:b5:22:aa:79:ce:74:44:be:ea:59:
         e5:cf:7e:ee:9d:9e:7a:68:a8:92:e6:3b:79:4f:cd:bb:94:52:
         79:62:91:30:3a:db:ae:78:5f:89:d6:84:8f:28:8f:89:ee:1b:
         06:4e:5e:c3:cc:10:37:1c:a1:b7:53:f7:12:61:13:7a:c7:8b:
         50:9e:ba:de:75:06:58:79:a1:6a:da:6d:97:61:e1:5b:46:47:
         0c:80:5f:ac:34:89:18:26:25:53:6b:90:8c:60:06:fa:0e:b1:
         99:fc:88:b4:a9:d7:d5:0c:b3:22:1e:bf:38:4c:37:de:94:5f:
         4a:bd:41:56:bc:d2:15:7d:e9:75:20:68:f4:8a:8a:54:5d:02:
         96:f2:f9:e7:29:d5:f1:bd:43:d0:c6:2b:dc:36:d6:e9:3c:2f:
         49:cf:6e:27:92:92:10:a2:e8:f9:da:3c:b9:a7:19:13:aa:20:
         d9:89:b7:9a:08:2d:c6:91:f3:6f:87:78:89:be:86:41:b1:e3:
         ae:dc:66:eb:60:09:e8:f1:ac:51:75:83:81:19:37:ec:1e:0f:
         68:4f:e5:12
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICCDQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTg4N0YxMTAvBgNVBAUTKDE1NDZDMzM1QkVENUYyQTVFRUU1OEFFMEQyNjM2NzEx
NTlEMjc4QkEwHhcNMjQxMDE0MjA1OTI1WhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzBkODYyZC00M2NjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAz42Vx5v3huN+RyMAsvUuWjfagiWxagwL0tGYXCqJY4qh+Wx4+S/l6+0bUU4G
TTVW06fy7F2Uu7OT4lVIXtrn6iGauXBQkSooQTgW/GEB29QBOuRimSQ1oPFL5mvE
uqu035ptSkzeoGm4ubkcwjMh9eA0m7MJiTOY+50fNozErDddTPE3rBqaLYPPBph9
2GXXmWqF2+3PBDDDgcvuJcVp02I6R8TBBIpWKC3HAZu1NWXTAFQUKrjp718hVVCY
W49k/j5FC77fqJeWbvW/iJYHU74syqfJ3+JXh3ggawzS0Mp7pc6W8xzxA8u1ut2z
DCEQW/vuAARqTd+MENpogn3+EwIDAQABo4IClTCCApEwHQYDVR0OBBYEFFwIgo0L
lDPYLRRv8ECK+jvCrm3VMB8GA1UdIwQYMBaAFBVGwzW+1fKl7uWK4NJjZxFZ0ni6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODg3Ri9BQjU2OTk5OEI5
QTgxMUVBODQ4MzU0M0ZDNEY5QUUwMi9GVWJETmI3VjhxWHU1WXJnMG1ObkVWblNl
TG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZVYkROYjdWOHFYdTVZcmcwbU5uRVZuU2VMby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTg4N0YvQUI1Njk5OThCOUE4MTFFQTg0ODM1NDNGQzRGOUFFMDIvMUMwRTNGODJC
OUFBMTFFQUE1QUEzQTQ0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnZqQwDQYJKoZIhvcNAQELBQADggEBAAvdXw/olG/kniXv
y/rIIXqihphlbRhLEwhJ5C3zS0/MO1/+tHV6DXyTqKTmtSKqec50RL7qWeXPfu6d
nnpoqJLmO3lPzbuUUnlikTA62654X4nWhI8oj4nuGwZOXsPMEDccobdT9xJhE3rH
i1Ceut51Blh5oWrabZdh4VtGRwyAX6w0iRgmJVNrkIxgBvoOsZn8iLSp19UMsyIe
vzhMN96UX0q9QVa80hV96XUgaPSKilRdApby+ecp1fG9Q9DGK9w21uk8L0nPbieS
khCi6PnaPLmnGROqINmJt5oILcaR82+HeIm+hkGx467cZutgCejxrFF1g4EZN+we
D2hP5RI=
-----END CERTIFICATE-----
Generated at Fri Nov 22 22:24:10 2024 by rpki-client on console-fra.rpki-client.org