Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919B180/102BA19E9E4311EC87D0B26FC4F9AE02/886907F8EE9911EDB02DA367C4F9AE02.roa
File:                     886907F8EE9911EDB02DA367C4F9AE02.roa (raw, json)
Hash identifier:          brqvD0nhUd1opPdVSG+VpZIcp0CeDJNJnNKorIsgs0I=
Subject key identifier:   A8:10:84:1B:43:66:C9:64:01:3E:3E:21:90:38:44:1C:95:F9:47:8A
Certificate issuer:       /CN=A919B180/serialNumber=9585475735E2EE103A88357769E176306D197473
Certificate serial:       02BD
Authority key identifier: 95:85:47:57:35:E2:EE:10:3A:88:35:77:69:E1:76:30:6D:19:74:73
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lYVHVzXi7hA6iDV3aeF2MG0ZdHM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919B180/102BA19E9E4311EC87D0B26FC4F9AE02/886907F8EE9911EDB02DA367C4F9AE02.roa
Signing time:             Wed 27 Mar 2024 03:15:53 +0000
ROA not before:           Wed 27 Mar 2024 03:15:53 +0000
ROA not after:            Wed 28 May 2025 00:00:00 +0000
asID:                     134806
IP address blocks:        103.183.69.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919B180/102BA19E9E4311EC87D0B26FC4F9AE02/lYVHVzXi7hA6iDV3aeF2MG0ZdHM.crl
                          rsync://rpki.apnic.net/member_repository/A919B180/102BA19E9E4311EC87D0B26FC4F9AE02/lYVHVzXi7hA6iDV3aeF2MG0ZdHM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lYVHVzXi7hA6iDV3aeF2MG0ZdHM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 May 2024 02:53:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 701 (0x2bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919B180/serialNumber=9585475735E2EE103A88357769E176306D197473
        Validity
            Not Before: Mar 27 03:15:53 2024 GMT
            Not After : May 28 00:00:00 2025 GMT
        Subject: CN=66038f69-ea3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:0c:19:a5:6d:f7:e0:e6:0c:93:ff:6d:4c:9b:
                    a1:6b:ea:11:7f:c5:43:64:fa:04:ba:25:cf:5c:31:
                    53:cd:28:c9:7a:c6:f9:03:e3:0d:b0:14:b2:a8:1b:
                    54:8c:5f:ec:a8:98:14:6c:94:e0:b8:99:2a:9c:e7:
                    53:56:42:49:80:df:ea:56:1b:cd:27:e9:5e:98:7a:
                    9d:dd:2b:3b:b0:5c:08:74:f6:fb:4c:3a:59:f9:e1:
                    3a:11:44:88:b1:12:5e:e3:ad:cf:82:be:0d:80:0d:
                    85:5f:af:d3:15:54:ac:76:c9:f1:6b:7c:6f:cc:37:
                    4f:83:4a:12:5a:80:42:b4:a0:93:0f:17:d3:c2:46:
                    83:b5:bd:db:15:0c:21:9b:8d:5a:ce:57:bc:d0:9b:
                    a1:f3:94:63:1d:7e:2c:40:e5:20:6b:4b:65:a7:7a:
                    2c:bc:5d:77:50:65:9f:81:fe:99:d6:7a:74:d5:33:
                    4a:9b:7b:b2:48:af:1c:95:b6:01:ac:72:31:2f:ae:
                    fa:7a:c5:35:ee:09:5e:36:81:97:b8:58:43:09:61:
                    e9:fd:36:bf:63:79:69:8a:9b:ba:3b:8c:13:dd:b2:
                    38:8c:83:24:f2:49:ef:4d:ec:07:1e:97:e4:86:76:
                    ea:28:ac:82:2b:d2:5f:3c:5c:ff:e7:39:49:ca:b2:
                    af:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:10:84:1B:43:66:C9:64:01:3E:3E:21:90:38:44:1C:95:F9:47:8A
            X509v3 Authority Key Identifier:
                keyid:95:85:47:57:35:E2:EE:10:3A:88:35:77:69:E1:76:30:6D:19:74:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919B180/102BA19E9E4311EC87D0B26FC4F9AE02/lYVHVzXi7hA6iDV3aeF2MG0ZdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lYVHVzXi7hA6iDV3aeF2MG0ZdHM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B180/102BA19E9E4311EC87D0B26FC4F9AE02/886907F8EE9911EDB02DA367C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.183.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:50:d5:da:bb:2e:55:6f:e0:26:8c:13:bb:d9:62:80:1c:44:
         6b:28:1d:88:8e:ec:54:6d:0e:9e:94:04:bf:c9:82:44:75:84:
         96:42:6c:74:7b:ca:9c:91:8a:bc:aa:11:bc:13:6a:5e:ae:73:
         a3:6d:ea:ac:13:27:90:b0:81:85:b1:8b:0b:c1:2f:82:db:f9:
         f5:a3:78:d6:c4:da:28:b1:13:bb:f9:57:6c:24:d8:11:f0:28:
         1f:fc:69:7d:34:11:7f:df:0f:53:03:d0:2e:02:2d:95:90:71:
         6b:50:9f:fb:ef:17:84:15:bc:2d:6a:88:38:d7:b5:8e:b3:a2:
         d8:a7:54:31:d5:87:64:9f:ae:51:eb:08:5b:ad:42:18:ab:5a:
         9c:3a:9e:fc:1f:98:cb:9e:3b:7c:43:65:6b:70:50:37:65:36:
         d0:c8:6e:6e:a3:ca:6e:b8:bf:db:e6:61:01:51:dc:1d:18:4e:
         18:41:63:9b:4b:c9:47:a8:e5:9d:6d:eb:cc:7c:6b:78:33:0d:
         fd:5c:85:79:3d:fb:d6:16:da:8b:37:a9:6f:02:b1:8c:ad:81:
         43:61:95:c2:6a:16:0d:59:a4:45:15:29:c5:51:7b:8b:d2:e0:
         66:58:d6:55:56:75:95:f6:8b:34:2b:d2:ec:b4:98:82:05:63:
         62:c1:ac:17
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAr0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUIxODAxMTAvBgNVBAUTKDk1ODU0NzU3MzVFMkVFMTAzQTg4MzU3NzY5RTE3NjMw
NkQxOTc0NzMwHhcNMjQwMzI3MDMxNTUzWhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02NjAzOGY2OS1lYTNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArgwZpW334OYMk/9tTJuha+oRf8VDZPoEuiXPXDFTzSjJesb5A+MNsBSyqBtU
jF/sqJgUbJTguJkqnOdTVkJJgN/qVhvNJ+lemHqd3Ss7sFwIdPb7TDpZ+eE6EUSI
sRJe463Pgr4NgA2FX6/TFVSsdsnxa3xvzDdPg0oSWoBCtKCTDxfTwkaDtb3bFQwh
m41azle80Juh85RjHX4sQOUga0tlp3osvF13UGWfgf6Z1np01TNKm3uySK8clbYB
rHIxL676esU17gleNoGXuFhDCWHp/Ta/Y3lpipu6O4wT3bI4jIMk8knvTewHHpfk
hnbqKKyCK9JfPFz/5zlJyrKvKQIDAQABo4IClTCCApEwHQYDVR0OBBYEFKgQhBtD
ZslkAT4+IZA4RByV+UeKMB8GA1UdIwQYMBaAFJWFR1c14u4QOog1d2nhdjBtGXRz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QjE4MC8xMDJCQTE5RTlF
NDMxMUVDODdEMEIyNkZDNEY5QUUwMi9sWVZIVnpYaTdoQTZpRFYzYWVGMk1HMFpk
SE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2xZVkhWelhpN2hBNmlEVjNhZUYyTUcwWmRITS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OUIxODAvMTAyQkExOUU5RTQzMTFFQzg3RDBCMjZGQzRGOUFFMDIvODg2OTA3RjhF
RTk5MTFFREIwMkRBMzY3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnt0UwDQYJKoZIhvcNAQELBQADggEBAApQ1dq7LlVv4CaM
E7vZYoAcRGsoHYiO7FRtDp6UBL/JgkR1hJZCbHR7ypyRiryqEbwTal6uc6Nt6qwT
J5CwgYWxiwvBL4Lb+fWjeNbE2iixE7v5V2wk2BHwKB/8aX00EX/fD1MD0C4CLZWQ
cWtQn/vvF4QVvC1qiDjXtY6zotinVDHVh2SfrlHrCFutQhirWpw6nvwfmMueO3xD
ZWtwUDdlNtDIbm6jym64v9vmYQFR3B0YThhBY5tLyUeo5Z1t68x8a3gzDf1chXk9
+9YW2os3qW8CsYytgUNhlcJqFg1ZpEUVKcVRe4vS4GZY1lVWdZX2izQr0uy0mIIF
Y2LBrBc=
-----END CERTIFICATE-----
Generated at Fri May 17 04:44:32 2024 by rpki-client on console-ams.rpki-client.org