Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919B300/E1A6CB14506111E9ADB6FA85C4F9AE02/795616EA506211E9850D8886C4F9AE02.roa
File:                     795616EA506211E9850D8886C4F9AE02.roa (raw, json)
Hash identifier:          5cTSG400yyRYoVixrOxbylmewbPzNDI6meVn62CNhvI=
Subject key identifier:   B1:D8:BA:D5:75:86:92:09:48:5A:50:1B:1C:9F:00:47:A3:62:CB:EB
Certificate issuer:       /CN=A919B300/serialNumber=1A198F9A17F0B35EDB849560FB5F98501C3C9CAF
Certificate serial:       0F32
Authority key identifier: 1A:19:8F:9A:17:F0:B3:5E:DB:84:95:60:FB:5F:98:50:1C:3C:9C:AF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhmPmhfws17bhJVg-1-YUBw8nK8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919B300/E1A6CB14506111E9ADB6FA85C4F9AE02/795616EA506211E9850D8886C4F9AE02.roa
Signing time:             Thu 06 Jun 2024 18:41:27 +0000
ROA not before:           Thu 06 Jun 2024 18:41:27 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     23678
IP address blocks:        103.221.60.0/22 maxlen: 22
                          103.221.60.0/24 maxlen: 24
                          103.221.61.0/24 maxlen: 24
                          103.221.62.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919B300/E1A6CB14506111E9ADB6FA85C4F9AE02/GhmPmhfws17bhJVg-1-YUBw8nK8.crl
                          rsync://rpki.apnic.net/member_repository/A919B300/E1A6CB14506111E9ADB6FA85C4F9AE02/GhmPmhfws17bhJVg-1-YUBw8nK8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhmPmhfws17bhJVg-1-YUBw8nK8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 17:31:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3890 (0xf32)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919B300/serialNumber=1A198F9A17F0B35EDB849560FB5F98501C3C9CAF
        Validity
            Not Before: Jun  6 18:41:27 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=666202d7-27b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:78:5f:76:a8:18:79:c3:de:d8:67:5c:d0:73:
                    e3:5a:cb:92:4a:5d:d3:e5:82:07:65:51:1c:4c:3f:
                    5e:10:4f:e9:e4:57:c1:11:c0:71:c0:a5:a8:75:d4:
                    8e:7b:76:9e:fe:d1:f9:9f:a2:25:16:de:1b:02:d7:
                    ea:ad:14:bd:39:3a:b7:e7:aa:c7:cd:da:27:44:09:
                    b1:fb:ca:e0:51:5b:26:0c:2f:40:de:29:d6:27:08:
                    4c:00:8d:bc:12:3b:23:c1:f4:1c:00:38:b4:c1:44:
                    a6:04:78:e3:84:63:64:7b:63:ef:04:9b:f9:30:b5:
                    32:9e:6d:6a:8d:9b:01:43:15:81:93:0b:88:e2:73:
                    c2:fa:d6:33:77:26:65:6e:00:00:b0:4e:4d:1d:fe:
                    b8:57:7f:e1:09:5c:39:fc:66:14:5f:9d:a6:94:bc:
                    c4:6b:1c:62:b9:55:fe:5b:aa:92:44:27:62:53:48:
                    dd:cd:a3:ef:66:19:4e:ea:26:de:58:3d:49:39:39:
                    84:d8:8e:36:1f:95:a2:9f:fa:21:a4:41:f8:2b:d1:
                    fc:c1:e7:7c:96:f6:49:18:e4:3d:01:1d:a9:f7:64:
                    7b:cc:e0:ae:c1:39:e6:58:10:bc:cc:17:ad:bb:c4:
                    6e:70:cb:9b:13:40:c7:3a:8c:ad:9e:9b:b6:47:5a:
                    2b:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:D8:BA:D5:75:86:92:09:48:5A:50:1B:1C:9F:00:47:A3:62:CB:EB
            X509v3 Authority Key Identifier:
                keyid:1A:19:8F:9A:17:F0:B3:5E:DB:84:95:60:FB:5F:98:50:1C:3C:9C:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919B300/E1A6CB14506111E9ADB6FA85C4F9AE02/GhmPmhfws17bhJVg-1-YUBw8nK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhmPmhfws17bhJVg-1-YUBw8nK8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B300/E1A6CB14506111E9ADB6FA85C4F9AE02/795616EA506211E9850D8886C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.221.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5f:86:72:e6:d0:d8:51:d3:35:37:38:83:f3:09:17:83:96:ea:
         4d:cd:36:12:ea:06:95:7b:ee:3a:59:cb:dd:b9:c2:6e:6e:36:
         95:4f:ad:f6:42:5b:13:a5:8d:b2:81:c4:d2:6b:56:14:b5:be:
         3f:0a:0b:f7:68:87:d9:d9:6f:5f:5c:9e:88:54:39:45:69:b3:
         7e:92:b5:0c:b4:fe:74:3f:46:26:e2:03:d2:ce:67:97:c6:1f:
         5c:f6:28:48:c0:f7:6c:34:a6:c9:10:cd:af:2c:e4:b0:2a:e2:
         2b:2d:d9:b9:8f:6e:1f:66:34:8c:8d:29:38:83:db:ae:c1:b5:
         c2:58:94:7d:91:0e:a2:c7:8a:a4:57:51:5d:35:54:5e:92:68:
         b1:63:e1:19:e2:87:ad:32:fe:43:20:57:ab:ae:74:fa:fb:1f:
         db:b8:36:0f:c5:b9:05:95:c0:db:3e:e1:b8:7d:07:67:18:55:
         52:c6:f0:82:ea:10:31:d9:77:b5:75:b7:e4:94:a7:d2:d2:48:
         61:29:02:52:c3:df:f3:d8:6f:3f:9c:8f:3c:06:8e:e2:5c:11:
         cf:82:b0:74:33:dd:47:6b:65:c3:18:00:d4:d9:97:89:24:a4:
         cf:32:d4:e1:fc:89:19:01:b1:f5:16:16:2e:bc:de:c9:3c:18:
         09:f3:12:f7
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICDzIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUIzMDAxMTAvBgNVBAUTKDFBMTk4RjlBMTdGMEIzNUVEQjg0OTU2MEZCNUY5ODUw
MUMzQzlDQUYwHhcNMjQwNjA2MTg0MTI3WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NjYyMDJkNy0yN2I5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAw3hfdqgYecPe2Gdc0HPjWsuSSl3T5YIHZVEcTD9eEE/p5FfBEcBxwKWoddSO
e3ae/tH5n6IlFt4bAtfqrRS9OTq356rHzdonRAmx+8rgUVsmDC9A3inWJwhMAI28
EjsjwfQcADi0wUSmBHjjhGNke2PvBJv5MLUynm1qjZsBQxWBkwuI4nPC+tYzdyZl
bgAAsE5NHf64V3/hCVw5/GYUX52mlLzEaxxiuVX+W6qSRCdiU0jdzaPvZhlO6ibe
WD1JOTmE2I42H5Win/ohpEH4K9H8wed8lvZJGOQ9AR2p92R7zOCuwTnmWBC8zBet
u8RucMubE0DHOoytnpu2R1oriQIDAQABo4IClTCCApEwHQYDVR0OBBYEFLHYutV1
hpIJSFpQGxyfAEejYsvrMB8GA1UdIwQYMBaAFBoZj5oX8LNe24SVYPtfmFAcPJyv
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QjMwMC9FMUE2Q0IxNDUw
NjExMUU5QURCNkZBODVDNEY5QUUwMi9HaG1QbWhmd3MxN2JoSlZnLTEtWVVCdzhu
SzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0dobVBtaGZ3czE3YmhKVmctMS1ZVUJ3OG5LOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OUIzMDAvRTFBNkNCMTQ1MDYxMTFFOUFEQjZGQTg1QzRGOUFFMDIvNzk1NjE2RUE1
MDYyMTFFOTg1MEQ4ODg2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAJn3TwwDQYJKoZIhvcNAQELBQADggEBAF+GcubQ2FHTNTc4
g/MJF4OW6k3NNhLqBpV77jpZy925wm5uNpVPrfZCWxOljbKBxNJrVhS1vj8KC/do
h9nZb19cnohUOUVps36StQy0/nQ/RibiA9LOZ5fGH1z2KEjA92w0pskQza8s5LAq
4ist2bmPbh9mNIyNKTiD267BtcJYlH2RDqLHiqRXUV01VF6SaLFj4Rnih60y/kMg
V6uudPr7H9u4Ng/FuQWVwNs+4bh9B2cYVVLG8ILqEDHZd7V1t+SUp9LSSGEpAlLD
3/PYbz+cjzwGjuJcEc+CsHQz3UdrZcMYANTZl4kkpM8y1OH8iRkBsfUWFi683sk8
GAnzEvc=
-----END CERTIFICATE-----
Generated at Fri Nov 22 19:45:01 2024 by rpki-client on console-fra.rpki-client.org