Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919DCD2/EE51E5DCAB3911EEA1AB2316C4F9AE02/40C4FB74AB3A11EEA3CBE616C4F9AE02.roa
File:                     40C4FB74AB3A11EEA3CBE616C4F9AE02.roa (raw, json)
Hash identifier:          Xw1yVSEQ67bcf1cGeyG5KK7DPit3J8QoWTCghERvhXM=
Subject key identifier:   5C:3A:9C:BE:94:1B:91:97:3B:14:65:EE:60:26:2C:03:AA:8F:01:8C
Certificate issuer:       /CN=A919DCD2/serialNumber=26C3E7136207639A06DC708308E011747BA271CB
Certificate serial:       8D
Authority key identifier: 26:C3:E7:13:62:07:63:9A:06:DC:70:83:08:E0:11:74:7B:A2:71:CB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JsPnE2IHY5oG3HCDCOARdHuiccs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919DCD2/EE51E5DCAB3911EEA1AB2316C4F9AE02/40C4FB74AB3A11EEA3CBE616C4F9AE02.roa
Signing time:             Tue 01 Oct 2024 05:48:41 +0000
ROA not before:           Tue 01 Oct 2024 05:48:41 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     393262
IP address blocks:        103.142.222.0/24 maxlen: 24
                          103.142.223.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919DCD2/EE51E5DCAB3911EEA1AB2316C4F9AE02/JsPnE2IHY5oG3HCDCOARdHuiccs.crl
                          rsync://rpki.apnic.net/member_repository/A919DCD2/EE51E5DCAB3911EEA1AB2316C4F9AE02/JsPnE2IHY5oG3HCDCOARdHuiccs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JsPnE2IHY5oG3HCDCOARdHuiccs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 04:19:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 141 (0x8d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919DCD2/serialNumber=26C3E7136207639A06DC708308E011747BA271CB
        Validity
            Not Before: Oct  1 05:48:41 2024 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=66fb8d38-1c92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e2:dd:3e:ae:e2:c2:a7:c2:36:d0:03:f6:37:
                    72:cc:f2:93:9a:a3:e4:85:0b:1b:d0:73:95:a9:68:
                    ca:9e:3b:e8:99:9c:67:78:70:59:4f:4f:8f:98:d6:
                    7e:05:2e:d0:aa:5f:1c:d0:36:a5:17:1c:9a:07:bb:
                    90:77:24:9e:da:b0:74:93:c4:e9:18:7a:b3:4a:83:
                    0d:75:8f:29:59:2b:a6:83:81:ff:b0:ed:97:c6:1f:
                    78:18:27:7e:f3:b1:7d:9c:b7:4d:5d:92:9b:86:ec:
                    89:d6:b7:05:12:ec:df:da:6a:92:b0:2a:77:1d:14:
                    63:f5:53:ef:53:53:0b:ce:cd:9b:50:9d:e0:7c:04:
                    12:e6:70:9e:6b:e2:39:54:27:13:5e:70:e0:dd:cd:
                    54:21:e3:e9:c1:db:ca:4d:6d:4b:92:69:ad:18:0e:
                    a7:2b:1c:e3:2a:ad:1e:5c:e0:a8:e4:2e:4c:1d:8b:
                    c1:14:32:8a:04:e5:29:af:99:45:bd:d1:72:84:4f:
                    15:01:58:d6:09:ce:6f:78:6d:16:0b:22:d2:44:96:
                    d7:8d:f9:09:c1:2c:14:de:d7:31:1b:d3:cb:1b:9d:
                    e3:dd:29:a7:8a:6a:d1:8a:69:57:5a:fe:2f:02:17:
                    e8:3d:bf:4e:98:8e:ca:87:a8:57:43:54:ae:20:e2:
                    d2:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:3A:9C:BE:94:1B:91:97:3B:14:65:EE:60:26:2C:03:AA:8F:01:8C
            X509v3 Authority Key Identifier:
                keyid:26:C3:E7:13:62:07:63:9A:06:DC:70:83:08:E0:11:74:7B:A2:71:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919DCD2/EE51E5DCAB3911EEA1AB2316C4F9AE02/JsPnE2IHY5oG3HCDCOARdHuiccs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JsPnE2IHY5oG3HCDCOARdHuiccs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DCD2/EE51E5DCAB3911EEA1AB2316C4F9AE02/40C4FB74AB3A11EEA3CBE616C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.142.222.0/23

    Signature Algorithm: sha256WithRSAEncryption
         00:22:b9:07:76:61:be:1a:41:17:3c:81:04:a5:f0:79:96:29:
         a0:5b:4f:11:81:ac:a7:19:3a:89:68:74:46:f5:73:9b:cc:f4:
         c1:7e:bb:dd:69:18:06:c3:14:31:c1:29:d1:bd:22:88:c2:98:
         79:0a:c0:cf:d4:c9:80:f1:2d:c2:d1:ee:4c:76:48:6a:67:2a:
         c2:8b:1f:f5:d2:21:7e:5e:bc:00:e1:ea:16:4c:1b:ad:18:21:
         28:48:dc:9c:e0:ce:8e:c2:30:8e:d3:f1:64:2f:9d:34:d4:f6:
         a2:a9:ba:6f:36:1c:b2:fa:e6:69:e7:d0:4c:0d:84:54:6e:5e:
         18:3b:6b:12:1b:f5:ff:07:41:ee:c9:e2:7b:23:e2:10:b3:50:
         3d:32:f4:80:0c:19:39:a7:88:f5:e1:4b:9c:6c:f3:20:78:0b:
         1a:47:26:03:c9:b6:49:14:24:0f:fd:29:eb:ba:a8:92:96:98:
         a4:35:45:a6:41:b6:d6:53:9e:97:f8:b5:81:c8:8a:e8:c3:ed:
         0d:e7:d7:ba:1f:12:ad:0b:17:b2:6a:4c:69:81:6f:26:9e:ad:
         12:ba:94:ef:50:11:d3:85:b0:39:a9:fa:53:fd:0f:ee:c0:92:
         d5:a4:46:1d:23:87:33:48:63:86:54:ca:8d:14:95:9f:dd:57:
         62:43:b3:fc
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAI0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OURDRDIxMTAvBgNVBAUTKDI2QzNFNzEzNjIwNzYzOUEwNkRDNzA4MzA4RTAxMTc0
N0JBMjcxQ0IwHhcNMjQxMDAxMDU0ODQxWhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmZiOGQzOC0xYzkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtOLdPq7iwqfCNtAD9jdyzPKTmqPkhQsb0HOVqWjKnjvomZxneHBZT0+PmNZ+
BS7Qql8c0DalFxyaB7uQdySe2rB0k8TpGHqzSoMNdY8pWSumg4H/sO2Xxh94GCd+
87F9nLdNXZKbhuyJ1rcFEuzf2mqSsCp3HRRj9VPvU1MLzs2bUJ3gfAQS5nCea+I5
VCcTXnDg3c1UIePpwdvKTW1LkmmtGA6nKxzjKq0eXOCo5C5MHYvBFDKKBOUpr5lF
vdFyhE8VAVjWCc5veG0WCyLSRJbXjfkJwSwU3tcxG9PLG53j3SmnimrRimlXWv4v
AhfoPb9OmI7Kh6hXQ1SuIOLSiQIDAQABo4IClTCCApEwHQYDVR0OBBYEFFw6nL6U
G5GXOxRl7mAmLAOqjwGMMB8GA1UdIwQYMBaAFCbD5xNiB2OaBtxwgwjgEXR7onHL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RENEMi9FRTUxRTVEQ0FC
MzkxMUVFQTFBQjIzMTZDNEY5QUUwMi9Kc1BuRTJJSFk1b0czSENEQ09BUmRIdWlj
Y3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0pzUG5FMklIWTVvRzNIQ0RDT0FSZEh1aWNjcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OURDRDIvRUU1MUU1RENBQjM5MTFFRUExQUIyMzE2QzRGOUFFMDIvNDBDNEZCNzRB
QjNBMTFFRUEzQ0JFNjE2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnjt4wDQYJKoZIhvcNAQELBQADggEBAAAiuQd2Yb4aQRc8
gQSl8HmWKaBbTxGBrKcZOolodEb1c5vM9MF+u91pGAbDFDHBKdG9IojCmHkKwM/U
yYDxLcLR7kx2SGpnKsKLH/XSIX5evADh6hZMG60YIShI3Jzgzo7CMI7T8WQvnTTU
9qKpum82HLL65mnn0EwNhFRuXhg7axIb9f8HQe7J4nsj4hCzUD0y9IAMGTmniPXh
S5xs8yB4CxpHJgPJtkkUJA/9Keu6qJKWmKQ1RaZBttZTnpf4tYHIiujD7Q3n17of
Eq0LF7JqTGmBbyaerRK6lO9QEdOFsDmp+lP9D+7AktWkRh0jhzNIY4ZUyo0UlZ/d
V2JDs/w=
-----END CERTIFICATE-----
Generated at Thu Nov 21 05:37:14 2024 by rpki-client on console-ams.rpki-client.org