Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919EA3B/89D0060A261611EEBE76105CC4F9AE02/0218C21E261711EE9AEA7674C4F9AE02.roa
File:                     0218C21E261711EE9AEA7674C4F9AE02.roa (raw, json)
Hash identifier:          f3Z+Plktu1vEK5J7Cr0wnZHXTAmT6g0Q0RBssxjNlNw=
Subject key identifier:   FA:43:58:5B:64:DD:FC:F3:40:D1:33:B1:3F:A1:77:C5:00:60:F6:E1
Certificate issuer:       /CN=A919EA3B/serialNumber=42AC1887DF2C9FF468C00EBC06559AE1790B7D41
Certificate serial:       AA
Authority key identifier: 42:AC:18:87:DF:2C:9F:F4:68:C0:0E:BC:06:55:9A:E1:79:0B:7D:41
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QqwYh98sn_RowA68BlWa4XkLfUE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919EA3B/89D0060A261611EEBE76105CC4F9AE02/0218C21E261711EE9AEA7674C4F9AE02.roa
Signing time:             Mon 03 Jun 2024 07:48:04 +0000
ROA not before:           Mon 03 Jun 2024 07:48:04 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     9230
IP address blocks:        103.137.196.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919EA3B/89D0060A261611EEBE76105CC4F9AE02/QqwYh98sn_RowA68BlWa4XkLfUE.crl
                          rsync://rpki.apnic.net/member_repository/A919EA3B/89D0060A261611EEBE76105CC4F9AE02/QqwYh98sn_RowA68BlWa4XkLfUE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QqwYh98sn_RowA68BlWa4XkLfUE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 03:19:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 170 (0xaa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919EA3B/serialNumber=42AC1887DF2C9FF468C00EBC06559AE1790B7D41
        Validity
            Not Before: Jun  3 07:48:04 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=665d7534-b793
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:f7:91:94:bc:5f:20:76:af:b0:9e:6d:d6:c0:
                    f0:d1:b7:6b:50:20:e3:0b:3d:12:1d:16:00:25:df:
                    60:eb:76:57:18:85:d5:51:27:92:96:88:63:96:70:
                    81:dd:df:8d:e3:c8:2d:aa:62:91:6a:86:50:fc:20:
                    65:03:f6:2f:12:76:4d:80:81:80:23:91:9c:a1:c3:
                    fe:56:75:77:a7:e7:30:7f:4e:bd:c1:32:47:7c:0a:
                    9b:16:60:2d:eb:6c:f9:c9:fb:09:21:1d:b1:87:04:
                    91:ec:b0:3b:7c:5d:3a:ee:4d:01:d8:82:c4:ee:a2:
                    0a:c6:6b:a4:6c:5a:53:b8:b8:b4:6d:8b:9e:d5:3f:
                    d1:48:42:cb:50:e9:8b:12:27:9d:d6:4e:74:17:5c:
                    d7:c0:e0:5b:9b:e1:a9:4b:18:c6:23:32:45:28:66:
                    98:ec:2f:85:dd:78:75:77:7f:d9:53:fc:94:a1:6b:
                    b5:4a:e1:a4:9d:3c:17:40:ec:75:60:ca:5b:f8:0b:
                    11:71:fc:10:70:80:b8:31:95:86:57:7a:b1:ce:47:
                    cd:02:88:5b:39:6a:3a:9f:7c:39:a2:36:ab:b2:c5:
                    27:81:07:62:c6:c1:a6:4e:64:d5:da:18:b8:b4:84:
                    ec:ce:06:81:26:cc:01:eb:38:8d:e0:04:da:4d:0f:
                    52:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:43:58:5B:64:DD:FC:F3:40:D1:33:B1:3F:A1:77:C5:00:60:F6:E1
            X509v3 Authority Key Identifier:
                keyid:42:AC:18:87:DF:2C:9F:F4:68:C0:0E:BC:06:55:9A:E1:79:0B:7D:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919EA3B/89D0060A261611EEBE76105CC4F9AE02/QqwYh98sn_RowA68BlWa4XkLfUE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QqwYh98sn_RowA68BlWa4XkLfUE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EA3B/89D0060A261611EEBE76105CC4F9AE02/0218C21E261711EE9AEA7674C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.137.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:2d:7e:04:2d:56:26:00:25:95:4d:2b:2f:01:20:5c:70:c7:
         b6:df:91:32:74:97:a0:ad:db:92:31:ed:0d:e9:52:d7:0b:a9:
         06:b1:36:48:94:fa:cd:46:ab:74:2b:d9:d9:ed:4e:be:78:6f:
         17:4d:f2:64:3e:79:33:67:ac:c7:4e:32:ec:85:0d:14:f8:bf:
         ac:53:e8:d5:ac:ea:2f:54:86:04:80:a4:de:ab:c0:6b:c1:b8:
         1e:ab:25:7a:81:d3:4c:1b:02:cd:c8:65:11:4a:fb:e7:bb:4d:
         6d:27:cd:2b:e1:70:6f:00:3d:f1:63:d5:8a:66:5c:ca:4b:43:
         62:94:ac:db:22:48:4d:6b:29:ba:7a:11:23:40:1b:56:59:65:
         bc:08:70:3a:28:37:d8:95:97:f9:de:02:85:e4:43:c6:59:d6:
         fd:b4:a9:c6:75:20:1b:64:a9:a8:be:26:de:9f:aa:0e:3c:71:
         b4:55:08:39:29:f0:97:74:6b:9f:23:4e:b2:57:e5:1b:24:b9:
         b9:28:51:5f:2c:2a:2d:a1:1c:d4:15:e7:66:7c:78:a9:a3:60:
         bd:81:93:5f:35:f4:da:7c:f8:19:7b:e6:20:f5:34:dd:00:43:
         94:86:ee:5c:e9:1a:3e:f9:38:4d:0e:a7:14:8f:70:53:e7:76:
         a4:23:b4:c8
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAKowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUVBM0IxMTAvBgNVBAUTKDQyQUMxODg3REYyQzlGRjQ2OEMwMEVCQzA2NTU5QUUx
NzkwQjdENDEwHhcNMjQwNjAzMDc0ODA0WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NjVkNzUzNC1iNzkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4feRlLxfIHavsJ5t1sDw0bdrUCDjCz0SHRYAJd9g63ZXGIXVUSeSlohjlnCB
3d+N48gtqmKRaoZQ/CBlA/YvEnZNgIGAI5GcocP+VnV3p+cwf069wTJHfAqbFmAt
62z5yfsJIR2xhwSR7LA7fF067k0B2ILE7qIKxmukbFpTuLi0bYue1T/RSELLUOmL
Eied1k50F1zXwOBbm+GpSxjGIzJFKGaY7C+F3Xh1d3/ZU/yUoWu1SuGknTwXQOx1
YMpb+AsRcfwQcIC4MZWGV3qxzkfNAohbOWo6n3w5ojarssUngQdixsGmTmTV2hi4
tITszgaBJswB6ziN4ATaTQ9SGwIDAQABo4IClTCCApEwHQYDVR0OBBYEFPpDWFtk
3fzzQNEzsT+hd8UAYPbhMB8GA1UdIwQYMBaAFEKsGIffLJ/0aMAOvAZVmuF5C31B
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUEzQi84OUQwMDYwQTI2
MTYxMUVFQkU3NjEwNUNDNEY5QUUwMi9RcXdZaDk4c25fUm93QTY4QmxXYTRYa0xm
VUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1Fxd1loOThzbl9Sb3dBNjhCbFdhNFhrTGZVRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OUVBM0IvODlEMDA2MEEyNjE2MTFFRUJFNzYxMDVDQzRGOUFFMDIvMDIxOEMyMUUy
NjE3MTFFRTlBRUE3Njc0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnicQwDQYJKoZIhvcNAQELBQADggEBAJ8tfgQtViYAJZVN
Ky8BIFxwx7bfkTJ0l6Ct25Ix7Q3pUtcLqQaxNkiU+s1Gq3Qr2dntTr54bxdN8mQ+
eTNnrMdOMuyFDRT4v6xT6NWs6i9UhgSApN6rwGvBuB6rJXqB00wbAs3IZRFK++e7
TW0nzSvhcG8APfFj1YpmXMpLQ2KUrNsiSE1rKbp6ESNAG1ZZZbwIcDooN9iVl/ne
AoXkQ8ZZ1v20qcZ1IBtkqai+Jt6fqg48cbRVCDkp8Jd0a58jTrJX5RskubkoUV8s
Ki2hHNQV52Z8eKmjYL2Bk1819Np8+Bl75iD1NN0AQ5SG7lzpGj75OE0OpxSPcFPn
dqQjtMg=
-----END CERTIFICATE-----
Generated at Thu Nov 21 05:37:14 2024 by rpki-client on console-ams.rpki-client.org