Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919F23D/7D891FFA553D11EBB5687F74C4F9AE02/5E7AC046554C11EB87AB9070C4F9AE02.roa
File:                     5E7AC046554C11EB87AB9070C4F9AE02.roa (raw, json)
Hash identifier:          9SEp12826tyPgZ90rcyya6rTZZSYMM+g/IkmHnoRS+U=
Subject key identifier:   18:C5:88:FF:BB:E3:BB:32:33:90:92:70:48:7F:BB:ED:30:83:98:19
Certificate issuer:       /CN=A919F23D/serialNumber=C1BFA26C1B79438008BC1D73158CC851BD129C10
Certificate serial:       05E7
Authority key identifier: C1:BF:A2:6C:1B:79:43:80:08:BC:1D:73:15:8C:C8:51:BD:12:9C:10
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wb-ibBt5Q4AIvB1zFYzIUb0SnBA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919F23D/7D891FFA553D11EBB5687F74C4F9AE02/5E7AC046554C11EB87AB9070C4F9AE02.roa
Signing time:             Mon 12 Feb 2024 23:42:19 +0000
ROA not before:           Mon 12 Feb 2024 23:42:19 +0000
ROA not after:            Thu 01 May 2025 00:00:00 +0000
asID:                     9381
IP address blocks:        103.247.164.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919F23D/7D891FFA553D11EBB5687F74C4F9AE02/wb-ibBt5Q4AIvB1zFYzIUb0SnBA.crl
                          rsync://rpki.apnic.net/member_repository/A919F23D/7D891FFA553D11EBB5687F74C4F9AE02/wb-ibBt5Q4AIvB1zFYzIUb0SnBA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wb-ibBt5Q4AIvB1zFYzIUb0SnBA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 20:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1511 (0x5e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919F23D/serialNumber=C1BFA26C1B79438008BC1D73158CC851BD129C10
        Validity
            Not Before: Feb 12 23:42:19 2024 GMT
            Not After : May  1 00:00:00 2025 GMT
        Subject: CN=65caacda-3f54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:0f:5c:8d:52:d6:44:e8:14:82:b3:6a:22:57:
                    70:23:2a:2e:15:36:1d:5c:ec:70:b0:95:8d:da:73:
                    8c:41:ce:ea:3c:8d:92:c5:42:19:bd:de:35:d9:a2:
                    1c:76:0a:90:b8:2c:c9:0f:cc:1b:05:d0:3a:80:06:
                    6e:09:a3:b5:08:66:4b:39:ca:5a:b2:48:13:e7:33:
                    8a:e5:0b:56:ad:ea:97:8e:32:24:45:82:4a:74:5e:
                    be:2b:94:7f:f9:38:96:cd:21:c5:ff:d4:95:19:37:
                    39:ce:a8:30:18:39:12:08:ac:86:3b:65:b6:8d:84:
                    15:2c:6b:b3:3a:53:e0:c2:22:37:8a:2f:71:e1:bf:
                    fa:92:4a:99:bc:01:75:85:08:d0:21:da:a1:3a:25:
                    9b:ea:6b:52:db:72:6a:5b:7a:18:59:a7:45:4a:0b:
                    9b:0d:4c:e6:45:1a:b9:7c:e8:6f:b6:67:89:56:73:
                    a2:6c:5c:3e:89:fb:1a:47:54:d9:db:d0:9b:24:4a:
                    70:fc:45:2d:f5:d4:0b:8c:67:27:05:97:13:47:46:
                    62:76:ed:85:8c:2b:b0:1f:ba:37:65:18:12:18:4f:
                    9c:90:5a:51:98:a6:f0:a3:c9:2a:c9:e4:6f:50:99:
                    56:ed:12:fb:20:bf:08:80:3a:b4:2e:ee:a0:cb:85:
                    ac:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:C5:88:FF:BB:E3:BB:32:33:90:92:70:48:7F:BB:ED:30:83:98:19
            X509v3 Authority Key Identifier:
                keyid:C1:BF:A2:6C:1B:79:43:80:08:BC:1D:73:15:8C:C8:51:BD:12:9C:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919F23D/7D891FFA553D11EBB5687F74C4F9AE02/wb-ibBt5Q4AIvB1zFYzIUb0SnBA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wb-ibBt5Q4AIvB1zFYzIUb0SnBA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F23D/7D891FFA553D11EBB5687F74C4F9AE02/5E7AC046554C11EB87AB9070C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.247.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         71:2a:54:d3:a7:eb:62:42:f0:5f:f7:c8:b7:dc:05:16:41:f7:
         d9:5b:95:19:4e:60:5e:06:b8:29:2e:24:ca:fc:d0:ce:ad:9d:
         bb:29:7d:59:a3:62:6a:87:bd:56:49:26:90:60:c8:4a:cd:6e:
         8e:ad:88:be:57:28:6f:f0:bd:4f:d1:1e:90:76:3a:08:75:c2:
         86:2e:c8:41:77:b3:4a:ab:55:19:a8:e9:77:72:08:02:54:40:
         85:5d:6c:bc:8c:45:9e:d0:b2:de:2a:db:87:ce:c8:a4:dc:63:
         30:29:39:a6:52:e0:b3:34:b5:08:86:c3:df:3a:7f:6a:b6:48:
         fa:63:45:69:6d:98:a7:3b:b5:b6:6d:b3:ba:39:40:d6:0f:2b:
         b6:7b:f5:db:2d:b8:5e:f9:12:f2:0b:fe:79:16:72:03:6b:c6:
         69:71:41:ac:93:d5:0d:b4:ee:7d:e6:33:c8:ee:c2:54:09:41:
         78:e6:41:75:71:e1:ff:ca:e3:55:d3:41:7b:70:96:67:f9:5d:
         ac:a6:05:81:ca:8d:a9:e9:9e:89:86:2f:b5:ef:7a:b1:4a:10:
         3d:a4:e2:a9:27:40:a5:42:30:72:ad:f1:33:91:d0:3d:03:c5:
         e2:ec:55:b8:74:03:af:cc:ea:3e:ca:27:5b:a7:1f:e2:3f:ec:
         40:4a:14:94
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBecwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUYyM0QxMTAvBgNVBAUTKEMxQkZBMjZDMUI3OTQzODAwOEJDMUQ3MzE1OENDODUx
QkQxMjlDMTAwHhcNMjQwMjEyMjM0MjE5WhcNMjUwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NWNhYWNkYS0zZjU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAog9cjVLWROgUgrNqIldwIyouFTYdXOxwsJWN2nOMQc7qPI2SxUIZvd412aIc
dgqQuCzJD8wbBdA6gAZuCaO1CGZLOcpaskgT5zOK5QtWreqXjjIkRYJKdF6+K5R/
+TiWzSHF/9SVGTc5zqgwGDkSCKyGO2W2jYQVLGuzOlPgwiI3ii9x4b/6kkqZvAF1
hQjQIdqhOiWb6mtS23JqW3oYWadFSgubDUzmRRq5fOhvtmeJVnOibFw+ifsaR1TZ
29CbJEpw/EUt9dQLjGcnBZcTR0Zidu2FjCuwH7o3ZRgSGE+ckFpRmKbwo8kqyeRv
UJlW7RL7IL8IgDq0Lu6gy4WsrQIDAQABo4IClTCCApEwHQYDVR0OBBYEFBjFiP+7
47syM5CScEh/u+0wg5gZMB8GA1UdIwQYMBaAFMG/omwbeUOACLwdcxWMyFG9EpwQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjIzRC83RDg5MUZGQTU1
M0QxMUVCQjU2ODdGNzRDNEY5QUUwMi93Yi1pYkJ0NVE0QUl2QjF6Rll6SVViMFNu
QkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3diLWliQnQ1UTRBSXZCMXpGWXpJVWIwU25CQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OUYyM0QvN0Q4OTFGRkE1NTNEMTFFQkI1Njg3Rjc0QzRGOUFFMDIvNUU3QUMwNDY1
NTRDMTFFQjg3QUI5MDcwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAJn96QwDQYJKoZIhvcNAQELBQADggEBAHEqVNOn62JC8F/3
yLfcBRZB99lblRlOYF4GuCkuJMr80M6tnbspfVmjYmqHvVZJJpBgyErNbo6tiL5X
KG/wvU/RHpB2Ogh1woYuyEF3s0qrVRmo6XdyCAJUQIVdbLyMRZ7Qst4q24fOyKTc
YzApOaZS4LM0tQiGw986f2q2SPpjRWltmKc7tbZts7o5QNYPK7Z79dstuF75EvIL
/nkWcgNrxmlxQayT1Q207n3mM8juwlQJQXjmQXVx4f/K41XTQXtwlmf5XaymBYHK
janpnomGL7XverFKED2k4qknQKVCMHKt8TOR0D0DxeLsVbh0A6/M6j7KJ1unH+I/
7EBKFJQ=
-----END CERTIFICATE-----
Generated at Wed Nov 20 23:55:48 2024 by rpki-client on console-ams.rpki-client.org