Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9025/10D771C2788411EAADA51310C4F9AE02/83A0065E970E11EE952A8162C4F9AE02.roa
File:                     83A0065E970E11EE952A8162C4F9AE02.roa (raw, json)
Hash identifier:          QDVG4ggQas/rzO51zXHSrr2WVPkWG5OuleCCcgkUdy8=
Subject key identifier:   52:FB:83:2C:84:ED:5D:F2:0A:17:82:49:07:51:88:D4:93:F4:65:E1
Certificate issuer:       /CN=A91C9025/serialNumber=06DF1B524BD0DDDDA179B0450627EAF7F8D94C00
Certificate serial:       0919
Authority key identifier: 06:DF:1B:52:4B:D0:DD:DD:A1:79:B0:45:06:27:EA:F7:F8:D9:4C:00
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bt8bUkvQ3d2hebBFBifq9_jZTAA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C9025/10D771C2788411EAADA51310C4F9AE02/83A0065E970E11EE952A8162C4F9AE02.roa
Signing time:             Fri 02 Feb 2024 20:59:09 +0000
ROA not before:           Fri 02 Feb 2024 20:59:09 +0000
ROA not after:            Mon 31 Mar 2025 00:00:00 +0000
asID:                     212517
IP address blocks:        103.82.217.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C9025/10D771C2788411EAADA51310C4F9AE02/Bt8bUkvQ3d2hebBFBifq9_jZTAA.crl
                          rsync://rpki.apnic.net/member_repository/A91C9025/10D771C2788411EAADA51310C4F9AE02/Bt8bUkvQ3d2hebBFBifq9_jZTAA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bt8bUkvQ3d2hebBFBifq9_jZTAA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 19:48:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2329 (0x919)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C9025/serialNumber=06DF1B524BD0DDDDA179B0450627EAF7F8D94C00
        Validity
            Not Before: Feb  2 20:59:09 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=65bd579d-f3df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:0e:76:ef:ca:e3:3e:1e:16:b8:f2:12:b9:99:
                    31:47:da:9b:9f:4c:f4:81:4a:40:e6:22:23:e8:3e:
                    15:ad:46:4e:51:7a:c8:8e:11:4d:44:74:86:d2:56:
                    e9:3a:32:5f:ce:1a:36:29:a2:93:97:7b:54:16:c9:
                    ea:56:41:ca:1f:9c:ce:63:62:aa:d6:12:a1:a9:e1:
                    b0:8c:42:d2:ff:76:b6:bd:a0:38:65:16:2c:0b:a2:
                    f0:43:7c:6f:c7:c5:40:4a:2c:3b:78:4b:4d:c4:0f:
                    ea:31:1b:02:7b:5c:8f:e7:ce:90:77:5a:b0:93:16:
                    42:e5:f2:41:97:2f:52:5d:66:ac:a1:86:9f:ba:f4:
                    d1:ca:85:b2:01:c3:c6:0d:a4:bf:d7:21:70:7e:15:
                    b9:d1:59:7b:cb:d7:42:8c:ae:d4:b9:44:90:e0:94:
                    f3:a3:85:20:7f:53:2f:a7:42:7c:4f:b0:6b:28:01:
                    ee:67:1c:c4:91:fc:34:5c:74:56:7f:21:af:fc:f0:
                    dc:e0:0b:44:2f:76:d7:60:9c:0f:2c:40:17:c7:86:
                    22:f9:cb:5f:f4:a8:cc:58:10:18:bf:b6:06:ad:6b:
                    c8:3a:ab:d4:91:5c:80:87:19:69:15:12:d6:75:d8:
                    51:66:ae:24:9e:e9:b3:47:b3:84:78:5e:d8:36:49:
                    0f:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:FB:83:2C:84:ED:5D:F2:0A:17:82:49:07:51:88:D4:93:F4:65:E1
            X509v3 Authority Key Identifier:
                keyid:06:DF:1B:52:4B:D0:DD:DD:A1:79:B0:45:06:27:EA:F7:F8:D9:4C:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C9025/10D771C2788411EAADA51310C4F9AE02/Bt8bUkvQ3d2hebBFBifq9_jZTAA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bt8bUkvQ3d2hebBFBifq9_jZTAA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9025/10D771C2788411EAADA51310C4F9AE02/83A0065E970E11EE952A8162C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.82.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:f2:9f:26:e9:c9:a7:1f:28:01:a6:1e:43:05:6f:21:93:cd:
         07:3d:35:6b:7c:60:60:d5:20:31:70:8b:26:63:0c:1b:e6:ee:
         e0:ae:bd:bb:0d:e2:dc:36:91:ff:ed:35:c5:d0:1f:03:0d:3d:
         ee:f8:1f:0a:e8:ea:70:3b:4b:e7:88:29:2d:48:a2:e7:5f:5a:
         4e:e3:98:a3:aa:c1:55:c6:82:28:56:72:0c:b5:e9:38:52:09:
         3b:f8:a4:f5:c4:0f:10:1f:01:5c:37:4f:3a:38:71:d8:b8:3e:
         58:87:2b:ed:e2:09:9b:07:bf:81:14:3e:b5:db:d5:b3:67:ac:
         a5:13:18:b6:1f:71:9f:ee:13:b2:70:b7:16:7e:93:3a:83:c2:
         27:cd:f8:fb:1d:1a:24:52:00:75:f2:69:29:a3:f1:c8:2d:fb:
         b3:ec:78:a3:b9:bf:c9:49:a5:9f:2b:e1:36:9b:50:83:f2:c2:
         a8:85:1f:fe:09:98:4e:55:a8:41:62:58:dc:52:f6:b5:d2:13:
         c4:33:60:95:90:ac:32:11:47:7a:c5:42:e3:e8:42:53:d3:8b:
         43:94:fc:54:68:af:5c:71:39:ac:03:89:6c:82:74:d7:43:d8:
         7a:4e:ee:ef:6d:05:bd:cb:d2:d4:ea:78:be:64:4e:c1:5e:e7:
         36:2e:91:d1
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICCRkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzkwMjUxMTAvBgNVBAUTKDA2REYxQjUyNEJEMERERERBMTc5QjA0NTA2MjdFQUY3
RjhEOTRDMDAwHhcNMjQwMjAyMjA1OTA5WhcNMjUwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NWJkNTc5ZC1mM2RmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwA5278rjPh4WuPISuZkxR9qbn0z0gUpA5iIj6D4VrUZOUXrIjhFNRHSG0lbp
OjJfzho2KaKTl3tUFsnqVkHKH5zOY2Kq1hKhqeGwjELS/3a2vaA4ZRYsC6LwQ3xv
x8VASiw7eEtNxA/qMRsCe1yP586Qd1qwkxZC5fJBly9SXWasoYafuvTRyoWyAcPG
DaS/1yFwfhW50Vl7y9dCjK7UuUSQ4JTzo4Ugf1Mvp0J8T7BrKAHuZxzEkfw0XHRW
fyGv/PDc4AtEL3bXYJwPLEAXx4Yi+ctf9KjMWBAYv7YGrWvIOqvUkVyAhxlpFRLW
ddhRZq4knumzR7OEeF7YNkkPxwIDAQABo4IClTCCApEwHQYDVR0OBBYEFFL7gyyE
7V3yCheCSQdRiNST9GXhMB8GA1UdIwQYMBaAFAbfG1JL0N3doXmwRQYn6vf42UwA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTAyNS8xMEQ3NzFDMjc4
ODQxMUVBQURBNTEzMTBDNEY5QUUwMi9CdDhiVWt2UTNkMmhlYkJGQmlmcTlfalpU
QUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0J0OGJVa3ZRM2QyaGViQkZCaWZxOV9qWlRBQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QzkwMjUvMTBENzcxQzI3ODg0MTFFQUFEQTUxMzEwQzRGOUFFMDIvODNBMDA2NUU5
NzBFMTFFRTk1MkE4MTYyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnUtkwDQYJKoZIhvcNAQELBQADggEBAIDynybpyacfKAGm
HkMFbyGTzQc9NWt8YGDVIDFwiyZjDBvm7uCuvbsN4tw2kf/tNcXQHwMNPe74Hwro
6nA7S+eIKS1IoudfWk7jmKOqwVXGgihWcgy16ThSCTv4pPXEDxAfAVw3Tzo4cdi4
PliHK+3iCZsHv4EUPrXb1bNnrKUTGLYfcZ/uE7JwtxZ+kzqDwifN+PsdGiRSAHXy
aSmj8cgt+7PseKO5v8lJpZ8r4TabUIPywqiFH/4JmE5VqEFiWNxS9rXSE8QzYJWQ
rDIRR3rFQuPoQlPTi0OU/FRor1xxOawDiWyCdNdD2HpO7u9tBb3L0tTqeL5kTsFe
5zYukdE=
-----END CERTIFICATE-----
Generated at Fri Nov 22 21:05:33 2024 by rpki-client on console-fra.rpki-client.org