Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911BE38/6DA2D9B2541B11EDBEBA4A50C4F9AE02/59DD05DA541E11EDB324CE7DC4F9AE02.roa
File:                     59DD05DA541E11EDB324CE7DC4F9AE02.roa (raw, json)
Hash identifier:          uRdIMNdIglfdteGkf069/isP402avOmjbNb7y/lUw5k=
Subject key identifier:   01:BD:ED:F9:3C:84:3D:FE:75:67:46:05:19:8E:9F:8D:4B:6D:CC:8C
Certificate issuer:       /CN=A911BE38/serialNumber=B18C43743466921DB0425E7367D55C28EE4AF1CD
Certificate serial:       0196
Authority key identifier: B1:8C:43:74:34:66:92:1D:B0:42:5E:73:67:D5:5C:28:EE:4A:F1:CD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911BE38/6DA2D9B2541B11EDBEBA4A50C4F9AE02/59DD05DA541E11EDB324CE7DC4F9AE02.roa
Signing time:             Tue 03 Dec 2024 02:25:56 +0000
ROA not before:           Tue 03 Dec 2024 02:25:56 +0000
ROA not after:            Mon 02 Mar 2026 00:00:00 +0000
asID:                     134372
IP address blocks:        103.103.96.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911BE38/6DA2D9B2541B11EDBEBA4A50C4F9AE02/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.crl
                          rsync://rpki.apnic.net/member_repository/A911BE38/6DA2D9B2541B11EDBEBA4A50C4F9AE02/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 May 2025 01:58:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 406 (0x196)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911BE38, serialNumber=B18C43743466921DB0425E7367D55C28EE4AF1CD
        Validity
            Not Before: Dec  3 02:25:56 2024 GMT
            Not After : Mar  2 00:00:00 2026 GMT
        Subject: CN=674e6c33-ae4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:de:de:1b:88:3d:df:ea:db:45:33:ae:a6:45:
                    0e:40:0f:79:9f:ae:36:fe:c6:0d:e8:ec:87:da:5e:
                    03:32:4e:87:16:86:db:c1:ee:0d:b9:50:c4:13:ff:
                    9f:48:de:98:6a:06:1b:c9:ca:18:f7:d5:2b:04:0b:
                    12:a0:a4:d8:7a:2d:c6:30:54:14:51:8b:b6:bd:7b:
                    f3:43:02:72:06:e1:17:2c:8c:02:92:d9:b6:c9:92:
                    32:09:73:92:b8:0f:94:c1:bb:04:34:e7:7f:85:a4:
                    fe:99:68:dc:21:3e:9c:9f:62:d2:b4:dc:e3:00:aa:
                    c5:f8:9f:df:39:43:2e:0f:b4:31:ee:3f:37:83:cd:
                    4d:f4:20:fd:16:be:75:8d:ec:a4:80:d8:f0:25:6e:
                    c4:3a:5a:e2:20:50:fb:17:20:68:4c:01:25:b0:49:
                    19:7a:26:63:6c:18:f5:06:ea:24:db:b3:80:ce:ae:
                    d3:a0:6a:43:a8:ac:09:ea:64:f0:ed:04:82:ac:35:
                    ff:e8:2a:93:d9:e3:8b:6f:d4:6c:57:b9:2e:53:db:
                    b7:c3:be:8f:6c:64:f1:44:26:34:dc:e7:70:ae:97:
                    fc:53:e1:41:99:ca:a5:59:84:e0:3e:17:7b:f6:51:
                    5f:60:d1:8c:61:de:d3:bd:53:7d:65:b8:c4:cc:ad:
                    86:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:BD:ED:F9:3C:84:3D:FE:75:67:46:05:19:8E:9F:8D:4B:6D:CC:8C
            X509v3 Authority Key Identifier:
                keyid:B1:8C:43:74:34:66:92:1D:B0:42:5E:73:67:D5:5C:28:EE:4A:F1:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911BE38/6DA2D9B2541B11EDBEBA4A50C4F9AE02/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BE38/6DA2D9B2541B11EDBEBA4A50C4F9AE02/59DD05DA541E11EDB324CE7DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.103.96.0/23

    Signature Algorithm: sha256WithRSAEncryption
         61:dd:e3:2d:30:d7:ca:47:c8:11:00:22:1f:99:4b:cd:33:77:
         9b:f8:86:0b:c3:84:61:b5:3b:d1:bc:f4:47:86:07:fb:5b:10:
         0e:d8:9c:74:a2:09:eb:86:91:e8:d2:f4:fd:8a:36:30:f3:b8:
         cb:cd:61:99:99:78:e5:31:00:a6:f8:79:4f:03:4a:a4:a6:e3:
         66:2f:40:02:0c:79:13:c2:47:cc:f8:1d:88:c1:3a:c7:bb:aa:
         4e:f5:ae:d6:4b:55:59:10:f4:9b:82:08:78:72:8f:4d:99:19:
         f3:b1:97:ad:f6:24:6b:20:f1:67:f5:26:28:f3:1a:17:3a:bd:
         a8:ae:8d:77:e3:41:e4:ca:0b:eb:24:6b:7f:98:7f:5d:72:57:
         d0:21:36:50:f1:7a:54:54:dc:4c:b1:1d:9e:e5:7b:11:f0:ac:
         da:b8:c9:75:b5:6c:5e:9a:a4:73:c6:35:a3:20:88:39:be:87:
         a6:67:3d:4a:f5:8f:ab:67:fd:0c:f3:88:ef:f7:46:1d:6a:d2:
         d6:fc:4f:4a:c4:ad:9b:dd:4d:b4:a7:a3:4d:f7:3e:47:92:95:
         a8:4e:5c:5a:e9:a9:f4:8e:8e:f5:84:ab:01:a5:cb:eb:00:48:
         2d:e3:ff:1a:7d:20:bd:a1:0e:74:00:08:c2:dc:85:92:a6:8d:
         a0:0f:e8:b9
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAZYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUJFMzgxMTAvBgNVBAUTKEIxOEM0Mzc0MzQ2NjkyMURCMDQyNUU3MzY3RDU1QzI4
RUU0QUYxQ0QwHhcNMjQxMjAzMDIyNTU2WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzRlNmMzMy1hZTRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAn97eG4g93+rbRTOupkUOQA95n642/sYN6OyH2l4DMk6HFobbwe4NuVDEE/+f
SN6YagYbycoY99UrBAsSoKTYei3GMFQUUYu2vXvzQwJyBuEXLIwCktm2yZIyCXOS
uA+UwbsENOd/haT+mWjcIT6cn2LStNzjAKrF+J/fOUMuD7Qx7j83g81N9CD9Fr51
jeykgNjwJW7EOlriIFD7FyBoTAElsEkZeiZjbBj1Buok27OAzq7ToGpDqKwJ6mTw
7QSCrDX/6CqT2eOLb9RsV7kuU9u3w76PbGTxRCY03Odwrpf8U+FBmcqlWYTgPhd7
9lFfYNGMYd7TvVN9ZbjEzK2GHQIDAQABo4IClTCCApEwHQYDVR0OBBYEFAG97fk8
hD3+dWdGBRmOn41LbcyMMB8GA1UdIwQYMBaAFLGMQ3Q0ZpIdsEJec2fVXCjuSvHN
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkUzOC82REEyRDlCMjU0
MUIxMUVEQkVCQTRBNTBDNEY5QUUwMi9zWXhEZERSbWtoMndRbDV6WjlWY0tPNUs4
YzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3NZeERkRFJta2gyd1FsNXpaOVZjS081SzhjMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MUJFMzgvNkRBMkQ5QjI1NDFCMTFFREJFQkE0QTUwQzRGOUFFMDIvNTlERDA1REE1
NDFFMTFFREIzMjRDRTdEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnZ2AwDQYJKoZIhvcNAQELBQADggEBAGHd4y0w18pHyBEA
Ih+ZS80zd5v4hgvDhGG1O9G89EeGB/tbEA7YnHSiCeuGkejS9P2KNjDzuMvNYZmZ
eOUxAKb4eU8DSqSm42YvQAIMeRPCR8z4HYjBOse7qk71rtZLVVkQ9JuCCHhyj02Z
GfOxl632JGsg8Wf1JijzGhc6vaiujXfjQeTKC+ska3+Yf11yV9AhNlDxelRU3Eyx
HZ7lexHwrNq4yXW1bF6apHPGNaMgiDm+h6ZnPUr1j6tn/QzziO/3Rh1q0tb8T0rE
rZvdTbSno033PkeSlahOXFrpqfSOjvWEqwGly+sASC3j/xp9IL2hDnQACMLchZKm
jaAP6Lk=
-----END CERTIFICATE-----
Generated at Sat Apr 26 08:01:32 2025 by rpki-client