Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9179D2B/FAB8947C169111EC8B300F79C4F9AE02/405A719A173B11ECA6FAAE38C4F9AE02.roa
File:                     405A719A173B11ECA6FAAE38C4F9AE02.roa (raw, json)
Hash identifier:          WHVkMVaIDqsUtFffiasOomdMlljt2kCgIYVccMhJqfM=
Subject key identifier:   87:41:E1:38:55:F3:56:A2:66:36:86:D3:3C:DC:62:01:97:A0:25:37
Certificate issuer:       /CN=A9179D2B/serialNumber=3EDFC612EE9F215C92002038E0BFB78DF9A422DD
Certificate serial:       04A0
Authority key identifier: 3E:DF:C6:12:EE:9F:21:5C:92:00:20:38:E0:BF:B7:8D:F9:A4:22:DD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pt_GEu6fIVySACA44L-3jfmkIt0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9179D2B/FAB8947C169111EC8B300F79C4F9AE02/405A719A173B11ECA6FAAE38C4F9AE02.roa
Signing time:             Thu 12 Dec 2024 23:43:13 +0000
ROA not before:           Thu 12 Dec 2024 23:43:13 +0000
ROA not after:            Sat 31 Jan 2026 00:00:00 +0000
asID:                     17993
IP address blocks:        103.131.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9179D2B/FAB8947C169111EC8B300F79C4F9AE02/Pt_GEu6fIVySACA44L-3jfmkIt0.crl
                          rsync://rpki.apnic.net/member_repository/A9179D2B/FAB8947C169111EC8B300F79C4F9AE02/Pt_GEu6fIVySACA44L-3jfmkIt0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pt_GEu6fIVySACA44L-3jfmkIt0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 23:33:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1184 (0x4a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9179D2B, serialNumber=3EDFC612EE9F215C92002038E0BFB78DF9A422DD
        Validity
            Not Before: Dec 12 23:43:13 2024 GMT
            Not After : Jan 31 00:00:00 2026 GMT
        Subject: CN=675b7511-7262
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:1e:4b:af:98:72:aa:b2:f7:99:3f:36:e0:d9:
                    b3:87:f3:35:26:2e:10:65:80:8b:f9:2f:33:30:a4:
                    b6:15:aa:88:6e:d2:96:53:ff:47:c9:ba:80:a1:d9:
                    77:48:1f:f8:68:59:2f:8d:ce:89:53:8f:f6:c9:a9:
                    d2:8f:d8:35:11:38:ba:9b:64:8b:02:e7:fa:ee:67:
                    22:d0:a9:e1:78:18:73:a4:76:a4:42:01:23:8c:9f:
                    fd:d3:b4:ba:54:6f:c9:21:08:6b:73:92:41:0b:dc:
                    8b:6f:b4:51:02:ed:e9:2a:2b:f3:02:f9:60:08:ec:
                    30:ac:46:b9:eb:58:60:c9:4d:c6:8e:93:c7:c1:ed:
                    98:92:09:1a:45:30:96:99:4f:52:fe:8c:68:19:32:
                    57:94:79:26:55:46:46:fd:3a:27:18:63:e8:9c:9f:
                    d2:ba:f9:dd:06:75:67:47:60:6d:8a:7f:cc:0a:03:
                    8c:d6:cc:e7:82:6b:4d:e5:59:eb:d3:46:2c:c0:c9:
                    98:49:0d:4a:e7:50:98:93:88:6f:c7:54:b0:64:23:
                    d0:72:fb:3d:18:4e:01:ce:28:f2:3b:a9:46:90:f1:
                    8c:a1:e9:6c:4d:e9:36:2d:68:25:0a:44:69:11:6d:
                    6b:97:8f:50:93:33:f6:00:d6:a8:bf:c7:c3:ee:3a:
                    8e:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:41:E1:38:55:F3:56:A2:66:36:86:D3:3C:DC:62:01:97:A0:25:37
            X509v3 Authority Key Identifier:
                keyid:3E:DF:C6:12:EE:9F:21:5C:92:00:20:38:E0:BF:B7:8D:F9:A4:22:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9179D2B/FAB8947C169111EC8B300F79C4F9AE02/Pt_GEu6fIVySACA44L-3jfmkIt0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pt_GEu6fIVySACA44L-3jfmkIt0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179D2B/FAB8947C169111EC8B300F79C4F9AE02/405A719A173B11ECA6FAAE38C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.131.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:d0:ca:18:e3:57:1b:fd:14:56:6b:ac:3e:d0:d0:66:1e:3e:
         db:a0:3a:9f:52:4f:7f:d3:ed:7a:47:6d:38:52:aa:09:83:cc:
         40:cf:fe:e8:c2:5a:32:0d:42:ab:3b:ec:d8:1f:0e:dc:e1:68:
         81:5c:54:da:01:01:04:96:01:ae:39:50:da:32:9d:d4:f4:b0:
         09:9d:01:9b:95:f8:ca:65:57:69:2b:83:b4:a1:b2:e3:06:39:
         41:25:f1:6f:af:09:81:24:ea:1b:6f:ae:fb:62:53:fe:b1:46:
         01:6d:ab:ba:81:fc:63:dd:fe:5f:ad:56:2b:c9:41:3a:2f:b3:
         34:33:22:f2:c9:8e:e9:d0:91:a7:3d:50:91:79:c2:69:e0:75:
         25:69:41:c1:f0:45:b4:df:46:cc:40:8f:db:f5:1b:48:34:7d:
         02:49:07:9b:72:fb:6e:28:b1:e4:0f:b6:f5:e4:fa:b2:ae:6f:
         37:6e:c4:e4:3e:b5:7f:61:0b:de:2e:94:f3:b6:98:16:3d:cc:
         e8:1e:42:ba:3d:71:ea:8f:ff:14:8b:d1:c4:34:e5:1e:8a:5b:
         1b:8b:82:43:5b:33:2a:84:e6:36:5f:d9:64:c3:3b:9d:1e:1b:
         a9:a0:ef:d4:b4:64:0c:8f:75:3e:59:3b:ad:0c:90:f6:77:54:
         b9:1b:dd:30
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBKAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzlEMkIxMTAvBgNVBAUTKDNFREZDNjEyRUU5RjIxNUM5MjAwMjAzOEUwQkZCNzhE
RjlBNDIyREQwHhcNMjQxMjEyMjM0MzEzWhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzViNzUxMS03MjYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3x5Lr5hyqrL3mT824Nmzh/M1Ji4QZYCL+S8zMKS2FaqIbtKWU/9HybqAodl3
SB/4aFkvjc6JU4/2yanSj9g1ETi6m2SLAuf67mci0KnheBhzpHakQgEjjJ/907S6
VG/JIQhrc5JBC9yLb7RRAu3pKivzAvlgCOwwrEa561hgyU3GjpPHwe2YkgkaRTCW
mU9S/oxoGTJXlHkmVUZG/TonGGPonJ/SuvndBnVnR2Btin/MCgOM1szngmtN5Vnr
00YswMmYSQ1K51CYk4hvx1SwZCPQcvs9GE4BzijyO6lGkPGMoelsTek2LWglCkRp
EW1rl49QkzP2ANaov8fD7jqOXwIDAQABo4IClTCCApEwHQYDVR0OBBYEFIdB4ThV
81aiZjaG0zzcYgGXoCU3MB8GA1UdIwQYMBaAFD7fxhLunyFckgAgOOC/t435pCLd
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OUQyQi9GQUI4OTQ3QzE2
OTExMUVDOEIzMDBGNzlDNEY5QUUwMi9QdF9HRXU2ZklWeVNBQ0E0NEwtM2pmbWtJ
dDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1B0X0dFdTZmSVZ5U0FDQTQ0TC0zamZta0l0MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NzlEMkIvRkFCODk0N0MxNjkxMTFFQzhCMzAwRjc5QzRGOUFFMDIvNDA1QTcxOUEx
NzNCMTFFQ0E2RkFBRTM4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABngz4wDQYJKoZIhvcNAQELBQADggEBAE7QyhjjVxv9FFZr
rD7Q0GYePtugOp9ST3/T7XpHbThSqgmDzEDP/ujCWjINQqs77NgfDtzhaIFcVNoB
AQSWAa45UNoyndT0sAmdAZuV+MplV2krg7ShsuMGOUEl8W+vCYEk6htvrvtiU/6x
RgFtq7qB/GPd/l+tVivJQTovszQzIvLJjunQkac9UJF5wmngdSVpQcHwRbTfRsxA
j9v1G0g0fQJJB5ty+24oseQPtvXk+rKubzduxOQ+tX9hC94ulPO2mBY9zOgeQro9
ceqP/xSL0cQ05R6KWxuLgkNbMyqE5jZf2WTDO50eG6mg79S0ZAyPdT5ZO60MkPZ3
VLkb3TA=
-----END CERTIFICATE-----
Generated at Sat Apr 26 15:09:39 2025 by rpki-client