Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9111ED2/621E8610845011EA8047CE7DC4F9AE02/1E809CD0845111EAA961467EC4F9AE02.roa
File:                     1E809CD0845111EAA961467EC4F9AE02.roa (raw, json)
Hash identifier:          H/OVGlOkL0NhP3BGJyz6i1zChcNr+09N/UDEg/ELwo0=
Subject key identifier:   80:C3:81:F8:66:E7:C8:66:8A:F0:0A:0B:59:63:3A:CB:A3:67:2C:E5
Certificate issuer:       /CN=A9111ED2/serialNumber=40C090513F24018920B151DAA55449C15DC84BEB
Certificate serial:       0914
Authority key identifier: 40:C0:90:51:3F:24:01:89:20:B1:51:DA:A5:54:49:C1:5D:C8:4B:EB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QMCQUT8kAYkgsVHapVRJwV3IS-s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9111ED2/621E8610845011EA8047CE7DC4F9AE02/1E809CD0845111EAA961467EC4F9AE02.roa
Signing time:             Sat 06 Jul 2024 21:08:38 +0000
ROA not before:           Sat 06 Jul 2024 21:08:38 +0000
ROA not after:            Tue 30 Sep 2025 00:00:00 +0000
asID:                     131287
IP address blocks:        103.68.197.0/24 maxlen: 24
                          103.150.170.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9111ED2/621E8610845011EA8047CE7DC4F9AE02/QMCQUT8kAYkgsVHapVRJwV3IS-s.crl
                          rsync://rpki.apnic.net/member_repository/A9111ED2/621E8610845011EA8047CE7DC4F9AE02/QMCQUT8kAYkgsVHapVRJwV3IS-s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QMCQUT8kAYkgsVHapVRJwV3IS-s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 19:57:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2324 (0x914)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9111ED2/serialNumber=40C090513F24018920B151DAA55449C15DC84BEB
        Validity
            Not Before: Jul  6 21:08:38 2024 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=6689b256-2ddb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:92:84:96:13:ea:d0:e2:a6:bc:6c:bf:70:f6:
                    34:bc:0d:fd:1b:44:72:73:5d:d4:d2:7d:d7:ec:5f:
                    7e:f3:2c:38:0b:a3:53:1f:7d:5f:99:0b:ec:19:48:
                    83:bf:2f:a3:70:59:ab:31:8a:f0:e4:08:2b:5f:56:
                    84:79:52:bf:e5:8b:b7:dc:a0:5d:53:91:7f:89:e2:
                    f4:5f:93:d1:d4:b4:10:38:de:e6:b9:56:18:67:2d:
                    d4:23:a8:97:e5:62:0b:45:ee:10:5a:1c:4b:24:f3:
                    3d:0d:5a:41:93:cb:65:a9:8f:08:0e:0b:df:1a:35:
                    4a:c9:dd:85:3e:d7:cc:6c:31:3e:05:95:91:4d:f5:
                    65:a9:26:d1:4d:f7:ef:13:00:80:62:7d:05:74:04:
                    60:9d:e6:88:a8:fb:68:ea:a2:a2:35:e8:c1:3b:97:
                    15:14:da:71:47:e9:6c:4d:a2:4c:aa:19:62:8c:94:
                    2f:82:a3:0a:fa:1f:a2:82:73:53:cc:92:3b:98:fc:
                    33:35:9e:54:7a:35:97:27:4a:b5:d8:bf:71:ad:b6:
                    52:2e:11:d0:6e:33:be:4f:3f:94:49:5a:ef:6a:95:
                    67:cd:90:dc:30:18:17:c1:05:cf:cf:e2:c4:d9:5e:
                    d0:54:95:f9:fc:f4:55:d4:ba:4c:dc:47:4a:01:04:
                    1b:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:C3:81:F8:66:E7:C8:66:8A:F0:0A:0B:59:63:3A:CB:A3:67:2C:E5
            X509v3 Authority Key Identifier:
                keyid:40:C0:90:51:3F:24:01:89:20:B1:51:DA:A5:54:49:C1:5D:C8:4B:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9111ED2/621E8610845011EA8047CE7DC4F9AE02/QMCQUT8kAYkgsVHapVRJwV3IS-s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QMCQUT8kAYkgsVHapVRJwV3IS-s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111ED2/621E8610845011EA8047CE7DC4F9AE02/1E809CD0845111EAA961467EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.68.197.0/24
                  103.150.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:b2:6c:69:14:19:24:9b:70:56:d2:2d:cf:de:85:9e:1a:ff:
         b3:5c:e4:8e:ae:d7:c2:2e:09:fb:d4:c7:ab:49:50:42:07:b0:
         16:a8:01:b4:be:05:b9:8f:8a:68:f0:6a:9c:43:af:45:5b:ab:
         a7:63:e5:3f:5d:5b:6d:fc:82:89:2f:5e:35:87:9a:57:62:ce:
         04:58:e3:78:05:14:33:44:59:65:e8:8c:e1:51:5b:0e:b8:cc:
         f6:71:9c:7d:6b:65:48:d2:3e:3d:a4:11:71:62:4f:ff:a9:00:
         26:78:b3:31:3a:0f:af:de:2f:43:24:e4:d1:01:a8:df:d7:c2:
         b1:11:41:e7:e7:50:65:7d:4d:79:1b:f3:b9:e3:8c:87:50:3c:
         31:a5:52:5c:b5:c7:ca:93:55:2d:b6:6f:d5:dd:8e:65:5b:c3:
         a9:d7:e0:f3:37:16:98:67:42:f6:a6:ca:92:ee:13:0b:41:2e:
         2f:76:ba:25:33:20:02:da:56:12:c4:5a:a3:89:6c:c2:0f:15:
         ce:e4:09:76:f6:c4:6b:80:ea:e6:98:91:8e:9d:dc:a2:ea:e1:
         82:88:46:94:66:03:a5:d3:d0:0f:69:92:31:80:fe:b8:41:32:
         5f:f0:db:b3:b2:6c:62:2e:82:c5:33:a9:2e:19:56:f8:44:fb:
         f4:94:f4:b3
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICCRQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTFFRDIxMTAvBgNVBAUTKDQwQzA5MDUxM0YyNDAxODkyMEIxNTFEQUE1NTQ0OUMx
NURDODRCRUIwHhcNMjQwNzA2MjEwODM4WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02Njg5YjI1Ni0yZGRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAppKElhPq0OKmvGy/cPY0vA39G0Ryc13U0n3X7F9+8yw4C6NTH31fmQvsGUiD
vy+jcFmrMYrw5AgrX1aEeVK/5Yu33KBdU5F/ieL0X5PR1LQQON7muVYYZy3UI6iX
5WILRe4QWhxLJPM9DVpBk8tlqY8IDgvfGjVKyd2FPtfMbDE+BZWRTfVlqSbRTffv
EwCAYn0FdARgneaIqPto6qKiNejBO5cVFNpxR+lsTaJMqhlijJQvgqMK+h+ignNT
zJI7mPwzNZ5UejWXJ0q12L9xrbZSLhHQbjO+Tz+USVrvapVnzZDcMBgXwQXPz+LE
2V7QVJX5/PRV1LpM3EdKAQQbzwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFIDDgfhm
58hmivAKC1ljOsujZyzlMB8GA1UdIwQYMBaAFEDAkFE/JAGJILFR2qVUScFdyEvr
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMUVEMi82MjFFODYxMDg0
NTAxMUVBODA0N0NFN0RDNEY5QUUwMi9RTUNRVVQ4a0FZa2dzVkhhcFZSSndWM0lT
LXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1FNQ1FVVDhrQVlrZ3NWSGFwVlJKd1YzSVMtcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MTFFRDIvNjIxRTg2MTA4NDUwMTFFQTgwNDdDRTdEQzRGOUFFMDIvMUU4MDlDRDA4
NDUxMTFFQUE5NjE0NjdFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBABnRMUDBABnlqowDQYJKoZIhvcNAQELBQADggEBADeybGkU
GSSbcFbSLc/ehZ4a/7Nc5I6u18IuCfvUx6tJUEIHsBaoAbS+BbmPimjwapxDr0Vb
q6dj5T9dW238gokvXjWHmldizgRY43gFFDNEWWXojOFRWw64zPZxnH1rZUjSPj2k
EXFiT/+pACZ4szE6D6/eL0Mk5NEBqN/XwrERQefnUGV9TXkb87njjIdQPDGlUly1
x8qTVS22b9XdjmVbw6nX4PM3FphnQvamypLuEwtBLi92uiUzIALaVhLEWqOJbMIP
Fc7kCXb2xGuA6uaYkY6d3KLq4YKIRpRmA6XT0A9pkjGA/rhBMl/w27OybGIugsUz
qS4ZVvhE+/SU9LM=
-----END CERTIFICATE-----
Generated at Fri Nov 22 22:14:20 2024 by rpki-client on console-ams.rpki-client.org