Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914A550/117C26EA5D6B11EC9E356C46C4F9AE02/66D714485D6F11EC9A00E41DC4F9AE02.roa
File:                     66D714485D6F11EC9A00E41DC4F9AE02.roa (raw, json)
Hash identifier:          Zv2OqRWOOIraCVGgHs0pDMOMrHeeVent3h8K/ky95JI=
Subject key identifier:   91:25:9B:F4:2F:28:4D:22:E1:FB:6A:FE:38:90:D8:0F:C1:1D:BF:58
Certificate issuer:       /CN=A914A550/serialNumber=88D6AFCEB8F3F8902744D61A62684B9459DBC1F6
Certificate serial:       03A4
Authority key identifier: 88:D6:AF:CE:B8:F3:F8:90:27:44:D6:1A:62:68:4B:94:59:DB:C1:F6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iNavzrjz-JAnRNYaYmhLlFnbwfY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914A550/117C26EA5D6B11EC9E356C46C4F9AE02/66D714485D6F11EC9A00E41DC4F9AE02.roa
Signing time:             Sat 03 Aug 2024 02:13:35 +0000
ROA not before:           Sat 03 Aug 2024 02:13:35 +0000
ROA not after:            Tue 30 Sep 2025 00:00:00 +0000
asID:                     9441
IP address blocks:        103.141.106.0/24 maxlen: 24
                          103.141.107.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914A550/117C26EA5D6B11EC9E356C46C4F9AE02/iNavzrjz-JAnRNYaYmhLlFnbwfY.crl
                          rsync://rpki.apnic.net/member_repository/A914A550/117C26EA5D6B11EC9E356C46C4F9AE02/iNavzrjz-JAnRNYaYmhLlFnbwfY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iNavzrjz-JAnRNYaYmhLlFnbwfY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 932 (0x3a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914A550/serialNumber=88D6AFCEB8F3F8902744D61A62684B9459DBC1F6
        Validity
            Not Before: Aug  3 02:13:35 2024 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=66ad924f-2c58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:b1:1c:54:12:86:62:50:9d:6e:cf:a9:6c:be:
                    fa:e7:27:03:13:36:63:c5:75:9f:ec:61:f5:7d:b4:
                    21:9a:38:db:68:fc:7d:4c:68:36:3c:60:02:97:66:
                    c0:ab:67:a2:f9:4c:2a:ac:0a:dc:cd:da:7e:2d:e6:
                    25:65:02:1c:d4:2f:00:02:2b:d3:84:16:2b:26:62:
                    17:a0:d1:18:c5:bf:2d:65:8e:fa:15:75:45:67:20:
                    b0:ee:32:fd:8f:9b:2f:e3:d2:8c:9c:42:65:51:c6:
                    71:02:16:62:f3:f0:35:3b:b0:59:84:fa:6d:7e:2c:
                    7e:da:2f:3a:0e:11:d2:fc:5b:b1:15:27:a6:eb:81:
                    a7:a0:e9:47:15:5e:31:70:f6:ba:84:ca:05:76:91:
                    3f:dc:55:fa:3a:73:c4:7f:fd:80:00:4f:f2:d3:78:
                    82:72:92:a8:1c:69:23:ae:80:32:04:c3:5d:d3:fb:
                    02:b1:83:8c:70:ea:b1:f4:5a:74:1c:8c:89:c8:7e:
                    fd:d8:0b:ea:c2:59:8a:29:e7:16:be:50:65:0b:ae:
                    76:33:a3:51:1c:d1:4d:5b:c3:fa:a0:0c:ad:14:04:
                    89:5d:bc:a1:6e:bb:1f:a0:3b:f5:f1:ea:e8:0d:71:
                    04:d2:c9:8b:b9:bf:dd:e0:62:f5:90:8c:b2:6e:83:
                    f6:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:25:9B:F4:2F:28:4D:22:E1:FB:6A:FE:38:90:D8:0F:C1:1D:BF:58
            X509v3 Authority Key Identifier:
                keyid:88:D6:AF:CE:B8:F3:F8:90:27:44:D6:1A:62:68:4B:94:59:DB:C1:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914A550/117C26EA5D6B11EC9E356C46C4F9AE02/iNavzrjz-JAnRNYaYmhLlFnbwfY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iNavzrjz-JAnRNYaYmhLlFnbwfY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A550/117C26EA5D6B11EC9E356C46C4F9AE02/66D714485D6F11EC9A00E41DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.141.106.0/23

    Signature Algorithm: sha256WithRSAEncryption
         01:b8:51:8d:f6:19:b6:ba:62:a0:32:a6:42:c8:25:33:15:97:
         a6:0d:42:06:4e:82:76:39:f8:a5:bc:32:3d:b1:d0:f9:b2:53:
         7e:57:2b:f9:2d:6b:d7:f3:8f:fc:59:ce:cb:fa:4b:d9:37:03:
         4f:65:8f:a1:99:dd:b1:5d:75:a7:6f:ae:d9:87:32:ab:92:94:
         08:f8:21:79:78:f5:ba:e1:da:5f:85:2b:b6:47:50:c0:50:e8:
         f6:7c:4d:2e:37:30:b2:c5:66:8e:ec:88:3e:d1:d4:c4:17:72:
         10:fc:7a:10:48:91:05:da:7a:3b:fb:33:9c:75:f6:9f:e0:71:
         b1:dd:fa:8e:11:7d:41:cd:f4:38:dd:fa:6c:47:f5:5d:b9:4f:
         e2:fc:a1:75:ff:cd:21:e0:03:69:2d:31:18:63:c0:85:35:24:
         58:06:c8:50:1d:0a:58:f5:1c:0a:9b:26:97:74:ee:d6:60:17:
         88:8b:7a:7f:70:94:4c:a2:c7:c9:04:e8:61:9d:14:d4:76:24:
         b3:31:fb:51:30:49:cb:32:1b:f8:bd:40:5c:7c:c3:fa:61:11:
         95:39:93:22:73:78:14:54:21:4a:ab:46:87:b2:28:50:ef:48:
         b3:92:dd:92:61:df:a7:ad:36:a2:51:17:86:54:0b:b2:69:b1:
         f4:84:c2:27
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICA6QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEE1NTAxMTAvBgNVBAUTKDg4RDZBRkNFQjhGM0Y4OTAyNzQ0RDYxQTYyNjg0Qjk0
NTlEQkMxRjYwHhcNMjQwODAzMDIxMzM1WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmFkOTI0Zi0yYzU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1rEcVBKGYlCdbs+pbL765ycDEzZjxXWf7GH1fbQhmjjbaPx9TGg2PGACl2bA
q2ei+UwqrArczdp+LeYlZQIc1C8AAivThBYrJmIXoNEYxb8tZY76FXVFZyCw7jL9
j5sv49KMnEJlUcZxAhZi8/A1O7BZhPptfix+2i86DhHS/FuxFSem64GnoOlHFV4x
cPa6hMoFdpE/3FX6OnPEf/2AAE/y03iCcpKoHGkjroAyBMNd0/sCsYOMcOqx9Fp0
HIyJyH792AvqwlmKKecWvlBlC652M6NRHNFNW8P6oAytFASJXbyhbrsfoDv18ero
DXEE0smLub/d4GL1kIyyboP2pQIDAQABo4IClTCCApEwHQYDVR0OBBYEFJElm/Qv
KE0i4ftq/jiQ2A/BHb9YMB8GA1UdIwQYMBaAFIjWr8648/iQJ0TWGmJoS5RZ28H2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTU1MC8xMTdDMjZFQTVE
NkIxMUVDOUUzNTZDNDZDNEY5QUUwMi9pTmF2enJqei1KQW5STllhWW1oTGxGbmJ3
ZlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2lOYXZ6cmp6LUpBblJOWWFZbWhMbEZuYndmWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NEE1NTAvMTE3QzI2RUE1RDZCMTFFQzlFMzU2QzQ2QzRGOUFFMDIvNjZENzE0NDg1
RDZGMTFFQzlBMDBFNDFEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnjWowDQYJKoZIhvcNAQELBQADggEBAAG4UY32Gba6YqAy
pkLIJTMVl6YNQgZOgnY5+KW8Mj2x0PmyU35XK/kta9fzj/xZzsv6S9k3A09lj6GZ
3bFddadvrtmHMquSlAj4IXl49brh2l+FK7ZHUMBQ6PZ8TS43MLLFZo7siD7R1MQX
chD8ehBIkQXaejv7M5x19p/gcbHd+o4RfUHN9Djd+mxH9V25T+L8oXX/zSHgA2kt
MRhjwIU1JFgGyFAdClj1HAqbJpd07tZgF4iLen9wlEyix8kE6GGdFNR2JLMx+1Ew
ScsyG/i9QFx8w/phEZU5kyJzeBRUIUqrRoeyKFDvSLOS3ZJh36etNqJRF4ZUC7Jp
sfSEwic=
-----END CERTIFICATE-----
Generated at Sat Nov 23 01:27:21 2024 by rpki-client on console-ams.rpki-client.org