Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91513FA/329397661DEE11ED9472C136C4F9AE02/6901B0861DF211ED95A51A3EC4F9AE02.roa
File:                     6901B0861DF211ED95A51A3EC4F9AE02.roa (raw, json)
Hash identifier:          i6vZoTblkosBjA9WaiqC5i10CiSdhYr1XsByXvuMvf8=
Subject key identifier:   B7:1A:8A:F7:33:E3:9B:6C:57:BC:49:D2:56:7B:CC:A7:6E:A6:DA:73
Certificate issuer:       /CN=A91513FA/serialNumber=1604BEE84EBA08FDC946E48B4C14E8DC2542193A
Certificate serial:       01BD
Authority key identifier: 16:04:BE:E8:4E:BA:08:FD:C9:46:E4:8B:4C:14:E8:DC:25:42:19:3A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgS-6E66CP3JRuSLTBTo3CVCGTo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91513FA/329397661DEE11ED9472C136C4F9AE02/6901B0861DF211ED95A51A3EC4F9AE02.roa
Signing time:             Thu 15 Aug 2024 03:24:55 +0000
ROA not before:           Thu 15 Aug 2024 03:24:55 +0000
ROA not after:            Tue 30 Sep 2025 00:00:00 +0000
asID:                     150164
IP address blocks:        103.142.0.0/23 maxlen: 24
                          2001:df1:2440::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91513FA/329397661DEE11ED9472C136C4F9AE02/FgS-6E66CP3JRuSLTBTo3CVCGTo.crl
                          rsync://rpki.apnic.net/member_repository/A91513FA/329397661DEE11ED9472C136C4F9AE02/FgS-6E66CP3JRuSLTBTo3CVCGTo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgS-6E66CP3JRuSLTBTo3CVCGTo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 445 (0x1bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91513FA/serialNumber=1604BEE84EBA08FDC946E48B4C14E8DC2542193A
        Validity
            Not Before: Aug 15 03:24:55 2024 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=66bd7506-ff07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:1c:01:92:71:4c:e0:21:ad:27:49:3f:36:7d:
                    1a:93:3d:e1:f4:0d:03:ec:fe:55:d8:ea:3e:d0:4d:
                    51:77:0b:b6:f6:f4:d4:1e:b8:62:ba:bd:c1:5d:b7:
                    d4:44:3b:2a:09:de:6b:8e:64:b2:d7:a3:d3:47:34:
                    9d:d8:7d:c2:44:6e:d7:3e:96:db:55:e9:1f:b4:96:
                    f4:5b:c6:4e:f3:3d:66:25:ea:dc:95:11:c2:7d:3f:
                    2c:1f:92:3e:77:cc:e9:85:45:ae:5a:0f:e8:3f:af:
                    b1:ae:b3:33:92:2b:07:bc:33:b0:d3:47:a5:c9:9a:
                    e6:7a:1e:a2:6a:89:8c:f5:ca:fb:1e:e3:b0:14:39:
                    a4:d3:0f:5f:32:fe:9e:15:a0:5c:87:60:33:6f:25:
                    87:75:f3:c1:b7:df:69:5b:dc:cf:89:ea:4e:bb:c5:
                    52:73:64:56:40:57:f4:be:bf:ab:b2:a8:ce:02:e1:
                    31:e6:a5:38:6c:c4:55:65:75:c1:e5:c7:76:6b:62:
                    95:04:ea:09:c0:df:ae:ec:4f:59:ab:d8:d7:d9:7d:
                    a2:03:21:f3:48:60:6c:3e:a0:16:72:6c:a7:62:84:
                    6c:99:0e:f2:45:3e:21:f0:64:9e:40:1e:55:bf:31:
                    8e:a0:81:fe:30:79:b3:b7:01:87:fa:ee:be:5c:d8:
                    cd:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:1A:8A:F7:33:E3:9B:6C:57:BC:49:D2:56:7B:CC:A7:6E:A6:DA:73
            X509v3 Authority Key Identifier:
                keyid:16:04:BE:E8:4E:BA:08:FD:C9:46:E4:8B:4C:14:E8:DC:25:42:19:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91513FA/329397661DEE11ED9472C136C4F9AE02/FgS-6E66CP3JRuSLTBTo3CVCGTo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgS-6E66CP3JRuSLTBTo3CVCGTo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91513FA/329397661DEE11ED9472C136C4F9AE02/6901B0861DF211ED95A51A3EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.142.0.0/23
                IPv6:
                  2001:df1:2440::/48

    Signature Algorithm: sha256WithRSAEncryption
         9b:7e:51:54:3a:8c:84:4c:36:68:e2:99:3d:ac:74:13:d8:b6:
         ab:e0:2b:8d:b8:b0:15:d5:41:4f:61:72:b3:1b:13:64:88:d8:
         72:4f:73:08:29:bc:d5:0b:67:3e:f4:55:b0:f7:72:d4:4e:e5:
         00:93:d4:1c:58:a4:f5:73:fa:f6:9e:4f:9e:ff:14:a5:10:52:
         67:e5:ae:1a:0a:f9:08:4a:52:5e:52:92:78:a0:ea:4f:13:da:
         8e:ce:89:2c:8f:70:83:40:5b:bd:6c:5d:33:65:c0:59:b5:4e:
         87:4d:f8:90:1d:58:92:16:0c:08:e5:c7:28:1c:73:46:26:ec:
         36:5b:cf:aa:a4:1e:91:23:ff:b7:69:f0:74:47:ff:a8:aa:e7:
         88:ec:cb:88:ce:bb:4c:0c:c6:63:3b:87:e1:2e:ff:a3:78:99:
         8c:88:bb:fe:52:67:44:00:4e:b6:81:53:5e:19:71:17:31:db:
         2e:ee:13:0e:87:ec:a0:0d:5b:e9:6a:5b:5c:91:01:fa:54:bd:
         07:6f:4f:70:d5:24:fe:a9:71:a3:e2:71:07:2f:ff:37:9b:88:
         64:20:c6:58:b9:49:3b:d5:65:f6:6a:a0:12:91:a8:41:72:9b:
         81:ce:f7:19:b5:1d:e9:02:30:b9:40:e5:ac:3d:3b:fc:da:36:
         2d:29:1d:11
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgICAb0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTEzRkExMTAvBgNVBAUTKDE2MDRCRUU4NEVCQTA4RkRDOTQ2RTQ4QjRDMTRFOERD
MjU0MjE5M0EwHhcNMjQwODE1MDMyNDU1WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmJkNzUwNi1mZjA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0hwBknFM4CGtJ0k/Nn0akz3h9A0D7P5V2Oo+0E1Rdwu29vTUHrhiur3BXbfU
RDsqCd5rjmSy16PTRzSd2H3CRG7XPpbbVekftJb0W8ZO8z1mJerclRHCfT8sH5I+
d8zphUWuWg/oP6+xrrMzkisHvDOw00elyZrmeh6iaomM9cr7HuOwFDmk0w9fMv6e
FaBch2AzbyWHdfPBt99pW9zPiepOu8VSc2RWQFf0vr+rsqjOAuEx5qU4bMRVZXXB
5cd2a2KVBOoJwN+u7E9Zq9jX2X2iAyHzSGBsPqAWcmynYoRsmQ7yRT4h8GSeQB5V
vzGOoIH+MHmztwGH+u6+XNjN5wIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFLcaivcz
45tsV7xJ0lZ7zKduptpzMB8GA1UdIwQYMBaAFBYEvuhOugj9yUbki0wU6NwlQhk6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTNGQS8zMjkzOTc2NjFE
RUUxMUVEOTQ3MkMxMzZDNEY5QUUwMi9GZ1MtNkU2NkNQM0pSdVNMVEJUbzNDVkNH
VG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZnUy02RTY2Q1AzSlJ1U0xUQlRvM0NWQ0dUby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTEzRkEvMzI5Mzk3NjYxREVFMTFFRDk0NzJDMTM2QzRGOUFFMDIvNjkwMUIwODYx
REYyMTFFRDk1QTUxQTNFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E
ITAfMAwEAgABMAYDBAFnjgAwDwQCAAIwCQMHACABDfEkQDANBgkqhkiG9w0BAQsF
AAOCAQEAm35RVDqMhEw2aOKZPax0E9i2q+ArjbiwFdVBT2FysxsTZIjYck9zCCm8
1QtnPvRVsPdy1E7lAJPUHFik9XP69p5Pnv8UpRBSZ+WuGgr5CEpSXlKSeKDqTxPa
js6JLI9wg0BbvWxdM2XAWbVOh034kB1YkhYMCOXHKBxzRibsNlvPqqQekSP/t2nw
dEf/qKrniOzLiM67TAzGYzuH4S7/o3iZjIi7/lJnRABOtoFTXhlxFzHbLu4TDofs
oA1b6WpbXJEB+lS9B29PcNUk/qlxo+JxBy//N5uIZCDGWLlJO9Vl9mqgEpGoQXKb
gc73GbUd6QIwuUDlrD07/No2LSkdEQ==
-----END CERTIFICATE-----
Generated at Sat Nov 23 02:33:36 2024 by rpki-client on console-fra.rpki-client.org