Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/61D4C1801E6411EF982AF541C4F9AE02.roa
File:                     61D4C1801E6411EF982AF541C4F9AE02.roa (raw, json)
Hash identifier:          UCTf4gaafevmKLhQZIm6d5ZxnVRalAh3NSIm9tVhK9k=
Subject key identifier:   4B:47:EE:B7:AA:18:84:CF:15:27:A8:FB:CB:41:35:27:E0:61:20:C3
Certificate issuer:       /CN=A917357E/serialNumber=8352A734E82144F322C50B728A4F765A33D72256
Certificate serial:       0164
Authority key identifier: 83:52:A7:34:E8:21:44:F3:22:C5:0B:72:8A:4F:76:5A:33:D7:22:56
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1KnNOghRPMixQtyik92WjPXIlY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/61D4C1801E6411EF982AF541C4F9AE02.roa
Signing time:             Thu 30 May 2024 09:09:56 +0000
ROA not before:           Thu 30 May 2024 09:09:56 +0000
ROA not after:            Sat 31 Aug 2024 00:00:00 +0000
asID:                     152605
IP address blocks:        103.151.46.0/23 maxlen: 24
                          2400:3fa0::/32 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/g1KnNOghRPMixQtyik92WjPXIlY.crl
                          rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/g1KnNOghRPMixQtyik92WjPXIlY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1KnNOghRPMixQtyik92WjPXIlY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Jun 2024 03:04:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 356 (0x164)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917357E/serialNumber=8352A734E82144F322C50B728A4F765A33D72256
        Validity
            Not Before: May 30 09:09:56 2024 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=66584264-0b44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:2c:16:de:b4:84:25:fb:a6:28:52:61:d9:e1:
                    08:76:17:58:f0:6a:d5:b7:da:23:33:2e:48:84:41:
                    52:5c:ba:a0:c4:fc:63:3d:63:c0:49:a7:18:1a:51:
                    bd:b4:c1:d2:86:fd:5a:7d:10:6f:04:1d:59:b4:13:
                    2c:a3:45:bd:6f:ea:26:3b:a5:79:3d:7b:07:80:87:
                    1e:fd:fd:db:5f:a1:2c:66:20:a2:32:a5:a4:d7:ad:
                    97:92:e4:4e:31:ad:41:a2:ca:a1:ea:79:66:9c:8b:
                    53:69:7a:8f:a0:10:7f:77:74:94:42:cf:df:c8:52:
                    a6:a8:2e:e9:2b:47:78:54:4e:c1:0a:b0:bb:af:5d:
                    5e:f2:2f:d1:77:0c:29:b2:0d:0f:0a:80:64:c7:f7:
                    f6:c8:d5:91:99:a3:ef:31:7e:f2:9f:a9:a7:04:bc:
                    41:b1:cd:13:e0:aa:b4:38:0f:d3:1e:9b:3f:01:18:
                    b6:08:4a:47:74:75:33:ac:53:55:4e:c1:5f:c0:66:
                    ab:99:05:d8:71:e2:bd:09:9a:6b:e0:5e:3d:a4:5b:
                    cb:53:87:06:a1:9a:c7:50:b9:81:42:85:74:d9:21:
                    81:d4:bd:b4:17:e5:11:63:d0:6a:05:d5:ed:28:3e:
                    76:39:9e:56:97:78:2e:6d:86:94:da:64:fb:27:de:
                    e4:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:47:EE:B7:AA:18:84:CF:15:27:A8:FB:CB:41:35:27:E0:61:20:C3
            X509v3 Authority Key Identifier:
                keyid:83:52:A7:34:E8:21:44:F3:22:C5:0B:72:8A:4F:76:5A:33:D7:22:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/g1KnNOghRPMixQtyik92WjPXIlY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1KnNOghRPMixQtyik92WjPXIlY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/61D4C1801E6411EF982AF541C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.151.46.0/23
                IPv6:
                  2400:3fa0::/32

    Signature Algorithm: sha256WithRSAEncryption
         63:b9:38:b0:4b:d2:23:cd:61:75:d2:3d:85:d4:b5:69:b3:b8:
         ec:da:74:38:aa:16:97:25:c7:f5:4d:33:fa:0d:09:8d:6c:13:
         f0:62:6b:0c:85:f3:83:b0:61:15:9a:68:a3:a5:f6:91:ec:18:
         0d:57:c0:33:3c:63:5d:d9:01:2a:95:d6:fe:b2:94:ec:cf:a4:
         25:a1:69:d5:55:a0:c6:3f:b1:c1:a0:7a:bc:1b:82:18:f3:68:
         e4:eb:91:24:b1:cb:6e:08:eb:58:1d:52:78:af:2a:82:e7:a9:
         3b:52:8c:a7:09:c3:fc:70:18:7f:98:7d:35:80:7b:ee:c1:e5:
         2a:e1:1c:b0:5c:f1:3a:cc:fe:df:1f:60:e2:41:9a:3f:fd:7b:
         37:9e:0f:c1:af:5e:01:ff:b0:83:b8:c5:45:ae:fa:9a:8a:a0:
         01:b7:a7:2a:8a:cd:bb:cf:08:28:bf:e6:02:cc:80:a5:68:01:
         f7:92:b6:f3:0c:fc:a2:cb:b2:c6:80:77:1c:f3:f0:ce:47:4a:
         1b:83:da:b1:23:f5:09:0e:fc:ab:57:66:84:4d:af:f2:d7:74:
         28:83:e7:90:76:b2:53:8e:0c:b0:d9:e5:ea:3f:ac:cc:65:a6:
         62:1d:78:2c:5e:5c:82:84:54:ca:3d:c0:95:e9:1c:63:f2:ea:
         be:c7:ff:b1
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICAWQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzM1N0UxMTAvBgNVBAUTKDgzNTJBNzM0RTgyMTQ0RjMyMkM1MEI3MjhBNEY3NjVB
MzNENzIyNTYwHhcNMjQwNTMwMDkwOTU2WhcNMjQwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NjU4NDI2NC0wYjQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3iwW3rSEJfumKFJh2eEIdhdY8GrVt9ojMy5IhEFSXLqgxPxjPWPASacYGlG9
tMHShv1afRBvBB1ZtBMso0W9b+omO6V5PXsHgIce/f3bX6EsZiCiMqWk162XkuRO
Ma1Bosqh6nlmnItTaXqPoBB/d3SUQs/fyFKmqC7pK0d4VE7BCrC7r11e8i/Rdwwp
sg0PCoBkx/f2yNWRmaPvMX7yn6mnBLxBsc0T4Kq0OA/THps/ARi2CEpHdHUzrFNV
TsFfwGarmQXYceK9CZpr4F49pFvLU4cGoZrHULmBQoV02SGB1L20F+URY9BqBdXt
KD52OZ5Wl3gubYaU2mT7J97k2QIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFEtH7req
GITPFSeo+8tBNSfgYSDDMB8GA1UdIwQYMBaAFINSpzToIUTzIsULcopPdloz1yJW
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MzU3RS82MDJENzZEODVE
NzMxMUVDQTMyNDg4NTNDNEY5QUUwMi9nMUtuTk9naFJQTWl4UXR5aWs5MldqUFhJ
bFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2cxS25OT2doUlBNaXhRdHlpazkyV2pQWElsWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NzM1N0UvNjAyRDc2RDg1RDczMTFFQ0EzMjQ4ODUzQzRGOUFFMDIvNjFENEMxODAx
RTY0MTFFRjk4MkFGNTQxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E
HzAdMAwEAgABMAYDBAFnly4wDQQCAAIwBwMFACQAP6AwDQYJKoZIhvcNAQELBQAD
ggEBAGO5OLBL0iPNYXXSPYXUtWmzuOzadDiqFpclx/VNM/oNCY1sE/BiawyF84Ow
YRWaaKOl9pHsGA1XwDM8Y13ZASqV1v6ylOzPpCWhadVVoMY/scGgerwbghjzaOTr
kSSxy24I61gdUnivKoLnqTtSjKcJw/xwGH+YfTWAe+7B5SrhHLBc8TrM/t8fYOJB
mj/9ezeeD8GvXgH/sIO4xUWu+pqKoAG3pyqKzbvPCCi/5gLMgKVoAfeStvMM/KLL
ssaAdxzz8M5HShuD2rEj9QkO/KtXZoRNr/LXdCiD55B2slOODLDZ5eo/rMxlpmId
eCxeXIKEVMo9wJXpHGPy6r7H/7E=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-ams.rpki-client.org