Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917C1DC/B2D1DE20594F11EB88F7A73EC4F9AE02/B389D236CD0111EE990FC163C4F9AE02.roa
File:                     B389D236CD0111EE990FC163C4F9AE02.roa (raw, json)
Hash identifier:          K3vFa+UeZmzcbmQO3jBtTlT3Mbf/sRl5+Q+MiHUlXpA=
Subject key identifier:   6C:AB:7A:D3:F1:6E:01:95:5A:F4:3D:16:40:05:52:7D:86:30:4E:3A
Certificate issuer:       /CN=A917C1DC/serialNumber=A8D576D4AFBB64045BB0295641B99427D7F878F2
Certificate serial:       0660
Authority key identifier: A8:D5:76:D4:AF:BB:64:04:5B:B0:29:56:41:B9:94:27:D7:F8:78:F2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qNV21K-7ZARbsClWQbmUJ9f4ePI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917C1DC/B2D1DE20594F11EB88F7A73EC4F9AE02/B389D236CD0111EE990FC163C4F9AE02.roa
Signing time:             Tue 09 Apr 2024 00:02:30 +0000
ROA not before:           Tue 09 Apr 2024 00:02:30 +0000
ROA not after:            Wed 28 May 2025 00:00:00 +0000
asID:                     205663
IP address blocks:        103.110.106.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917C1DC/B2D1DE20594F11EB88F7A73EC4F9AE02/qNV21K-7ZARbsClWQbmUJ9f4ePI.crl
                          rsync://rpki.apnic.net/member_repository/A917C1DC/B2D1DE20594F11EB88F7A73EC4F9AE02/qNV21K-7ZARbsClWQbmUJ9f4ePI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qNV21K-7ZARbsClWQbmUJ9f4ePI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 00:44:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1632 (0x660)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917C1DC/serialNumber=A8D576D4AFBB64045BB0295641B99427D7F878F2
        Validity
            Not Before: Apr  9 00:02:30 2024 GMT
            Not After : May 28 00:00:00 2025 GMT
        Subject: CN=66148596-c7d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:e3:a4:5e:fa:81:3c:77:63:21:82:7b:45:7d:
                    5f:76:87:69:22:a5:86:28:02:3f:58:55:48:60:9a:
                    9d:e6:69:1e:9a:47:dd:b4:31:71:5b:49:6c:fd:e6:
                    86:14:a6:92:1f:81:3e:4c:cb:18:5c:8c:d2:1e:2c:
                    6d:4a:dc:6f:3f:aa:07:62:48:2a:3e:9a:ce:23:2b:
                    61:23:f6:e7:59:c3:8e:9a:9f:95:94:e6:64:e9:e2:
                    01:99:e8:78:c7:84:33:42:dd:52:30:a7:19:fa:4c:
                    0e:3e:47:08:cb:43:2c:1f:18:f9:e0:2f:b4:b7:a0:
                    83:8e:43:7f:13:6d:c8:4b:23:0a:ea:cd:91:06:16:
                    8f:07:8b:51:fc:fb:aa:81:33:8a:6a:21:98:c3:c2:
                    5c:6c:66:87:33:65:1c:cb:18:05:fa:f6:ff:4d:7a:
                    16:ff:4f:ff:13:7a:77:6f:97:96:45:93:4e:3a:6d:
                    65:5c:ed:e9:0f:a3:81:be:9c:69:91:34:99:af:24:
                    66:7a:38:6e:a5:a1:07:46:d3:cf:74:2d:ab:db:b3:
                    4e:16:9d:a7:6d:16:f6:fb:7d:7e:82:fa:08:90:18:
                    92:3e:d7:ff:70:4c:5d:0b:c3:26:87:bf:b1:55:e6:
                    76:6f:39:88:64:68:f3:da:ca:74:e9:a6:dc:d4:59:
                    38:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:AB:7A:D3:F1:6E:01:95:5A:F4:3D:16:40:05:52:7D:86:30:4E:3A
            X509v3 Authority Key Identifier:
                keyid:A8:D5:76:D4:AF:BB:64:04:5B:B0:29:56:41:B9:94:27:D7:F8:78:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917C1DC/B2D1DE20594F11EB88F7A73EC4F9AE02/qNV21K-7ZARbsClWQbmUJ9f4ePI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qNV21K-7ZARbsClWQbmUJ9f4ePI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C1DC/B2D1DE20594F11EB88F7A73EC4F9AE02/B389D236CD0111EE990FC163C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.110.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:87:f1:f6:0c:50:7d:a3:75:91:82:86:e1:4b:01:33:51:84:
         16:2a:6f:a0:ef:05:44:e3:54:f0:34:70:86:31:ed:bd:95:7a:
         7d:f8:6d:02:ba:e9:fb:2d:84:e4:d0:14:eb:3e:f5:cf:13:86:
         2c:bb:d3:ec:92:34:2d:dd:2a:da:87:ed:27:03:8a:e4:f1:f7:
         92:a1:f1:c7:1c:1c:76:cb:6a:2f:ee:f7:9e:56:dd:e7:af:b8:
         0f:4b:b4:92:96:11:21:7b:72:c0:2b:cc:ac:0a:c5:bb:7e:40:
         ad:59:e2:89:1f:38:ec:e1:db:4b:83:92:cf:0f:00:c5:e7:e6:
         38:0b:6c:fd:d3:2f:5b:55:2a:9d:e4:c7:03:65:16:90:ef:49:
         4c:31:ff:80:1b:09:6e:1f:e4:9f:d5:43:c2:d3:cf:c6:ad:74:
         00:e2:7e:f6:91:0d:2c:0c:02:d8:9a:51:a0:43:5a:e5:4f:88:
         4b:07:95:86:5f:42:45:a2:f1:65:88:9c:98:90:32:50:7b:ce:
         90:b6:77:90:e0:8e:e9:12:9d:52:56:4d:d5:c7:78:86:40:3a:
         c7:c8:86:29:87:37:95:60:f2:ae:2e:04:cb:30:b4:39:4d:f7:
         bc:c1:6c:a4:2e:3a:9d:54:1e:1d:f0:74:db:a3:3b:34:32:3b:
         cb:58:71:02
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBmAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0MxREMxMTAvBgNVBAUTKEE4RDU3NkQ0QUZCQjY0MDQ1QkIwMjk1NjQxQjk5NDI3
RDdGODc4RjIwHhcNMjQwNDA5MDAwMjMwWhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02NjE0ODU5Ni1jN2Q3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApuOkXvqBPHdjIYJ7RX1fdodpIqWGKAI/WFVIYJqd5mkemkfdtDFxW0ls/eaG
FKaSH4E+TMsYXIzSHixtStxvP6oHYkgqPprOIythI/bnWcOOmp+VlOZk6eIBmeh4
x4QzQt1SMKcZ+kwOPkcIy0MsHxj54C+0t6CDjkN/E23ISyMK6s2RBhaPB4tR/Puq
gTOKaiGYw8JcbGaHM2UcyxgF+vb/TXoW/0//E3p3b5eWRZNOOm1lXO3pD6OBvpxp
kTSZryRmejhupaEHRtPPdC2r27NOFp2nbRb2+31+gvoIkBiSPtf/cExdC8Mmh7+x
VeZ2bzmIZGjz2sp06abc1Fk4jwIDAQABo4IClTCCApEwHQYDVR0OBBYEFGyretPx
bgGVWvQ9FkAFUn2GME46MB8GA1UdIwQYMBaAFKjVdtSvu2QEW7ApVkG5lCfX+Hjy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzFEQy9CMkQxREUyMDU5
NEYxMUVCODhGN0E3M0VDNEY5QUUwMi9xTlYyMUstN1pBUmJzQ2xXUWJtVUo5ZjRl
UEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3FOVjIxSy03WkFSYnNDbFdRYm1VSjlmNGVQSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
N0MxREMvQjJEMURFMjA1OTRGMTFFQjg4RjdBNzNFQzRGOUFFMDIvQjM4OUQyMzZD
RDAxMTFFRTk5MEZDMTYzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnbmowDQYJKoZIhvcNAQELBQADggEBAFOH8fYMUH2jdZGC
huFLATNRhBYqb6DvBUTjVPA0cIYx7b2Ven34bQK66fsthOTQFOs+9c8Thiy70+yS
NC3dKtqH7ScDiuTx95Kh8cccHHbLai/u955W3eevuA9LtJKWESF7csArzKwKxbt+
QK1Z4okfOOzh20uDks8PAMXn5jgLbP3TL1tVKp3kxwNlFpDvSUwx/4AbCW4f5J/V
Q8LTz8atdADifvaRDSwMAtiaUaBDWuVPiEsHlYZfQkWi8WWInJiQMlB7zpC2d5Dg
jukSnVJWTdXHeIZAOsfIhimHN5Vg8q4uBMswtDlN97zBbKQuOp1UHh3wdNujOzQy
O8tYcQI=
-----END CERTIFICATE-----
Generated at Sat Jun 1 02:01:16 2024 by rpki-client on console-ams.rpki-client.org