Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91944AB/6FE306A6C2C811EB98D9DA79C4F9AE02/BB01CFB0723811EEA39E0042C4F9AE02.roa
File:                     BB01CFB0723811EEA39E0042C4F9AE02.roa (raw, json)
Hash identifier:          Wmsh7cLIzhswuDyOVOYJZDVZYFQtMqV8cI7HOX5SCRU=
Subject key identifier:   DF:76:2C:58:AC:53:08:9D:4F:87:EB:6A:8B:37:60:51:DC:01:D0:67
Certificate issuer:       /CN=A91944AB/serialNumber=6A1219726D239C82F5A44601127D1AF8725CE0ED
Certificate serial:       050F
Authority key identifier: 6A:12:19:72:6D:23:9C:82:F5:A4:46:01:12:7D:1A:F8:72:5C:E0:ED
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ahIZcm0jnIL1pEYBEn0a-HJc4O0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91944AB/6FE306A6C2C811EB98D9DA79C4F9AE02/BB01CFB0723811EEA39E0042C4F9AE02.roa
Signing time:             Fri 31 May 2024 01:46:57 +0000
ROA not before:           Fri 31 May 2024 01:46:57 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     142157
IP address blocks:        103.167.18.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91944AB/6FE306A6C2C811EB98D9DA79C4F9AE02/ahIZcm0jnIL1pEYBEn0a-HJc4O0.crl
                          rsync://rpki.apnic.net/member_repository/A91944AB/6FE306A6C2C811EB98D9DA79C4F9AE02/ahIZcm0jnIL1pEYBEn0a-HJc4O0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ahIZcm0jnIL1pEYBEn0a-HJc4O0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 19 Jun 2024 22:27:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1295 (0x50f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91944AB/serialNumber=6A1219726D239C82F5A44601127D1AF8725CE0ED
        Validity
            Not Before: May 31 01:46:57 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=66592c11-8bbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:30:76:21:06:2f:67:89:92:21:30:ae:35:74:
                    46:06:e4:2c:94:9c:2b:54:6b:a4:8a:e9:5d:39:18:
                    5d:e0:a4:a5:7e:e1:74:ed:02:c5:83:88:d7:a7:0d:
                    28:ed:3f:17:e3:9c:bf:3f:28:69:10:8f:2f:c4:20:
                    6b:03:b6:6e:06:e6:c5:f4:fc:0d:6f:70:69:e7:53:
                    58:26:cf:1f:24:6e:f0:3d:30:54:27:c5:52:d6:44:
                    64:1f:a4:e1:a4:7e:69:a4:39:64:95:7f:b6:86:f9:
                    4f:e2:c7:99:bb:9c:4e:af:1d:94:56:4d:1d:5b:ea:
                    a5:27:ee:5f:30:27:30:a0:e2:24:13:12:ee:5d:db:
                    95:59:66:e3:c5:d4:78:72:ac:21:a8:be:9c:33:c2:
                    25:3b:0b:34:bf:cb:ed:d0:ed:6a:7e:16:cd:f8:90:
                    3c:aa:80:d2:03:84:b9:3d:4f:32:f0:38:b5:f1:a2:
                    36:5a:13:17:43:76:45:35:72:05:69:98:b0:4f:f4:
                    b8:d7:8e:2c:95:c0:d6:b3:15:b2:5e:1e:16:c3:e2:
                    01:2f:9e:2b:a2:78:cc:2c:ba:8c:da:84:03:7b:7e:
                    33:8c:e7:97:06:5e:ca:95:bc:c0:36:0f:f4:19:0e:
                    5d:30:9a:95:87:ab:89:be:5a:93:de:f6:91:50:c1:
                    ee:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:76:2C:58:AC:53:08:9D:4F:87:EB:6A:8B:37:60:51:DC:01:D0:67
            X509v3 Authority Key Identifier:
                keyid:6A:12:19:72:6D:23:9C:82:F5:A4:46:01:12:7D:1A:F8:72:5C:E0:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91944AB/6FE306A6C2C811EB98D9DA79C4F9AE02/ahIZcm0jnIL1pEYBEn0a-HJc4O0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ahIZcm0jnIL1pEYBEn0a-HJc4O0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91944AB/6FE306A6C2C811EB98D9DA79C4F9AE02/BB01CFB0723811EEA39E0042C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.167.18.0/23

    Signature Algorithm: sha256WithRSAEncryption
         64:64:9b:58:8a:f7:7b:c8:bb:c0:a4:9e:83:63:37:9f:4c:ea:
         1b:a0:af:35:5b:71:a3:46:bc:f5:ed:a5:57:07:7b:52:7c:f2:
         96:5c:1b:09:8a:6f:8a:1c:e6:9f:a9:03:73:3c:f4:a1:96:b4:
         f9:07:a9:53:0c:ca:e4:79:8d:7f:e3:b7:1d:4f:ce:4f:7e:2a:
         63:40:2f:55:5e:9b:43:8c:be:6a:67:c1:53:98:4b:a9:e9:98:
         22:58:fb:10:3c:6b:4c:e9:c5:f3:32:49:41:7e:33:7f:3a:d1:
         d5:49:d9:c0:bf:b9:9c:fa:bb:98:6b:fd:f2:72:7f:8e:e9:f3:
         41:ac:63:7b:af:3a:c5:29:d4:e0:39:77:cd:e5:29:0f:e0:72:
         32:19:14:97:a7:1d:a6:5c:f0:9d:bd:23:bf:21:39:45:95:39:
         6e:ac:28:80:ff:d0:79:f7:46:d7:0f:7a:fe:31:5f:7f:9f:39:
         ff:38:c6:fa:ac:49:ca:c7:af:14:ee:c1:2c:30:05:57:e9:9f:
         fd:d8:ee:47:e5:4c:46:21:b5:ed:8e:ac:19:25:9d:15:59:59:
         89:70:f2:5b:c4:7c:ec:f8:36:8a:af:0e:46:c8:06:42:50:53:
         29:c6:68:af:54:bb:d8:35:4e:5f:c9:20:b8:7f:a0:29:67:07:
         8d:63:b6:f0
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBQ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTQ0QUIxMTAvBgNVBAUTKDZBMTIxOTcyNkQyMzlDODJGNUE0NDYwMTEyN0QxQUY4
NzI1Q0UwRUQwHhcNMjQwNTMxMDE0NjU3WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NjU5MmMxMS04YmJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5zB2IQYvZ4mSITCuNXRGBuQslJwrVGukiuldORhd4KSlfuF07QLFg4jXpw0o
7T8X45y/PyhpEI8vxCBrA7ZuBubF9PwNb3Bp51NYJs8fJG7wPTBUJ8VS1kRkH6Th
pH5ppDlklX+2hvlP4seZu5xOrx2UVk0dW+qlJ+5fMCcwoOIkExLuXduVWWbjxdR4
cqwhqL6cM8IlOws0v8vt0O1qfhbN+JA8qoDSA4S5PU8y8Di18aI2WhMXQ3ZFNXIF
aZiwT/S4144slcDWsxWyXh4Ww+IBL54ronjMLLqM2oQDe34zjOeXBl7KlbzANg/0
GQ5dMJqVh6uJvlqT3vaRUMHuawIDAQABo4IClTCCApEwHQYDVR0OBBYEFN92LFis
UwidT4fraos3YFHcAdBnMB8GA1UdIwQYMBaAFGoSGXJtI5yC9aRGARJ9GvhyXODt
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDRBQi82RkUzMDZBNkMy
QzgxMUVCOThEOURBNzlDNEY5QUUwMi9haElaY20wam5JTDFwRVlCRW4wYS1ISmM0
TzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FoSVpjbTBqbklMMXBFWUJFbjBhLUhKYzRPMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTQ0QUIvNkZFMzA2QTZDMkM4MTFFQjk4RDlEQTc5QzRGOUFFMDIvQkIwMUNGQjA3
MjM4MTFFRUEzOUUwMDQyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnpxIwDQYJKoZIhvcNAQELBQADggEBAGRkm1iK93vIu8Ck
noNjN59M6hugrzVbcaNGvPXtpVcHe1J88pZcGwmKb4oc5p+pA3M89KGWtPkHqVMM
yuR5jX/jtx1Pzk9+KmNAL1Vem0OMvmpnwVOYS6npmCJY+xA8a0zpxfMySUF+M386
0dVJ2cC/uZz6u5hr/fJyf47p80GsY3uvOsUp1OA5d83lKQ/gcjIZFJenHaZc8J29
I78hOUWVOW6sKID/0Hn3RtcPev4xX3+fOf84xvqsScrHrxTuwSwwBVfpn/3Y7kfl
TEYhte2OrBklnRVZWYlw8lvEfOz4NoqvDkbIBkJQUynGaK9Uu9g1Tl/JILh/oCln
B41jtvA=
-----END CERTIFICATE-----
Generated at Thu Jun 13 01:52:12 2024 by rpki-client on console-fra.rpki-client.org