Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91982FB/994D6DA6FE8711EBB9FA7263C4F9AE02/D249CE5EFE8911EBA7BEB564C4F9AE02.roa
File:                     D249CE5EFE8911EBA7BEB564C4F9AE02.roa (raw, json)
Hash identifier:          hwyEcWxcD0jdnSqRat0zxBBURHrGVwv/y11/VsXkjfQ=
Subject key identifier:   69:7C:B9:E4:F2:A4:AF:CF:49:E7:73:DF:97:7E:72:1F:A9:82:3F:C5
Certificate issuer:       /CN=A91982FB/serialNumber=4649B249E426C2B8FAAFF62F2790F2E67B00FC5B
Certificate serial:       03FC
Authority key identifier: 46:49:B2:49:E4:26:C2:B8:FA:AF:F6:2F:27:90:F2:E6:7B:00:FC:5B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RkmySeQmwrj6r_YvJ5Dy5nsA_Fs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91982FB/994D6DA6FE8711EBB9FA7263C4F9AE02/D249CE5EFE8911EBA7BEB564C4F9AE02.roa
Signing time:             Wed 11 Oct 2023 00:52:55 +0000
ROA not before:           Wed 11 Oct 2023 00:52:55 +0000
ROA not after:            Mon 30 Dec 2024 00:00:00 +0000
asID:                     136427
IP address blocks:        103.155.145.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91982FB/994D6DA6FE8711EBB9FA7263C4F9AE02/RkmySeQmwrj6r_YvJ5Dy5nsA_Fs.crl
                          rsync://rpki.apnic.net/member_repository/A91982FB/994D6DA6FE8711EBB9FA7263C4F9AE02/RkmySeQmwrj6r_YvJ5Dy5nsA_Fs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RkmySeQmwrj6r_YvJ5Dy5nsA_Fs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 02:44:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1020 (0x3fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91982FB/serialNumber=4649B249E426C2B8FAAFF62F2790F2E67B00FC5B
        Validity
            Not Before: Oct 11 00:52:55 2023 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=6525f1e7-2f08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:8e:c1:49:d5:f3:d4:b8:8c:e9:0a:bd:93:b0:
                    e0:44:1a:dd:cf:22:45:49:f1:fe:48:58:47:a8:1b:
                    f2:01:1c:0c:24:ae:1b:3e:1d:8e:66:4f:4d:3a:07:
                    90:04:f3:ee:75:59:2e:0b:e1:4f:32:9a:07:23:40:
                    85:96:7b:a0:e8:3b:f6:47:bc:ee:c4:1b:9a:11:29:
                    35:83:77:db:d9:d4:e8:7b:64:15:71:2a:ff:83:39:
                    0b:c4:10:e9:c4:6a:d4:0c:e9:2a:21:3b:72:6d:bc:
                    29:6e:bd:e2:90:30:b5:1d:62:54:48:ea:ec:9b:2c:
                    87:ff:33:a8:c5:da:d3:0d:5d:e8:d9:5b:42:5a:da:
                    e2:43:34:82:be:5c:86:92:fa:75:f0:46:ec:32:34:
                    bc:ff:08:5b:c0:4b:17:8a:3c:6d:e3:94:a7:45:24:
                    1a:8c:3b:47:a9:82:d5:51:90:e7:70:12:59:80:ce:
                    01:dd:49:50:89:1d:08:d5:4a:5c:23:ae:d8:95:5a:
                    12:27:82:bb:ce:5f:eb:45:90:a1:68:9e:99:88:bc:
                    fb:f1:81:87:34:26:2f:d6:b6:92:1e:0f:b2:97:95:
                    2c:a4:e9:fc:ec:21:b2:ef:39:5a:e8:8e:0e:c5:8d:
                    b0:13:07:c3:98:90:5e:ad:f2:9d:f5:7a:5e:15:e1:
                    76:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:7C:B9:E4:F2:A4:AF:CF:49:E7:73:DF:97:7E:72:1F:A9:82:3F:C5
            X509v3 Authority Key Identifier:
                keyid:46:49:B2:49:E4:26:C2:B8:FA:AF:F6:2F:27:90:F2:E6:7B:00:FC:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91982FB/994D6DA6FE8711EBB9FA7263C4F9AE02/RkmySeQmwrj6r_YvJ5Dy5nsA_Fs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RkmySeQmwrj6r_YvJ5Dy5nsA_Fs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91982FB/994D6DA6FE8711EBB9FA7263C4F9AE02/D249CE5EFE8911EBA7BEB564C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.155.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:98:70:9f:33:7c:d6:7e:fb:4f:ba:0c:21:ba:21:f2:d5:61:
         a5:21:ee:1c:9f:3f:6c:22:ab:e8:6b:98:64:59:fc:0d:cc:ee:
         f4:a4:b7:c5:a6:df:e2:87:aa:96:e4:5c:20:ad:85:0b:96:ba:
         57:ba:21:ce:ed:73:d2:d7:35:13:28:29:09:7c:99:c3:03:1e:
         5a:4f:57:ff:b6:65:7b:ef:17:00:fb:02:a6:bc:92:66:c3:53:
         dd:2f:2f:d1:8a:b0:db:20:80:48:0a:08:22:6c:15:39:94:db:
         01:f3:d2:0d:8e:38:7c:de:62:41:d4:e9:f3:5f:e6:66:5a:63:
         30:10:b5:8e:fa:ba:08:59:d7:f4:17:b1:f2:a3:3e:ce:30:ee:
         a2:9c:c9:1f:f3:0b:0f:16:3f:64:16:f8:7b:2a:c6:2a:6f:a2:
         9b:c1:52:c4:0e:76:02:49:71:98:c5:f6:35:2f:cf:ef:64:63:
         87:45:c9:15:de:c0:ac:57:00:ae:e1:73:14:fe:38:32:29:3d:
         03:4c:5c:3e:f8:0a:f1:aa:b5:25:f3:61:74:b1:ae:2e:e7:84:
         70:bb:f5:29:76:86:a6:77:82:db:a5:75:32:91:36:ca:ef:20:
         94:b2:98:1c:db:aa:34:46:03:0e:95:ca:86:a0:94:f2:bb:2c:
         f8:64:3f:0c
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICA/wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTgyRkIxMTAvBgNVBAUTKDQ2NDlCMjQ5RTQyNkMyQjhGQUFGRjYyRjI3OTBGMkU2
N0IwMEZDNUIwHhcNMjMxMDExMDA1MjU1WhcNMjQxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NTI1ZjFlNy0yZjA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAso7BSdXz1LiM6Qq9k7DgRBrdzyJFSfH+SFhHqBvyARwMJK4bPh2OZk9NOgeQ
BPPudVkuC+FPMpoHI0CFlnug6Dv2R7zuxBuaESk1g3fb2dToe2QVcSr/gzkLxBDp
xGrUDOkqITtybbwpbr3ikDC1HWJUSOrsmyyH/zOoxdrTDV3o2VtCWtriQzSCvlyG
kvp18EbsMjS8/whbwEsXijxt45SnRSQajDtHqYLVUZDncBJZgM4B3UlQiR0I1Upc
I67YlVoSJ4K7zl/rRZChaJ6ZiLz78YGHNCYv1raSHg+yl5UspOn87CGy7zla6I4O
xY2wEwfDmJBerfKd9XpeFeF2xwIDAQABo4IClTCCApEwHQYDVR0OBBYEFGl8ueTy
pK/PSedz35d+ch+pgj/FMB8GA1UdIwQYMBaAFEZJsknkJsK4+q/2LyeQ8uZ7APxb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODJGQi85OTRENkRBNkZF
ODcxMUVCQjlGQTcyNjNDNEY5QUUwMi9Sa215U2VRbXdyajZyX1l2SjVEeTVuc0Ff
RnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1JrbXlTZVFtd3JqNnJfWXZKNUR5NW5zQV9Gcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTgyRkIvOTk0RDZEQTZGRTg3MTFFQkI5RkE3MjYzQzRGOUFFMDIvRDI0OUNFNUVG
RTg5MTFFQkE3QkVCNTY0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnm5EwDQYJKoZIhvcNAQELBQADggEBAACYcJ8zfNZ++0+6
DCG6IfLVYaUh7hyfP2wiq+hrmGRZ/A3M7vSkt8Wm3+KHqpbkXCCthQuWule6Ic7t
c9LXNRMoKQl8mcMDHlpPV/+2ZXvvFwD7Aqa8kmbDU90vL9GKsNsggEgKCCJsFTmU
2wHz0g2OOHzeYkHU6fNf5mZaYzAQtY76ughZ1/QXsfKjPs4w7qKcyR/zCw8WP2QW
+HsqxipvopvBUsQOdgJJcZjF9jUvz+9kY4dFyRXewKxXAK7hcxT+ODIpPQNMXD74
CvGqtSXzYXSxri7nhHC79Sl2hqZ3gtuldTKRNsrvIJSymBzbqjRGAw6VyoaglPK7
LPhkPww=
-----END CERTIFICATE-----
Generated at Sat Jun 1 04:07:29 2024 by rpki-client on console-ams.rpki-client.org