Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A43EE/01E4E69623CB11EDA8E3583EC4F9AE02/274B6ADCF15B11ED950C456FC4F9AE02.roa
File:                     274B6ADCF15B11ED950C456FC4F9AE02.roa (raw, json)
Hash identifier:          BiugR8dn8pnpzPHCg7eZaT65u46wR3tiYmJITlqhZck=
Subject key identifier:   46:A3:13:2E:A1:1A:59:14:3E:EF:5A:7B:9E:7A:4F:6D:BB:A3:E7:BB
Certificate issuer:       /CN=A91A43EE/serialNumber=8EC333757E363A1711B00273250446FE1B4938DB
Certificate serial:       01C3
Authority key identifier: 8E:C3:33:75:7E:36:3A:17:11:B0:02:73:25:04:46:FE:1B:49:38:DB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jsMzdX42OhcRsAJzJQRG_htJONs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A43EE/01E4E69623CB11EDA8E3583EC4F9AE02/274B6ADCF15B11ED950C456FC4F9AE02.roa
Signing time:             Sat 03 Aug 2024 04:14:50 +0000
ROA not before:           Sat 03 Aug 2024 04:14:50 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     51847
IP address blocks:        103.20.198.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A43EE/01E4E69623CB11EDA8E3583EC4F9AE02/jsMzdX42OhcRsAJzJQRG_htJONs.crl
                          rsync://rpki.apnic.net/member_repository/A91A43EE/01E4E69623CB11EDA8E3583EC4F9AE02/jsMzdX42OhcRsAJzJQRG_htJONs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jsMzdX42OhcRsAJzJQRG_htJONs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 451 (0x1c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A43EE/serialNumber=8EC333757E363A1711B00273250446FE1B4938DB
        Validity
            Not Before: Aug  3 04:14:50 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=66adaeba-1510
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:d5:f6:cc:be:40:91:ad:a2:fc:81:73:6f:3c:
                    89:06:01:8c:bc:6f:cc:0d:80:de:c0:79:45:f2:19:
                    b1:d1:49:76:1d:52:0a:79:36:35:9b:f6:a3:94:4c:
                    14:20:bc:61:35:44:f7:52:c8:10:e2:7c:6a:de:e4:
                    14:71:e1:c3:8c:31:4e:d5:8d:50:a9:2f:be:82:a5:
                    6c:bf:33:df:30:ee:e5:ea:f2:3a:50:f5:c5:97:a5:
                    20:2c:b1:a8:dd:6b:62:e6:c1:23:1a:75:8d:a6:4d:
                    1b:35:cb:c7:0a:5a:ab:71:43:d0:98:5f:f4:de:f6:
                    90:15:90:eb:2f:93:7f:ec:0f:38:3d:b4:bb:b5:97:
                    63:43:c3:47:88:02:49:77:d5:43:b2:15:c2:df:af:
                    8b:a8:b8:52:f8:10:78:cd:eb:3e:1a:0c:bf:72:fb:
                    fe:9e:eb:e4:ad:a1:8d:f3:1f:cb:77:5f:ac:a3:48:
                    9c:a2:19:e6:51:ea:11:97:f9:16:2c:83:3c:6f:22:
                    ad:c3:22:c4:28:eb:15:0f:e6:db:87:68:7a:2a:7e:
                    7b:09:28:da:9b:62:b3:2b:92:9a:12:55:c5:25:21:
                    d5:3d:07:46:6a:29:c5:b7:bf:a3:a8:0d:37:96:69:
                    70:1c:27:43:7d:9c:d0:b7:a4:42:37:58:9d:92:38:
                    7f:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:A3:13:2E:A1:1A:59:14:3E:EF:5A:7B:9E:7A:4F:6D:BB:A3:E7:BB
            X509v3 Authority Key Identifier:
                keyid:8E:C3:33:75:7E:36:3A:17:11:B0:02:73:25:04:46:FE:1B:49:38:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A43EE/01E4E69623CB11EDA8E3583EC4F9AE02/jsMzdX42OhcRsAJzJQRG_htJONs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jsMzdX42OhcRsAJzJQRG_htJONs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A43EE/01E4E69623CB11EDA8E3583EC4F9AE02/274B6ADCF15B11ED950C456FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.20.198.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4a:77:1e:98:8b:b3:7d:36:9d:42:a2:99:fa:64:1b:79:5c:d1:
         f8:1d:f8:c9:83:55:6a:06:72:a6:51:61:c9:10:f9:a3:47:72:
         35:07:65:b2:64:c7:c7:fc:12:31:9d:52:63:33:34:b0:9d:b7:
         28:8c:53:1d:df:61:e5:d4:a5:af:7b:db:de:45:b2:5a:5e:5c:
         ee:bb:44:4c:6a:78:81:23:02:87:4b:6d:70:78:c8:7a:3e:ba:
         a4:aa:40:3b:88:d3:a7:78:8a:64:39:7b:dd:e5:eb:1a:e2:e9:
         4f:77:2b:7b:57:81:3c:3b:be:33:04:f7:52:77:13:53:9d:09:
         98:3b:c1:c5:73:ba:d7:a6:83:64:29:17:45:d9:e1:0a:f3:08:
         3f:39:37:16:66:c8:65:0d:a8:71:39:26:f8:6a:4e:0d:f3:2e:
         3f:85:39:06:b6:9c:2b:96:9c:0f:61:11:59:03:5c:20:43:2b:
         16:3a:18:ee:31:45:56:5a:86:10:38:74:c6:9e:c3:3d:9d:e9:
         71:dc:ab:af:cc:9b:65:77:f3:cf:c4:6c:a3:e4:78:42:03:fc:
         c1:95:0f:c3:80:fd:b9:b1:1c:e8:f9:f5:07:f3:0c:be:54:88:
         b0:2d:f1:ba:2d:0b:cd:9c:ee:b3:10:6a:af:1e:75:63:17:fb:
         90:ec:a2:81
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAcMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTQzRUUxMTAvBgNVBAUTKDhFQzMzMzc1N0UzNjNBMTcxMUIwMDI3MzI1MDQ0NkZF
MUI0OTM4REIwHhcNMjQwODAzMDQxNDUwWhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmFkYWViYS0xNTEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6dX2zL5Aka2i/IFzbzyJBgGMvG/MDYDewHlF8hmx0Ul2HVIKeTY1m/ajlEwU
ILxhNUT3UsgQ4nxq3uQUceHDjDFO1Y1QqS++gqVsvzPfMO7l6vI6UPXFl6UgLLGo
3Wti5sEjGnWNpk0bNcvHClqrcUPQmF/03vaQFZDrL5N/7A84PbS7tZdjQ8NHiAJJ
d9VDshXC36+LqLhS+BB4zes+Ggy/cvv+nuvkraGN8x/Ld1+so0icohnmUeoRl/kW
LIM8byKtwyLEKOsVD+bbh2h6Kn57CSjam2KzK5KaElXFJSHVPQdGainFt7+jqA03
lmlwHCdDfZzQt6RCN1idkjh//QIDAQABo4IClTCCApEwHQYDVR0OBBYEFEajEy6h
GlkUPu9ae556T227o+e7MB8GA1UdIwQYMBaAFI7DM3V+NjoXEbACcyUERv4bSTjb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDNFRS8wMUU0RTY5NjIz
Q0IxMUVEQThFMzU4M0VDNEY5QUUwMi9qc016ZFg0Mk9oY1JzQUp6SlFSR19odEpP
TnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2pzTXpkWDQyT2hjUnNBSnpKUVJHX2h0Sk9Ocy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTQzRUUvMDFFNEU2OTYyM0NCMTFFREE4RTM1ODNFQzRGOUFFMDIvMjc0QjZBRENG
MTVCMTFFRDk1MEM0NTZGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnFMYwDQYJKoZIhvcNAQELBQADggEBAEp3HpiLs302nUKi
mfpkG3lc0fgd+MmDVWoGcqZRYckQ+aNHcjUHZbJkx8f8EjGdUmMzNLCdtyiMUx3f
YeXUpa97295FslpeXO67RExqeIEjAodLbXB4yHo+uqSqQDuI06d4imQ5e93l6xri
6U93K3tXgTw7vjME91J3E1OdCZg7wcVzutemg2QpF0XZ4QrzCD85NxZmyGUNqHE5
JvhqTg3zLj+FOQa2nCuWnA9hEVkDXCBDKxY6GO4xRVZahhA4dMaewz2d6XHcq6/M
m2V388/EbKPkeEID/MGVD8OA/bmxHOj59QfzDL5UiLAt8botC82c7rMQaq8edWMX
+5DsooE=
-----END CERTIFICATE-----
Generated at Sat Nov 23 02:33:43 2024 by rpki-client on console-fra.rpki-client.org