Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8475/6B6582F23EF011EDA1F3051AC4F9AE02/A4E607B6B1C511EDA095B220C4F9AE02.roa
File:                     A4E607B6B1C511EDA095B220C4F9AE02.roa (raw, json)
Hash identifier:          IaOYa65tPNoGSKOth9OBnqEo5IgGVd7ufuneStp8ah8=
Subject key identifier:   D1:38:03:6E:84:83:8C:43:44:AC:BB:ED:71:FB:AE:FC:BC:92:3F:BF
Certificate issuer:       /CN=A91A8475/serialNumber=A48C9BD4A5DB119E1543324136E02EEA4BCAAF38
Certificate serial:       0195
Authority key identifier: A4:8C:9B:D4:A5:DB:11:9E:15:43:32:41:36:E0:2E:EA:4B:CA:AF:38
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pIyb1KXbEZ4VQzJBNuAu6kvKrzg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A8475/6B6582F23EF011EDA1F3051AC4F9AE02/A4E607B6B1C511EDA095B220C4F9AE02.roa
Signing time:             Sun 27 Oct 2024 02:08:21 +0000
ROA not before:           Sun 27 Oct 2024 02:08:21 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     141467
IP address blocks:        103.11.196.0/23 maxlen: 24
                          2001:df1:4f40::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A8475/6B6582F23EF011EDA1F3051AC4F9AE02/pIyb1KXbEZ4VQzJBNuAu6kvKrzg.crl
                          rsync://rpki.apnic.net/member_repository/A91A8475/6B6582F23EF011EDA1F3051AC4F9AE02/pIyb1KXbEZ4VQzJBNuAu6kvKrzg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pIyb1KXbEZ4VQzJBNuAu6kvKrzg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 01:51:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 405 (0x195)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A8475/serialNumber=A48C9BD4A5DB119E1543324136E02EEA4BCAAF38
        Validity
            Not Before: Oct 27 02:08:21 2024 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=671da095-45d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:44:0a:e6:dd:86:10:af:f5:6f:e5:17:eb:42:
                    0e:72:8a:62:eb:91:8b:e8:ca:00:ac:cd:5f:72:15:
                    bf:de:93:1b:2a:89:bb:f3:b1:c4:78:6b:1e:49:8c:
                    c4:3a:34:b9:8a:14:7f:f2:7a:45:c1:e9:c9:35:a2:
                    7b:76:86:e0:f7:31:c5:49:e2:7b:86:be:ef:6d:64:
                    50:da:66:38:b5:78:2b:94:6b:d7:ef:7c:08:41:a2:
                    75:15:ce:4c:4b:a6:a2:7f:0a:c6:27:2c:98:9f:f2:
                    fa:f8:ad:d8:5c:3e:d2:51:10:29:93:b2:0d:f2:16:
                    85:23:a4:91:75:7e:04:2f:f6:d9:4c:da:b8:8e:b2:
                    eb:eb:f8:4d:8b:b1:cc:59:e2:c0:2c:b7:b8:71:27:
                    92:d2:5b:a1:01:65:79:4d:ab:57:25:fc:b1:a2:8d:
                    46:62:73:fc:23:91:14:5e:99:f5:4c:84:fc:25:6e:
                    b0:7d:4e:e2:31:54:45:39:ed:ea:c0:a6:1a:fb:52:
                    9a:62:85:14:f5:9e:ba:fe:61:36:1c:1f:c0:4a:0e:
                    41:d9:66:7e:fb:a0:15:d9:da:80:5b:8f:1b:49:27:
                    33:da:35:b8:99:f5:2f:9a:fc:15:33:6c:ec:47:86:
                    6f:ef:f2:bd:e2:c3:76:df:5e:5d:b6:ce:09:16:27:
                    e2:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:38:03:6E:84:83:8C:43:44:AC:BB:ED:71:FB:AE:FC:BC:92:3F:BF
            X509v3 Authority Key Identifier:
                keyid:A4:8C:9B:D4:A5:DB:11:9E:15:43:32:41:36:E0:2E:EA:4B:CA:AF:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A8475/6B6582F23EF011EDA1F3051AC4F9AE02/pIyb1KXbEZ4VQzJBNuAu6kvKrzg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pIyb1KXbEZ4VQzJBNuAu6kvKrzg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8475/6B6582F23EF011EDA1F3051AC4F9AE02/A4E607B6B1C511EDA095B220C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.11.196.0/23
                IPv6:
                  2001:df1:4f40::/48

    Signature Algorithm: sha256WithRSAEncryption
         4c:81:16:a6:f8:24:19:a1:9d:c8:87:23:2e:77:9b:89:51:57:
         66:6b:ed:6c:be:87:85:0c:c9:47:42:ba:47:b6:ad:2b:21:d7:
         09:df:1d:4d:18:33:c6:a2:9f:a4:16:f0:74:8b:e5:40:4f:90:
         7e:0c:3e:2d:cf:03:fd:5e:e9:3f:36:3b:cb:46:5e:06:f2:0d:
         09:c8:62:db:b8:a4:73:e9:02:cd:4a:29:1a:58:d9:42:be:08:
         63:11:ab:1e:56:00:a0:b5:97:37:d9:13:c3:6a:31:ec:ab:a5:
         75:a7:52:62:5d:c2:fd:17:f9:16:8a:69:25:16:70:e1:a4:ab:
         21:0b:47:46:e2:30:2d:97:44:d1:17:51:e9:84:f3:31:26:06:
         bc:70:7f:16:fb:c6:e6:12:50:dc:f7:f0:f1:36:06:31:20:2e:
         8d:af:41:27:2e:48:79:2d:bb:93:b4:ec:5d:76:02:b4:07:f9:
         16:97:f4:58:df:7a:68:00:03:02:c4:27:8f:a5:e0:71:b2:33:
         7d:b9:3d:73:f4:03:73:2e:38:03:2f:f5:46:e2:41:28:19:45:
         df:e6:67:73:19:78:00:6f:d3:32:a0:4f:37:16:69:f2:e4:52:
         67:c8:a9:c7:71:87:e6:e9:55:4a:04:70:d1:6f:91:91:0a:21:
         9f:79:cb:63
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgICAZUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTg0NzUxMTAvBgNVBAUTKEE0OEM5QkQ0QTVEQjExOUUxNTQzMzI0MTM2RTAyRUVB
NEJDQUFGMzgwHhcNMjQxMDI3MDIwODIxWhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzFkYTA5NS00NWQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAykQK5t2GEK/1b+UX60IOcopi65GL6MoArM1fchW/3pMbKom787HEeGseSYzE
OjS5ihR/8npFwenJNaJ7dobg9zHFSeJ7hr7vbWRQ2mY4tXgrlGvX73wIQaJ1Fc5M
S6aifwrGJyyYn/L6+K3YXD7SURApk7IN8haFI6SRdX4EL/bZTNq4jrLr6/hNi7HM
WeLALLe4cSeS0luhAWV5TatXJfyxoo1GYnP8I5EUXpn1TIT8JW6wfU7iMVRFOe3q
wKYa+1KaYoUU9Z66/mE2HB/ASg5B2WZ++6AV2dqAW48bSScz2jW4mfUvmvwVM2zs
R4Zv7/K94sN2315dts4JFifibQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFNE4A26E
g4xDRKy77XH7rvy8kj+/MB8GA1UdIwQYMBaAFKSMm9Sl2xGeFUMyQTbgLupLyq84
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODQ3NS82QjY1ODJGMjNF
RjAxMUVEQTFGMzA1MUFDNEY5QUUwMi9wSXliMUtYYkVaNFZRekpCTnVBdTZrdkty
emcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3BJeWIxS1hiRVo0VlF6SkJOdUF1Nmt2S3J6Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTg0NzUvNkI2NTgyRjIzRUYwMTFFREExRjMwNTFBQzRGOUFFMDIvQTRFNjA3QjZC
MUM1MTFFREEwOTVCMjIwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E
ITAfMAwEAgABMAYDBAFnC8QwDwQCAAIwCQMHACABDfFPQDANBgkqhkiG9w0BAQsF
AAOCAQEATIEWpvgkGaGdyIcjLnebiVFXZmvtbL6HhQzJR0K6R7atKyHXCd8dTRgz
xqKfpBbwdIvlQE+Qfgw+Lc8D/V7pPzY7y0ZeBvINCchi27ikc+kCzUopGljZQr4I
YxGrHlYAoLWXN9kTw2ox7KuldadSYl3C/Rf5FoppJRZw4aSrIQtHRuIwLZdE0RdR
6YTzMSYGvHB/FvvG5hJQ3Pfw8TYGMSAuja9BJy5IeS27k7TsXXYCtAf5Fpf0WN96
aAADAsQnj6XgcbIzfbk9c/QDcy44Ay/1RuJBKBlF3+Zncxl4AG/TMqBPNxZp8uRS
Z8ipx3GH5ulVSgRw0W+RkQohn3nLYw==
-----END CERTIFICATE-----
Generated at Sat Nov 23 03:58:47 2024 by rpki-client on console-ams.rpki-client.org