Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/FD124A14CC5811EDBE5D203FC4F9AE02.roa
File:                     FD124A14CC5811EDBE5D203FC4F9AE02.roa (raw, json)
Hash identifier:          4SBJwx4zgDEWphqMW4UuzwYVlvL2ESRxXFHTNtCrH7E=
Subject key identifier:   C2:DC:55:15:80:90:1B:7A:B5:EF:FC:4D:2A:80:C8:4C:7E:9C:30:79
Certificate issuer:       /CN=A91B6587/serialNumber=2D634077CC847B59D4048D43E04B3309698FE638
Certificate serial:       C9
Authority key identifier: 2D:63:40:77:CC:84:7B:59:D4:04:8D:43:E0:4B:33:09:69:8F:E6:38
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWNAd8yEe1nUBI1D4EszCWmP5jg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/FD124A14CC5811EDBE5D203FC4F9AE02.roa
Signing time:             Tue 05 Sep 2023 04:34:51 +0000
ROA not before:           Tue 05 Sep 2023 04:34:50 +0000
ROA not after:            Thu 31 Oct 2024 00:00:00 +0000
asID:                     63473
IP address blocks:        103.214.22.0/24 maxlen: 24
                          103.214.23.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/LWNAd8yEe1nUBI1D4EszCWmP5jg.crl
                          rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/LWNAd8yEe1nUBI1D4EszCWmP5jg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWNAd8yEe1nUBI1D4EszCWmP5jg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 06:52:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 201 (0xc9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B6587/serialNumber=2D634077CC847B59D4048D43E04B3309698FE638
        Validity
            Not Before: Sep  5 04:34:50 2023 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=64f6afea-9c90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:07:9b:1b:f2:ca:82:20:a6:62:f6:e5:ef:24:
                    73:5c:98:3e:27:fe:58:9a:d8:90:e9:30:6b:b9:e0:
                    66:1c:54:37:81:d5:0c:ab:e9:59:ba:67:d7:44:e8:
                    42:f6:7c:a0:ac:ef:8a:94:10:11:0a:0b:7c:df:94:
                    4a:ac:40:34:2a:c5:b1:52:8f:17:e8:17:da:2c:e8:
                    82:84:bb:ab:0e:9d:35:4e:4d:ae:ce:49:82:47:e9:
                    0c:c9:c8:07:c3:1c:5a:b3:f7:aa:ff:a0:df:46:8a:
                    58:16:49:33:40:fc:f3:22:ee:a4:53:cb:d7:4d:ff:
                    94:ef:c2:02:6e:bf:77:bc:fd:7a:fa:08:7f:23:49:
                    76:7b:9f:c0:d9:15:87:62:f6:6c:0e:28:19:63:ea:
                    fe:a4:f7:71:b0:39:61:3f:34:5b:a1:88:ff:b2:4c:
                    b1:97:30:e8:0f:e9:21:33:eb:89:5c:ad:24:98:e7:
                    2a:3a:0b:71:e4:55:97:95:df:34:3f:a5:d8:b4:88:
                    ba:b2:de:f4:dc:56:0b:6e:ac:98:9c:16:17:f0:5f:
                    b7:b3:21:b0:9a:6a:b5:5b:a3:d4:ec:b7:e7:8c:ff:
                    c0:e6:1f:37:03:fc:71:30:96:fb:73:91:74:9c:07:
                    45:4a:ae:b5:6f:2e:59:ab:70:aa:03:17:63:5d:65:
                    ec:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:DC:55:15:80:90:1B:7A:B5:EF:FC:4D:2A:80:C8:4C:7E:9C:30:79
            X509v3 Authority Key Identifier:
                keyid:2D:63:40:77:CC:84:7B:59:D4:04:8D:43:E0:4B:33:09:69:8F:E6:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/LWNAd8yEe1nUBI1D4EszCWmP5jg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWNAd8yEe1nUBI1D4EszCWmP5jg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/FD124A14CC5811EDBE5D203FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.214.22.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1f:d2:ff:7a:91:87:d6:13:99:18:62:7f:e1:40:ea:7b:fa:3d:
         f9:25:09:45:eb:67:ea:01:0e:d9:b6:14:b4:9e:8d:32:26:61:
         3a:1a:78:0c:0e:a5:06:10:c4:ba:02:28:ac:ad:09:63:bb:54:
         a7:7a:d8:5f:cd:99:67:ed:d2:92:a4:43:68:58:69:6b:d4:6b:
         5f:4b:cf:0e:fa:16:19:0c:17:2b:34:3d:bb:e5:09:01:f1:af:
         f5:98:9e:af:a0:e5:90:a7:f8:0d:6d:77:2f:a5:dc:1b:a4:0f:
         54:d2:bd:63:81:3f:1e:46:03:2b:a1:5e:e1:76:3f:ac:22:91:
         30:02:87:26:ab:13:0d:dd:84:40:76:ac:30:71:40:de:45:be:
         d1:34:6c:bb:a4:9d:f8:87:9d:fe:74:4a:47:7f:54:1c:cf:5b:
         90:f4:69:10:25:5f:38:a0:a5:b2:54:2f:00:b7:d5:c2:d9:4f:
         4e:a0:ce:e2:b0:4c:0e:28:c6:67:d7:39:05:5d:95:67:c6:fa:
         b5:47:46:57:73:8a:e6:68:4f:ff:4a:f5:f7:ef:3d:a7:c1:c5:
         3a:1b:89:24:db:ed:bd:4f:ae:18:37:76:c4:a2:57:ba:9c:9c:
         8f:53:ea:61:ba:5a:28:f6:04:41:57:e1:d9:09:c1:83:99:4a:
         a7:84:6e:4a
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAMkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjY1ODcxMTAvBgNVBAUTKDJENjM0MDc3Q0M4NDdCNTlENDA0OEQ0M0UwNEIzMzA5
Njk4RkU2MzgwHhcNMjMwOTA1MDQzNDUwWhcNMjQxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NGY2YWZlYS05YzkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmgebG/LKgiCmYvbl7yRzXJg+J/5YmtiQ6TBrueBmHFQ3gdUMq+lZumfXROhC
9nygrO+KlBARCgt835RKrEA0KsWxUo8X6BfaLOiChLurDp01Tk2uzkmCR+kMycgH
wxxas/eq/6DfRopYFkkzQPzzIu6kU8vXTf+U78ICbr93vP16+gh/I0l2e5/A2RWH
YvZsDigZY+r+pPdxsDlhPzRboYj/skyxlzDoD+khM+uJXK0kmOcqOgtx5FWXld80
P6XYtIi6st703FYLbqyYnBYX8F+3syGwmmq1W6PU7LfnjP/A5h83A/xxMJb7c5F0
nAdFSq61by5Zq3CqAxdjXWXsAwIDAQABo4IClTCCApEwHQYDVR0OBBYEFMLcVRWA
kBt6te/8TSqAyEx+nDB5MB8GA1UdIwQYMBaAFC1jQHfMhHtZ1ASNQ+BLMwlpj+Y4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjU4Ny80MTdENzFCNDkx
ODYxMUVEQTg0QTEyNERDNEY5QUUwMi9MV05BZDh5RWUxblVCSTFENEVzekNXbVA1
amcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0xXTkFkOHlFZTFuVUJJMUQ0RXN6Q1dtUDVqZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QjY1ODcvNDE3RDcxQjQ5MTg2MTFFREE4NEExMjREQzRGOUFFMDIvRkQxMjRBMTRD
QzU4MTFFREJFNUQyMDNGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFn1hYwDQYJKoZIhvcNAQELBQADggEBAB/S/3qRh9YTmRhi
f+FA6nv6PfklCUXrZ+oBDtm2FLSejTImYToaeAwOpQYQxLoCKKytCWO7VKd62F/N
mWft0pKkQ2hYaWvUa19Lzw76FhkMFys0PbvlCQHxr/WYnq+g5ZCn+A1tdy+l3Buk
D1TSvWOBPx5GAyuhXuF2P6wikTAChyarEw3dhEB2rDBxQN5FvtE0bLuknfiHnf50
Skd/VBzPW5D0aRAlXzigpbJULwC31cLZT06gzuKwTA4oxmfXOQVdlWfG+rVHRldz
iuZoT/9K9ffvPafBxTobiSTb7b1Prhg3dsSiV7qcnI9T6mG6Wij2BEFX4dkJwYOZ
SqeEbko=
-----END CERTIFICATE-----
Generated at Sat Jun 1 08:16:02 2024 by rpki-client on console-ams.rpki-client.org