Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6E35/729CB23076FF11EBBFB60D14C4F9AE02/EE188D209F2B11EDBB1C587AC4F9AE02.roa
File:                     EE188D209F2B11EDBB1C587AC4F9AE02.roa (raw, json)
Hash identifier:          n4lT+gWmvtn9anqCH3BPKg8IGWZd3CwkT2CnrdkmB4M=
Subject key identifier:   9A:00:56:71:EA:03:9F:C6:6E:59:0E:C2:85:15:DB:75:B6:AA:E6:6D
Certificate issuer:       /CN=A91D6E35/serialNumber=AA0D3CBE591E1BF64118BF6F0364125FA69B8A90
Certificate serial:       05A2
Authority key identifier: AA:0D:3C:BE:59:1E:1B:F6:41:18:BF:6F:03:64:12:5F:A6:9B:8A:90
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qg08vlkeG_ZBGL9vA2QSX6abipA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D6E35/729CB23076FF11EBBFB60D14C4F9AE02/EE188D209F2B11EDBB1C587AC4F9AE02.roa
Signing time:             Mon 11 Mar 2024 00:02:33 +0000
ROA not before:           Mon 11 Mar 2024 00:02:33 +0000
ROA not after:            Wed 28 May 2025 00:00:00 +0000
asID:                     56264
IP address blocks:        103.163.30.0/24 maxlen: 24
                          103.163.31.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D6E35/729CB23076FF11EBBFB60D14C4F9AE02/qg08vlkeG_ZBGL9vA2QSX6abipA.crl
                          rsync://rpki.apnic.net/member_repository/A91D6E35/729CB23076FF11EBBFB60D14C4F9AE02/qg08vlkeG_ZBGL9vA2QSX6abipA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qg08vlkeG_ZBGL9vA2QSX6abipA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1442 (0x5a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D6E35/serialNumber=AA0D3CBE591E1BF64118BF6F0364125FA69B8A90
        Validity
            Not Before: Mar 11 00:02:33 2024 GMT
            Not After : May 28 00:00:00 2025 GMT
        Subject: CN=65ee4a19-3cca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a2:b8:00:bb:f9:9d:b5:3f:7f:60:18:52:71:
                    fc:29:5e:12:7f:65:87:98:53:38:e1:a3:e5:9a:2a:
                    e1:24:2f:e2:40:22:c5:2b:0f:bd:39:77:47:67:91:
                    46:f1:37:c0:d7:ac:17:d6:51:23:e7:42:9b:fe:43:
                    3a:18:eb:97:33:f6:2d:18:9b:79:10:02:7e:4c:80:
                    ba:b0:b4:d8:64:66:e4:84:ea:fb:14:c2:bc:7b:3e:
                    9f:a9:4d:8c:74:c1:42:0c:63:d2:9a:01:c8:63:96:
                    eb:46:44:57:42:09:a1:15:57:cb:9f:9e:70:e5:8a:
                    29:99:6e:50:f0:ed:09:fc:81:ce:43:a7:36:5d:bd:
                    ee:9a:ac:89:1e:02:05:eb:ac:83:d0:e3:bd:0f:9c:
                    d6:95:8a:2b:f0:b6:2d:3b:7e:20:91:59:4b:84:e2:
                    cd:3a:2b:d7:df:8d:74:06:68:e7:39:8f:95:27:cc:
                    b3:6b:b6:1d:59:ba:01:d7:5c:f7:a1:6b:68:a2:0d:
                    1b:95:b4:55:b4:a6:b9:7c:38:d7:f2:bc:e9:b7:50:
                    1f:42:c0:3a:ba:83:43:9c:0f:e8:9a:c4:18:fd:10:
                    01:56:75:72:6a:ae:1d:d3:44:fc:60:0f:23:7e:c8:
                    d8:d5:b8:0d:83:17:9d:b3:b5:40:4e:29:2b:6d:9d:
                    de:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:00:56:71:EA:03:9F:C6:6E:59:0E:C2:85:15:DB:75:B6:AA:E6:6D
            X509v3 Authority Key Identifier:
                keyid:AA:0D:3C:BE:59:1E:1B:F6:41:18:BF:6F:03:64:12:5F:A6:9B:8A:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D6E35/729CB23076FF11EBBFB60D14C4F9AE02/qg08vlkeG_ZBGL9vA2QSX6abipA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qg08vlkeG_ZBGL9vA2QSX6abipA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6E35/729CB23076FF11EBBFB60D14C4F9AE02/EE188D209F2B11EDBB1C587AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.163.30.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ae:6d:62:2e:30:ab:73:4c:50:88:44:7b:06:46:6c:63:b3:d7:
         7e:7e:03:27:9b:61:eb:6a:66:31:5c:b1:b7:b6:d1:0e:9e:bc:
         5c:8d:1f:88:eb:8a:e9:78:c4:bf:f4:af:68:dc:aa:9e:a2:18:
         4a:f6:58:8a:0f:1e:27:8b:d1:2f:d7:51:b5:f3:d2:6a:39:11:
         ea:c6:dd:37:f1:10:ca:31:87:c8:7e:a9:76:31:46:2e:a8:ab:
         80:f6:1a:46:77:c2:f2:eb:30:ee:b5:4a:54:fd:74:85:ca:5e:
         71:c0:56:8a:50:62:ae:47:04:0f:fe:ec:f4:83:96:c2:2b:88:
         fc:82:4f:ad:2c:93:5c:13:1a:22:95:f8:34:f0:81:c6:6b:2b:
         2f:68:3f:13:0a:3f:44:0f:ea:36:ae:c4:91:7d:06:8a:d1:86:
         8c:01:0d:cc:0e:79:74:41:80:19:75:b4:f6:f7:a5:0c:48:69:
         14:3f:f8:5b:6f:7d:31:ce:e4:c7:d3:6b:91:90:a0:96:8a:68:
         62:c5:72:d6:d2:7b:97:1d:82:ac:f0:c0:e7:0f:24:54:97:c9:
         98:4f:41:6c:a1:15:aa:63:9d:2a:3f:da:a0:bf:59:e6:da:69:
         d6:22:52:04:5a:a3:31:e9:9c:13:16:a4:9f:17:79:62:92:ef:
         fd:a6:d0:ea
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBaIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDZFMzUxMTAvBgNVBAUTKEFBMEQzQ0JFNTkxRTFCRjY0MTE4QkY2RjAzNjQxMjVG
QTY5QjhBOTAwHhcNMjQwMzExMDAwMjMzWhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02NWVlNGExOS0zY2NhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAw6K4ALv5nbU/f2AYUnH8KV4Sf2WHmFM44aPlmirhJC/iQCLFKw+9OXdHZ5FG
8TfA16wX1lEj50Kb/kM6GOuXM/YtGJt5EAJ+TIC6sLTYZGbkhOr7FMK8ez6fqU2M
dMFCDGPSmgHIY5brRkRXQgmhFVfLn55w5YopmW5Q8O0J/IHOQ6c2Xb3umqyJHgIF
66yD0OO9D5zWlYor8LYtO34gkVlLhOLNOivX3410BmjnOY+VJ8yza7YdWboB11z3
oWtoog0blbRVtKa5fDjX8rzpt1AfQsA6uoNDnA/omsQY/RABVnVyaq4d00T8YA8j
fsjY1bgNgxeds7VATikrbZ3ehwIDAQABo4IClTCCApEwHQYDVR0OBBYEFJoAVnHq
A5/GblkOwoUV23W2quZtMB8GA1UdIwQYMBaAFKoNPL5ZHhv2QRi/bwNkEl+mm4qQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENkUzNS83MjlDQjIzMDc2
RkYxMUVCQkZCNjBEMTRDNEY5QUUwMi9xZzA4dmxrZUdfWkJHTDl2QTJRU1g2YWJp
cEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3FnMDh2bGtlR19aQkdMOXZBMlFTWDZhYmlwQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RDZFMzUvNzI5Q0IyMzA3NkZGMTFFQkJGQjYwRDE0QzRGOUFFMDIvRUUxODhEMjA5
RjJCMTFFREJCMUM1ODdBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnox4wDQYJKoZIhvcNAQELBQADggEBAK5tYi4wq3NMUIhE
ewZGbGOz135+AyebYetqZjFcsbe20Q6evFyNH4jriul4xL/0r2jcqp6iGEr2WIoP
HieL0S/XUbXz0mo5EerG3TfxEMoxh8h+qXYxRi6oq4D2GkZ3wvLrMO61SlT9dIXK
XnHAVopQYq5HBA/+7PSDlsIriPyCT60sk1wTGiKV+DTwgcZrKy9oPxMKP0QP6jau
xJF9BorRhowBDcwOeXRBgBl1tPb3pQxIaRQ/+FtvfTHO5MfTa5GQoJaKaGLFctbS
e5cdgqzwwOcPJFSXyZhPQWyhFapjnSo/2qC/WebaadYiUgRaozHpnBMWpJ8XeWKS
7/2m0Oo=
-----END CERTIFICATE-----
Generated at Sat Nov 23 00:08:51 2024 by rpki-client on console-ams.rpki-client.org