Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCCB3/41FD6016895C11EA890C6343C4F9AE02/57EE11D0895D11EA81B43245C4F9AE02.roa
File:                     57EE11D0895D11EA81B43245C4F9AE02.roa (raw, json)
Hash identifier:          LX76oihYc6Vcq0IqMjxINDxugVvobb/j/buf30BAPmQ=
Subject key identifier:   64:D3:9A:5E:44:D4:09:6F:A0:79:97:5C:9D:89:92:37:2F:6F:CC:67
Certificate issuer:       /CN=A91DCCB3/serialNumber=CAADCBACC51B2A4652DD73074F282C334D010277
Certificate serial:       0941
Authority key identifier: CA:AD:CB:AC:C5:1B:2A:46:52:DD:73:07:4F:28:2C:33:4D:01:02:77
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yq3LrMUbKkZS3XMHTygsM00BAnc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DCCB3/41FD6016895C11EA890C6343C4F9AE02/57EE11D0895D11EA81B43245C4F9AE02.roa
Signing time:             Thu 28 Nov 2024 20:10:14 +0000
ROA not before:           Thu 28 Nov 2024 20:10:14 +0000
ROA not after:            Sat 31 Jan 2026 00:00:00 +0000
asID:                     394434
IP address blocks:        103.144.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DCCB3/41FD6016895C11EA890C6343C4F9AE02/yq3LrMUbKkZS3XMHTygsM00BAnc.crl
                          rsync://rpki.apnic.net/member_repository/A91DCCB3/41FD6016895C11EA890C6343C4F9AE02/yq3LrMUbKkZS3XMHTygsM00BAnc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yq3LrMUbKkZS3XMHTygsM00BAnc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 13 Apr 2025 19:52:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2369 (0x941)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DCCB3
        Validity
            Not Before: Nov 28 20:10:14 2024 GMT
            Not After : Jan 31 00:00:00 2026 GMT
        Subject: CN=6748ce26-3e10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:4b:48:15:36:dd:09:14:6c:8d:c3:6b:b4:66:
                    40:ab:73:de:dc:db:23:e4:43:6b:a7:5f:95:5b:ac:
                    5e:1c:c9:24:70:ea:32:7b:f7:6a:a1:eb:14:81:ea:
                    3f:d1:59:01:2f:65:26:fb:d3:55:5f:87:ab:46:40:
                    e7:c2:52:c6:5f:55:49:66:0e:c8:3c:51:1b:2b:1c:
                    97:e1:87:4e:09:bc:ee:01:cd:c6:58:d0:75:e3:22:
                    6c:8d:f6:b8:b1:76:be:7f:bf:8f:f9:a0:df:8a:b7:
                    e7:d1:8a:cb:83:3b:72:61:75:dc:63:a6:22:e1:f0:
                    18:52:45:dd:6e:a9:5d:e1:84:0d:d4:ff:b3:be:37:
                    b1:b6:6e:74:d1:42:6f:47:ec:6d:00:c4:c2:dc:f8:
                    c7:69:0f:1c:05:9b:b4:4a:30:f6:52:7c:84:9d:38:
                    6a:d4:e7:1f:77:db:ba:7a:88:a0:d7:d4:b5:39:35:
                    63:fc:e6:99:9e:65:d8:d2:3d:a6:3e:cb:15:b2:7e:
                    6d:6c:ee:b3:26:8b:ba:5c:7c:8e:ef:c6:39:17:e3:
                    2f:70:d2:8f:b5:d4:d7:54:4d:4b:47:06:f8:db:6c:
                    56:91:10:7e:ee:16:51:a1:a2:e2:68:c8:11:2c:c2:
                    81:6f:05:7b:f6:08:4d:5a:0e:6f:07:62:71:4e:1b:
                    f2:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:D3:9A:5E:44:D4:09:6F:A0:79:97:5C:9D:89:92:37:2F:6F:CC:67
            X509v3 Authority Key Identifier:
                keyid:CA:AD:CB:AC:C5:1B:2A:46:52:DD:73:07:4F:28:2C:33:4D:01:02:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DCCB3/41FD6016895C11EA890C6343C4F9AE02/yq3LrMUbKkZS3XMHTygsM00BAnc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yq3LrMUbKkZS3XMHTygsM00BAnc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCCB3/41FD6016895C11EA890C6343C4F9AE02/57EE11D0895D11EA81B43245C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.144.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:4f:9b:ee:82:6d:d8:78:67:a2:bb:35:52:3c:eb:6d:6b:bb:
         04:44:5d:44:0a:5b:00:aa:4d:cf:2a:e5:28:7f:6c:06:ab:de:
         c3:7b:d8:40:1d:2d:bc:ea:fa:5b:d4:cb:f8:c1:00:66:3d:fc:
         bc:9d:5a:c9:a7:b6:71:3b:ab:67:bd:6f:b8:d4:6b:7c:42:a9:
         8b:46:16:c9:3a:e9:1b:0b:0e:72:11:c0:c5:67:07:90:7e:4a:
         be:7d:91:04:0a:a2:81:7e:65:6b:47:62:fc:e9:10:42:e2:44:
         1e:46:09:36:6e:c4:2f:99:11:c5:c2:9a:8e:a4:57:e0:cb:6e:
         e4:6f:bf:34:51:fc:ca:b3:98:8f:9c:1e:66:0c:aa:b7:95:da:
         80:4b:74:7b:0b:80:2a:a8:68:5d:0f:26:b3:5c:e0:ef:8e:29:
         0f:e0:db:ad:11:9f:59:4d:11:41:94:aa:f8:4f:8e:cb:1d:83:
         8d:00:a3:18:b6:bb:9c:54:e3:bf:64:a5:3f:fd:e5:0d:44:e8:
         ae:e6:ac:c0:b2:ad:f4:dc:9d:8c:77:58:41:ef:0f:b5:00:f9:
         1b:0a:31:25:f7:09:21:f1:6c:1c:f3:b2:b6:43:4b:f1:f0:d1:
         40:7e:42:e3:a4:74:ed:65:89:97:fd:88:e7:e2:f2:53:df:c1:
         37:06:94:12
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICCUEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RENDQjMxMTAvBgNVBAUTKENBQURDQkFDQzUxQjJBNDY1MkRENzMwNzRGMjgyQzMz
NEQwMTAyNzcwHhcNMjQxMTI4MjAxMDE0WhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzQ4Y2UyNi0zZTEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAp0tIFTbdCRRsjcNrtGZAq3Pe3Nsj5ENrp1+VW6xeHMkkcOoye/dqoesUgeo/
0VkBL2Um+9NVX4erRkDnwlLGX1VJZg7IPFEbKxyX4YdOCbzuAc3GWNB14yJsjfa4
sXa+f7+P+aDfirfn0YrLgztyYXXcY6Yi4fAYUkXdbqld4YQN1P+zvjextm500UJv
R+xtAMTC3PjHaQ8cBZu0SjD2UnyEnThq1Ocfd9u6eoig19S1OTVj/OaZnmXY0j2m
PssVsn5tbO6zJou6XHyO78Y5F+MvcNKPtdTXVE1LRwb422xWkRB+7hZRoaLiaMgR
LMKBbwV79ghNWg5vB2JxThvyxwIDAQABo4IClTCCApEwHQYDVR0OBBYEFGTTml5E
1AlvoHmXXJ2Jkjcvb8xnMB8GA1UdIwQYMBaAFMqty6zFGypGUt1zB08oLDNNAQJ3
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQ0NCMy80MUZENjAxNjg5
NUMxMUVBODkwQzYzNDNDNEY5QUUwMi95cTNMck1VYktrWlMzWE1IVHlnc00wMEJB
bmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3lxM0xyTVViS2taUzNYTUhUeWdzTTAwQkFuYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RENDQjMvNDFGRDYwMTY4OTVDMTFFQTg5MEM2MzQzQzRGOUFFMDIvNTdFRTExRDA4
OTVEMTFFQTgxQjQzMjQ1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnkI4wDQYJKoZIhvcNAQELBQADggEBAKBPm+6Cbdh4Z6K7
NVI8621ruwREXUQKWwCqTc8q5Sh/bAar3sN72EAdLbzq+lvUy/jBAGY9/LydWsmn
tnE7q2e9b7jUa3xCqYtGFsk66RsLDnIRwMVnB5B+Sr59kQQKooF+ZWtHYvzpEELi
RB5GCTZuxC+ZEcXCmo6kV+DLbuRvvzRR/MqzmI+cHmYMqreV2oBLdHsLgCqoaF0P
JrNc4O+OKQ/g260Rn1lNEUGUqvhPjssdg40Aoxi2u5xU479kpT/95Q1E6K7mrMCy
rfTcnYx3WEHvD7UA+RsKMSX3CSHxbBzzsrZDS/Hw0UB+QuOkdO1liZf9iOfi8lPf
wTcGlBI=
-----END CERTIFICATE-----
Generated at Mon Apr 7 10:27:26 2025 by rpki-client