Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF8B6/40E7FABA3AA611EAAC8F1875C4F9AE02/FB6D5292263C11EEB9F5DB43C4F9AE02.roa
File:                     FB6D5292263C11EEB9F5DB43C4F9AE02.roa (raw, json)
Hash identifier:          F4+ANWrgSV1BYAbYrEyoAC+HEYBZsl5dMdzlHwWIwy8=
Subject key identifier:   F4:A8:97:EF:CA:B6:EF:DD:97:7C:EC:F3:74:75:B1:9E:3B:F7:E6:4C
Certificate issuer:       /CN=A91EF8B6/serialNumber=AD84F4BCBEB3C9365F2827153BA69CED2A9912E2
Certificate serial:       0ABD
Authority key identifier: AD:84:F4:BC:BE:B3:C9:36:5F:28:27:15:3B:A6:9C:ED:2A:99:12:E2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rYT0vL6zyTZfKCcVO6ac7SqZEuI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EF8B6/40E7FABA3AA611EAAC8F1875C4F9AE02/FB6D5292263C11EEB9F5DB43C4F9AE02.roa
Signing time:             Thu 12 Sep 2024 20:57:56 +0000
ROA not before:           Thu 12 Sep 2024 20:57:56 +0000
ROA not after:            Mon 01 Dec 2025 00:00:00 +0000
asID:                     132438
IP address blocks:        103.73.44.0/23 maxlen: 24
                          2406:ec80::/32 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EF8B6/40E7FABA3AA611EAAC8F1875C4F9AE02/rYT0vL6zyTZfKCcVO6ac7SqZEuI.crl
                          rsync://rpki.apnic.net/member_repository/A91EF8B6/40E7FABA3AA611EAAC8F1875C4F9AE02/rYT0vL6zyTZfKCcVO6ac7SqZEuI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rYT0vL6zyTZfKCcVO6ac7SqZEuI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 19:08:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2749 (0xabd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EF8B6/serialNumber=AD84F4BCBEB3C9365F2827153BA69CED2A9912E2
        Validity
            Not Before: Sep 12 20:57:56 2024 GMT
            Not After : Dec  1 00:00:00 2025 GMT
        Subject: CN=66e355d4-7c33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:1b:78:f6:7a:42:01:5e:3d:3c:63:3a:1f:d3:
                    4f:b1:b0:ea:fc:1e:35:98:8b:b1:17:6e:12:b1:69:
                    60:b7:71:f0:81:ad:bd:c5:9b:5c:dc:5c:12:87:ce:
                    5f:a0:05:52:bf:29:c4:74:e7:46:a2:20:bd:71:9c:
                    9e:34:87:5e:d9:8e:fb:c3:be:27:5c:ae:9f:b4:8e:
                    73:1a:18:4b:0c:f4:32:9f:25:6f:6a:da:58:6f:5e:
                    1e:db:d9:ed:7d:2b:1c:9c:9e:fe:ba:04:c7:de:d5:
                    31:8c:c0:3a:77:d9:03:b9:af:23:79:93:a5:10:42:
                    2d:87:c0:13:e5:c1:11:48:67:7e:31:4c:58:87:16:
                    38:33:f6:c3:b6:e5:0f:84:37:6b:fb:b7:ea:f8:9e:
                    e6:ff:77:fa:42:76:20:fe:27:71:fa:17:a1:3d:2c:
                    66:87:cb:b9:35:28:cb:90:b3:0e:b1:98:82:de:d1:
                    f3:42:53:0b:04:c8:e1:b8:40:ea:de:66:7e:dc:dc:
                    17:81:4b:b2:00:77:18:24:93:31:66:c7:50:0c:30:
                    fc:9a:71:f9:0d:3e:cd:00:6b:ff:6e:a2:85:b7:90:
                    77:27:83:8c:9c:8e:8d:ae:0e:cd:08:7a:7b:6f:68:
                    82:cf:09:53:70:a5:6d:a2:2b:8a:cf:6e:8d:93:90:
                    49:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:A8:97:EF:CA:B6:EF:DD:97:7C:EC:F3:74:75:B1:9E:3B:F7:E6:4C
            X509v3 Authority Key Identifier:
                keyid:AD:84:F4:BC:BE:B3:C9:36:5F:28:27:15:3B:A6:9C:ED:2A:99:12:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EF8B6/40E7FABA3AA611EAAC8F1875C4F9AE02/rYT0vL6zyTZfKCcVO6ac7SqZEuI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rYT0vL6zyTZfKCcVO6ac7SqZEuI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF8B6/40E7FABA3AA611EAAC8F1875C4F9AE02/FB6D5292263C11EEB9F5DB43C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.73.44.0/23
                IPv6:
                  2406:ec80::/32

    Signature Algorithm: sha256WithRSAEncryption
         65:db:8e:7b:23:64:2f:51:5b:c5:63:8f:f8:43:fc:44:4f:b7:
         b8:ab:30:aa:4a:39:55:1e:d5:72:7c:72:67:93:0c:76:46:b0:
         17:16:bf:f6:0a:d9:a9:52:91:4f:40:f3:89:e0:93:cd:ae:8f:
         24:93:e7:01:27:2c:d0:31:3e:70:c5:08:a2:9d:36:e2:e3:87:
         37:5a:eb:76:89:ff:e3:6e:14:ed:d1:c1:e0:11:e3:b7:de:8c:
         5d:b9:12:4a:ea:62:a1:48:a9:6c:54:da:7f:86:bd:80:69:d7:
         7e:76:fd:e2:c1:53:68:17:02:81:3e:f7:45:28:43:4c:99:98:
         52:be:8d:ff:20:43:ab:80:7e:7f:c2:a8:bb:ab:fd:50:71:a0:
         f4:c9:e5:f9:ab:d4:d3:31:29:bf:0b:82:c4:b4:31:29:25:34:
         08:aa:90:bc:bc:31:b4:b6:59:d6:f9:84:8c:9a:a7:6c:10:d3:
         1a:4c:b4:48:12:9d:a8:27:28:99:ef:a3:60:7d:9b:73:6f:4b:
         ab:cc:ca:3b:92:46:78:a3:51:76:ea:1e:b0:eb:00:cb:20:20:
         2d:b9:9f:2c:06:e0:6a:8b:ee:7c:3e:87:f7:20:75:25:5b:97:
         cd:45:52:f0:b6:d5:d8:bd:a7:66:5a:c5:a2:b7:c9:99:0e:dc:
         97:a4:04:c6
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICCr0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUY4QjYxMTAvBgNVBAUTKEFEODRGNEJDQkVCM0M5MzY1RjI4MjcxNTNCQTY5Q0VE
MkE5OTEyRTIwHhcNMjQwOTEyMjA1NzU2WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmUzNTVkNC03YzMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1Rt49npCAV49PGM6H9NPsbDq/B41mIuxF24SsWlgt3Hwga29xZtc3FwSh85f
oAVSvynEdOdGoiC9cZyeNIde2Y77w74nXK6ftI5zGhhLDPQynyVvatpYb14e29nt
fSscnJ7+ugTH3tUxjMA6d9kDua8jeZOlEEIth8AT5cERSGd+MUxYhxY4M/bDtuUP
hDdr+7fq+J7m/3f6QnYg/idx+hehPSxmh8u5NSjLkLMOsZiC3tHzQlMLBMjhuEDq
3mZ+3NwXgUuyAHcYJJMxZsdQDDD8mnH5DT7NAGv/bqKFt5B3J4OMnI6Nrg7NCHp7
b2iCzwlTcKVtoiuKz26Nk5BJFwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFPSol+/K
tu/dl3zs83R1sZ479+ZMMB8GA1UdIwQYMBaAFK2E9Ly+s8k2XygnFTumnO0qmRLi
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjhCNi80MEU3RkFCQTNB
QTYxMUVBQUM4RjE4NzVDNEY5QUUwMi9yWVQwdkw2enlUWmZLQ2NWTzZhYzdTcVpF
dUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3JZVDB2TDZ6eVRaZktDY1ZPNmFjN1NxWkV1SS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RUY4QjYvNDBFN0ZBQkEzQUE2MTFFQUFDOEYxODc1QzRGOUFFMDIvRkI2RDUyOTIy
NjNDMTFFRUI5RjVEQjQzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E
HzAdMAwEAgABMAYDBAFnSSwwDQQCAAIwBwMFACQG7IAwDQYJKoZIhvcNAQELBQAD
ggEBAGXbjnsjZC9RW8Vjj/hD/ERPt7irMKpKOVUe1XJ8cmeTDHZGsBcWv/YK2alS
kU9A84ngk82ujyST5wEnLNAxPnDFCKKdNuLjhzda63aJ/+NuFO3RweAR47fejF25
EkrqYqFIqWxU2n+GvYBp1352/eLBU2gXAoE+90UoQ0yZmFK+jf8gQ6uAfn/CqLur
/VBxoPTJ5fmr1NMxKb8LgsS0MSklNAiqkLy8MbS2Wdb5hIyap2wQ0xpMtEgSnagn
KJnvo2B9m3NvS6vMyjuSRnijUXbqHrDrAMsgIC25nywG4GqL7nw+h/cgdSVbl81F
UvC21di9p2ZaxaK3yZkO3JekBMY=
-----END CERTIFICATE-----
Generated at Fri Nov 22 22:14:49 2024 by rpki-client on console-ams.rpki-client.org