Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/6313E67C8D5711EFB5214A3AC4F9AE02.roa
File:                     6313E67C8D5711EFB5214A3AC4F9AE02.roa (raw, json)
Hash identifier:          BxxzK7GYnNA6XmcJ/JSez9aRNvqpHtoWf05MXCUT/Bs=
Subject key identifier:   43:06:37:E8:AF:D4:DD:2B:CD:EF:0A:49:8F:70:22:82:0C:1D:BD:71
Certificate issuer:       /CN=A91188EE/serialNumber=3AEDA80407D77BB52848ABD9F7259BD807A5D360
Certificate serial:       69
Authority key identifier: 3A:ED:A8:04:07:D7:7B:B5:28:48:AB:D9:F7:25:9B:D8:07:A5:D3:60
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/6313E67C8D5711EFB5214A3AC4F9AE02.roa
Signing time:             Fri 18 Oct 2024 13:46:33 +0000
ROA not before:           Fri 18 Oct 2024 13:46:33 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     151151
IP address blocks:        103.15.156.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.crl
                          rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 105 (0x69)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91188EE/serialNumber=3AEDA80407D77BB52848ABD9F7259BD807A5D360
        Validity
            Not Before: Oct 18 13:46:33 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=671266b9-eeb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:cc:76:88:db:1b:3b:09:47:47:88:ae:68:13:
                    80:b4:26:69:ed:4c:c0:b7:9d:2f:ba:63:3d:0d:33:
                    82:1e:01:ae:bc:89:95:2b:32:b8:23:f3:62:69:c5:
                    79:be:72:8e:ea:ee:cd:16:ed:a0:6c:68:76:7c:4c:
                    07:37:75:f0:59:31:86:a9:55:a2:05:ec:ea:d3:2f:
                    e3:de:5d:a3:1f:71:25:88:12:2a:9f:29:03:00:b8:
                    ea:bd:dc:04:75:cd:da:dc:8f:e4:a3:2d:4e:7a:05:
                    c2:b6:d9:1b:9c:fb:7f:cc:0d:dd:97:dd:ef:d5:e0:
                    08:03:bc:52:b6:49:cf:c9:c3:f9:10:08:c0:e7:a2:
                    93:17:81:49:81:6e:b3:06:78:16:65:83:8f:0a:e9:
                    f2:92:47:75:fb:7a:48:03:c2:ce:b6:cc:ea:e6:e4:
                    c9:70:89:04:a6:d6:ab:7e:22:ce:fe:23:d7:f3:7e:
                    73:b3:76:8e:e1:43:8d:13:1d:0a:97:84:98:e8:38:
                    25:96:c4:fd:7a:6a:6b:e3:40:9a:e4:9b:c6:c8:91:
                    3c:d3:df:fa:f1:d3:0e:bd:1d:8c:22:66:2d:b0:12:
                    5b:c0:36:7d:8d:b2:50:33:85:bd:42:7f:37:52:c0:
                    a4:db:a6:87:93:4a:62:f6:9e:65:6e:60:f2:2e:d0:
                    da:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:06:37:E8:AF:D4:DD:2B:CD:EF:0A:49:8F:70:22:82:0C:1D:BD:71
            X509v3 Authority Key Identifier:
                keyid:3A:ED:A8:04:07:D7:7B:B5:28:48:AB:D9:F7:25:9B:D8:07:A5:D3:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/6313E67C8D5711EFB5214A3AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.15.156.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9e:2d:b0:a7:f0:01:88:50:a8:da:ea:df:1b:4f:3a:ef:6a:1b:
         77:8f:7d:f2:df:7e:45:21:08:b0:96:eb:a4:23:e5:ba:e0:25:
         31:dc:03:eb:70:ee:74:80:ec:6f:25:34:c9:d9:04:a2:15:ec:
         3d:7a:19:0b:9c:e7:fc:0f:d6:7f:d6:83:cd:74:2d:64:5d:64:
         8e:95:84:d8:0e:3e:67:4a:70:0f:06:8b:e8:11:3a:b1:9c:c9:
         42:68:49:54:f2:dc:26:d4:83:9d:87:72:2d:66:ae:5c:c1:f9:
         a9:6d:ba:b1:ac:ef:3f:a4:a2:de:4c:54:bf:60:3f:59:12:37:
         81:a7:76:10:e7:3e:b3:e0:ef:43:97:fa:1b:41:92:c3:c8:79:
         59:9b:bc:95:c9:ed:8d:79:fd:70:88:83:41:19:b7:07:ed:93:
         2b:8a:b0:30:90:d6:99:c6:e2:1c:ba:fd:26:a5:f8:f9:ce:83:
         f3:23:ca:1b:51:46:f1:cc:cb:2c:cb:37:2c:93:35:ca:8d:6d:
         05:22:06:0b:04:ed:7c:67:5c:a6:02:eb:5e:be:01:05:86:ea:
         62:01:47:cd:0e:bb:60:33:e8:a6:3d:1f:78:cb:3b:35:c6:1c:
         1f:70:e3:c7:60:dd:1c:18:4d:66:42:87:d1:b6:f2:a0:f8:5a:
         07:9d:65:9a
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBaTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx
ODhFRTExMC8GA1UEBRMoM0FFREE4MDQwN0Q3N0JCNTI4NDhBQkQ5RjcyNTlCRDgw
N0E1RDM2MDAeFw0yNDEwMTgxMzQ2MzNaFw0yNTA3MzAwMDAwMDBaMBgxFjAUBgNV
BAMTDTY3MTI2NmI5LWVlYjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDBzHaI2xs7CUdHiK5oE4C0JmntTMC3nS+6Yz0NM4IeAa68iZUrMrgj82JpxXm+
co7q7s0W7aBsaHZ8TAc3dfBZMYapVaIF7OrTL+PeXaMfcSWIEiqfKQMAuOq93AR1
zdrcj+SjLU56BcK22Ruc+3/MDd2X3e/V4AgDvFK2Sc/Jw/kQCMDnopMXgUmBbrMG
eBZlg48K6fKSR3X7ekgDws62zOrm5MlwiQSm1qt+Is7+I9fzfnOzdo7hQ40THQqX
hJjoOCWWxP16amvjQJrkm8bIkTzT3/rx0w69HYwiZi2wElvANn2NslAzhb1CfzdS
wKTbpoeTSmL2nmVuYPIu0NoFAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUQwY36K/U
3SvN7wpJj3AiggwdvXEwHwYDVR0jBBgwFoAUOu2oBAfXe7UoSKvZ9yWb2Ael02Aw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE4OEVFLzMyMDk3MzFBRkJB
RjExRUVBNkJDMzk1MkM0RjlBRTAyL091Mm9CQWZYZTdVb1NLdlo5eVdiMkFlbDAy
QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvT3Uyb0JBZlhlN1VvU0t2Wjl5V2IyQWVsMDJBLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
ODhFRS8zMjA5NzMxQUZCQUYxMUVFQTZCQzM5NTJDNEY5QUUwMi82MzEzRTY3QzhE
NTcxMUVGQjUyMTRBM0FDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAWcPnDANBgkqhkiG9w0BAQsFAAOCAQEAni2wp/ABiFCo2urf
G08672obd4998t9+RSEIsJbrpCPluuAlMdwD63DudIDsbyU0ydkEohXsPXoZC5zn
/A/Wf9aDzXQtZF1kjpWE2A4+Z0pwDwaL6BE6sZzJQmhJVPLcJtSDnYdyLWauXMH5
qW26sazvP6Si3kxUv2A/WRI3gad2EOc+s+DvQ5f6G0GSw8h5WZu8lcntjXn9cIiD
QRm3B+2TK4qwMJDWmcbiHLr9JqX4+c6D8yPKG1FG8czLLMs3LJM1yo1tBSIGCwTt
fGdcpgLrXr4BBYbqYgFHzQ67YDPopj0feMs7NcYcH3Djx2DdHBhNZkKH0bbyoPha
B51lmg==
-----END CERTIFICATE-----
Generated at Sat Nov 23 06:21:21 2024 by rpki-client on console-fra.rpki-client.org