Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911B11E/06AF1FB2131811ECA1734356C4F9AE02/22DA1C02131B11EC83377D59C4F9AE02.roa
File:                     22DA1C02131B11EC83377D59C4F9AE02.roa (raw, json)
Hash identifier:          rWRqJhH4y787QjbpEE2hN3YZgixRs8J4MQqNG/pdZs8=
Subject key identifier:   99:AE:45:47:53:AF:0D:3D:41:DB:85:A5:1B:DE:36:68:CB:A3:A2:B4
Certificate issuer:       /CN=A911B11E/serialNumber=FF75FE93F8462CB763AD561992B03D163D16ED5F
Certificate serial:       044D
Authority key identifier: FF:75:FE:93:F8:46:2C:B7:63:AD:56:19:92:B0:3D:16:3D:16:ED:5F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_3X-k_hGLLdjrVYZkrA9Fj0W7V8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911B11E/06AF1FB2131811ECA1734356C4F9AE02/22DA1C02131B11EC83377D59C4F9AE02.roa
Signing time:             Sat 29 Jun 2024 02:13:50 +0000
ROA not before:           Sat 29 Jun 2024 02:13:50 +0000
ROA not after:            Sun 31 Aug 2025 00:00:00 +0000
asID:                     142295
IP address blocks:        103.167.158.0/24 maxlen: 24
                          103.167.159.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911B11E/06AF1FB2131811ECA1734356C4F9AE02/_3X-k_hGLLdjrVYZkrA9Fj0W7V8.crl
                          rsync://rpki.apnic.net/member_repository/A911B11E/06AF1FB2131811ECA1734356C4F9AE02/_3X-k_hGLLdjrVYZkrA9Fj0W7V8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_3X-k_hGLLdjrVYZkrA9Fj0W7V8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1101 (0x44d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911B11E/serialNumber=FF75FE93F8462CB763AD561992B03D163D16ED5F
        Validity
            Not Before: Jun 29 02:13:50 2024 GMT
            Not After : Aug 31 00:00:00 2025 GMT
        Subject: CN=667f6dde-fcb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:a9:c2:0e:91:40:63:c9:55:ca:fd:63:8a:34:
                    0e:1f:0c:37:85:93:a2:ef:c3:69:69:60:44:05:6b:
                    79:3b:68:31:73:0d:05:9c:22:94:b4:4d:b7:dd:4e:
                    0b:61:00:17:f6:61:52:d0:70:d6:47:72:3d:37:dc:
                    15:5e:cd:6e:f6:b3:21:19:73:d4:de:b6:3c:ae:59:
                    ee:b6:97:67:db:24:d7:64:11:ea:76:8d:19:20:10:
                    c3:c7:3d:dc:38:a0:ba:8c:aa:8c:29:03:ac:11:68:
                    fe:47:09:9d:72:fd:71:aa:92:8e:9a:89:e2:77:3b:
                    3d:f3:a8:a5:9b:55:04:9f:87:a6:62:35:fb:11:33:
                    5c:c9:16:74:d7:90:26:bb:49:ac:fc:4b:3d:35:ef:
                    23:2d:46:31:ea:cc:17:14:e6:8e:02:21:ec:db:cb:
                    e2:a5:90:1a:bb:80:56:85:a0:ba:1f:2f:04:f7:07:
                    f0:6d:9f:7a:14:f4:51:1e:a6:09:90:57:fc:8f:87:
                    0b:e6:8c:ac:a6:66:76:9e:81:b6:f4:57:32:0c:a4:
                    3a:d2:bf:05:57:2b:d1:7b:7d:92:74:98:bc:50:ef:
                    68:10:b5:1c:bc:6e:3d:ce:c2:16:9a:c9:d3:81:b9:
                    6a:ef:b3:cc:e3:b2:53:08:ef:79:99:be:f2:8c:68:
                    3a:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:AE:45:47:53:AF:0D:3D:41:DB:85:A5:1B:DE:36:68:CB:A3:A2:B4
            X509v3 Authority Key Identifier:
                keyid:FF:75:FE:93:F8:46:2C:B7:63:AD:56:19:92:B0:3D:16:3D:16:ED:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911B11E/06AF1FB2131811ECA1734356C4F9AE02/_3X-k_hGLLdjrVYZkrA9Fj0W7V8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_3X-k_hGLLdjrVYZkrA9Fj0W7V8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B11E/06AF1FB2131811ECA1734356C4F9AE02/22DA1C02131B11EC83377D59C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.167.158.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b2:70:ed:7f:fe:b0:cf:6f:94:6c:d3:94:f7:3b:d2:3c:25:e6:
         a4:b1:a3:71:45:5c:2b:f9:10:44:04:7c:43:93:07:b4:11:4a:
         7c:2e:d0:92:cc:b2:79:d3:3a:bb:2a:56:32:e2:60:1b:12:2c:
         99:c4:28:6f:7b:bb:d5:be:35:7c:34:ed:11:27:b6:54:b7:97:
         fc:ec:ea:49:fd:ef:a9:00:2a:03:26:d4:49:87:8b:6a:a6:25:
         17:41:a4:a0:20:63:fb:98:08:d5:ce:98:39:e2:8f:a0:f0:3b:
         9e:d2:76:96:d8:a9:94:18:b3:cf:ba:d2:4b:01:3d:a3:a1:0e:
         bd:85:55:7a:9f:1e:5c:75:05:aa:20:b7:11:4b:26:b4:e1:4f:
         27:68:e4:d2:94:cb:82:bf:c4:90:7a:46:b9:c8:6a:9f:49:d7:
         28:df:a5:fe:65:d4:75:a9:20:49:8f:d2:5e:07:0f:36:c4:ff:
         cc:8d:62:32:f1:8c:e5:df:ce:54:1e:7b:bb:39:63:d7:84:29:
         98:a5:3b:21:14:e8:6a:0e:65:89:b0:27:26:c1:83:32:5e:78:
         cd:d6:83:34:74:b4:1d:7d:c2:2d:cb:2c:d2:44:3b:54:2f:ad:
         4f:fc:b5:93:2d:8c:fa:12:47:ec:24:1d:1c:b7:a0:79:56:07:
         d4:d6:90:c3
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBE0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUIxMUUxMTAvBgNVBAUTKEZGNzVGRTkzRjg0NjJDQjc2M0FENTYxOTkyQjAzRDE2
M0QxNkVENUYwHhcNMjQwNjI5MDIxMzUwWhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NjdmNmRkZS1mY2IwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlqnCDpFAY8lVyv1jijQOHww3hZOi78NpaWBEBWt5O2gxcw0FnCKUtE233U4L
YQAX9mFS0HDWR3I9N9wVXs1u9rMhGXPU3rY8rlnutpdn2yTXZBHqdo0ZIBDDxz3c
OKC6jKqMKQOsEWj+Rwmdcv1xqpKOmonidzs986ilm1UEn4emYjX7ETNcyRZ015Am
u0ms/Es9Ne8jLUYx6swXFOaOAiHs28vipZAau4BWhaC6Hy8E9wfwbZ96FPRRHqYJ
kFf8j4cL5oyspmZ2noG29FcyDKQ60r8FVyvRe32SdJi8UO9oELUcvG49zsIWmsnT
gblq77PM47JTCO95mb7yjGg60wIDAQABo4IClTCCApEwHQYDVR0OBBYEFJmuRUdT
rw09QduFpRveNmjLo6K0MB8GA1UdIwQYMBaAFP91/pP4Riy3Y61WGZKwPRY9Fu1f
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjExRS8wNkFGMUZCMjEz
MTgxMUVDQTE3MzQzNTZDNEY5QUUwMi9fM1gta19oR0xMZGpyVllaa3JBOUZqMFc3
VjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL18zWC1rX2hHTExkanJWWVprckE5RmowVzdWOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MUIxMUUvMDZBRjFGQjIxMzE4MTFFQ0ExNzM0MzU2QzRGOUFFMDIvMjJEQTFDMDIx
MzFCMTFFQzgzMzc3RDU5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnp54wDQYJKoZIhvcNAQELBQADggEBALJw7X/+sM9vlGzT
lPc70jwl5qSxo3FFXCv5EEQEfEOTB7QRSnwu0JLMsnnTOrsqVjLiYBsSLJnEKG97
u9W+NXw07REntlS3l/zs6kn976kAKgMm1EmHi2qmJRdBpKAgY/uYCNXOmDnij6Dw
O57SdpbYqZQYs8+60ksBPaOhDr2FVXqfHlx1BaogtxFLJrThTydo5NKUy4K/xJB6
RrnIap9J1yjfpf5l1HWpIEmP0l4HDzbE/8yNYjLxjOXfzlQee7s5Y9eEKZilOyEU
6GoOZYmwJybBgzJeeM3WgzR0tB19wi3LLNJEO1QvrU/8tZMtjPoSR+wkHRy3oHlW
B9TWkMM=
-----END CERTIFICATE-----
Generated at Sat Nov 23 01:27:18 2024 by rpki-client on console-ams.rpki-client.org