Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911F1E6/627EF142CDE911EBB7E6BE1CC4F9AE02/4C6FB118CDEC11EB85313B22C4F9AE02.roa
File:                     4C6FB118CDEC11EB85313B22C4F9AE02.roa (raw, json)
Hash identifier:          qJyRELpG1eSCSJZhWONQznbidXxjpswDLlITpBTLxmY=
Subject key identifier:   7C:08:48:13:5E:9B:EF:45:91:97:32:C3:C8:4D:24:0B:A9:95:E2:A8
Certificate issuer:       /CN=A911F1E6/serialNumber=606580F76ED392537D5FCA259694CF9261417C41
Certificate serial:       055B
Authority key identifier: 60:65:80:F7:6E:D3:92:53:7D:5F:CA:25:96:94:CF:92:61:41:7C:41
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YGWA927TklN9X8ollpTPkmFBfEE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911F1E6/627EF142CDE911EBB7E6BE1CC4F9AE02/4C6FB118CDEC11EB85313B22C4F9AE02.roa
Signing time:             Fri 22 Nov 2024 23:12:49 +0000
ROA not before:           Fri 22 Nov 2024 23:12:49 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     142430
IP address blocks:        103.168.66.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911F1E6/627EF142CDE911EBB7E6BE1CC4F9AE02/YGWA927TklN9X8ollpTPkmFBfEE.crl
                          rsync://rpki.apnic.net/member_repository/A911F1E6/627EF142CDE911EBB7E6BE1CC4F9AE02/YGWA927TklN9X8ollpTPkmFBfEE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YGWA927TklN9X8ollpTPkmFBfEE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Dec 2024 22:51:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1371 (0x55b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911F1E6/serialNumber=606580F76ED392537D5FCA259694CF9261417C41
        Validity
            Not Before: Nov 22 23:12:49 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=67410ff1-ea37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:1e:cf:51:cb:23:69:cd:ad:ee:84:7d:19:36:
                    d8:08:0d:5a:2a:50:e1:7c:3a:47:ab:af:3e:3b:80:
                    4f:fc:98:c1:c2:3c:7d:30:c7:ed:74:20:a4:fc:3f:
                    50:6b:52:9a:ee:60:de:a6:a1:77:97:80:7a:8a:f3:
                    48:4e:a0:c4:e7:12:e2:b7:bc:f8:00:fd:37:9d:fb:
                    ee:fa:f8:ac:ef:75:54:d0:2d:a5:43:e3:21:1e:d9:
                    04:6b:65:4f:e3:a3:bc:cd:b2:23:ee:39:78:fe:30:
                    d5:76:11:40:d4:6a:8a:eb:6e:3a:ae:23:ef:46:47:
                    52:cd:98:18:76:d9:03:a6:74:9e:12:45:4f:1b:c8:
                    0b:af:1f:92:c0:8d:9d:b3:16:cc:7e:fb:b3:3a:df:
                    07:7c:71:96:29:06:b6:a3:64:0a:70:6b:69:b5:cc:
                    b6:25:ef:14:fa:ea:a5:be:25:9a:d0:48:3e:2e:4a:
                    df:cf:68:e1:e2:34:35:21:d8:42:b1:ee:65:08:49:
                    34:a1:01:13:8b:28:98:f2:dc:3e:94:aa:5c:3b:cd:
                    e9:1f:6e:a4:a5:38:49:c4:20:77:13:9c:22:c7:23:
                    ff:a7:d5:3e:98:c2:02:9a:ae:94:79:13:87:51:67:
                    27:3b:5f:f0:9b:1f:e4:28:bb:1b:93:f3:3f:e2:e4:
                    e6:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:08:48:13:5E:9B:EF:45:91:97:32:C3:C8:4D:24:0B:A9:95:E2:A8
            X509v3 Authority Key Identifier:
                keyid:60:65:80:F7:6E:D3:92:53:7D:5F:CA:25:96:94:CF:92:61:41:7C:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911F1E6/627EF142CDE911EBB7E6BE1CC4F9AE02/YGWA927TklN9X8ollpTPkmFBfEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YGWA927TklN9X8ollpTPkmFBfEE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F1E6/627EF142CDE911EBB7E6BE1CC4F9AE02/4C6FB118CDEC11EB85313B22C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.168.66.0/23

    Signature Algorithm: sha256WithRSAEncryption
         29:fa:9a:13:61:05:91:3b:ef:2e:5d:9c:2a:a9:df:af:4a:44:
         60:3f:42:4a:65:14:4c:42:e1:2b:7b:af:70:fa:da:56:b2:ab:
         16:b6:2d:c7:53:69:46:8d:71:2f:08:06:41:ff:40:9c:4f:9a:
         66:12:d5:3f:2b:60:a3:30:e7:b6:e1:44:4c:6d:e8:67:14:29:
         f9:38:67:ec:5a:35:0e:ca:5b:66:35:9e:24:5e:4c:df:ae:2f:
         fb:5e:a3:7d:53:15:dc:e6:de:f3:ec:84:96:27:b2:bb:1e:a6:
         dd:a8:3f:20:38:f1:72:43:06:8b:7d:be:8c:67:fd:da:d3:32:
         2e:84:82:ce:97:8c:81:01:3d:ce:64:e7:1b:bd:5d:72:ff:81:
         27:bd:41:bf:8a:d9:2b:a1:82:6d:19:00:38:7d:31:d6:c7:16:
         b3:eb:70:68:36:36:22:dc:4b:5d:0f:ce:e1:ff:93:dd:61:2d:
         74:8e:34:70:28:52:6e:5f:38:8d:42:13:93:05:b2:60:24:e6:
         f7:c1:40:53:77:6c:6b:69:49:79:63:d9:af:64:c1:e9:09:c5:
         17:6a:62:01:52:5c:d1:56:6b:31:e9:ab:fd:9f:43:7b:29:9f:
         d5:40:8e:05:5e:66:3c:a1:65:fa:cc:23:ad:0e:ae:fd:de:8d:
         4d:7d:5d:9c
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBVswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUYxRTYxMTAvBgNVBAUTKDYwNjU4MEY3NkVEMzkyNTM3RDVGQ0EyNTk2OTRDRjky
NjE0MTdDNDEwHhcNMjQxMTIyMjMxMjQ5WhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzQxMGZmMS1lYTM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzB7PUcsjac2t7oR9GTbYCA1aKlDhfDpHq68+O4BP/JjBwjx9MMftdCCk/D9Q
a1Ka7mDepqF3l4B6ivNITqDE5xLit7z4AP03nfvu+vis73VU0C2lQ+MhHtkEa2VP
46O8zbIj7jl4/jDVdhFA1GqK6246riPvRkdSzZgYdtkDpnSeEkVPG8gLrx+SwI2d
sxbMfvuzOt8HfHGWKQa2o2QKcGtptcy2Je8U+uqlviWa0Eg+Lkrfz2jh4jQ1IdhC
se5lCEk0oQETiyiY8tw+lKpcO83pH26kpThJxCB3E5wixyP/p9U+mMICmq6UeROH
UWcnO1/wmx/kKLsbk/M/4uTmOwIDAQABo4IClTCCApEwHQYDVR0OBBYEFHwISBNe
m+9FkZcyw8hNJAupleKoMB8GA1UdIwQYMBaAFGBlgPdu05JTfV/KJZaUz5JhQXxB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjFFNi82MjdFRjE0MkNE
RTkxMUVCQjdFNkJFMUNDNEY5QUUwMi9ZR1dBOTI3VGtsTjlYOG9sbHBUUGttRkJm
RUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1lHV0E5MjdUa2xOOVg4b2xscFRQa21GQmZFRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MUYxRTYvNjI3RUYxNDJDREU5MTFFQkI3RTZCRTFDQzRGOUFFMDIvNEM2RkIxMThD
REVDMTFFQjg1MzEzQjIyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnqEIwDQYJKoZIhvcNAQELBQADggEBACn6mhNhBZE77y5d
nCqp369KRGA/QkplFExC4St7r3D62layqxa2LcdTaUaNcS8IBkH/QJxPmmYS1T8r
YKMw57bhRExt6GcUKfk4Z+xaNQ7KW2Y1niReTN+uL/teo31TFdzm3vPshJYnsrse
pt2oPyA48XJDBot9voxn/drTMi6Egs6XjIEBPc5k5xu9XXL/gSe9Qb+K2Suhgm0Z
ADh9MdbHFrPrcGg2NiLcS10PzuH/k91hLXSONHAoUm5fOI1CE5MFsmAk5vfBQFN3
bGtpSXlj2a9kwekJxRdqYgFSXNFWazHpq/2fQ3spn9VAjgVeZjyhZfrMI60Orv3e
jU19XZw=
-----END CERTIFICATE-----
Generated at Mon Nov 25 01:01:23 2024 by rpki-client on console-ams.rpki-client.org