Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9144463/8BF5A5D4113611ED8F0AB712C4F9AE02/3E6091DA139811EDB1D7223FC4F9AE02.roa
File:                     3E6091DA139811EDB1D7223FC4F9AE02.roa (raw, json)
Hash identifier:          pPqfy6MrMQAhBR4En++nqCHYyx2R/69ReVZ+i2NT/No=
Subject key identifier:   AC:ED:08:30:E7:3C:EA:D9:EA:C1:97:A9:D5:B1:09:EB:B6:6A:57:18
Certificate issuer:       /CN=A9144463/serialNumber=6BAA5C520B8E4BF564C4BBF46E1F316BD45FA037
Certificate serial:       01BB
Authority key identifier: 6B:AA:5C:52:0B:8E:4B:F5:64:C4:BB:F4:6E:1F:31:6B:D4:5F:A0:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a6pcUguOS_VkxLv0bh8xa9RfoDc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9144463/8BF5A5D4113611ED8F0AB712C4F9AE02/3E6091DA139811EDB1D7223FC4F9AE02.roa
Signing time:             Sat 25 May 2024 05:10:57 +0000
ROA not before:           Sat 25 May 2024 05:10:57 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     38172
IP address blocks:        103.4.61.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9144463/8BF5A5D4113611ED8F0AB712C4F9AE02/a6pcUguOS_VkxLv0bh8xa9RfoDc.crl
                          rsync://rpki.apnic.net/member_repository/A9144463/8BF5A5D4113611ED8F0AB712C4F9AE02/a6pcUguOS_VkxLv0bh8xa9RfoDc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a6pcUguOS_VkxLv0bh8xa9RfoDc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 01:33:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 443 (0x1bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9144463/serialNumber=6BAA5C520B8E4BF564C4BBF46E1F316BD45FA037
        Validity
            Not Before: May 25 05:10:57 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=665172e1-3531
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c4:a8:bd:76:80:2b:e0:8f:ed:4a:3f:87:5d:
                    53:46:b8:dd:78:f9:e0:ad:2f:d0:80:22:b4:e6:74:
                    ca:6d:53:c9:bd:98:a9:36:93:26:8e:a0:b1:7f:88:
                    7f:76:93:4c:61:ec:40:9e:16:eb:d6:19:10:80:7a:
                    0f:12:25:3d:de:75:b3:c0:bd:4a:2a:da:66:20:c9:
                    74:4a:f7:7d:15:90:2f:17:be:ae:f0:f2:7a:cc:59:
                    2e:41:d4:9a:07:6d:28:82:53:be:ba:c0:de:4d:c0:
                    5f:3e:a9:f7:ab:20:ce:d1:86:55:4a:cc:4f:a6:49:
                    dd:a8:09:cb:27:b0:31:0d:2f:d7:c1:82:93:0f:e7:
                    49:4c:79:ed:75:d2:20:a6:3b:06:59:fe:02:32:b3:
                    33:99:1d:7d:83:1c:d4:17:92:95:85:75:b8:3a:87:
                    c3:9d:c3:a8:b3:79:72:82:32:d7:37:e8:77:06:63:
                    ef:13:64:c2:36:17:e6:45:94:97:13:58:58:35:9d:
                    e1:ed:d2:bc:2c:67:1c:ac:77:4f:8e:5d:fc:34:e4:
                    76:c7:f6:64:dc:84:73:2a:ff:72:ab:b1:bb:d7:8f:
                    57:71:92:de:ff:ca:60:66:96:e0:35:42:90:f8:a1:
                    31:91:e3:3a:6f:52:c1:62:84:fb:13:ef:be:ca:ee:
                    a0:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:ED:08:30:E7:3C:EA:D9:EA:C1:97:A9:D5:B1:09:EB:B6:6A:57:18
            X509v3 Authority Key Identifier:
                keyid:6B:AA:5C:52:0B:8E:4B:F5:64:C4:BB:F4:6E:1F:31:6B:D4:5F:A0:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9144463/8BF5A5D4113611ED8F0AB712C4F9AE02/a6pcUguOS_VkxLv0bh8xa9RfoDc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a6pcUguOS_VkxLv0bh8xa9RfoDc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144463/8BF5A5D4113611ED8F0AB712C4F9AE02/3E6091DA139811EDB1D7223FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.4.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:16:fb:cb:48:6c:25:0b:ed:9f:b0:da:c1:33:70:ed:be:ec:
         bb:8d:0e:50:dd:f3:54:4d:79:70:08:96:06:40:7f:e5:77:5a:
         0d:ff:2a:47:35:2e:83:29:bc:ad:e2:cf:94:b3:ed:29:50:6c:
         a6:6d:31:1f:77:d2:70:97:31:eb:e0:5c:21:d4:e2:83:f2:aa:
         d5:5c:4b:a0:e0:bd:6c:8a:b5:c6:a5:2c:c5:d0:a2:31:38:d9:
         15:c2:32:6b:f2:ef:4e:c5:e7:25:2b:e1:6e:78:3b:72:94:05:
         20:3c:ca:40:57:a6:e3:78:22:1a:c5:89:25:f1:e7:4d:6c:ec:
         fd:a9:7e:e5:4c:6b:3a:2e:32:f3:86:82:ce:3d:cb:91:e3:27:
         0f:cf:d1:5d:96:81:2a:7e:67:86:1d:ef:a6:61:2d:94:75:be:
         66:a3:10:85:dd:62:49:3a:60:91:cd:c9:9b:e2:0a:b7:56:f5:
         08:08:ef:ad:f0:de:34:78:2f:6f:e5:76:e9:a7:02:b5:b7:9f:
         a3:38:49:0c:ec:1f:22:9c:5e:9b:33:f9:ab:8b:fc:bb:f5:3f:
         f8:9a:43:1b:3a:7a:54:e1:2e:a1:1a:df:99:77:4d:3f:7f:9d:
         17:0e:f5:25:dd:e5:93:5f:44:5d:70:be:59:a2:e8:d8:26:ba:
         99:70:3d:d9
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAbswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDQ0NjMxMTAvBgNVBAUTKDZCQUE1QzUyMEI4RTRCRjU2NEM0QkJGNDZFMUYzMTZC
RDQ1RkEwMzcwHhcNMjQwNTI1MDUxMDU3WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NjUxNzJlMS0zNTMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArMSovXaAK+CP7Uo/h11TRrjdePngrS/QgCK05nTKbVPJvZipNpMmjqCxf4h/
dpNMYexAnhbr1hkQgHoPEiU93nWzwL1KKtpmIMl0Svd9FZAvF76u8PJ6zFkuQdSa
B20oglO+usDeTcBfPqn3qyDO0YZVSsxPpkndqAnLJ7AxDS/XwYKTD+dJTHntddIg
pjsGWf4CMrMzmR19gxzUF5KVhXW4OofDncOos3lygjLXN+h3BmPvE2TCNhfmRZSX
E1hYNZ3h7dK8LGccrHdPjl38NOR2x/Zk3IRzKv9yq7G7149XcZLe/8pgZpbgNUKQ
+KExkeM6b1LBYoT7E+++yu6gywIDAQABo4IClTCCApEwHQYDVR0OBBYEFKztCDDn
POrZ6sGXqdWxCeu2alcYMB8GA1UdIwQYMBaAFGuqXFILjkv1ZMS79G4fMWvUX6A3
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDQ2My84QkY1QTVENDEx
MzYxMUVEOEYwQUI3MTJDNEY5QUUwMi9hNnBjVWd1T1NfVmt4THYwYmg4eGE5UmZv
RGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2E2cGNVZ3VPU19Wa3hMdjBiaDh4YTlSZm9EYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDQ0NjMvOEJGNUE1RDQxMTM2MTFFRDhGMEFCNzEyQzRGOUFFMDIvM0U2MDkxREEx
Mzk4MTFFREIxRDcyMjNGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnBD0wDQYJKoZIhvcNAQELBQADggEBAIEW+8tIbCUL7Z+w
2sEzcO2+7LuNDlDd81RNeXAIlgZAf+V3Wg3/Kkc1LoMpvK3iz5Sz7SlQbKZtMR93
0nCXMevgXCHU4oPyqtVcS6DgvWyKtcalLMXQojE42RXCMmvy707F5yUr4W54O3KU
BSA8ykBXpuN4IhrFiSXx501s7P2pfuVMazouMvOGgs49y5HjJw/P0V2WgSp+Z4Yd
76ZhLZR1vmajEIXdYkk6YJHNyZviCrdW9QgI763w3jR4L2/ldumnArW3n6M4SQzs
HyKcXpsz+auL/Lv1P/iaQxs6elThLqEa35l3TT9/nRcO9SXd5ZNfRF1wvlmi6Ngm
uplwPdk=
-----END CERTIFICATE-----
Generated at Sat Nov 23 03:58:38 2024 by rpki-client on console-ams.rpki-client.org