Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916F9F6/F655F7F67A6711EBBCF76C6FC4F9AE02/81D7961ADD9211EDA5A21671C4F9AE02.roa
File:                     81D7961ADD9211EDA5A21671C4F9AE02.roa (raw, json)
Hash identifier:          gNRYTYMwj494RNxbNtDWuzvBMRPNNtKBT2cX5Pzvaas=
Subject key identifier:   69:F0:DA:FA:34:0A:D4:99:39:D9:F1:49:27:93:0A:35:7A:E4:74:ED
Certificate issuer:       /CN=A916F9F6/serialNumber=14E5163867106FCE4552AEECFB1F202661E6DF5D
Certificate serial:       05F9
Authority key identifier: 14:E5:16:38:67:10:6F:CE:45:52:AE:EC:FB:1F:20:26:61:E6:DF:5D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FOUWOGcQb85FUq7s-x8gJmHm310.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916F9F6/F655F7F67A6711EBBCF76C6FC4F9AE02/81D7961ADD9211EDA5A21671C4F9AE02.roa
Signing time:             Wed 14 Aug 2024 23:20:56 +0000
ROA not before:           Wed 14 Aug 2024 23:20:56 +0000
ROA not after:            Tue 30 Sep 2025 00:00:00 +0000
asID:                     9232
IP address blocks:        103.151.228.0/24 maxlen: 24
                          103.151.229.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916F9F6/F655F7F67A6711EBBCF76C6FC4F9AE02/FOUWOGcQb85FUq7s-x8gJmHm310.crl
                          rsync://rpki.apnic.net/member_repository/A916F9F6/F655F7F67A6711EBBCF76C6FC4F9AE02/FOUWOGcQb85FUq7s-x8gJmHm310.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FOUWOGcQb85FUq7s-x8gJmHm310.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 20:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1529 (0x5f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916F9F6/serialNumber=14E5163867106FCE4552AEECFB1F202661E6DF5D
        Validity
            Not Before: Aug 14 23:20:56 2024 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=66bd3bd8-79dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:80:11:65:31:b6:79:24:21:2b:db:a3:92:8e:
                    51:84:82:09:00:7f:12:68:92:e9:40:75:ac:3e:a1:
                    10:f6:9f:98:1b:b5:e0:8d:4c:87:5f:ff:14:f1:78:
                    54:1e:ea:0c:bd:34:a3:d7:4b:e8:2b:4e:b4:31:90:
                    5e:ba:66:ad:77:3f:11:ca:db:dd:2f:61:75:0b:89:
                    4f:b5:da:34:0f:a8:14:9a:28:52:f3:5c:0f:de:63:
                    76:34:c8:15:d5:54:45:f5:2e:7f:26:e4:46:f6:bf:
                    d3:a3:a9:65:c6:5a:26:18:c8:3b:98:05:01:fb:85:
                    52:0b:1a:e4:49:59:57:81:de:6a:47:20:54:67:66:
                    01:d8:69:44:33:e2:9b:62:22:14:80:6d:da:4f:2b:
                    6e:a6:4e:f9:3d:4c:fe:fb:b8:37:cb:0f:26:a6:4e:
                    b9:1a:78:1e:56:ea:b6:33:c4:ad:8b:2f:21:e2:22:
                    db:a0:df:19:3d:c0:12:da:6f:4d:40:7b:0b:29:40:
                    cf:79:8b:57:15:b5:9b:ba:65:43:f2:98:23:ba:67:
                    3b:2e:ab:28:27:f4:50:12:dc:33:a1:29:e1:fa:99:
                    22:87:b9:fa:4e:18:5f:45:09:3c:fc:6c:dd:b6:eb:
                    32:f1:e1:e6:e9:98:dc:c4:c9:7e:e1:8c:3d:01:7d:
                    0e:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:F0:DA:FA:34:0A:D4:99:39:D9:F1:49:27:93:0A:35:7A:E4:74:ED
            X509v3 Authority Key Identifier:
                keyid:14:E5:16:38:67:10:6F:CE:45:52:AE:EC:FB:1F:20:26:61:E6:DF:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916F9F6/F655F7F67A6711EBBCF76C6FC4F9AE02/FOUWOGcQb85FUq7s-x8gJmHm310.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FOUWOGcQb85FUq7s-x8gJmHm310.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916F9F6/F655F7F67A6711EBBCF76C6FC4F9AE02/81D7961ADD9211EDA5A21671C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.151.228.0/23

    Signature Algorithm: sha256WithRSAEncryption
         65:36:a9:c8:d1:c3:c2:e8:d6:57:9f:86:0a:2b:92:82:da:4a:
         1d:0c:98:f9:91:b3:dc:37:42:ca:bb:c9:1c:a9:78:72:91:a3:
         94:7b:51:e4:c5:a4:5d:07:aa:c1:1b:6e:1b:b0:66:39:fc:d4:
         0d:8c:2e:cb:5e:d2:ae:c3:6c:84:40:32:a0:27:04:04:39:72:
         11:7c:46:5f:39:55:6e:75:7e:91:e7:85:a8:ae:5f:c8:37:ae:
         2a:8b:1a:96:24:dc:ef:8c:a1:0d:6a:77:2e:42:b8:d3:d4:b4:
         d5:1b:30:03:e0:5c:dd:9f:be:65:10:ef:a8:85:a1:25:e6:5f:
         42:1a:59:a8:15:16:7b:a3:2f:21:ce:fb:df:91:9a:7f:18:8f:
         05:3b:8f:41:76:7b:4a:50:6e:f1:8a:fb:81:33:71:66:9e:1a:
         38:46:1e:38:7f:45:19:a2:b2:fd:df:1a:ae:09:dc:53:94:8d:
         84:1f:f2:5c:a0:5f:02:44:7f:de:9f:28:8c:95:8d:c9:a3:01:
         ff:35:c7:6a:46:37:70:42:d1:cd:3b:a0:30:23:b1:28:93:a6:
         28:96:19:25:60:4a:57:00:b8:2a:b3:27:7f:2e:df:85:a8:f7:
         e4:fb:43:be:b1:3b:b0:d2:d7:7c:d1:ef:6e:f6:5b:72:23:e0:
         36:c9:aa:5e
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBfkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkY5RjYxMTAvBgNVBAUTKDE0RTUxNjM4NjcxMDZGQ0U0NTUyQUVFQ0ZCMUYyMDI2
NjFFNkRGNUQwHhcNMjQwODE0MjMyMDU2WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmJkM2JkOC03OWRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsYARZTG2eSQhK9ujko5RhIIJAH8SaJLpQHWsPqEQ9p+YG7XgjUyHX/8U8XhU
HuoMvTSj10voK060MZBeumatdz8RytvdL2F1C4lPtdo0D6gUmihS81wP3mN2NMgV
1VRF9S5/JuRG9r/To6llxlomGMg7mAUB+4VSCxrkSVlXgd5qRyBUZ2YB2GlEM+Kb
YiIUgG3aTytupk75PUz++7g3yw8mpk65GngeVuq2M8Stiy8h4iLboN8ZPcAS2m9N
QHsLKUDPeYtXFbWbumVD8pgjumc7LqsoJ/RQEtwzoSnh+pkih7n6ThhfRQk8/Gzd
tusy8eHm6ZjcxMl+4Yw9AX0O9QIDAQABo4IClTCCApEwHQYDVR0OBBYEFGnw2vo0
CtSZOdnxSSeTCjV65HTtMB8GA1UdIwQYMBaAFBTlFjhnEG/ORVKu7PsfICZh5t9d
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RjlGNi9GNjU1RjdGNjdB
NjcxMUVCQkNGNzZDNkZDNEY5QUUwMi9GT1VXT0djUWI4NUZVcTdzLXg4Z0ptSG0z
MTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZPVVdPR2NRYjg1RlVxN3MteDhnSm1IbTMxMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NkY5RjYvRjY1NUY3RjY3QTY3MTFFQkJDRjc2QzZGQzRGOUFFMDIvODFENzk2MUFE
RDkyMTFFREE1QTIxNjcxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnl+QwDQYJKoZIhvcNAQELBQADggEBAGU2qcjRw8Lo1lef
hgorkoLaSh0MmPmRs9w3Qsq7yRypeHKRo5R7UeTFpF0HqsEbbhuwZjn81A2MLste
0q7DbIRAMqAnBAQ5chF8Rl85VW51fpHnhaiuX8g3riqLGpYk3O+MoQ1qdy5CuNPU
tNUbMAPgXN2fvmUQ76iFoSXmX0IaWagVFnujLyHO+9+Rmn8YjwU7j0F2e0pQbvGK
+4EzcWaeGjhGHjh/RRmisv3fGq4J3FOUjYQf8lygXwJEf96fKIyVjcmjAf81x2pG
N3BC0c07oDAjsSiTpiiWGSVgSlcAuCqzJ38u34Wo9+T7Q76xO7DS13zR7272W3Ij
4DbJql4=
-----END CERTIFICATE-----
Generated at Wed Nov 20 23:11:45 2024 by rpki-client on console-fra.rpki-client.org