Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91818BD/414D5BDAFE8011EC9F317A3FC4F9AE02/B83B7E0C065511EDB3E94E54C4F9AE02.roa
File:                     B83B7E0C065511EDB3E94E54C4F9AE02.roa (raw, json)
Hash identifier:          tal6R2lkJBoeIIUyi6mdxCD2dqzkhyqrKbW//gzTT04=
Subject key identifier:   5B:4C:8F:93:70:6A:47:E8:BC:CD:04:29:E6:4A:50:95:16:3C:7D:13
Certificate issuer:       /CN=A91818BD/serialNumber=96B80C37C6613D14A92CDBEC662821643E8AF11B
Certificate serial:       0220
Authority key identifier: 96:B8:0C:37:C6:61:3D:14:A9:2C:DB:EC:66:28:21:64:3E:8A:F1:1B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lrgMN8ZhPRSpLNvsZighZD6K8Rs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91818BD/414D5BDAFE8011EC9F317A3FC4F9AE02/B83B7E0C065511EDB3E94E54C4F9AE02.roa
Signing time:             Tue 03 Sep 2024 03:46:32 +0000
ROA not before:           Tue 03 Sep 2024 03:46:32 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     140736
IP address blocks:        103.190.206.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91818BD/414D5BDAFE8011EC9F317A3FC4F9AE02/lrgMN8ZhPRSpLNvsZighZD6K8Rs.crl
                          rsync://rpki.apnic.net/member_repository/A91818BD/414D5BDAFE8011EC9F317A3FC4F9AE02/lrgMN8ZhPRSpLNvsZighZD6K8Rs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lrgMN8ZhPRSpLNvsZighZD6K8Rs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 20:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 544 (0x220)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91818BD/serialNumber=96B80C37C6613D14A92CDBEC662821643E8AF11B
        Validity
            Not Before: Sep  3 03:46:32 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=66d68698-4a6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:25:71:c1:0c:9e:ca:8a:00:7d:58:88:ca:d8:
                    5b:aa:f1:16:5b:9f:a0:cd:e8:48:4a:b7:7a:7e:25:
                    8b:d8:52:e1:56:7e:9d:9a:47:4d:fd:81:94:3d:67:
                    78:35:10:eb:9e:08:33:fa:8a:25:fe:27:16:8d:93:
                    00:41:cd:64:74:04:b8:bb:2c:62:90:3f:6c:b7:e4:
                    ce:c1:a1:e3:d2:08:23:28:70:e4:7a:63:c3:98:41:
                    81:7a:d4:8c:10:14:c7:1b:a2:68:c8:d9:8a:2f:9e:
                    87:db:9b:72:44:a0:6b:e3:f4:49:01:14:08:17:bf:
                    49:4f:9e:7e:68:8b:5f:c6:ef:d7:68:36:83:59:37:
                    57:78:ea:7c:55:c2:76:2f:a2:39:1f:c3:36:50:5a:
                    4d:fa:00:8b:51:5d:c1:d6:48:8d:1d:e0:2c:c6:53:
                    0f:4f:0e:7f:3d:92:01:dd:35:51:90:f5:db:76:a7:
                    5a:16:7e:77:04:ca:80:0a:a5:88:f3:e6:14:86:1a:
                    3d:08:bb:ad:35:1f:e2:bc:6c:d4:1f:c1:90:35:c3:
                    6f:0b:13:60:0e:f9:6c:8d:f5:2d:66:b0:96:4d:52:
                    68:c6:6d:2c:a4:6a:e8:13:49:47:c6:6f:c4:4f:d2:
                    fe:0e:50:78:a9:c1:8b:ed:87:db:fe:9f:98:4c:97:
                    19:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:4C:8F:93:70:6A:47:E8:BC:CD:04:29:E6:4A:50:95:16:3C:7D:13
            X509v3 Authority Key Identifier:
                keyid:96:B8:0C:37:C6:61:3D:14:A9:2C:DB:EC:66:28:21:64:3E:8A:F1:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91818BD/414D5BDAFE8011EC9F317A3FC4F9AE02/lrgMN8ZhPRSpLNvsZighZD6K8Rs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lrgMN8ZhPRSpLNvsZighZD6K8Rs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91818BD/414D5BDAFE8011EC9F317A3FC4F9AE02/B83B7E0C065511EDB3E94E54C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.190.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bb:90:a5:66:d7:00:10:5c:58:4e:76:53:05:aa:d3:9c:22:0d:
         55:90:3e:69:34:fc:26:a6:8c:dc:c0:f0:e0:3e:29:35:59:b4:
         40:6c:25:08:02:ee:56:a3:25:47:38:0c:ec:36:29:ed:28:1a:
         fd:75:52:1c:f0:98:86:7a:d4:ad:d8:1c:21:63:da:23:1f:1d:
         2f:25:fa:7f:ae:58:92:77:f4:60:45:57:b0:4c:50:b0:8c:aa:
         8b:00:dc:3b:ae:ff:e2:89:7d:e4:a5:c4:69:20:d3:06:ff:9e:
         6f:d7:f8:19:5b:df:b4:dd:2d:24:79:5c:2d:53:9b:84:3d:bc:
         ec:8d:b0:59:25:7e:3d:ca:50:75:04:c8:97:92:68:6b:5f:1a:
         ed:77:d5:92:67:b3:a8:e0:4d:8d:5a:cc:1a:2f:e0:55:5f:e4:
         35:6d:11:21:f3:2e:65:5a:e7:d9:67:d3:b8:8a:1a:6b:45:8f:
         dc:b4:4f:36:80:57:d6:d6:49:5f:89:c7:1d:b9:62:c6:54:c4:
         0e:51:e1:f3:b2:1d:6c:89:16:dd:36:a8:af:32:c9:95:f9:b0:
         be:cb:a7:46:b2:b2:54:6c:a1:f6:85:63:4c:52:6a:43:e3:81:
         72:96:a8:6d:04:35:0f:b5:e0:28:c8:ca:8e:53:6b:ea:f0:d4:
         48:cf:17:75
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAiAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODE4QkQxMTAvBgNVBAUTKDk2QjgwQzM3QzY2MTNEMTRBOTJDREJFQzY2MjgyMTY0
M0U4QUYxMUIwHhcNMjQwOTAzMDM0NjMyWhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmQ2ODY5OC00YTZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoCVxwQyeyooAfViIythbqvEWW5+gzehISrd6fiWL2FLhVn6dmkdN/YGUPWd4
NRDrnggz+ool/icWjZMAQc1kdAS4uyxikD9st+TOwaHj0ggjKHDkemPDmEGBetSM
EBTHG6JoyNmKL56H25tyRKBr4/RJARQIF79JT55+aItfxu/XaDaDWTdXeOp8VcJ2
L6I5H8M2UFpN+gCLUV3B1kiNHeAsxlMPTw5/PZIB3TVRkPXbdqdaFn53BMqACqWI
8+YUhho9CLutNR/ivGzUH8GQNcNvCxNgDvlsjfUtZrCWTVJoxm0spGroE0lHxm/E
T9L+DlB4qcGL7Yfb/p+YTJcZJQIDAQABo4IClTCCApEwHQYDVR0OBBYEFFtMj5Nw
akfovM0EKeZKUJUWPH0TMB8GA1UdIwQYMBaAFJa4DDfGYT0UqSzb7GYoIWQ+ivEb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MThCRC80MTRENUJEQUZF
ODAxMUVDOUYzMTdBM0ZDNEY5QUUwMi9scmdNTjhaaFBSU3BMTnZzWmlnaFpENks4
UnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2xyZ01OOFpoUFJTcExOdnNaaWdoWkQ2SzhScy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODE4QkQvNDE0RDVCREFGRTgwMTFFQzlGMzE3QTNGQzRGOUFFMDIvQjgzQjdFMEMw
NjU1MTFFREIzRTk0RTU0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnvs4wDQYJKoZIhvcNAQELBQADggEBALuQpWbXABBcWE52
UwWq05wiDVWQPmk0/CamjNzA8OA+KTVZtEBsJQgC7lajJUc4DOw2Ke0oGv11Uhzw
mIZ61K3YHCFj2iMfHS8l+n+uWJJ39GBFV7BMULCMqosA3Duu/+KJfeSlxGkg0wb/
nm/X+Blb37TdLSR5XC1Tm4Q9vOyNsFklfj3KUHUEyJeSaGtfGu131ZJns6jgTY1a
zBov4FVf5DVtESHzLmVa59ln07iKGmtFj9y0TzaAV9bWSV+Jxx25YsZUxA5R4fOy
HWyJFt02qK8yyZX5sL7Lp0ayslRsofaFY0xSakPjgXKWqG0ENQ+14CjIyo5Ta+rw
1EjPF3U=
-----END CERTIFICATE-----
Generated at Thu Nov 21 03:11:59 2024 by rpki-client on console-fra.rpki-client.org