Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/DA6E4B50845A11EA928C8E1EC4F9AE02.roa
File:                     DA6E4B50845A11EA928C8E1EC4F9AE02.roa (raw, json)
Hash identifier:          u0fp80nox7dAn7Yiu1ux22mPDrzXc3m+LvRefa9Vt4o=
Subject key identifier:   13:67:40:ED:D8:2E:99:74:D1:77:18:EC:4C:98:3F:31:C0:E7:BA:3C
Certificate issuer:       /CN=A91841D2/serialNumber=7EE71AD847E9D56810CD49E27785C6385CCCF96B
Certificate serial:       092C
Authority key identifier: 7E:E7:1A:D8:47:E9:D5:68:10:CD:49:E2:77:85:C6:38:5C:CC:F9:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuca2Efp1WgQzUnid4XGOFzM-Ws.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/DA6E4B50845A11EA928C8E1EC4F9AE02.roa
Signing time:             Sat 22 Jun 2024 21:13:48 +0000
ROA not before:           Sat 22 Jun 2024 21:13:48 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     23338
IP address blocks:        103.150.180.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/fuca2Efp1WgQzUnid4XGOFzM-Ws.crl
                          rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/fuca2Efp1WgQzUnid4XGOFzM-Ws.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuca2Efp1WgQzUnid4XGOFzM-Ws.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 19:45:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2348 (0x92c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91841D2/serialNumber=7EE71AD847E9D56810CD49E27785C6385CCCF96B
        Validity
            Not Before: Jun 22 21:13:48 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=66773e8c-702b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:fa:06:b5:e5:1b:2d:f1:c1:ac:4d:49:2a:ad:
                    89:50:d9:c1:cd:d2:c2:00:70:7a:9d:67:59:c4:6d:
                    12:ba:67:b3:29:55:1c:f9:19:fd:4a:d2:d5:f2:1c:
                    f0:7d:31:b6:28:7d:54:c4:4a:32:19:5b:96:b1:d1:
                    5a:98:ee:9b:a4:95:0f:22:e5:b3:fb:63:3c:43:ef:
                    98:b8:5a:28:d8:2a:ec:00:4f:18:f5:a3:64:89:46:
                    69:6b:28:15:ed:16:fc:61:c8:a9:37:76:44:c3:41:
                    66:47:e3:b6:4f:c4:67:20:8f:da:bc:f0:1f:20:e8:
                    f8:c4:06:1c:a4:33:06:07:0d:bc:e4:59:e7:c7:dc:
                    bc:a6:2c:ee:f2:23:6d:b8:ee:ca:f9:39:2a:0e:98:
                    37:1f:18:c1:e9:16:3e:1f:a2:cd:17:03:66:e0:54:
                    9b:ff:1d:2e:a5:74:82:1d:26:b5:59:78:60:32:c1:
                    f8:3b:ee:57:d2:22:c8:98:ef:6e:6f:fe:bf:93:43:
                    f0:34:87:59:cf:c5:e6:aa:06:6c:65:13:5d:f2:a9:
                    66:e0:8d:a1:2b:dc:a7:5e:a4:b2:28:b7:1e:64:c7:
                    a3:64:26:d9:74:12:5d:5c:d1:b1:d4:a2:12:12:87:
                    9a:99:76:e0:24:cc:cd:73:1c:a7:be:15:06:c1:6e:
                    4a:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:67:40:ED:D8:2E:99:74:D1:77:18:EC:4C:98:3F:31:C0:E7:BA:3C
            X509v3 Authority Key Identifier:
                keyid:7E:E7:1A:D8:47:E9:D5:68:10:CD:49:E2:77:85:C6:38:5C:CC:F9:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/fuca2Efp1WgQzUnid4XGOFzM-Ws.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuca2Efp1WgQzUnid4XGOFzM-Ws.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/DA6E4B50845A11EA928C8E1EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.150.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bf:d1:3f:eb:4a:94:d2:5a:da:de:76:46:08:4d:ca:4d:52:9f:
         d9:f6:cc:0c:e7:05:88:78:b5:01:39:ac:d2:44:e8:af:b9:84:
         b1:c6:60:73:24:28:f6:23:2e:4e:ad:3e:24:bb:8e:26:53:b8:
         96:91:0e:51:09:d6:9a:fb:b9:88:f9:64:fc:c4:d9:51:47:f9:
         31:db:01:9f:7f:96:0e:2a:b2:b2:a8:78:59:5f:e2:ea:e0:3c:
         ca:25:e0:5b:b7:ab:5e:cf:67:21:14:33:65:d9:52:12:58:ef:
         1b:99:00:32:6c:7b:01:98:59:60:a2:db:d1:0e:e2:15:cd:d8:
         7a:12:19:c8:d5:b3:a2:ae:4b:cc:32:c7:12:47:15:19:22:84:
         69:19:3c:3a:51:37:ca:b1:ad:0f:57:4b:9c:5b:30:cf:33:38:
         f9:47:76:64:83:bd:0b:41:03:a2:96:78:81:57:d6:1a:85:a6:
         ed:04:86:97:5f:ea:49:48:10:91:a1:20:88:75:15:29:a9:b8:
         75:d5:a2:58:9d:fb:84:13:ee:d2:c6:61:24:b0:2c:2b:e8:e2:
         60:d2:fc:58:07:e0:29:4e:f8:9c:ad:2e:e9:3f:27:f8:84:3d:
         d2:f2:0a:f9:5b:e6:fd:7c:19:93:48:49:cb:e8:df:b8:df:f7:
         5b:0b:bc:b7
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICCSwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODQxRDIxMTAvBgNVBAUTKDdFRTcxQUQ4NDdFOUQ1NjgxMENENDlFMjc3ODVDNjM4
NUNDQ0Y5NkIwHhcNMjQwNjIyMjExMzQ4WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02Njc3M2U4Yy03MDJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAs/oGteUbLfHBrE1JKq2JUNnBzdLCAHB6nWdZxG0SumezKVUc+Rn9StLV8hzw
fTG2KH1UxEoyGVuWsdFamO6bpJUPIuWz+2M8Q++YuFoo2CrsAE8Y9aNkiUZpaygV
7Rb8YcipN3ZEw0FmR+O2T8RnII/avPAfIOj4xAYcpDMGBw285Fnnx9y8pizu8iNt
uO7K+TkqDpg3HxjB6RY+H6LNFwNm4FSb/x0upXSCHSa1WXhgMsH4O+5X0iLImO9u
b/6/k0PwNIdZz8XmqgZsZRNd8qlm4I2hK9ynXqSyKLceZMejZCbZdBJdXNGx1KIS
EoeamXbgJMzNcxynvhUGwW5KVQIDAQABo4IClTCCApEwHQYDVR0OBBYEFBNnQO3Y
Lpl00XcY7EyYPzHA57o8MB8GA1UdIwQYMBaAFH7nGthH6dVoEM1J4neFxjhczPlr
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDFEMi9GNzIyM0ZCNDg0
NTQxMUVBOEQ2RTM1MEVDNEY5QUUwMi9mdWNhMkVmcDFXZ1F6VW5pZDRYR09Gek0t
V3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2Z1Y2EyRWZwMVdnUXpVbmlkNFhHT0Z6TS1Xcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODQxRDIvRjcyMjNGQjQ4NDU0MTFFQThENkUzNTBFQzRGOUFFMDIvREE2RTRCNTA4
NDVBMTFFQTkyOEM4RTFFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnlrQwDQYJKoZIhvcNAQELBQADggEBAL/RP+tKlNJa2t52
RghNyk1Sn9n2zAznBYh4tQE5rNJE6K+5hLHGYHMkKPYjLk6tPiS7jiZTuJaRDlEJ
1pr7uYj5ZPzE2VFH+THbAZ9/lg4qsrKoeFlf4urgPMol4Fu3q17PZyEUM2XZUhJY
7xuZADJsewGYWWCi29EO4hXN2HoSGcjVs6KuS8wyxxJHFRkihGkZPDpRN8qxrQ9X
S5xbMM8zOPlHdmSDvQtBA6KWeIFX1hqFpu0Ehpdf6klIEJGhIIh1FSmpuHXVolid
+4QT7tLGYSSwLCvo4mDS/FgH4ClO+JytLuk/J/iEPdLyCvlb5v18GZNIScvo37jf
91sLvLc=
-----END CERTIFICATE-----
Generated at Wed Nov 20 21:34:54 2024 by rpki-client on console-ams.rpki-client.org