Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186004/201F68601EF811EEA9265D24C4F9AE02/341206FE1EFB11EEB72FB14EC4F9AE02.roa
File:                     341206FE1EFB11EEB72FB14EC4F9AE02.roa (raw, json)
Hash identifier:          dpE2TI6QCYIe9HLRMKDulM368RG27zsQFQ0bkNTHfzY=
Subject key identifier:   15:BD:F9:95:05:A4:14:1B:F0:1A:5C:73:86:92:C0:59:E4:95:8D:8A
Certificate issuer:       /CN=A9186004/serialNumber=444EB75354C3706E39DEA08FE95044CD2663D6AE
Certificate serial:       D3
Authority key identifier: 44:4E:B7:53:54:C3:70:6E:39:DE:A0:8F:E9:50:44:CD:26:63:D6:AE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RE63U1TDcG453qCP6VBEzSZj1q4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186004/201F68601EF811EEA9265D24C4F9AE02/341206FE1EFB11EEB72FB14EC4F9AE02.roa
Signing time:             Wed 21 Aug 2024 05:07:56 +0000
ROA not before:           Wed 21 Aug 2024 05:07:56 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     151500
IP address blocks:        103.236.106.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186004/201F68601EF811EEA9265D24C4F9AE02/RE63U1TDcG453qCP6VBEzSZj1q4.crl
                          rsync://rpki.apnic.net/member_repository/A9186004/201F68601EF811EEA9265D24C4F9AE02/RE63U1TDcG453qCP6VBEzSZj1q4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RE63U1TDcG453qCP6VBEzSZj1q4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 211 (0xd3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186004/serialNumber=444EB75354C3706E39DEA08FE95044CD2663D6AE
        Validity
            Not Before: Aug 21 05:07:56 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=66c5762c-61fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:0a:99:c8:a8:ff:d9:ab:82:07:d0:21:dc:52:
                    9f:30:06:27:f1:0a:7e:88:8e:c9:7f:7d:88:34:5f:
                    d9:81:17:d3:87:f9:28:44:fe:ce:21:5a:5e:04:bb:
                    64:6c:ed:65:84:f3:de:43:13:1e:5d:1b:1b:de:b5:
                    29:da:12:2c:e1:85:5f:fb:38:c0:d0:ea:41:71:61:
                    43:04:8c:0b:bd:2f:91:15:0d:93:8a:3b:fb:e1:1a:
                    63:c1:94:73:74:89:33:74:8d:2f:02:fa:05:d1:0c:
                    ae:ca:1d:ce:e5:08:a2:fc:28:35:53:c9:00:07:bd:
                    0a:ee:34:fd:2d:9f:43:06:f4:43:35:b2:c6:71:e2:
                    8e:af:3a:27:7d:cb:2a:4e:1c:dd:57:ae:e5:46:90:
                    94:5f:d6:cb:e9:64:6a:60:53:46:59:81:ac:4e:68:
                    e2:aa:d5:69:92:20:df:95:b2:9b:c4:b0:c0:bf:75:
                    58:93:74:9f:e7:eb:e7:fd:bd:d1:dd:03:63:30:22:
                    12:56:7f:d8:97:71:06:a4:cc:cb:2f:ad:89:41:6c:
                    cb:71:b7:ce:6e:d5:19:4d:c2:c6:20:e6:a9:f1:00:
                    eb:3b:3c:f0:72:bb:3f:84:1d:20:bd:69:9b:ba:92:
                    f7:9f:23:0d:4c:83:6d:03:68:f1:12:48:8f:b7:8d:
                    ed:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:BD:F9:95:05:A4:14:1B:F0:1A:5C:73:86:92:C0:59:E4:95:8D:8A
            X509v3 Authority Key Identifier:
                keyid:44:4E:B7:53:54:C3:70:6E:39:DE:A0:8F:E9:50:44:CD:26:63:D6:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186004/201F68601EF811EEA9265D24C4F9AE02/RE63U1TDcG453qCP6VBEzSZj1q4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RE63U1TDcG453qCP6VBEzSZj1q4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186004/201F68601EF811EEA9265D24C4F9AE02/341206FE1EFB11EEB72FB14EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.236.106.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b9:41:e0:d4:f8:c4:7b:75:b3:b2:ff:9c:71:89:16:14:0a:1c:
         7e:ce:2c:ea:51:26:4c:46:16:f0:d1:8f:67:b5:7a:d4:dd:4c:
         19:8d:38:b6:4e:29:da:6f:c6:c4:03:2b:dc:b3:10:3e:64:de:
         85:76:a2:28:8d:5d:57:4a:c1:34:ac:b4:b1:3a:7b:4d:ee:33:
         4b:d2:a2:99:02:02:b8:2b:a5:2b:ce:cc:f2:58:a6:5b:b4:e7:
         17:0f:22:75:30:cc:ae:95:ce:88:2d:c0:8c:61:4d:7a:81:5f:
         ef:21:49:d0:c7:96:ce:5a:c0:c6:10:50:f0:4e:d3:29:17:47:
         95:25:76:d9:a5:19:74:b7:97:3e:15:cf:97:6f:a9:35:12:5b:
         6f:79:5e:e1:79:5a:d3:3b:72:93:b7:2a:0b:3f:ae:80:fa:fc:
         1b:6d:d0:ae:c8:94:0c:46:58:6a:9e:e6:7c:6f:44:a1:25:9a:
         d2:c5:90:5a:2c:e9:7b:e8:8d:23:32:b1:94:c9:ae:50:ea:9c:
         fe:5b:c1:b9:5a:c6:3f:a9:ea:36:62:57:75:9c:73:fc:8a:be:
         86:60:f6:49:ec:d3:45:91:4d:15:10:0f:da:e7:f2:9a:25:4c:
         06:29:af:5f:2c:4b:c9:a5:e8:17:96:a0:45:ce:54:1b:b5:b3:
         fb:9a:9e:16
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICANMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODYwMDQxMTAvBgNVBAUTKDQ0NEVCNzUzNTRDMzcwNkUzOURFQTA4RkU5NTA0NENE
MjY2M0Q2QUUwHhcNMjQwODIxMDUwNzU2WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmM1NzYyYy02MWZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0QqZyKj/2auCB9Ah3FKfMAYn8Qp+iI7Jf32INF/ZgRfTh/koRP7OIVpeBLtk
bO1lhPPeQxMeXRsb3rUp2hIs4YVf+zjA0OpBcWFDBIwLvS+RFQ2Tijv74RpjwZRz
dIkzdI0vAvoF0Qyuyh3O5Qii/Cg1U8kAB70K7jT9LZ9DBvRDNbLGceKOrzonfcsq
ThzdV67lRpCUX9bL6WRqYFNGWYGsTmjiqtVpkiDflbKbxLDAv3VYk3Sf5+vn/b3R
3QNjMCISVn/Yl3EGpMzLL62JQWzLcbfObtUZTcLGIOap8QDrOzzwcrs/hB0gvWmb
upL3nyMNTINtA2jxEkiPt43t1wIDAQABo4IClTCCApEwHQYDVR0OBBYEFBW9+ZUF
pBQb8Bpcc4aSwFnklY2KMB8GA1UdIwQYMBaAFEROt1NUw3BuOd6gj+lQRM0mY9au
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjAwNC8yMDFGNjg2MDFF
RjgxMUVFQTkyNjVEMjRDNEY5QUUwMi9SRTYzVTFURGNHNDUzcUNQNlZCRXpTWmox
cTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1JFNjNVMVREY0c0NTNxQ1A2VkJFelNaajFxNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODYwMDQvMjAxRjY4NjAxRUY4MTFFRUE5MjY1RDI0QzRGOUFFMDIvMzQxMjA2RkUx
RUZCMTFFRUI3MkZCMTRFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFn7GowDQYJKoZIhvcNAQELBQADggEBALlB4NT4xHt1s7L/
nHGJFhQKHH7OLOpRJkxGFvDRj2e1etTdTBmNOLZOKdpvxsQDK9yzED5k3oV2oiiN
XVdKwTSstLE6e03uM0vSopkCArgrpSvOzPJYplu05xcPInUwzK6VzogtwIxhTXqB
X+8hSdDHls5awMYQUPBO0ykXR5UldtmlGXS3lz4Vz5dvqTUSW295XuF5WtM7cpO3
Kgs/roD6/Btt0K7IlAxGWGqe5nxvRKElmtLFkFos6XvojSMysZTJrlDqnP5bwbla
xj+p6jZiV3Wcc/yKvoZg9kns00WRTRUQD9rn8polTAYpr18sS8ml6BeWoEXOVBu1
s/uanhY=
-----END CERTIFICATE-----
Generated at Sat Nov 23 06:13:10 2024 by rpki-client on console-ams.rpki-client.org