Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91886E3/1247B860669211ED82BE7133C4F9AE02/61141C1671AC11EDAA89DE61C4F9AE02.roa
File:                     61141C1671AC11EDAA89DE61C4F9AE02.roa (raw, json)
Hash identifier:          FcjIDRSFwJ0XRDEd6W2lWYtKkYg2/8vEkKYrWb1NPTQ=
Subject key identifier:   FC:70:52:BE:AA:87:01:2F:57:43:A6:D9:F9:05:68:8F:E0:29:B3:76
Certificate issuer:       /CN=A91886E3/serialNumber=BBABD3F16E100FD9C95D474884E4DA9CB6FA768D
Certificate serial:       BB
Authority key identifier: BB:AB:D3:F1:6E:10:0F:D9:C9:5D:47:48:84:E4:DA:9C:B6:FA:76:8D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u6vT8W4QD9nJXUdIhOTanLb6do0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91886E3/1247B860669211ED82BE7133C4F9AE02/61141C1671AC11EDAA89DE61C4F9AE02.roa
Signing time:             Thu 09 Nov 2023 04:55:12 +0000
ROA not before:           Thu 09 Nov 2023 04:55:12 +0000
ROA not after:            Fri 31 Jan 2025 00:00:00 +0000
asID:                     59253
IP address blocks:        103.21.221.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91886E3/1247B860669211ED82BE7133C4F9AE02/u6vT8W4QD9nJXUdIhOTanLb6do0.crl
                          rsync://rpki.apnic.net/member_repository/A91886E3/1247B860669211ED82BE7133C4F9AE02/u6vT8W4QD9nJXUdIhOTanLb6do0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u6vT8W4QD9nJXUdIhOTanLb6do0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 May 2024 05:17:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 187 (0xbb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91886E3/serialNumber=BBABD3F16E100FD9C95D474884E4DA9CB6FA768D
        Validity
            Not Before: Nov  9 04:55:12 2023 GMT
            Not After : Jan 31 00:00:00 2025 GMT
        Subject: CN=654c662f-6fbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c2:63:aa:87:b5:79:08:67:56:1d:f0:d0:6e:
                    82:db:48:f8:09:4a:6d:8b:ff:dc:e2:33:94:67:1a:
                    13:0c:4e:ee:77:e9:8d:06:84:ca:48:8d:45:77:75:
                    58:29:5e:3b:19:ca:7f:ce:92:aa:d5:5f:d4:b5:4d:
                    14:b8:d2:45:47:33:e5:b6:22:67:bc:b0:e8:e2:98:
                    50:69:16:a7:65:b7:b2:d9:8d:00:61:aa:3b:46:df:
                    12:e8:3a:ef:8c:ca:ef:ef:b7:80:77:22:07:5e:53:
                    ca:4a:1f:1b:0d:1f:bc:50:3a:9c:4d:bc:89:24:d8:
                    5c:10:63:9e:71:44:3b:f4:6c:30:7c:82:6f:ed:9e:
                    95:c1:2f:83:51:06:32:d2:ed:82:be:05:e3:8b:a4:
                    e8:0a:50:01:d1:d9:71:f4:db:8b:8b:b0:11:74:f3:
                    4a:93:1d:c1:2a:3e:16:7e:8a:5e:39:c8:c6:5a:a6:
                    45:2b:68:f9:6a:a2:64:b3:34:c3:6c:74:eb:10:0d:
                    8d:90:b9:05:ae:aa:72:0b:2a:71:64:7a:0c:39:f1:
                    d3:4c:4b:33:73:6b:41:28:1d:d0:5f:07:32:ca:96:
                    61:8f:9b:d7:46:df:d0:30:cc:b0:25:5e:2d:39:ad:
                    17:44:ca:10:4a:01:f5:76:8a:09:83:e3:78:00:87:
                    f5:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:70:52:BE:AA:87:01:2F:57:43:A6:D9:F9:05:68:8F:E0:29:B3:76
            X509v3 Authority Key Identifier:
                keyid:BB:AB:D3:F1:6E:10:0F:D9:C9:5D:47:48:84:E4:DA:9C:B6:FA:76:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91886E3/1247B860669211ED82BE7133C4F9AE02/u6vT8W4QD9nJXUdIhOTanLb6do0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u6vT8W4QD9nJXUdIhOTanLb6do0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91886E3/1247B860669211ED82BE7133C4F9AE02/61141C1671AC11EDAA89DE61C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.21.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:de:a2:1a:8e:f8:50:00:44:9a:91:1a:95:6e:ec:73:70:f8:
         75:11:a6:c4:f7:29:8d:9c:60:88:78:f5:78:21:29:3d:6f:d6:
         51:8d:b6:92:ca:40:72:f5:84:7e:f9:a5:0d:4a:58:7b:78:ae:
         bd:58:b1:c7:0c:ac:73:b4:fa:2c:64:ac:9d:e3:26:2c:31:62:
         74:b1:2e:42:34:49:9a:19:9b:86:3e:d0:db:db:bc:0e:fd:a9:
         95:a4:0f:01:0d:93:3a:19:d6:69:b1:10:1f:25:3b:27:d9:e6:
         d4:7c:4f:d7:98:b4:2d:6a:c6:a0:df:e6:32:f4:2f:a8:92:6b:
         5f:2b:cf:99:7f:fb:b3:27:a7:2b:51:64:9f:aa:d0:0f:58:42:
         70:af:13:11:a2:b2:88:e8:67:6e:df:94:22:37:2d:02:36:92:
         9f:90:b7:fa:64:3c:7a:20:35:4e:57:e9:fa:6d:dd:c2:0c:ac:
         c3:af:f2:5c:d2:29:83:45:8c:15:ae:ad:ea:51:5c:68:bf:aa:
         25:84:d0:46:2a:4a:cb:73:e8:3a:80:bd:11:09:c3:3a:c5:aa:
         37:a5:fb:53:b8:2c:e6:74:36:d2:91:f0:9f:83:c9:a2:f6:71:
         42:da:a9:f4:87:28:8d:84:1d:4f:cd:b9:d4:7e:32:21:a2:84:
         06:b0:9f:39
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICALswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODg2RTMxMTAvBgNVBAUTKEJCQUJEM0YxNkUxMDBGRDlDOTVENDc0ODg0RTREQTlD
QjZGQTc2OEQwHhcNMjMxMTA5MDQ1NTEyWhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NTRjNjYyZi02ZmJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtcJjqoe1eQhnVh3w0G6C20j4CUpti//c4jOUZxoTDE7ud+mNBoTKSI1Fd3VY
KV47Gcp/zpKq1V/UtU0UuNJFRzPltiJnvLDo4phQaRanZbey2Y0AYao7Rt8S6Drv
jMrv77eAdyIHXlPKSh8bDR+8UDqcTbyJJNhcEGOecUQ79GwwfIJv7Z6VwS+DUQYy
0u2CvgXji6ToClAB0dlx9NuLi7ARdPNKkx3BKj4WfopeOcjGWqZFK2j5aqJkszTD
bHTrEA2NkLkFrqpyCypxZHoMOfHTTEszc2tBKB3QXwcyypZhj5vXRt/QMMywJV4t
Oa0XRMoQSgH1dooJg+N4AIf1CwIDAQABo4IClTCCApEwHQYDVR0OBBYEFPxwUr6q
hwEvV0Om2fkFaI/gKbN2MB8GA1UdIwQYMBaAFLur0/FuEA/ZyV1HSITk2py2+naN
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODZFMy8xMjQ3Qjg2MDY2
OTIxMUVEODJCRTcxMzNDNEY5QUUwMi91NnZUOFc0UUQ5bkpYVWRJaE9UYW5MYjZk
bzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3U2dlQ4VzRRRDluSlhVZEloT1RhbkxiNmRvMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODg2RTMvMTI0N0I4NjA2NjkyMTFFRDgyQkU3MTMzQzRGOUFFMDIvNjExNDFDMTY3
MUFDMTFFREFBODlERTYxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnFd0wDQYJKoZIhvcNAQELBQADggEBAHzeohqO+FAARJqR
GpVu7HNw+HURpsT3KY2cYIh49XghKT1v1lGNtpLKQHL1hH75pQ1KWHt4rr1YsccM
rHO0+ixkrJ3jJiwxYnSxLkI0SZoZm4Y+0NvbvA79qZWkDwENkzoZ1mmxEB8lOyfZ
5tR8T9eYtC1qxqDf5jL0L6iSa18rz5l/+7MnpytRZJ+q0A9YQnCvExGisojoZ27f
lCI3LQI2kp+Qt/pkPHogNU5X6fpt3cIMrMOv8lzSKYNFjBWurepRXGi/qiWE0EYq
Sstz6DqAvREJwzrFqjel+1O4LOZ0NtKR8J+DyaL2cULaqfSHKI2EHU/NudR+MiGi
hAawnzk=
-----END CERTIFICATE-----
Generated at Tue May 7 06:29:48 2024 by rpki-client on console-ams.rpki-client.org