Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9189883/C37EC8B2727611EE8460290DC4F9AE02/166B5FEA727711EEA4209110C4F9AE02.roa
File:                     166B5FEA727711EEA4209110C4F9AE02.roa (raw, json)
Hash identifier:          hb2FHylcedOLhWNEILcVg0+JejqVxPKA1QnSPd3ZdS0=
Subject key identifier:   3C:FD:79:D1:65:98:EA:11:5F:B4:B1:6C:D5:CE:7A:75:13:72:F5:D7
Certificate issuer:       /CN=A9189883/serialNumber=7FDE642C44217EDE7CC767719BA67D036D17D04B
Certificate serial:       90
Authority key identifier: 7F:DE:64:2C:44:21:7E:DE:7C:C7:67:71:9B:A6:7D:03:6D:17:D0:4B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f95kLEQhft58x2dxm6Z9A20X0Es.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9189883/C37EC8B2727611EE8460290DC4F9AE02/166B5FEA727711EEA4209110C4F9AE02.roa
Signing time:             Thu 25 Jul 2024 06:27:15 +0000
ROA not before:           Thu 25 Jul 2024 06:27:15 +0000
ROA not after:            Tue 30 Sep 2025 00:00:00 +0000
asID:                     132227
IP address blocks:        103.214.248.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9189883/C37EC8B2727611EE8460290DC4F9AE02/f95kLEQhft58x2dxm6Z9A20X0Es.crl
                          rsync://rpki.apnic.net/member_repository/A9189883/C37EC8B2727611EE8460290DC4F9AE02/f95kLEQhft58x2dxm6Z9A20X0Es.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f95kLEQhft58x2dxm6Z9A20X0Es.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 144 (0x90)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9189883/serialNumber=7FDE642C44217EDE7CC767719BA67D036D17D04B
        Validity
            Not Before: Jul 25 06:27:15 2024 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=66a1f042-e3ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:46:71:a8:ba:e2:eb:bb:23:a2:e8:ad:f8:86:
                    42:b8:34:ed:b7:93:0b:89:5b:d5:da:bf:44:a4:37:
                    18:70:da:70:ee:32:9a:f9:fa:7b:8b:94:9d:4f:61:
                    c8:fd:94:45:b1:32:29:c9:d8:01:c3:25:25:d4:df:
                    6d:80:72:08:76:0e:52:c6:43:e5:b9:bc:97:a7:8c:
                    b2:f0:1e:07:ac:68:7f:60:c0:16:1f:39:b7:fa:18:
                    40:dd:40:c3:fe:7f:80:99:3e:59:08:16:21:5c:7a:
                    6c:b2:05:b1:01:5d:75:a7:aa:fc:99:da:3e:c5:7c:
                    80:b3:83:c1:c2:14:22:b3:dd:91:a2:ef:ea:75:22:
                    fb:1b:b6:3d:59:ee:9d:cc:c3:cf:99:7f:19:da:a0:
                    17:a0:26:3e:76:ba:a3:c2:7a:ec:ea:c8:3a:51:b0:
                    2f:da:16:a5:d8:99:b5:66:4a:8a:d4:38:6d:c3:ac:
                    86:c0:fc:16:57:8a:bc:02:69:7d:a0:f5:cf:1d:07:
                    c9:a3:e0:05:69:dc:68:06:1e:06:54:a9:99:c4:5a:
                    24:61:56:4f:c1:07:1c:23:c2:16:d8:a8:2d:a7:9f:
                    48:4c:2f:af:94:16:01:35:03:91:4b:4f:d0:4f:6d:
                    0d:bd:e2:c7:29:74:a1:d8:a9:b1:de:09:ae:ed:18:
                    83:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:FD:79:D1:65:98:EA:11:5F:B4:B1:6C:D5:CE:7A:75:13:72:F5:D7
            X509v3 Authority Key Identifier:
                keyid:7F:DE:64:2C:44:21:7E:DE:7C:C7:67:71:9B:A6:7D:03:6D:17:D0:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9189883/C37EC8B2727611EE8460290DC4F9AE02/f95kLEQhft58x2dxm6Z9A20X0Es.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f95kLEQhft58x2dxm6Z9A20X0Es.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189883/C37EC8B2727611EE8460290DC4F9AE02/166B5FEA727711EEA4209110C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.214.248.0/23

    Signature Algorithm: sha256WithRSAEncryption
         23:78:d8:b0:98:b9:2d:b0:6a:6a:59:37:75:95:fc:ae:71:ac:
         9c:f3:f4:22:87:05:a8:a1:0c:c3:e6:db:73:41:68:be:13:10:
         49:1b:47:b6:2a:9e:4e:dc:8e:41:f8:43:ff:9f:86:cb:85:38:
         8f:4a:c3:13:2a:76:eb:0a:d8:5e:63:c5:2c:24:a8:63:6e:6d:
         19:ed:86:a1:89:ba:13:ad:09:f3:6a:c5:09:5b:85:25:a8:4a:
         1d:51:05:6d:64:59:13:a6:6f:53:05:59:29:ce:b8:0c:17:e5:
         4f:c9:01:34:bf:60:ed:b0:53:ba:39:8c:3a:72:25:3e:a2:79:
         bb:bc:90:0d:bb:5a:a3:a9:de:02:31:66:18:d3:f2:b4:5a:c4:
         cb:50:df:a4:e0:c8:0d:7b:c1:d8:04:90:b4:d8:0a:81:28:99:
         40:d2:bb:ca:bb:9d:ae:a5:7e:dc:e2:22:68:94:b6:68:10:73:
         7a:6d:9e:a7:0f:9a:05:75:0c:47:3d:7b:e3:8e:04:1a:f2:d6:
         35:b4:ce:23:a0:45:a0:ef:4d:5a:da:dd:3c:0c:f8:51:2a:b3:
         21:21:29:62:e9:e8:d2:fc:d6:15:2b:7e:f5:6c:27:63:f5:27:
         21:06:27:40:a5:a8:69:e8:5d:68:d6:75:a9:e5:7f:00:73:94:
         07:91:a3:87
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAJAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODk4ODMxMTAvBgNVBAUTKDdGREU2NDJDNDQyMTdFREU3Q0M3Njc3MTlCQTY3RDAz
NkQxN0QwNEIwHhcNMjQwNzI1MDYyNzE1WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmExZjA0Mi1lM2ZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxUZxqLri67sjouit+IZCuDTtt5MLiVvV2r9EpDcYcNpw7jKa+fp7i5SdT2HI
/ZRFsTIpydgBwyUl1N9tgHIIdg5SxkPlubyXp4yy8B4HrGh/YMAWHzm3+hhA3UDD
/n+AmT5ZCBYhXHpssgWxAV11p6r8mdo+xXyAs4PBwhQis92Rou/qdSL7G7Y9We6d
zMPPmX8Z2qAXoCY+drqjwnrs6sg6UbAv2hal2Jm1ZkqK1Dhtw6yGwPwWV4q8Aml9
oPXPHQfJo+AFadxoBh4GVKmZxFokYVZPwQccI8IW2Kgtp59ITC+vlBYBNQORS0/Q
T20NveLHKXSh2Kmx3gmu7RiDeQIDAQABo4IClTCCApEwHQYDVR0OBBYEFDz9edFl
mOoRX7SxbNXOenUTcvXXMB8GA1UdIwQYMBaAFH/eZCxEIX7efMdncZumfQNtF9BL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTg4My9DMzdFQzhCMjcy
NzYxMUVFODQ2MDI5MERDNEY5QUUwMi9mOTVrTEVRaGZ0NTh4MmR4bTZaOUEyMFgw
RXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2Y5NWtMRVFoZnQ1OHgyZHhtNlo5QTIwWDBFcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODk4ODMvQzM3RUM4QjI3Mjc2MTFFRTg0NjAyOTBEQzRGOUFFMDIvMTY2QjVGRUE3
Mjc3MTFFRUE0MjA5MTEwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFn1vgwDQYJKoZIhvcNAQELBQADggEBACN42LCYuS2wampZ
N3WV/K5xrJzz9CKHBaihDMPm23NBaL4TEEkbR7Yqnk7cjkH4Q/+fhsuFOI9KwxMq
dusK2F5jxSwkqGNubRnthqGJuhOtCfNqxQlbhSWoSh1RBW1kWROmb1MFWSnOuAwX
5U/JATS/YO2wU7o5jDpyJT6iebu8kA27WqOp3gIxZhjT8rRaxMtQ36TgyA17wdgE
kLTYCoEomUDSu8q7na6lftziImiUtmgQc3ptnqcPmgV1DEc9e+OOBBry1jW0ziOg
RaDvTVra3TwM+FEqsyEhKWLp6NL81hUrfvVsJ2P1JyEGJ0ClqGnoXWjWdanlfwBz
lAeRo4c=
-----END CERTIFICATE-----
Generated at Sat Nov 23 06:13:12 2024 by rpki-client on console-ams.rpki-client.org