Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91991D3/5FA36E34892311EDBCA29613C4F9AE02/8879DC04990611EF9BA6A76EC4F9AE02.roa
File:                     8879DC04990611EF9BA6A76EC4F9AE02.roa (raw, json)
Hash identifier:          QMqZliYIzALZLrdF4dbF8vk9DUXnAXmdWeIPAlbr7lk=
Subject key identifier:   AE:AB:F3:7A:8D:C2:A0:DF:8A:98:C9:C5:DA:94:A7:83:7B:C3:0C:6E
Certificate issuer:       /CN=A91991D3/serialNumber=6B53F80F8E881B3731972663BA1897B74A92D44D
Certificate serial:       0163
Authority key identifier: 6B:53:F8:0F:8E:88:1B:37:31:97:26:63:BA:18:97:B7:4A:92:D4:4D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a1P4D46IGzcxlyZjuhiXt0qS1E0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91991D3/5FA36E34892311EDBCA29613C4F9AE02/8879DC04990611EF9BA6A76EC4F9AE02.roa
Signing time:             Sun 03 Nov 2024 02:35:52 +0000
ROA not before:           Sun 03 Nov 2024 02:35:52 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     62864
IP address blocks:        103.101.222.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91991D3/5FA36E34892311EDBCA29613C4F9AE02/a1P4D46IGzcxlyZjuhiXt0qS1E0.crl
                          rsync://rpki.apnic.net/member_repository/A91991D3/5FA36E34892311EDBCA29613C4F9AE02/a1P4D46IGzcxlyZjuhiXt0qS1E0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a1P4D46IGzcxlyZjuhiXt0qS1E0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:19:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 355 (0x163)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91991D3/serialNumber=6B53F80F8E881B3731972663BA1897B74A92D44D
        Validity
            Not Before: Nov  3 02:35:52 2024 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=6726e188-cde0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:b1:76:f4:b4:93:40:d6:b0:4a:49:ad:dd:a4:
                    2d:a1:ec:32:29:3a:61:de:e5:b3:67:bd:7e:78:81:
                    c4:c1:d1:5c:e8:a8:c2:a6:ac:d5:64:0e:06:28:32:
                    3c:4c:d7:39:2a:94:a0:8f:11:9b:b8:51:14:1b:82:
                    7e:d4:8e:3c:f9:e8:30:07:16:f8:e8:62:d7:d1:e2:
                    aa:04:5d:70:59:95:57:45:53:45:09:3c:86:6f:95:
                    45:b2:39:6d:5f:95:d3:10:85:ea:d0:ce:52:88:22:
                    82:74:b6:b9:00:66:16:c3:e2:57:96:9a:d2:c8:e0:
                    5a:20:a8:1a:d3:54:52:6d:be:d6:a5:a5:11:f6:99:
                    1d:d5:65:91:f3:09:0d:80:54:7c:ae:cc:04:38:da:
                    84:ce:c2:d7:5a:99:53:80:ea:9d:51:96:40:9f:58:
                    22:fb:e7:08:c8:dc:59:10:e3:77:3d:69:8a:a2:14:
                    1b:0f:c8:f6:25:1d:c4:46:b2:9e:3b:2e:4d:5c:2a:
                    7a:ce:47:ba:0f:33:23:d1:6f:61:f8:3e:eb:e0:f9:
                    3a:4d:27:00:90:95:9a:75:36:e0:3d:cf:b3:e6:74:
                    92:b9:71:61:45:ab:13:8c:b5:89:90:58:51:53:2c:
                    64:0a:c3:96:a1:36:8a:6b:79:68:0c:3e:3a:25:ca:
                    26:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:AB:F3:7A:8D:C2:A0:DF:8A:98:C9:C5:DA:94:A7:83:7B:C3:0C:6E
            X509v3 Authority Key Identifier:
                keyid:6B:53:F8:0F:8E:88:1B:37:31:97:26:63:BA:18:97:B7:4A:92:D4:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91991D3/5FA36E34892311EDBCA29613C4F9AE02/a1P4D46IGzcxlyZjuhiXt0qS1E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a1P4D46IGzcxlyZjuhiXt0qS1E0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91991D3/5FA36E34892311EDBCA29613C4F9AE02/8879DC04990611EF9BA6A76EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.101.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:7b:fe:e1:13:85:75:96:49:6e:c8:23:fd:45:34:97:66:bb:
         da:ff:ea:9c:90:c8:15:75:f9:de:00:a4:7e:76:4c:f6:bc:e6:
         82:78:10:74:dc:8d:98:f7:37:00:5b:75:b3:85:52:e9:e7:5c:
         77:dc:d5:02:3f:5b:ac:b0:4c:40:b0:f2:5b:46:2c:8f:b2:8d:
         4c:cf:54:3a:39:50:a7:f5:02:3e:ba:68:28:4f:4d:34:46:5d:
         21:b7:c9:4f:cd:f9:43:1f:6f:43:a5:0b:be:e7:fa:2c:43:d4:
         e0:09:4e:55:7e:dd:a8:ad:19:1d:b1:ff:25:54:10:9f:fa:f1:
         82:4d:18:a8:a3:06:6a:0e:39:d4:94:11:6b:7c:be:e6:8e:ae:
         9d:d8:2b:0d:42:ef:b9:06:0d:29:8d:82:4a:a1:ff:5a:28:f7:
         64:28:3a:dc:71:d7:96:56:9b:6c:d1:06:43:7b:a2:46:5e:06:
         b7:91:a5:a1:4a:26:06:f3:d6:a3:ac:81:8d:24:74:b8:77:47:
         f3:ba:c6:66:d7:5e:e3:a6:df:e7:da:e3:79:33:69:51:16:d9:
         e2:66:c3:4c:c9:44:5b:75:ff:f3:5d:13:34:71:55:75:88:c7:
         d5:d8:4f:12:c2:f6:69:2a:df:ed:ca:58:14:d4:7c:7f:04:a3:
         18:e9:02:c1
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAWMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTkxRDMxMTAvBgNVBAUTKDZCNTNGODBGOEU4ODFCMzczMTk3MjY2M0JBMTg5N0I3
NEE5MkQ0NEQwHhcNMjQxMTAzMDIzNTUyWhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzI2ZTE4OC1jZGUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAn7F29LSTQNawSkmt3aQtoewyKTph3uWzZ71+eIHEwdFc6KjCpqzVZA4GKDI8
TNc5KpSgjxGbuFEUG4J+1I48+egwBxb46GLX0eKqBF1wWZVXRVNFCTyGb5VFsjlt
X5XTEIXq0M5SiCKCdLa5AGYWw+JXlprSyOBaIKga01RSbb7WpaUR9pkd1WWR8wkN
gFR8rswEONqEzsLXWplTgOqdUZZAn1gi++cIyNxZEON3PWmKohQbD8j2JR3ERrKe
Oy5NXCp6zke6DzMj0W9h+D7r4Pk6TScAkJWadTbgPc+z5nSSuXFhRasTjLWJkFhR
UyxkCsOWoTaKa3loDD46JcomiQIDAQABo4IClTCCApEwHQYDVR0OBBYEFK6r83qN
wqDfipjJxdqUp4N7wwxuMB8GA1UdIwQYMBaAFGtT+A+OiBs3MZcmY7oYl7dKktRN
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTFEMy81RkEzNkUzNDg5
MjMxMUVEQkNBMjk2MTNDNEY5QUUwMi9hMVA0RDQ2SUd6Y3hseVpqdWhpWHQwcVMx
RTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2ExUDRENDZJR3pjeGx5Wmp1aGlYdDBxUzFFMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTkxRDMvNUZBMzZFMzQ4OTIzMTFFREJDQTI5NjEzQzRGOUFFMDIvODg3OURDMDQ5
OTA2MTFFRjlCQTZBNzZFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnZd4wDQYJKoZIhvcNAQELBQADggEBAJZ7/uEThXWWSW7I
I/1FNJdmu9r/6pyQyBV1+d4ApH52TPa85oJ4EHTcjZj3NwBbdbOFUunnXHfc1QI/
W6ywTECw8ltGLI+yjUzPVDo5UKf1Aj66aChPTTRGXSG3yU/N+UMfb0OlC77n+ixD
1OAJTlV+3aitGR2x/yVUEJ/68YJNGKijBmoOOdSUEWt8vuaOrp3YKw1C77kGDSmN
gkqh/1oo92QoOtxx15ZWm2zRBkN7okZeBreRpaFKJgbz1qOsgY0kdLh3R/O6xmbX
XuOm3+fa43kzaVEW2eJmw0zJRFt1//NdEzRxVXWIx9XYTxLC9mkq3+3KWBTUfH8E
oxjpAsE=
-----END CERTIFICATE-----
Generated at Sat Nov 23 05:02:53 2024 by rpki-client on console-fra.rpki-client.org