Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A27AB/6F6E9828310E11EE889FF03FC4F9AE02/6A9F1EFECC1211EEAA175022C4F9AE02.roa
File:                     6A9F1EFECC1211EEAA175022C4F9AE02.roa (raw, json)
Hash identifier:          YF4v1PogTCjL1Qjwdf/xOXt8Ti7J50YFk5loWfPyIno=
Subject key identifier:   6D:E1:B7:AD:C1:BE:E4:29:8A:A9:44:7F:DB:39:8C:81:FD:BA:00:85
Certificate issuer:       /CN=A91A27AB/serialNumber=59D588125A716698738D1D1E9E6D8A68D7409B27
Certificate serial:       0111
Authority key identifier: 59:D5:88:12:5A:71:66:98:73:8D:1D:1E:9E:6D:8A:68:D7:40:9B:27
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WdWIElpxZphzjR0enm2KaNdAmyc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A27AB/6F6E9828310E11EE889FF03FC4F9AE02/6A9F1EFECC1211EEAA175022C4F9AE02.roa
Signing time:             Sat 05 Oct 2024 04:37:56 +0000
ROA not before:           Sat 05 Oct 2024 04:37:56 +0000
ROA not after:            Mon 01 Dec 2025 00:00:00 +0000
asID:                     58061
IP address blocks:        103.99.54.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A27AB/6F6E9828310E11EE889FF03FC4F9AE02/WdWIElpxZphzjR0enm2KaNdAmyc.crl
                          rsync://rpki.apnic.net/member_repository/A91A27AB/6F6E9828310E11EE889FF03FC4F9AE02/WdWIElpxZphzjR0enm2KaNdAmyc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WdWIElpxZphzjR0enm2KaNdAmyc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 03:15:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 273 (0x111)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A27AB/serialNumber=59D588125A716698738D1D1E9E6D8A68D7409B27
        Validity
            Not Before: Oct  5 04:37:56 2024 GMT
            Not After : Dec  1 00:00:00 2025 GMT
        Subject: CN=6700c2a3-d43b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:8f:7a:3e:ce:71:95:a1:90:a9:09:62:95:18:
                    60:19:bf:34:53:49:b1:5e:1b:a2:36:5a:75:36:16:
                    87:ad:c3:50:de:4c:e3:32:de:52:c8:55:a8:48:8a:
                    d4:c3:a5:4a:9e:a0:0e:13:fb:e1:8d:b4:8e:42:f4:
                    24:bc:75:cc:96:bb:fd:df:3d:28:be:c9:c0:77:7d:
                    30:9a:9e:45:1e:f2:99:a6:b7:a6:92:49:1c:b0:8b:
                    77:21:4c:d4:34:0f:6c:1e:a2:31:ee:18:57:c9:47:
                    63:0c:7a:88:bb:16:4b:e7:8f:e0:14:aa:7a:d1:56:
                    a9:f8:19:c2:8f:55:04:b1:c5:55:62:c0:fb:1b:6c:
                    10:90:e7:8a:c3:3a:f3:4b:f0:90:b8:7f:6a:e7:5a:
                    2f:ac:a6:52:35:7c:30:66:f3:c8:7b:f1:51:18:1d:
                    cc:5d:4e:08:c9:29:8a:11:1f:dd:2f:c6:51:f6:bf:
                    26:6e:58:d7:dd:98:51:40:15:22:81:0d:28:df:7f:
                    b9:79:59:73:5b:e2:bf:6e:0b:bd:d4:08:4c:48:f9:
                    4f:44:13:19:81:98:25:47:ac:c9:2a:ea:c4:b1:54:
                    aa:bc:e7:d2:3d:18:45:64:a9:1a:49:fb:0f:93:74:
                    2e:d0:58:75:96:fa:74:24:45:36:0d:b9:48:44:98:
                    23:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:E1:B7:AD:C1:BE:E4:29:8A:A9:44:7F:DB:39:8C:81:FD:BA:00:85
            X509v3 Authority Key Identifier:
                keyid:59:D5:88:12:5A:71:66:98:73:8D:1D:1E:9E:6D:8A:68:D7:40:9B:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A27AB/6F6E9828310E11EE889FF03FC4F9AE02/WdWIElpxZphzjR0enm2KaNdAmyc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WdWIElpxZphzjR0enm2KaNdAmyc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A27AB/6F6E9828310E11EE889FF03FC4F9AE02/6A9F1EFECC1211EEAA175022C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.99.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ba:ce:32:66:c4:7c:2c:f8:07:b7:17:dd:93:63:1c:87:e3:4d:
         49:6c:38:5a:aa:13:1d:d5:3f:c9:44:20:b9:ba:22:b6:5f:ac:
         db:fa:02:1b:61:91:f6:91:34:9b:ea:de:28:17:56:4e:d2:59:
         bd:84:7d:4f:cb:b1:02:0e:5c:5d:59:dc:e5:c3:41:25:1b:ab:
         cc:f4:4f:cc:cc:5d:2c:89:c0:79:0a:8f:d1:09:95:e6:6b:b5:
         82:82:b7:41:fd:12:cc:14:a3:8d:a9:8f:b3:1d:95:4e:03:ce:
         93:ff:66:61:eb:b0:17:a2:6f:8a:5b:24:5c:fa:62:ff:eb:fa:
         57:44:57:f5:37:8f:67:89:31:7f:89:63:ca:20:d4:b0:2b:31:
         bb:84:41:08:80:bd:45:e2:b5:9f:3d:ba:90:f2:76:0f:e0:70:
         c4:35:bb:37:d6:7e:80:91:7e:b4:42:84:38:31:57:3f:15:b5:
         b8:9d:19:10:1c:54:d3:dc:5f:c1:71:83:46:53:5b:fb:a7:42:
         1c:15:45:e8:70:c4:90:42:37:42:c2:d7:92:ea:97:82:4b:57:
         e8:47:66:7d:fd:6d:ea:44:7b:00:37:a7:e8:5f:0b:16:10:34:
         0f:cd:cb:92:b6:e1:17:6c:b7:bd:ac:dc:c5:eb:bb:b4:f3:ee:
         00:d5:6c:dd
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAREwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTI3QUIxMTAvBgNVBAUTKDU5RDU4ODEyNUE3MTY2OTg3MzhEMUQxRTlFNkQ4QTY4
RDc0MDlCMjcwHhcNMjQxMDA1MDQzNzU2WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzAwYzJhMy1kNDNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0496Ps5xlaGQqQlilRhgGb80U0mxXhuiNlp1NhaHrcNQ3kzjMt5SyFWoSIrU
w6VKnqAOE/vhjbSOQvQkvHXMlrv93z0ovsnAd30wmp5FHvKZpremkkkcsIt3IUzU
NA9sHqIx7hhXyUdjDHqIuxZL54/gFKp60Vap+BnCj1UEscVVYsD7G2wQkOeKwzrz
S/CQuH9q51ovrKZSNXwwZvPIe/FRGB3MXU4IySmKER/dL8ZR9r8mbljX3ZhRQBUi
gQ0o33+5eVlzW+K/bgu91AhMSPlPRBMZgZglR6zJKurEsVSqvOfSPRhFZKkaSfsP
k3Qu0Fh1lvp0JEU2DblIRJgjfQIDAQABo4IClTCCApEwHQYDVR0OBBYEFG3ht63B
vuQpiqlEf9s5jIH9ugCFMB8GA1UdIwQYMBaAFFnViBJacWaYc40dHp5timjXQJsn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMjdBQi82RjZFOTgyODMx
MEUxMUVFODg5RkYwM0ZDNEY5QUUwMi9XZFdJRWxweFpwaHpqUjBlbm0yS2FOZEFt
eWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1dkV0lFbHB4WnBoempSMGVubTJLYU5kQW15Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTI3QUIvNkY2RTk4MjgzMTBFMTFFRTg4OUZGMDNGQzRGOUFFMDIvNkE5RjFFRkVD
QzEyMTFFRUFBMTc1MDIyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnYzYwDQYJKoZIhvcNAQELBQADggEBALrOMmbEfCz4B7cX
3ZNjHIfjTUlsOFqqEx3VP8lEILm6IrZfrNv6AhthkfaRNJvq3igXVk7SWb2EfU/L
sQIOXF1Z3OXDQSUbq8z0T8zMXSyJwHkKj9EJleZrtYKCt0H9EswUo42pj7MdlU4D
zpP/ZmHrsBeib4pbJFz6Yv/r+ldEV/U3j2eJMX+JY8og1LArMbuEQQiAvUXitZ89
upDydg/gcMQ1uzfWfoCRfrRChDgxVz8VtbidGRAcVNPcX8Fxg0ZTW/unQhwVRehw
xJBCN0LC15Lql4JLV+hHZn39bepEewA3p+hfCxYQNA/Ny5K24Rdst72s3MXru7Tz
7gDVbN0=
-----END CERTIFICATE-----
Generated at Mon Nov 25 04:54:35 2024 by rpki-client on console-fra.rpki-client.org