Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4179/43E4AF26B95111EBAA60CD3CC4F9AE02/F4E815CC699611EE81E3E33CC4F9AE02.roa
File:                     F4E815CC699611EE81E3E33CC4F9AE02.roa (raw, json)
Hash identifier:          plWOD3DLVqnkQtuQl4y0tsk6pTGSRdQR9cDYcE3hB9Y=
Subject key identifier:   B3:EC:8C:27:8B:08:81:0E:7F:47:3C:0F:5C:61:DF:15:F2:85:BC:F3
Certificate issuer:       /CN=A91A4179/serialNumber=1641D13FAD8A20AB0A94F625AEDA106BE2A66E17
Certificate serial:       0557
Authority key identifier: 16:41:D1:3F:AD:8A:20:AB:0A:94:F6:25:AE:DA:10:6B:E2:A6:6E:17
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FkHRP62KIKsKlPYlrtoQa-Kmbhc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4179/43E4AF26B95111EBAA60CD3CC4F9AE02/F4E815CC699611EE81E3E33CC4F9AE02.roa
Signing time:             Sat 03 Aug 2024 00:32:38 +0000
ROA not before:           Sat 03 Aug 2024 00:32:38 +0000
ROA not after:            Tue 30 Sep 2025 00:00:00 +0000
asID:                     151796
IP address blocks:        103.153.4.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4179/43E4AF26B95111EBAA60CD3CC4F9AE02/FkHRP62KIKsKlPYlrtoQa-Kmbhc.crl
                          rsync://rpki.apnic.net/member_repository/A91A4179/43E4AF26B95111EBAA60CD3CC4F9AE02/FkHRP62KIKsKlPYlrtoQa-Kmbhc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FkHRP62KIKsKlPYlrtoQa-Kmbhc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 20:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1367 (0x557)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4179/serialNumber=1641D13FAD8A20AB0A94F625AEDA106BE2A66E17
        Validity
            Not Before: Aug  3 00:32:38 2024 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=66ad7aa5-e92c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:81:e4:b7:06:bb:31:53:c9:a7:2c:f0:01:07:
                    eb:f0:9e:ed:27:d7:47:5f:87:7a:b3:f1:2e:19:aa:
                    7d:a3:d6:9e:7e:77:e5:42:11:f9:b5:cb:50:63:39:
                    08:f2:a0:48:21:8c:d8:70:cb:09:a7:59:03:c3:19:
                    d9:33:73:65:8b:df:3e:4d:c3:8b:5e:3e:9c:43:eb:
                    20:01:02:bb:32:34:7c:15:06:88:9e:db:41:13:fe:
                    3a:e3:10:66:9a:a7:53:0f:9f:09:62:67:0e:5c:53:
                    0b:2e:0f:9a:8b:b1:df:56:5b:5a:5e:63:f4:6f:22:
                    02:0a:2e:9d:7d:ba:9d:8b:73:30:12:86:8b:41:eb:
                    7b:fa:54:77:50:3f:71:46:95:d0:93:b7:03:db:58:
                    4b:c1:4b:da:56:ac:dd:c4:de:84:f4:e1:67:d1:bf:
                    b6:c8:6e:90:89:c7:e3:9a:9d:88:0c:51:f1:83:4c:
                    d9:92:0b:e9:eb:ec:54:bd:db:fe:5b:4e:02:71:8a:
                    1a:51:84:1a:1a:21:9d:d3:2a:2c:86:8f:be:ff:6b:
                    eb:f8:bc:de:fb:c8:ac:7f:99:c6:53:3d:f5:c1:59:
                    01:56:03:3c:80:50:5b:35:43:ff:71:a3:65:cc:dd:
                    80:da:9d:69:6a:7a:50:79:d2:ce:9d:d2:d2:20:e0:
                    0f:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:EC:8C:27:8B:08:81:0E:7F:47:3C:0F:5C:61:DF:15:F2:85:BC:F3
            X509v3 Authority Key Identifier:
                keyid:16:41:D1:3F:AD:8A:20:AB:0A:94:F6:25:AE:DA:10:6B:E2:A6:6E:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4179/43E4AF26B95111EBAA60CD3CC4F9AE02/FkHRP62KIKsKlPYlrtoQa-Kmbhc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FkHRP62KIKsKlPYlrtoQa-Kmbhc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4179/43E4AF26B95111EBAA60CD3CC4F9AE02/F4E815CC699611EE81E3E33CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.153.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:19:65:48:ca:c5:6b:35:b4:64:49:12:6f:ad:c7:55:72:37:
         dd:f4:42:f3:f2:c1:76:0b:a1:78:ec:4d:c8:5b:7e:0f:f8:4d:
         c3:d4:a7:57:f1:a8:9f:da:b7:67:15:c3:bd:c6:2f:ae:51:3e:
         c1:70:73:47:74:9e:a9:9f:4e:85:fa:12:70:f4:0f:cb:1d:4f:
         e3:ad:83:6c:51:08:e0:00:73:c3:71:c4:2f:94:45:f0:fb:7c:
         f4:47:e6:9b:97:4b:e1:b7:43:5f:22:c9:0d:ed:57:9d:b0:d6:
         9e:59:79:64:fc:c2:18:cf:74:fd:de:c1:da:21:00:cc:85:1a:
         7f:74:a0:23:4d:fe:1f:3e:4d:8e:c9:0a:6f:c0:2b:88:72:74:
         a1:bf:be:65:de:b8:12:90:db:8a:5c:9d:8f:ee:ad:50:6e:09:
         c2:da:e6:af:5f:8b:20:0a:5f:10:25:4c:54:90:0a:e3:5e:d9:
         b5:de:69:e1:a5:d5:a6:1a:1b:e1:3a:0e:7c:9a:bb:72:3b:3e:
         5b:ca:ad:8c:81:8d:57:c0:2e:51:e8:d9:21:8e:00:5e:a1:86:
         3c:e7:09:44:cb:c7:03:91:19:0c:52:36:55:f6:1c:16:8a:03:
         83:da:42:12:81:3c:59:d5:4b:b1:ab:37:1b:e4:32:9e:be:59:
         a4:85:a5:1a
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBVcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTQxNzkxMTAvBgNVBAUTKDE2NDFEMTNGQUQ4QTIwQUIwQTk0RjYyNUFFREExMDZC
RTJBNjZFMTcwHhcNMjQwODAzMDAzMjM4WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmFkN2FhNS1lOTJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyYHktwa7MVPJpyzwAQfr8J7tJ9dHX4d6s/EuGap9o9aefnflQhH5tctQYzkI
8qBIIYzYcMsJp1kDwxnZM3Nli98+TcOLXj6cQ+sgAQK7MjR8FQaInttBE/464xBm
mqdTD58JYmcOXFMLLg+ai7HfVltaXmP0byICCi6dfbqdi3MwEoaLQet7+lR3UD9x
RpXQk7cD21hLwUvaVqzdxN6E9OFn0b+2yG6Qicfjmp2IDFHxg0zZkgvp6+xUvdv+
W04CcYoaUYQaGiGd0yosho++/2vr+Lze+8isf5nGUz31wVkBVgM8gFBbNUP/caNl
zN2A2p1panpQedLOndLSIOAPrwIDAQABo4IClTCCApEwHQYDVR0OBBYEFLPsjCeL
CIEOf0c8D1xh3xXyhbzzMB8GA1UdIwQYMBaAFBZB0T+tiiCrCpT2Ja7aEGvipm4X
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDE3OS80M0U0QUYyNkI5
NTExMUVCQUE2MENEM0NDNEY5QUUwMi9Ga0hSUDYyS0lLc0tsUFlscnRvUWEtS21i
aGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZrSFJQNjJLSUtzS2xQWWxydG9RYS1LbWJoYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTQxNzkvNDNFNEFGMjZCOTUxMTFFQkFBNjBDRDNDQzRGOUFFMDIvRjRFODE1Q0M2
OTk2MTFFRTgxRTNFMzNDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnmQQwDQYJKoZIhvcNAQELBQADggEBAH0ZZUjKxWs1tGRJ
Em+tx1VyN930QvPywXYLoXjsTchbfg/4TcPUp1fxqJ/at2cVw73GL65RPsFwc0d0
nqmfToX6EnD0D8sdT+Otg2xRCOAAc8NxxC+URfD7fPRH5puXS+G3Q18iyQ3tV52w
1p5ZeWT8whjPdP3ewdohAMyFGn90oCNN/h8+TY7JCm/AK4hydKG/vmXeuBKQ24pc
nY/urVBuCcLa5q9fiyAKXxAlTFSQCuNe2bXeaeGl1aYaG+E6Dnyau3I7PlvKrYyB
jVfALlHo2SGOAF6hhjznCUTLxwORGQxSNlX2HBaKA4PaQhKBPFnVS7GrNxvkMp6+
WaSFpRo=
-----END CERTIFICATE-----
Generated at Wed Nov 20 23:55:48 2024 by rpki-client on console-ams.rpki-client.org