Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/101550F4247A11EB97620E4AC4F9AE02.roa
File:                     101550F4247A11EB97620E4AC4F9AE02.roa (raw, json)
Hash identifier:          jsaYUV9MyQf/RZz1w8kgJ5x1GAJGLLL2SfJ7+Rey3pk=
Subject key identifier:   71:63:21:2B:0B:75:C8:BD:D2:D5:AD:00:9D:7D:4E:A6:6F:6E:0B:C9
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       4562
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/101550F4247A11EB97620E4AC4F9AE02.roa
Signing time:             Thu 05 Sep 2024 03:32:28 +0000
ROA not before:           Thu 05 Sep 2024 03:32:28 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     135910
IP address blocks:        103.150.240.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 11:15:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17762 (0x4562)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Sep  5 03:32:28 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=66d9264b-a55b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:cb:c0:cc:f9:d4:08:7a:44:20:12:3c:63:98:
                    40:66:b9:43:f5:5f:13:f0:b1:af:d8:4f:1a:2c:8d:
                    e6:c1:f9:0a:43:db:2e:62:dc:f0:e6:52:1e:4e:fc:
                    76:18:3e:88:b5:b5:93:e5:6f:ad:ab:72:4f:82:55:
                    cf:48:ca:66:60:b3:b1:40:71:3c:a0:59:0e:36:44:
                    c4:84:88:0d:79:52:35:e1:f0:f7:14:ab:15:32:f4:
                    53:3f:15:9c:30:90:db:6f:d2:ee:50:2c:d1:60:af:
                    3f:d6:a0:b8:ff:ca:25:89:18:69:50:cf:74:d6:45:
                    93:51:fb:31:5a:10:15:ce:26:74:79:3e:32:30:ca:
                    54:19:39:f1:d8:fb:dd:94:df:5a:ba:f9:73:10:a8:
                    84:82:14:57:27:db:a7:02:01:d5:7b:23:03:e3:9c:
                    2d:9a:5e:5a:f0:ed:42:d6:8e:dd:68:82:13:ab:84:
                    97:37:0c:9c:7e:4f:0d:fb:a3:82:42:80:ef:51:82:
                    28:7d:a3:1b:92:5f:51:fe:f9:ab:79:91:66:09:2b:
                    ff:7f:ba:29:28:c6:fe:60:66:99:7e:9d:cd:ef:32:
                    44:c6:4a:26:5b:90:b5:ed:cd:3a:57:bd:90:96:6e:
                    17:0d:6e:00:cc:0b:70:1d:1a:9c:28:91:80:df:10:
                    e0:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:63:21:2B:0B:75:C8:BD:D2:D5:AD:00:9D:7D:4E:A6:6F:6E:0B:C9
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/101550F4247A11EB97620E4AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.150.240.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:89:be:ca:d7:f1:b2:dd:03:c1:1c:9f:33:54:57:30:92:a6:
         b0:a7:b1:66:16:e3:6b:ab:2e:70:14:f2:0f:20:8c:5d:8f:de:
         b6:a8:73:fe:27:1b:dd:17:cf:44:67:22:bc:49:34:fe:6f:76:
         49:67:a3:af:f0:82:06:54:5b:62:a7:6d:36:e3:ff:4b:5b:cc:
         af:7c:ed:b3:76:cc:8e:11:5c:10:4c:cf:4a:d4:a1:cd:f6:31:
         68:6a:a1:f1:ca:68:a3:85:eb:66:17:92:73:fc:a2:c6:46:b2:
         52:66:e6:20:d8:38:a1:13:3e:3f:c9:26:bc:3c:f4:9b:86:15:
         a1:2f:29:26:e4:f7:8e:ee:a6:94:7d:23:cf:3b:41:c3:03:a6:
         09:85:01:2e:d9:43:c9:a7:e2:b5:b9:3b:26:6d:66:ff:49:7a:
         0f:8f:79:5e:b6:38:c2:44:c4:c5:a1:a5:61:5f:b7:1b:af:62:
         40:f7:87:a4:df:11:e7:6f:f2:07:ef:f9:b3:9e:36:b4:e7:35:
         8e:b0:f6:d9:31:06:f9:2d:1c:64:2a:d5:49:67:de:a6:76:96:
         f8:a5:d3:2a:ee:16:13:86:96:e0:f6:da:68:86:83:5f:42:6d:
         03:d5:1c:a2:38:8d:64:f6:24:35:60:47:53:e4:4d:96:17:e0:
         20:70:15:32
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICRWIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3
NTZBQzZGMEEwHhcNMjQwOTA1MDMzMjI4WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmQ5MjY0Yi1hNTViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA+MvAzPnUCHpEIBI8Y5hAZrlD9V8T8LGv2E8aLI3mwfkKQ9suYtzw5lIeTvx2
GD6ItbWT5W+tq3JPglXPSMpmYLOxQHE8oFkONkTEhIgNeVI14fD3FKsVMvRTPxWc
MJDbb9LuUCzRYK8/1qC4/8oliRhpUM901kWTUfsxWhAVziZ0eT4yMMpUGTnx2Pvd
lN9auvlzEKiEghRXJ9unAgHVeyMD45wtml5a8O1C1o7daIITq4SXNwycfk8N+6OC
QoDvUYIofaMbkl9R/vmreZFmCSv/f7opKMb+YGaZfp3N7zJExkomW5C17c06V72Q
lm4XDW4AzAtwHRqcKJGA3xDgWQIDAQABo4IClTCCApEwHQYDVR0OBBYEFHFjISsL
dci90tWtAJ19TqZvbgvJMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE
OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi
d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvMTAxNTUwRjQy
NDdBMTFFQjk3NjIwRTRBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnlvAwDQYJKoZIhvcNAQELBQADggEBAIWJvsrX8bLdA8Ec
nzNUVzCSprCnsWYW42urLnAU8g8gjF2P3raoc/4nG90Xz0RnIrxJNP5vdklno6/w
ggZUW2KnbTbj/0tbzK987bN2zI4RXBBMz0rUoc32MWhqofHKaKOF62YXknP8osZG
slJm5iDYOKETPj/JJrw89JuGFaEvKSbk947uppR9I887QcMDpgmFAS7ZQ8mn4rW5
OyZtZv9Jeg+PeV62OMJExMWhpWFftxuvYkD3h6TfEedv8gfv+bOeNrTnNY6w9tkx
BvktHGQq1Uln3qZ2lvil0yruFhOGluD22miGg19CbQPVHKI4jWT2JDVgR1PkTZYX
4CBwFTI=
-----END CERTIFICATE-----
Generated at Mon Nov 25 13:17:31 2024 by rpki-client on console-ams.rpki-client.org