Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/24EDD67E7EAC11EEB8FD7D37C4F9AE02.roa
File:                     24EDD67E7EAC11EEB8FD7D37C4F9AE02.roa (raw, json)
Hash identifier:          VmSPAMGA+YP4q4dSexY7Ep/vdoLO5P4y6VgK4UsiVno=
Subject key identifier:   E4:ED:F2:92:81:FB:B8:37:90:59:AE:38:9D:EF:DF:30:C7:04:16:F1
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       4612
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/24EDD67E7EAC11EEB8FD7D37C4F9AE02.roa
Signing time:             Thu 05 Sep 2024 03:35:01 +0000
ROA not before:           Thu 05 Sep 2024 03:35:01 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     150901
IP address blocks:        103.77.244.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 11:15:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17938 (0x4612)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Sep  5 03:35:01 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=66d926e5-f30b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b6:f1:0b:e0:d5:d3:e6:6f:8f:38:d8:fe:2c:
                    e2:33:cf:25:d8:01:f9:0f:d6:9c:29:b7:c7:84:31:
                    54:19:63:8b:d2:e2:b6:bc:17:0b:fc:ee:4c:26:e5:
                    aa:6e:cc:e1:57:26:56:f5:f5:10:3d:68:b9:c5:36:
                    0e:f4:38:85:18:72:1d:e7:de:a4:44:72:e3:dd:f7:
                    5d:fb:a9:9b:aa:6e:87:9e:8a:6d:28:b5:60:91:00:
                    05:40:b7:ed:ff:8d:3c:34:a2:08:98:b5:f6:0d:d5:
                    8d:92:70:44:d6:30:14:46:6b:8f:96:48:46:ca:13:
                    ad:43:b5:fd:2b:27:38:0c:57:78:fb:4d:69:ab:f2:
                    d0:b9:8d:51:52:96:3d:6b:51:2d:cb:24:ab:c5:58:
                    c6:67:da:bb:db:73:e6:72:01:cf:44:a8:69:12:5e:
                    bf:96:f5:dc:95:e2:ce:3f:37:63:75:3c:f4:fb:41:
                    5c:ae:67:00:be:a2:b3:35:8b:8f:76:01:02:9a:d7:
                    ab:0a:0f:1b:ed:8a:1a:f4:5e:03:6e:0b:70:17:2a:
                    a4:fd:67:37:f1:6f:d2:ea:79:c2:6d:6a:32:1b:ed:
                    06:74:fe:d3:e1:13:cc:c1:60:40:2d:63:b4:5d:06:
                    2d:d2:f9:7c:b1:26:51:58:64:43:41:f5:ec:7f:ad:
                    0c:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:ED:F2:92:81:FB:B8:37:90:59:AE:38:9D:EF:DF:30:C7:04:16:F1
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/24EDD67E7EAC11EEB8FD7D37C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.77.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:cb:84:44:2d:7a:36:5c:40:2f:82:93:86:c2:04:29:1b:4d:
         30:66:d7:da:35:e4:66:e9:04:f4:ba:80:c6:84:5f:14:ce:2f:
         17:d3:0a:71:53:1c:28:35:c4:f2:a0:f7:59:b2:0a:fd:1f:38:
         4e:c8:ed:bd:19:94:95:b7:e6:95:8e:15:42:e1:ee:88:63:86:
         18:59:86:a4:84:da:a9:44:7b:58:5e:1d:07:34:e5:e4:64:fc:
         a5:a2:ae:20:0b:d9:f2:e2:cf:73:f9:be:40:2c:79:0f:9e:08:
         90:0f:86:7a:43:49:40:d4:e0:cf:57:74:56:7e:8b:d5:c9:64:
         bc:0a:59:61:ea:89:20:4b:d0:86:3b:a4:69:ea:63:41:00:a4:
         a4:6d:7d:3d:bf:a8:9e:e2:f4:80:b6:97:ab:02:34:75:4f:50:
         72:7f:55:10:66:a2:a2:3b:92:22:47:31:1a:31:23:d2:f3:f5:
         fb:13:cc:9c:b3:26:5e:b2:e1:96:92:68:11:ac:92:b4:21:61:
         1c:b9:b5:12:d4:5e:43:4a:b2:db:e9:7b:eb:1d:ff:ed:b5:fb:
         cf:0e:98:3b:10:43:dd:4b:77:16:62:c5:9c:b0:44:a6:25:30:
         4f:0f:bc:00:80:8c:11:76:76:21:3f:aa:5c:61:08:cb:76:71:
         4e:8d:94:5b
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICRhIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3
NTZBQzZGMEEwHhcNMjQwOTA1MDMzNTAxWhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmQ5MjZlNS1mMzBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvLbxC+DV0+ZvjzjY/iziM88l2AH5D9acKbfHhDFUGWOL0uK2vBcL/O5MJuWq
bszhVyZW9fUQPWi5xTYO9DiFGHId596kRHLj3fdd+6mbqm6HnoptKLVgkQAFQLft
/408NKIImLX2DdWNknBE1jAURmuPlkhGyhOtQ7X9Kyc4DFd4+01pq/LQuY1RUpY9
a1EtyySrxVjGZ9q723PmcgHPRKhpEl6/lvXcleLOPzdjdTz0+0FcrmcAvqKzNYuP
dgECmterCg8b7Yoa9F4DbgtwFyqk/Wc38W/S6nnCbWoyG+0GdP7T4RPMwWBALWO0
XQYt0vl8sSZRWGRDQfXsf60MAwIDAQABo4IClTCCApEwHQYDVR0OBBYEFOTt8pKB
+7g3kFmuOJ3v3zDHBBbxMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE
OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi
d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvMjRFREQ2N0U3
RUFDMTFFRUI4RkQ3RDM3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnTfQwDQYJKoZIhvcNAQELBQADggEBACjLhEQtejZcQC+C
k4bCBCkbTTBm19o15GbpBPS6gMaEXxTOLxfTCnFTHCg1xPKg91myCv0fOE7I7b0Z
lJW35pWOFULh7ohjhhhZhqSE2qlEe1heHQc05eRk/KWiriAL2fLiz3P5vkAseQ+e
CJAPhnpDSUDU4M9XdFZ+i9XJZLwKWWHqiSBL0IY7pGnqY0EApKRtfT2/qJ7i9IC2
l6sCNHVPUHJ/VRBmoqI7kiJHMRoxI9Lz9fsTzJyzJl6y4ZaSaBGskrQhYRy5tRLU
XkNKstvpe+sd/+21+88OmDsQQ91LdxZixZywRKYlME8PvACAjBF2diE/qlxhCMt2
cU6NlFs=
-----END CERTIFICATE-----
Generated at Mon Nov 25 13:05:15 2024 by rpki-client on console-fra.rpki-client.org