Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/36C9F1D88FE911EC93CC6910C4F9AE02.roa
File:                     36C9F1D88FE911EC93CC6910C4F9AE02.roa (raw, json)
Hash identifier:          6cy699gp5PJdffsUFIVlntYh+0Hj5z3OxsWDPicLVvU=
Subject key identifier:   AA:84:13:81:D4:31:A0:15:56:61:80:A7:AC:8C:B1:90:97:9D:2C:40
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       4647
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/36C9F1D88FE911EC93CC6910C4F9AE02.roa
Signing time:             Thu 05 Sep 2024 03:35:47 +0000
ROA not before:           Thu 05 Sep 2024 03:35:47 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     38248
IP address blocks:        117.103.192.0/18 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 11:15:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17991 (0x4647)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Sep  5 03:35:47 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=66d92712-7416
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:33:0a:36:d5:4d:de:40:1b:8f:d0:a7:de:8f:
                    8a:69:ed:41:1a:13:63:58:98:b8:ae:8d:cc:c4:bf:
                    d2:af:b1:6e:59:93:6e:83:0e:4f:5c:a4:bf:1e:2b:
                    dc:43:b2:d8:9f:70:d0:1c:fb:f7:5c:fe:f0:85:b1:
                    e7:08:fa:f0:1a:d8:38:8c:28:c8:c7:b1:95:b8:6d:
                    51:d8:33:45:1f:3b:8f:da:be:c7:c4:a3:18:53:79:
                    5e:ef:97:bb:33:be:cf:9c:ce:8b:b1:ac:a6:fc:3f:
                    00:4b:26:4e:0f:e6:75:eb:6d:2a:84:44:bc:b5:81:
                    8d:bb:c0:d9:1b:57:25:51:38:6d:d5:da:61:b5:70:
                    58:9c:98:8f:8a:93:f5:73:bd:5e:3b:fb:08:7e:43:
                    b4:88:7c:ee:5c:f9:a4:ab:9e:3e:8c:a2:8e:42:30:
                    e2:80:7a:56:f1:67:2f:86:21:5e:8e:5e:df:73:7e:
                    ab:98:b0:ba:80:49:d9:9e:cb:fe:c4:f7:79:5a:d8:
                    c8:8c:ab:57:dd:98:95:e4:9f:2b:b3:4a:6f:2e:bc:
                    0d:1d:fe:74:00:96:2a:78:08:e9:d2:0c:de:2d:e7:
                    d5:89:c3:61:6f:0d:1b:93:af:21:4e:cb:e2:e5:4e:
                    97:85:a8:ab:c8:ff:8b:5d:d3:15:d4:f9:89:17:32:
                    3c:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:84:13:81:D4:31:A0:15:56:61:80:A7:AC:8C:B1:90:97:9D:2C:40
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/36C9F1D88FE911EC93CC6910C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.103.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         09:38:7a:bf:d2:ff:c0:e8:41:c1:38:29:af:a5:b9:1f:3b:26:
         0a:b0:01:b1:98:7a:ad:4d:88:4f:39:e0:16:1a:c1:c1:70:88:
         6a:4f:42:a6:f3:c3:4d:b7:8d:b6:6c:b5:05:8e:9c:fb:99:fc:
         75:9d:cd:45:f9:bd:4b:4b:3a:0f:ad:e9:ca:7c:73:39:aa:f7:
         d4:ff:43:f0:19:43:85:06:89:af:78:d1:6d:f6:bd:ba:a3:94:
         52:f6:ab:0e:e9:85:37:2b:e1:1a:92:db:76:a4:7b:bf:47:1b:
         e2:91:2d:fc:b6:29:15:b4:fa:a0:f7:eb:99:f2:d7:c9:76:bd:
         ff:7e:2a:04:30:30:a5:8b:13:81:00:de:d5:ad:00:9b:b3:13:
         5b:25:e5:2f:1c:d6:2d:09:aa:13:d0:6c:04:8f:4c:8a:72:58:
         c7:ad:0b:4a:86:ab:39:a4:09:b6:bd:48:e9:62:40:f7:0a:c9:
         92:4a:5a:e3:f6:7f:6c:f4:f8:f7:7a:a3:bc:01:cf:f9:c4:4d:
         6a:8d:45:a0:20:8c:60:fd:1e:ca:e4:90:9f:a3:5a:69:4c:ab:
         09:bf:fd:14:bb:76:4c:f8:50:d8:98:16:a3:84:ad:fb:e5:36:
         1a:fa:89:69:95:09:a2:ed:db:3b:61:46:15:90:ab:9e:a0:ef:
         af:93:49:0a
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICRkcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3
NTZBQzZGMEEwHhcNMjQwOTA1MDMzNTQ3WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmQ5MjcxMi03NDE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoDMKNtVN3kAbj9Cn3o+Kae1BGhNjWJi4ro3MxL/Sr7FuWZNugw5PXKS/Hivc
Q7LYn3DQHPv3XP7whbHnCPrwGtg4jCjIx7GVuG1R2DNFHzuP2r7HxKMYU3le75e7
M77PnM6Lsaym/D8ASyZOD+Z1620qhES8tYGNu8DZG1clUTht1dphtXBYnJiPipP1
c71eO/sIfkO0iHzuXPmkq54+jKKOQjDigHpW8WcvhiFejl7fc36rmLC6gEnZnsv+
xPd5WtjIjKtX3ZiV5J8rs0pvLrwNHf50AJYqeAjp0gzeLefVicNhbw0bk68hTsvi
5U6XhairyP+LXdMV1PmJFzI8kwIDAQABo4IClTCCApEwHQYDVR0OBBYEFKqEE4HU
MaAVVmGAp6yMsZCXnSxAMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE
OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi
d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvMzZDOUYxRDg4
RkU5MTFFQzkzQ0M2OTEwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAZ1Z8AwDQYJKoZIhvcNAQELBQADggEBAAk4er/S/8DoQcE4
Ka+luR87JgqwAbGYeq1NiE854BYawcFwiGpPQqbzw023jbZstQWOnPuZ/HWdzUX5
vUtLOg+t6cp8czmq99T/Q/AZQ4UGia940W32vbqjlFL2qw7phTcr4RqS23ake79H
G+KRLfy2KRW0+qD365ny18l2vf9+KgQwMKWLE4EA3tWtAJuzE1sl5S8c1i0JqhPQ
bASPTIpyWMetC0qGqzmkCba9SOliQPcKyZJKWuP2f2z0+Pd6o7wBz/nETWqNRaAg
jGD9HsrkkJ+jWmlMqwm//RS7dkz4UNiYFqOErfvlNhr6iWmVCaLt2zthRhWQq56g
76+TSQo=
-----END CERTIFICATE-----
Generated at Mon Nov 25 13:05:15 2024 by rpki-client on console-fra.rpki-client.org