Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/42F648D0065011EC810A267BC4F9AE02.roa
File:                     42F648D0065011EC810A267BC4F9AE02.roa (raw, json)
Hash identifier:          ZwV7MG9VVqlMYYsRgDyDn5eIOw/PXBphBTdOD8pmtjk=
Subject key identifier:   DA:6A:19:DF:28:3F:22:1F:5C:CF:9C:5A:75:70:1C:AB:F8:B2:17:38
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       45AC
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/42F648D0065011EC810A267BC4F9AE02.roa
Signing time:             Thu 05 Sep 2024 03:33:33 +0000
ROA not before:           Thu 05 Sep 2024 03:33:33 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     140823
IP address blocks:        103.171.216.0/23 maxlen: 24
                          2407:c840::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 11:15:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17836 (0x45ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Sep  5 03:33:33 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=66d9268d-4c30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:86:18:d5:d5:09:39:6c:bc:1c:a9:69:12:86:
                    12:c0:4b:6e:44:ad:43:51:ba:44:c2:a3:11:5d:d0:
                    83:cd:32:ec:02:6f:22:73:59:7e:76:70:5f:ea:64:
                    80:76:ad:e7:d6:dc:8b:ac:df:cb:e8:07:b6:42:f5:
                    60:a7:e4:71:51:38:76:7d:87:87:3b:28:f8:7c:ec:
                    54:9c:31:9f:21:49:f2:17:71:dc:12:e0:e6:86:ec:
                    39:33:cf:d4:f1:9c:6e:09:f0:10:3b:50:05:3d:b7:
                    bb:25:2b:9f:e4:bf:57:aa:24:fc:71:7e:40:0d:99:
                    b9:8e:74:88:24:18:29:aa:fc:76:5a:2e:64:4a:08:
                    98:d8:78:c8:70:a2:db:68:52:2b:8c:11:57:1d:0b:
                    11:a2:6b:a5:61:d2:dd:5b:9b:64:7d:ab:ca:a7:04:
                    c9:8d:34:6d:31:a1:e3:97:6e:64:e2:ae:af:ed:5b:
                    47:f3:f4:eb:fb:f3:81:2f:35:41:80:42:c0:7d:5d:
                    25:6c:d0:04:c6:b1:8c:8c:ab:b1:e0:ca:5f:b9:ba:
                    b7:68:7d:fa:e5:b3:73:66:0d:a0:fd:cf:9c:e7:e1:
                    5c:64:c5:93:06:f4:04:49:10:24:1e:77:a4:fd:c5:
                    92:bc:20:03:a3:df:37:10:40:ec:ce:99:69:ca:4d:
                    70:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:6A:19:DF:28:3F:22:1F:5C:CF:9C:5A:75:70:1C:AB:F8:B2:17:38
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/42F648D0065011EC810A267BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.171.216.0/23
                IPv6:
                  2407:c840::/48

    Signature Algorithm: sha256WithRSAEncryption
         a8:5c:6e:b4:bf:31:ae:88:a1:98:df:45:fb:b8:96:6d:14:68:
         12:88:22:ff:cd:0a:43:b1:ca:bd:da:27:a9:8a:db:25:a8:62:
         92:7d:eb:8f:ad:cc:c1:f1:11:b5:f2:99:82:e7:e7:a1:74:ac:
         1b:48:c4:4d:6d:aa:5d:1d:74:f0:7f:de:be:d7:56:8b:1d:3d:
         ab:1e:bb:91:36:26:97:55:17:2a:87:c6:77:f8:e6:70:67:83:
         2e:13:90:1d:15:a4:68:51:24:b3:5b:0e:7c:47:e3:ac:1f:c2:
         9c:8b:b2:79:db:64:96:d7:7c:21:6f:af:b7:40:3a:ef:2a:89:
         34:2d:8b:98:b0:97:43:ce:8a:9d:49:f6:29:07:d5:ac:27:11:
         48:3a:5a:3e:fb:3f:08:9a:f3:95:57:96:99:98:20:f2:04:de:
         11:68:de:9b:1a:68:48:43:85:93:44:9e:92:0b:c4:c7:6e:e8:
         06:62:6e:e4:7a:7a:30:fc:ec:e5:c1:bc:08:6d:be:8d:f8:51:
         30:28:9d:42:06:cd:c6:c6:99:b0:41:ee:e8:4a:cb:a8:bf:fc:
         7c:ff:7b:67:a6:4e:43:44:72:27:11:00:13:7c:87:40:d5:11:
         58:2c:4b:ca:f4:ed:0d:a1:37:f8:54:e5:ad:9d:ec:83:b4:17:
         95:5b:2e:80
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgICRawwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3
NTZBQzZGMEEwHhcNMjQwOTA1MDMzMzMzWhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmQ5MjY4ZC00YzMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAr4YY1dUJOWy8HKlpEoYSwEtuRK1DUbpEwqMRXdCDzTLsAm8ic1l+dnBf6mSA
dq3n1tyLrN/L6Ae2QvVgp+RxUTh2fYeHOyj4fOxUnDGfIUnyF3HcEuDmhuw5M8/U
8ZxuCfAQO1AFPbe7JSuf5L9XqiT8cX5ADZm5jnSIJBgpqvx2Wi5kSgiY2HjIcKLb
aFIrjBFXHQsRomulYdLdW5tkfavKpwTJjTRtMaHjl25k4q6v7VtH8/Tr+/OBLzVB
gELAfV0lbNAExrGMjKux4Mpfubq3aH365bNzZg2g/c+c5+FcZMWTBvQESRAkHnek
/cWSvCADo983EEDszplpyk1w0QIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFNpqGd8o
PyIfXM+cWnVwHKv4shc4MB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE
OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi
d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvNDJGNjQ4RDAw
NjUwMTFFQzgxMEEyNjdCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E
ITAfMAwEAgABMAYDBAFnq9gwDwQCAAIwCQMHACQHyEAAADANBgkqhkiG9w0BAQsF
AAOCAQEAqFxutL8xroihmN9F+7iWbRRoEogi/80KQ7HKvdonqYrbJahikn3rj63M
wfERtfKZgufnoXSsG0jETW2qXR108H/evtdWix09qx67kTYml1UXKofGd/jmcGeD
LhOQHRWkaFEks1sOfEfjrB/CnIuyedtkltd8IW+vt0A67yqJNC2LmLCXQ86KnUn2
KQfVrCcRSDpaPvs/CJrzlVeWmZgg8gTeEWjemxpoSEOFk0SekgvEx27oBmJu5Hp6
MPzs5cG8CG2+jfhRMCidQgbNxsaZsEHu6ErLqL/8fP97Z6ZOQ0RyJxEAE3yHQNUR
WCxLyvTtDaE3+FTlrZ3sg7QXlVsugA==
-----END CERTIFICATE-----
Generated at Mon Nov 25 13:17:32 2024 by rpki-client on console-ams.rpki-client.org