Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/4B3CF9E8912211EF911C9E23C4F9AE02.roa
File:                     4B3CF9E8912211EF911C9E23C4F9AE02.roa (raw, json)
Hash identifier:          eIrJXeHDAiWb7D9tw6oPfCUXI51KNlouXM61Bgo2gLs=
Subject key identifier:   24:EF:4C:7E:ED:A2:04:02:7D:88:12:F6:6A:9E:71:8F:5A:D8:B3:60
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       478D
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/4B3CF9E8912211EF911C9E23C4F9AE02.roa
Signing time:             Wed 23 Oct 2024 09:36:35 +0000
ROA not before:           Wed 23 Oct 2024 09:36:35 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     131374
IP address blocks:        103.98.152.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 11:15:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18317 (0x478d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Oct 23 09:36:35 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=6718c3a3-05ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:78:78:f0:bb:34:cd:11:40:80:2a:82:93:d2:
                    da:44:58:75:b8:5d:47:86:0b:5a:51:ae:de:b7:b8:
                    d3:c5:3c:42:b6:3f:b1:f1:34:1a:ce:55:d1:5d:59:
                    ce:fb:68:6c:5a:df:54:c8:d1:1b:de:0f:e1:f3:04:
                    0f:35:51:1a:62:13:83:c9:95:a7:20:d3:10:ae:09:
                    f4:4b:b6:b9:64:a5:dc:23:54:33:7b:29:ac:59:27:
                    df:8c:26:db:97:ea:25:29:6f:54:19:f9:28:5a:86:
                    81:08:e5:0e:4e:61:16:38:dd:89:e2:8b:e3:4a:7a:
                    ce:e6:4f:a1:57:7c:53:5f:43:b3:9e:b8:29:27:10:
                    cb:61:ef:da:b4:d5:ad:15:69:53:5e:be:26:1a:7d:
                    60:04:1b:df:3b:1a:e1:3b:b7:d6:ba:f7:88:55:4e:
                    ca:0d:d7:4a:af:68:a3:e7:a2:5f:98:05:72:14:1b:
                    56:54:ce:da:04:b5:74:5c:75:4a:ca:04:81:4f:54:
                    16:68:f2:a9:19:08:9f:23:39:b8:cb:ba:1c:b1:8e:
                    74:71:3b:2a:73:a9:17:c6:67:46:6e:2e:a0:53:8e:
                    0b:2c:8a:17:df:b3:d4:31:bc:b3:a5:73:9a:be:31:
                    e8:05:e5:7d:3e:be:86:10:0d:b3:91:83:2c:c0:68:
                    4a:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:EF:4C:7E:ED:A2:04:02:7D:88:12:F6:6A:9E:71:8F:5A:D8:B3:60
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/4B3CF9E8912211EF911C9E23C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.98.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2b:62:38:85:c8:b9:f6:d2:6e:87:bb:97:62:61:ea:dd:a4:f7:
         70:f8:c1:2a:8b:c1:5d:62:14:8d:1c:d3:84:50:15:01:ac:b1:
         99:fc:e0:4f:f4:40:27:0c:e0:84:fe:a2:36:99:4c:bc:e0:8f:
         af:8e:9a:97:c1:1b:23:a9:7c:47:a5:52:e8:4b:5b:fa:0b:2b:
         b6:59:00:a6:e7:2d:c9:f7:36:88:be:29:11:14:be:54:98:74:
         0c:42:66:3a:2e:82:1a:86:64:d0:e8:50:de:67:34:e6:d4:4f:
         70:b2:a4:5a:ff:99:d4:3f:66:ed:4c:ea:d7:68:08:a5:34:3c:
         de:5d:4a:e6:47:6b:e8:9e:ea:6a:ff:26:93:d5:6f:79:24:82:
         30:d8:c1:6a:ec:99:28:33:84:f4:e7:63:ad:3d:6f:c6:09:b1:
         28:e8:f5:15:99:3e:67:f0:a9:2d:8d:b0:e4:8b:5a:2c:e9:3c:
         89:be:05:e7:5c:80:a1:69:16:3e:85:64:3e:29:ef:2e:c5:d2:
         d8:11:6e:c7:e8:68:bd:80:9c:33:3f:58:f8:8a:8e:3e:18:32:
         36:12:3b:d0:8f:3e:4c:4b:3c:75:fa:eb:ff:fe:7a:46:b9:76:
         82:68:12:79:59:3e:bd:f0:1f:9b:d7:fd:a8:f6:b6:4b:3a:86:
         7f:c0:4a:15
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICR40wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3
NTZBQzZGMEEwHhcNMjQxMDIzMDkzNjM1WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzE4YzNhMy0wNWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlnh48Ls0zRFAgCqCk9LaRFh1uF1HhgtaUa7et7jTxTxCtj+x8TQazlXRXVnO
+2hsWt9UyNEb3g/h8wQPNVEaYhODyZWnINMQrgn0S7a5ZKXcI1QzeymsWSffjCbb
l+olKW9UGfkoWoaBCOUOTmEWON2J4ovjSnrO5k+hV3xTX0OznrgpJxDLYe/atNWt
FWlTXr4mGn1gBBvfOxrhO7fWuveIVU7KDddKr2ij56JfmAVyFBtWVM7aBLV0XHVK
ygSBT1QWaPKpGQifIzm4y7ocsY50cTsqc6kXxmdGbi6gU44LLIoX37PUMbyzpXOa
vjHoBeV9Pr6GEA2zkYMswGhKEQIDAQABo4IClTCCApEwHQYDVR0OBBYEFCTvTH7t
ogQCfYgS9mqecY9a2LNgMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE
OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi
d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvNEIzQ0Y5RTg5
MTIyMTFFRjkxMUM5RTIzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAJnYpgwDQYJKoZIhvcNAQELBQADggEBACtiOIXIufbSboe7
l2Jh6t2k93D4wSqLwV1iFI0c04RQFQGssZn84E/0QCcM4IT+ojaZTLzgj6+OmpfB
GyOpfEelUuhLW/oLK7ZZAKbnLcn3Noi+KREUvlSYdAxCZjoughqGZNDoUN5nNObU
T3CypFr/mdQ/Zu1M6tdoCKU0PN5dSuZHa+ie6mr/JpPVb3kkgjDYwWrsmSgzhPTn
Y609b8YJsSjo9RWZPmfwqS2NsOSLWizpPIm+BedcgKFpFj6FZD4p7y7F0tgRbsfo
aL2AnDM/WPiKjj4YMjYSO9CPPkxLPHX66//+eka5doJoEnlZPr3wH5vX/aj2tks6
hn/AShU=
-----END CERTIFICATE-----
Generated at Mon Nov 25 13:05:15 2024 by rpki-client on console-fra.rpki-client.org