Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/A4B9791A773A11ECA988F037C4F9AE02.roa
File:                     A4B9791A773A11ECA988F037C4F9AE02.roa (raw, json)
Hash identifier:          Ajro+C2zUjzMkWiIo89uhp9kh/RgUBQldIqVjeiNyro=
Subject key identifier:   43:3D:B4:C1:FB:94:DA:1B:5B:63:C7:49:EC:98:3A:42:F7:8F:0B:AF
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       4544
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/A4B9791A773A11ECA988F037C4F9AE02.roa
Signing time:             Thu 05 Sep 2024 03:32:01 +0000
ROA not before:           Thu 05 Sep 2024 03:32:01 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     131398
IP address blocks:        103.225.236.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 11:15:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17732 (0x4544)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Sep  5 03:32:01 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=66d92630-e57d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:36:b5:9f:0f:49:55:c0:c8:bb:77:ce:c1:c6:
                    01:12:b3:af:16:4d:d4:8d:0b:80:69:3c:c5:c5:63:
                    85:af:06:fa:b2:67:7b:d9:e0:91:21:7d:68:86:8a:
                    dc:98:4e:fb:ae:cd:51:a7:e4:3c:d7:1d:25:00:66:
                    7b:1e:a2:22:d9:08:f7:fb:e6:af:48:66:e2:e9:77:
                    63:a6:c4:5c:c5:ec:8a:09:bd:4d:55:64:ca:76:1f:
                    12:b0:7f:f6:ac:79:84:aa:b1:03:93:6d:8c:7f:90:
                    23:5c:b5:b4:00:b3:3f:a0:51:24:8c:9d:f6:aa:67:
                    95:52:67:0f:47:eb:f9:35:93:6e:f4:21:5d:0f:d2:
                    8b:16:5b:72:29:74:4a:51:b6:db:83:31:8f:38:7b:
                    cd:2a:0b:1c:8e:b8:7b:85:63:c4:2b:51:a5:35:d6:
                    a6:3b:27:62:4d:ac:da:8c:17:65:6f:c4:28:96:81:
                    26:79:89:c6:dd:6e:b3:ed:9e:97:85:4e:90:f2:a3:
                    f7:7b:23:9b:83:0d:d0:35:10:a1:36:e8:ee:e2:6f:
                    e9:04:81:e8:cd:3f:83:b9:6d:dd:37:39:f3:8e:c0:
                    b6:b7:bd:00:d7:ca:d8:81:52:2e:fa:35:9e:21:c1:
                    65:49:2a:d1:39:b6:f4:80:8b:10:7f:89:e2:8a:4d:
                    86:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:3D:B4:C1:FB:94:DA:1B:5B:63:C7:49:EC:98:3A:42:F7:8F:0B:AF
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/A4B9791A773A11ECA988F037C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.225.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7c:0f:ef:43:23:2d:9c:bb:f6:66:ab:c5:6d:b4:6e:fe:db:c1:
         da:90:c7:4a:b6:bf:27:51:f2:86:09:0b:71:05:3c:ea:cd:37:
         2f:18:83:46:41:a1:c5:17:0a:0a:d8:49:8b:95:13:56:44:58:
         82:d8:97:4b:91:5d:7d:b9:87:c5:ed:66:c5:a4:f6:55:10:47:
         2b:e1:9b:bc:71:d5:80:24:b1:e7:4a:da:9b:d5:ef:85:fd:e8:
         93:ab:ab:66:64:98:f0:f1:0a:5d:01:7d:6e:e8:30:60:59:fe:
         c9:36:e3:0f:f8:f4:95:14:d6:c4:7c:5c:5c:4c:15:b0:eb:fa:
         fd:a0:68:df:1b:e6:09:45:d5:4e:83:98:a4:0d:88:97:37:f0:
         96:0f:a1:1d:54:3a:64:38:ca:a2:72:ac:0b:ac:eb:99:fa:e8:
         f7:d9:f5:16:3e:ca:67:fc:e1:ab:7f:83:40:a1:d7:98:8f:04:
         a8:9a:5f:aa:12:dc:88:c1:9d:b8:90:a2:1f:c2:11:03:ef:d6:
         46:8f:b8:62:20:06:ab:fd:1f:5e:18:8b:0c:e2:0f:9c:46:a1:
         cd:a8:22:24:5b:d6:fe:0f:29:04:d3:65:a3:20:00:de:e2:9a:
         f4:a4:9b:25:01:c1:eb:a0:c7:59:5d:40:97:a1:88:cc:28:9f:
         54:9f:c0:9e
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICRUQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3
NTZBQzZGMEEwHhcNMjQwOTA1MDMzMjAxWhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmQ5MjYzMC1lNTdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2za1nw9JVcDIu3fOwcYBErOvFk3UjQuAaTzFxWOFrwb6smd72eCRIX1ohorc
mE77rs1Rp+Q81x0lAGZ7HqIi2Qj3++avSGbi6XdjpsRcxeyKCb1NVWTKdh8SsH/2
rHmEqrEDk22Mf5AjXLW0ALM/oFEkjJ32qmeVUmcPR+v5NZNu9CFdD9KLFltyKXRK
UbbbgzGPOHvNKgscjrh7hWPEK1GlNdamOydiTazajBdlb8QoloEmeYnG3W6z7Z6X
hU6Q8qP3eyObgw3QNRChNuju4m/pBIHozT+DuW3dNznzjsC2t70A18rYgVIu+jWe
IcFlSSrRObb0gIsQf4niik2GIQIDAQABo4IClTCCApEwHQYDVR0OBBYEFEM9tMH7
lNobW2PHSeyYOkL3jwuvMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE
OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi
d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvQTRCOTc5MUE3
NzNBMTFFQ0E5ODhGMDM3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAJn4ewwDQYJKoZIhvcNAQELBQADggEBAHwP70MjLZy79mar
xW20bv7bwdqQx0q2vydR8oYJC3EFPOrNNy8Yg0ZBocUXCgrYSYuVE1ZEWILYl0uR
XX25h8XtZsWk9lUQRyvhm7xx1YAksedK2pvV74X96JOrq2ZkmPDxCl0BfW7oMGBZ
/sk24w/49JUU1sR8XFxMFbDr+v2gaN8b5glF1U6DmKQNiJc38JYPoR1UOmQ4yqJy
rAus65n66PfZ9RY+ymf84at/g0Ch15iPBKiaX6oS3IjBnbiQoh/CEQPv1kaPuGIg
Bqv9H14YiwziD5xGoc2oIiRb1v4PKQTTZaMgAN7imvSkmyUBweugx1ldQJehiMwo
n1SfwJ4=
-----END CERTIFICATE-----
Generated at Mon Nov 25 13:17:33 2024 by rpki-client on console-ams.rpki-client.org