Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/A7FED16E3BA511EB93223B41C4F9AE02.roa
File:                     A7FED16E3BA511EB93223B41C4F9AE02.roa (raw, json)
Hash identifier:          OFY6fa0pI3GtSJl61J5HjEi5p/gOS0noSIBpJ5lwovU=
Subject key identifier:   BF:D1:A6:FF:3A:AD:63:4A:42:A1:CA:48:0E:A5:DF:2E:0B:D1:64:69
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       457A
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/A7FED16E3BA511EB93223B41C4F9AE02.roa
Signing time:             Thu 05 Sep 2024 03:32:48 +0000
ROA not before:           Thu 05 Sep 2024 03:32:48 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     135952
IP address blocks:        103.131.78.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 11:15:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17786 (0x457a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Sep  5 03:32:48 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=66d92660-0ece
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:19:a9:84:73:31:46:2b:ac:f2:d1:82:9b:2a:
                    5e:56:0e:cb:d0:ca:1e:19:2a:4c:fd:95:11:ea:2b:
                    e5:52:6c:76:87:4e:5f:11:55:c7:3e:83:d8:af:2f:
                    8a:c2:8f:83:35:51:21:6a:d6:5e:42:31:82:a3:0d:
                    29:c3:39:4b:21:b7:71:92:f6:a3:91:2b:ea:0e:0b:
                    66:dd:95:32:a9:30:29:c5:a7:1f:55:0e:eb:3a:91:
                    7a:7d:e0:1f:69:52:1e:64:e8:90:f3:be:ac:60:ef:
                    28:6a:b6:de:3a:71:75:cb:13:9f:16:d6:c6:1a:0b:
                    c7:38:67:76:1a:1c:92:e8:62:d3:29:2c:04:dd:ea:
                    ec:a5:94:b2:22:f8:51:2e:e2:f7:4b:1b:a8:e4:51:
                    c7:f8:de:cc:0c:86:69:aa:dd:0d:eb:cc:1b:9a:57:
                    47:53:f8:b1:a3:76:9c:bc:b6:48:b6:d4:8d:e1:fb:
                    38:bf:8a:87:10:20:68:08:5f:ff:fb:db:c5:56:76:
                    86:1b:a9:73:bc:c4:5a:57:34:54:dc:80:54:e3:fe:
                    50:1a:15:dc:9f:66:48:d6:2a:71:55:f7:60:d6:62:
                    bc:19:0c:2c:a5:50:cd:5f:7a:ed:0b:6f:bb:49:23:
                    43:be:d6:32:21:39:91:e0:12:da:e4:c3:21:23:76:
                    f9:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:D1:A6:FF:3A:AD:63:4A:42:A1:CA:48:0E:A5:DF:2E:0B:D1:64:69
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/A7FED16E3BA511EB93223B41C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.131.78.0/23

    Signature Algorithm: sha256WithRSAEncryption
         48:63:27:90:cc:12:2f:e5:92:57:88:53:e1:90:bf:8b:2d:23:
         ad:41:1a:13:f0:6d:b9:98:ff:dd:9a:d0:25:27:97:7f:f5:6e:
         b2:aa:8e:c8:9d:64:be:f4:21:97:2f:84:58:30:fc:3b:06:e9:
         d2:05:ac:b2:81:64:6f:fc:e0:b7:a3:05:39:fb:f3:11:18:96:
         2c:b1:33:ed:8e:f8:a9:22:96:c5:a6:eb:f8:5f:fe:22:0f:1f:
         8e:32:05:c7:34:07:a6:77:d0:06:e7:73:3d:a0:65:1b:82:2c:
         7c:ed:ce:e0:5b:ca:b5:59:17:35:29:16:ce:7b:54:52:de:5e:
         c4:04:d4:13:36:34:45:72:98:c4:1b:3b:d1:56:d4:e0:3f:b8:
         3f:6c:6f:46:da:75:b5:dd:20:d7:91:0b:ad:21:73:00:27:a3:
         e2:89:f0:38:e0:ab:8d:cb:4b:8f:aa:85:05:75:0d:ae:51:fd:
         ea:5d:ab:a0:ca:5a:33:98:90:6a:33:3f:c9:70:b9:fa:96:b5:
         26:32:5e:e9:1a:75:c1:01:c8:05:3f:b1:9d:e0:70:c6:b4:d4:
         88:29:08:af:b7:eb:c2:e8:5a:da:d5:d2:c7:c0:ee:1d:69:4d:
         d1:0a:ab:d1:da:40:fa:2a:d4:c9:28:70:4b:81:22:e8:b7:ee:
         8b:cf:8a:1c
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICRXowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3
NTZBQzZGMEEwHhcNMjQwOTA1MDMzMjQ4WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmQ5MjY2MC0wZWNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsRmphHMxRius8tGCmypeVg7L0MoeGSpM/ZUR6ivlUmx2h05fEVXHPoPYry+K
wo+DNVEhatZeQjGCow0pwzlLIbdxkvajkSvqDgtm3ZUyqTApxacfVQ7rOpF6feAf
aVIeZOiQ876sYO8oarbeOnF1yxOfFtbGGgvHOGd2GhyS6GLTKSwE3erspZSyIvhR
LuL3Sxuo5FHH+N7MDIZpqt0N68wbmldHU/ixo3acvLZIttSN4fs4v4qHECBoCF//
+9vFVnaGG6lzvMRaVzRU3IBU4/5QGhXcn2ZI1ipxVfdg1mK8GQwspVDNX3rtC2+7
SSNDvtYyITmR4BLa5MMhI3b5wwIDAQABo4IClTCCApEwHQYDVR0OBBYEFL/Rpv86
rWNKQqHKSA6l3y4L0WRpMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE
OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi
d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvQTdGRUQxNkUz
QkE1MTFFQjkzMjIzQjQxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFng04wDQYJKoZIhvcNAQELBQADggEBAEhjJ5DMEi/lkleI
U+GQv4stI61BGhPwbbmY/92a0CUnl3/1brKqjsidZL70IZcvhFgw/DsG6dIFrLKB
ZG/84LejBTn78xEYliyxM+2O+KkilsWm6/hf/iIPH44yBcc0B6Z30Abncz2gZRuC
LHztzuBbyrVZFzUpFs57VFLeXsQE1BM2NEVymMQbO9FW1OA/uD9sb0badbXdINeR
C60hcwAno+KJ8Djgq43LS4+qhQV1Da5R/epdq6DKWjOYkGozP8lwufqWtSYyXuka
dcEByAU/sZ3gcMa01IgpCK+368LoWtrV0sfA7h1pTdEKq9HaQPoq1MkocEuBIui3
7ovPihw=
-----END CERTIFICATE-----
Generated at Mon Nov 25 13:17:33 2024 by rpki-client on console-ams.rpki-client.org