Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/F6EEC31C996711EC9741246AC4F9AE02.roa
File:                     F6EEC31C996711EC9741246AC4F9AE02.roa (raw, json)
Hash identifier:          NNtBxbiOMSu76rIcGLQ+/ugCEom0FursPoASdHCWF7U=
Subject key identifier:   37:04:59:13:8B:1B:2B:C7:7D:D0:F0:97:33:2E:D3:74:5F:A9:AD:DD
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       4540
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/F6EEC31C996711EC9741246AC4F9AE02.roa
Signing time:             Thu 05 Sep 2024 03:31:57 +0000
ROA not before:           Thu 05 Sep 2024 03:31:57 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     131390
IP address blocks:        103.242.52.0/22 maxlen: 24
                          2001:df2:4dc0::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 11:15:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17728 (0x4540)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Sep  5 03:31:57 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=66d9262d-41f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:bc:cd:69:10:6c:52:c5:25:e3:03:32:37:b3:
                    b8:39:56:db:a2:eb:d3:93:09:d8:66:bf:cc:98:c9:
                    6b:7d:25:0c:b0:44:f6:72:21:3e:28:5d:cb:d9:3e:
                    ab:2b:39:23:0e:38:4e:13:06:fe:8a:86:08:c8:6c:
                    cc:c6:13:ca:63:4c:b8:43:3b:d1:1b:02:2b:b1:b7:
                    33:60:d5:9f:5f:15:99:6a:b4:de:66:92:7b:3d:bb:
                    7d:d2:94:a6:f2:46:c6:32:7a:09:07:5a:04:3d:94:
                    c6:30:8c:18:aa:14:25:78:20:4d:ab:cd:91:0b:9f:
                    2b:a4:38:9b:44:6c:cf:5a:06:ca:b7:61:15:a7:1b:
                    0b:08:68:e1:ce:60:23:db:e3:24:ab:6e:82:b5:ba:
                    31:83:cb:02:85:e6:a0:24:85:98:7b:ab:f3:7d:d0:
                    fb:82:ac:f5:8a:5b:ab:6c:e1:9e:46:0a:98:ee:0a:
                    77:7a:2d:22:52:78:39:b4:50:cd:68:0a:86:57:4f:
                    b2:92:47:83:2e:5f:d3:bb:73:7b:32:ec:51:ca:d7:
                    33:36:5a:a4:bb:b3:5b:8f:dd:9e:ec:72:4a:76:21:
                    21:64:cd:7f:ad:cf:86:5d:49:fd:c9:1d:34:d9:1d:
                    87:5a:f5:36:9f:cc:1e:ea:84:a1:15:86:64:dc:f0:
                    9b:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:04:59:13:8B:1B:2B:C7:7D:D0:F0:97:33:2E:D3:74:5F:A9:AD:DD
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/F6EEC31C996711EC9741246AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.242.52.0/22
                IPv6:
                  2001:df2:4dc0::/48

    Signature Algorithm: sha256WithRSAEncryption
         87:61:d7:35:16:d1:0e:f3:55:85:17:d3:c9:51:1f:f7:5f:f9:
         16:be:f4:ed:93:97:92:52:b7:c6:64:09:bc:df:98:9e:00:e6:
         54:5c:c9:bf:63:49:ec:af:80:b9:7d:83:8c:e2:76:bc:55:0f:
         13:7d:f8:d5:90:ed:6a:5d:c9:00:f6:7f:32:67:16:ee:c0:69:
         2c:c4:2b:a9:12:5d:f1:59:cf:8c:87:a1:20:30:58:04:e9:d9:
         ef:ec:3a:8e:1c:ce:ae:01:1f:74:a1:34:e9:8b:b0:9a:9a:79:
         62:23:3e:81:8c:c4:7f:63:78:19:61:ff:72:1d:33:bc:e3:18:
         85:ff:c4:d4:0e:9d:ea:f1:04:92:69:e2:f3:8b:c2:8d:db:1f:
         aa:39:9b:b7:23:dd:f9:13:76:07:09:dc:81:9c:04:9f:1e:0c:
         b5:ac:08:f4:4b:35:db:93:21:90:85:47:a9:71:1d:c2:9c:43:
         f5:98:ae:3f:d3:3e:8e:12:a4:3d:ec:ff:60:91:9b:da:85:e8:
         b4:bc:5e:db:41:80:4c:5e:d2:03:5b:a9:89:15:52:48:f4:07:
         0f:d0:4c:38:40:df:ab:b8:b8:6b:21:a3:44:aa:bc:77:e7:94:
         c1:0c:fe:0d:da:ab:b3:1b:c2:63:24:17:fb:7f:a6:a0:97:b7:
         eb:85:41:b7
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgICRUAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3
NTZBQzZGMEEwHhcNMjQwOTA1MDMzMTU3WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmQ5MjYyZC00MWYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsLzNaRBsUsUl4wMyN7O4OVbbouvTkwnYZr/MmMlrfSUMsET2ciE+KF3L2T6r
KzkjDjhOEwb+ioYIyGzMxhPKY0y4QzvRGwIrsbczYNWfXxWZarTeZpJ7Pbt90pSm
8kbGMnoJB1oEPZTGMIwYqhQleCBNq82RC58rpDibRGzPWgbKt2EVpxsLCGjhzmAj
2+Mkq26Ctboxg8sCheagJIWYe6vzfdD7gqz1ilurbOGeRgqY7gp3ei0iUng5tFDN
aAqGV0+ykkeDLl/Tu3N7MuxRytczNlqku7Nbj92e7HJKdiEhZM1/rc+GXUn9yR00
2R2HWvU2n8we6oShFYZk3PCbowIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFDcEWROL
GyvHfdDwlzMu03Rfqa3dMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE
OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi
d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvRjZFRUMzMUM5
OTY3MTFFQzk3NDEyNDZBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E
ITAfMAwEAgABMAYDBAJn8jQwDwQCAAIwCQMHACABDfJNwDANBgkqhkiG9w0BAQsF
AAOCAQEAh2HXNRbRDvNVhRfTyVEf91/5Fr707ZOXklK3xmQJvN+YngDmVFzJv2NJ
7K+AuX2DjOJ2vFUPE3341ZDtal3JAPZ/MmcW7sBpLMQrqRJd8VnPjIehIDBYBOnZ
7+w6jhzOrgEfdKE06Yuwmpp5YiM+gYzEf2N4GWH/ch0zvOMYhf/E1A6d6vEEkmni
84vCjdsfqjmbtyPd+RN2BwncgZwEnx4MtawI9Es125MhkIVHqXEdwpxD9ZiuP9M+
jhKkPez/YJGb2oXotLxe20GATF7SA1upiRVSSPQHD9BMOEDfq7i4ayGjRKq8d+eU
wQz+DdqrsxvCYyQX+3+moJe364VBtw==
-----END CERTIFICATE-----
Generated at Mon Nov 25 13:05:16 2024 by rpki-client on console-fra.rpki-client.org