Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A799E/255CE8347FD611EB9FD1233BC4F9AE02/6AC62B967FD711EBA2ECB43BC4F9AE02.roa
File:                     6AC62B967FD711EBA2ECB43BC4F9AE02.roa (raw, json)
Hash identifier:          lf2fZu+kzi68qsiVImQ67iSYP92BmTFnTbXCqKHalTc=
Subject key identifier:   46:7D:EC:0D:34:DA:03:33:DD:E8:16:7C:F4:57:78:7C:08:D0:75:D4
Certificate issuer:       /CN=A91A799E/serialNumber=AC55FB75BFE343E49487D851C0139C1364CAE9CE
Certificate serial:       0591
Authority key identifier: AC:55:FB:75:BF:E3:43:E4:94:87:D8:51:C0:13:9C:13:64:CA:E9:CE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rFX7db_jQ-SUh9hRwBOcE2TK6c4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A799E/255CE8347FD611EB9FD1233BC4F9AE02/6AC62B967FD711EBA2ECB43BC4F9AE02.roa
Signing time:             Mon 25 Mar 2024 00:22:35 +0000
ROA not before:           Mon 25 Mar 2024 00:22:35 +0000
ROA not after:            Thu 01 May 2025 00:00:00 +0000
asID:                     141763
IP address blocks:        103.163.170.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A799E/255CE8347FD611EB9FD1233BC4F9AE02/rFX7db_jQ-SUh9hRwBOcE2TK6c4.crl
                          rsync://rpki.apnic.net/member_repository/A91A799E/255CE8347FD611EB9FD1233BC4F9AE02/rFX7db_jQ-SUh9hRwBOcE2TK6c4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rFX7db_jQ-SUh9hRwBOcE2TK6c4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1425 (0x591)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A799E/serialNumber=AC55FB75BFE343E49487D851C0139C1364CAE9CE
        Validity
            Not Before: Mar 25 00:22:35 2024 GMT
            Not After : May  1 00:00:00 2025 GMT
        Subject: CN=6600c3ca-7c0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:02:ec:a8:ae:c2:13:84:9d:a5:70:df:99:e3:
                    32:3a:23:cb:81:1d:a5:8d:6a:7b:0a:4e:00:28:e2:
                    ff:a1:32:4b:ff:67:cb:88:71:2d:e1:32:85:c0:c7:
                    9b:3e:d4:57:1f:09:54:ab:bc:ce:64:2c:aa:82:b8:
                    4a:04:55:e6:7d:61:77:8e:ce:5e:27:d4:58:72:a7:
                    f7:f3:48:72:e2:68:5b:c9:e4:dd:39:28:9e:bc:b3:
                    32:54:2d:9c:53:d7:56:e2:d0:33:17:4c:ad:f3:fe:
                    67:c2:58:1d:3e:e9:9b:cd:ce:b7:2d:2e:43:16:25:
                    39:f4:26:fc:b2:bd:0f:67:c7:0c:ad:f8:3f:a8:15:
                    10:36:75:87:1b:c4:65:37:69:82:a3:fe:9f:9c:1d:
                    bc:84:d5:a5:1e:72:1c:6b:b8:80:5f:11:e0:db:c4:
                    96:92:c5:e9:13:db:6f:4a:e8:74:f1:6e:f8:87:66:
                    1e:c8:d5:58:ae:eb:e8:34:72:2e:bb:7c:1c:e8:37:
                    52:7a:f6:d9:33:67:0d:d5:45:b9:a9:75:4c:d1:73:
                    aa:13:e5:5d:17:a5:b1:32:18:27:7c:8a:9e:2c:b3:
                    e0:29:95:52:6c:8e:1b:59:02:14:3b:f6:b7:00:8a:
                    86:55:af:38:03:73:51:49:a3:2e:e8:49:78:f8:cd:
                    01:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:7D:EC:0D:34:DA:03:33:DD:E8:16:7C:F4:57:78:7C:08:D0:75:D4
            X509v3 Authority Key Identifier:
                keyid:AC:55:FB:75:BF:E3:43:E4:94:87:D8:51:C0:13:9C:13:64:CA:E9:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A799E/255CE8347FD611EB9FD1233BC4F9AE02/rFX7db_jQ-SUh9hRwBOcE2TK6c4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rFX7db_jQ-SUh9hRwBOcE2TK6c4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A799E/255CE8347FD611EB9FD1233BC4F9AE02/6AC62B967FD711EBA2ECB43BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.163.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:b6:be:95:47:7c:0e:1c:9e:c0:18:49:68:56:6b:a0:30:7f:
         cd:02:dc:e2:0e:e6:33:b3:cb:1e:0e:be:73:77:f8:a6:f8:24:
         1d:33:ca:ff:0a:02:60:3c:80:eb:f8:6e:39:11:45:d6:a4:85:
         02:cb:e7:c0:44:58:e7:0c:99:08:84:a5:fd:48:bd:69:01:e1:
         e0:82:64:13:67:61:cf:e9:65:73:44:4a:36:02:af:88:0c:42:
         5a:88:8d:45:dd:7a:07:d9:46:97:8b:86:20:5b:fe:1c:e5:dc:
         76:3c:1c:80:16:54:b8:e4:a9:cd:0f:4d:5f:70:92:16:46:5b:
         a2:5e:5b:ff:57:ed:dc:1a:72:81:e2:ae:ac:76:ae:7f:17:81:
         10:8e:1e:55:e6:78:9f:db:a5:4c:57:78:93:08:ad:cd:84:e1:
         6d:76:fb:1d:6b:0c:8b:0e:c0:9f:04:06:7a:6d:18:cd:c1:8a:
         29:e1:30:bc:79:41:7c:02:35:c6:b0:89:ce:70:fa:2b:16:a8:
         f9:51:9f:f9:f5:20:09:31:90:79:0b:d4:64:4e:87:9d:e1:20:
         2c:83:be:03:eb:99:8f:d0:cf:e7:6d:2a:af:36:f9:51:33:0f:
         cc:a3:98:29:77:14:08:f4:02:73:36:7e:d8:7b:9a:d2:73:2e:
         18:ab:83:66
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBZEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTc5OUUxMTAvBgNVBAUTKEFDNTVGQjc1QkZFMzQzRTQ5NDg3RDg1MUMwMTM5QzEz
NjRDQUU5Q0UwHhcNMjQwMzI1MDAyMjM1WhcNMjUwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NjAwYzNjYS03YzBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsQLsqK7CE4SdpXDfmeMyOiPLgR2ljWp7Ck4AKOL/oTJL/2fLiHEt4TKFwMeb
PtRXHwlUq7zOZCyqgrhKBFXmfWF3js5eJ9RYcqf380hy4mhbyeTdOSievLMyVC2c
U9dW4tAzF0yt8/5nwlgdPumbzc63LS5DFiU59Cb8sr0PZ8cMrfg/qBUQNnWHG8Rl
N2mCo/6fnB28hNWlHnIca7iAXxHg28SWksXpE9tvSuh08W74h2YeyNVYruvoNHIu
u3wc6DdSevbZM2cN1UW5qXVM0XOqE+VdF6WxMhgnfIqeLLPgKZVSbI4bWQIUO/a3
AIqGVa84A3NRSaMu6El4+M0BHwIDAQABo4IClTCCApEwHQYDVR0OBBYEFEZ97A00
2gMz3egWfPRXeHwI0HXUMB8GA1UdIwQYMBaAFKxV+3W/40PklIfYUcATnBNkyunO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzk5RS8yNTVDRTgzNDdG
RDYxMUVCOUZEMTIzM0JDNEY5QUUwMi9yRlg3ZGJfalEtU1VoOWhSd0JPY0UyVEs2
YzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3JGWDdkYl9qUS1TVWg5aFJ3Qk9jRTJUSzZjNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTc5OUUvMjU1Q0U4MzQ3RkQ2MTFFQjlGRDEyMzNCQzRGOUFFMDIvNkFDNjJCOTY3
RkQ3MTFFQkEyRUNCNDNCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABno6owDQYJKoZIhvcNAQELBQADggEBAGS2vpVHfA4cnsAY
SWhWa6Awf80C3OIO5jOzyx4OvnN3+Kb4JB0zyv8KAmA8gOv4bjkRRdakhQLL58BE
WOcMmQiEpf1IvWkB4eCCZBNnYc/pZXNESjYCr4gMQlqIjUXdegfZRpeLhiBb/hzl
3HY8HIAWVLjkqc0PTV9wkhZGW6JeW/9X7dwacoHirqx2rn8XgRCOHlXmeJ/bpUxX
eJMIrc2E4W12+x1rDIsOwJ8EBnptGM3BiinhMLx5QXwCNcawic5w+isWqPlRn/n1
IAkxkHkL1GROh53hICyDvgPrmY/Qz+dtKq82+VEzD8yjmCl3FAj0AnM2fth7mtJz
Lhirg2Y=
-----END CERTIFICATE-----
Generated at Fri Nov 22 23:39:32 2024 by rpki-client on console-fra.rpki-client.org