Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A85A8/A53081462CDE11ECAA6FE678C4F9AE02/14172F4C264311EEB0342B45C4F9AE02.roa
File:                     14172F4C264311EEB0342B45C4F9AE02.roa (raw, json)
Hash identifier:          Ugkrxpmo+RhmzNNOs4CXnhFZe2ur3HMxWdH+GOY5OTg=
Subject key identifier:   3B:F3:87:16:38:A9:C2:5F:0C:7E:5D:D1:D0:07:98:96:76:A4:E1:AC
Certificate issuer:       /CN=A91A85A8/serialNumber=AE0A0F98A0903E015E5FC54CB8CE081D424DB4D2
Certificate serial:       043D
Authority key identifier: AE:0A:0F:98:A0:90:3E:01:5E:5F:C5:4C:B8:CE:08:1D:42:4D:B4:D2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rgoPmKCQPgFeX8VMuM4IHUJNtNI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A85A8/A53081462CDE11ECAA6FE678C4F9AE02/14172F4C264311EEB0342B45C4F9AE02.roa
Signing time:             Fri 23 Aug 2024 01:13:45 +0000
ROA not before:           Fri 23 Aug 2024 01:13:45 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     3356
IP address blocks:        103.70.51.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A85A8/A53081462CDE11ECAA6FE678C4F9AE02/rgoPmKCQPgFeX8VMuM4IHUJNtNI.crl
                          rsync://rpki.apnic.net/member_repository/A91A85A8/A53081462CDE11ECAA6FE678C4F9AE02/rgoPmKCQPgFeX8VMuM4IHUJNtNI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rgoPmKCQPgFeX8VMuM4IHUJNtNI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Dec 2024 23:33:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1085 (0x43d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A85A8/serialNumber=AE0A0F98A0903E015E5FC54CB8CE081D424DB4D2
        Validity
            Not Before: Aug 23 01:13:45 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=66c7e249-08ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:58:e3:bf:2c:bd:51:97:d8:60:09:e0:02:18:
                    e1:e6:66:b6:28:8c:77:5e:82:e3:22:8c:37:04:5c:
                    d4:22:09:7e:33:6b:1f:b9:57:39:a6:e6:91:6e:16:
                    48:59:54:84:07:49:bf:9e:91:3d:9b:40:7a:f5:b5:
                    d5:18:2a:b0:27:fe:3e:fc:b3:13:e9:e2:ac:cf:26:
                    34:a8:f2:34:9e:a3:5e:10:da:ac:2d:f9:53:96:9b:
                    32:23:bc:44:a5:bd:3d:3c:22:b0:6e:0e:a2:42:d2:
                    1c:8e:93:e0:c4:17:e0:f6:65:06:45:cc:75:40:25:
                    a5:b8:e2:fe:8c:76:37:16:cf:c8:d9:e8:b8:74:0c:
                    70:32:93:c6:cb:60:7d:3e:09:d2:f1:91:c3:3b:a9:
                    82:65:bc:d3:36:63:50:6c:2f:63:70:5c:85:ff:93:
                    89:35:a4:f5:e2:48:cd:3e:a6:7f:78:6d:82:fb:1d:
                    21:7c:37:7c:41:2e:c1:88:85:51:ca:29:6d:87:fd:
                    3b:29:11:94:90:02:6f:29:ae:4b:fe:18:b2:04:02:
                    c0:38:03:ae:81:e0:0a:10:97:a2:fb:b4:48:16:cb:
                    75:c2:7b:17:17:93:b5:c8:53:73:5f:40:a5:3e:38:
                    53:de:b2:e2:24:11:a1:4b:d1:38:ce:ea:c2:c9:ca:
                    91:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:F3:87:16:38:A9:C2:5F:0C:7E:5D:D1:D0:07:98:96:76:A4:E1:AC
            X509v3 Authority Key Identifier:
                keyid:AE:0A:0F:98:A0:90:3E:01:5E:5F:C5:4C:B8:CE:08:1D:42:4D:B4:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A85A8/A53081462CDE11ECAA6FE678C4F9AE02/rgoPmKCQPgFeX8VMuM4IHUJNtNI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rgoPmKCQPgFeX8VMuM4IHUJNtNI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A85A8/A53081462CDE11ECAA6FE678C4F9AE02/14172F4C264311EEB0342B45C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.70.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:61:5a:62:71:25:ea:ec:39:31:c5:57:a7:c8:cf:63:cc:6f:
         0b:87:43:f2:a0:b3:be:d3:70:fc:e7:29:a1:3c:d3:12:46:50:
         1f:ec:eb:8e:de:e1:80:b8:5a:1d:09:85:6f:d9:26:ff:0d:ca:
         74:4a:61:6d:55:73:ac:9f:bf:b5:f2:9b:dc:3a:47:5a:3c:c4:
         d5:50:28:5d:22:4c:8c:0a:85:02:0d:f8:e3:f4:72:fe:ab:67:
         e2:0a:6c:74:e4:39:96:ec:c3:28:bb:21:d6:da:53:07:64:44:
         98:d8:f5:0e:f2:ae:a4:18:46:71:26:42:f5:ee:f3:86:a0:69:
         40:71:50:88:b4:07:d1:e5:96:43:17:4e:c3:7f:29:7b:45:b3:
         6c:7c:a1:7c:ff:0e:ca:43:76:08:65:80:15:77:6d:24:61:6a:
         4f:46:ca:06:1a:36:46:52:9e:d6:8f:87:85:05:fd:85:0b:5a:
         6f:19:05:84:d7:32:74:fe:68:12:53:87:51:89:62:5b:e0:96:
         d0:d1:fa:6c:6a:59:35:24:19:f0:44:e9:9c:06:53:c9:20:a1:
         4b:12:0a:6e:67:b1:47:51:d9:3f:64:7e:97:8d:d5:34:3c:45:
         a9:5b:fb:e8:5a:19:f9:3f:58:b3:de:31:34:64:0d:ef:64:e8:
         12:cd:62:06
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBD0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTg1QTgxMTAvBgNVBAUTKEFFMEEwRjk4QTA5MDNFMDE1RTVGQzU0Q0I4Q0UwODFE
NDI0REI0RDIwHhcNMjQwODIzMDExMzQ1WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmM3ZTI0OS0wOGNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1Vjjvyy9UZfYYAngAhjh5ma2KIx3XoLjIow3BFzUIgl+M2sfuVc5puaRbhZI
WVSEB0m/npE9m0B69bXVGCqwJ/4+/LMT6eKszyY0qPI0nqNeENqsLflTlpsyI7xE
pb09PCKwbg6iQtIcjpPgxBfg9mUGRcx1QCWluOL+jHY3Fs/I2ei4dAxwMpPGy2B9
PgnS8ZHDO6mCZbzTNmNQbC9jcFyF/5OJNaT14kjNPqZ/eG2C+x0hfDd8QS7BiIVR
yilth/07KRGUkAJvKa5L/hiyBALAOAOugeAKEJei+7RIFst1wnsXF5O1yFNzX0Cl
PjhT3rLiJBGhS9E4zurCycqRLwIDAQABo4IClTCCApEwHQYDVR0OBBYEFDvzhxY4
qcJfDH5d0dAHmJZ2pOGsMB8GA1UdIwQYMBaAFK4KD5igkD4BXl/FTLjOCB1CTbTS
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODVBOC9BNTMwODE0NjJD
REUxMUVDQUE2RkU2NzhDNEY5QUUwMi9yZ29QbUtDUVBnRmVYOFZNdU00SUhVSk50
TkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3Jnb1BtS0NRUGdGZVg4Vk11TTRJSFVKTnROSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTg1QTgvQTUzMDgxNDYyQ0RFMTFFQ0FBNkZFNjc4QzRGOUFFMDIvMTQxNzJGNEMy
NjQzMTFFRUIwMzQyQjQ1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnRjMwDQYJKoZIhvcNAQELBQADggEBAA1hWmJxJersOTHF
V6fIz2PMbwuHQ/Kgs77TcPznKaE80xJGUB/s647e4YC4Wh0JhW/ZJv8NynRKYW1V
c6yfv7Xym9w6R1o8xNVQKF0iTIwKhQIN+OP0cv6rZ+IKbHTkOZbswyi7IdbaUwdk
RJjY9Q7yrqQYRnEmQvXu84agaUBxUIi0B9HllkMXTsN/KXtFs2x8oXz/DspDdghl
gBV3bSRhak9GygYaNkZSntaPh4UF/YULWm8ZBYTXMnT+aBJTh1GJYlvgltDR+mxq
WTUkGfBE6ZwGU8kgoUsSCm5nsUdR2T9kfpeN1TQ8Ralb++haGfk/WLPeMTRkDe9k
6BLNYgY=
-----END CERTIFICATE-----
Generated at Mon Nov 25 01:15:31 2024 by rpki-client on console-fra.rpki-client.org