Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9427/3A408886E80211EE8CA1AC31C4F9AE02/61B828C0E80611EE9F467C0CC4F9AE02.roa
File:                     61B828C0E80611EE9F467C0CC4F9AE02.roa (raw, json)
Hash identifier:          Cui6TKAxi7fUCUqZi8Kq+DmfYoM/tyU53ANlrNmzMJA=
Subject key identifier:   5C:12:5C:0B:DB:D5:9C:11:69:EB:84:AB:05:64:30:67:37:D2:0F:50
Certificate issuer:       /CN=A91A9427/serialNumber=FB0F94A1D3105F76662DBD842E9D2B03BBA59171
Certificate serial:       65
Authority key identifier: FB:0F:94:A1:D3:10:5F:76:66:2D:BD:84:2E:9D:2B:03:BB:A5:91:71
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-w-UodMQX3ZmLb2ELp0rA7ulkXE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A9427/3A408886E80211EE8CA1AC31C4F9AE02/61B828C0E80611EE9F467C0CC4F9AE02.roa
Signing time:             Mon 23 Sep 2024 05:19:25 +0000
ROA not before:           Mon 23 Sep 2024 05:19:25 +0000
ROA not after:            Tue 30 Sep 2025 00:00:00 +0000
asID:                     133894
IP address blocks:        103.96.233.0/24 maxlen: 24
                          103.146.104.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A9427/3A408886E80211EE8CA1AC31C4F9AE02/-w-UodMQX3ZmLb2ELp0rA7ulkXE.crl
                          rsync://rpki.apnic.net/member_repository/A91A9427/3A408886E80211EE8CA1AC31C4F9AE02/-w-UodMQX3ZmLb2ELp0rA7ulkXE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-w-UodMQX3ZmLb2ELp0rA7ulkXE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101 (0x65)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A9427/serialNumber=FB0F94A1D3105F76662DBD842E9D2B03BBA59171
        Validity
            Not Before: Sep 23 05:19:25 2024 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=66f0fa5c-095d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:37:0a:29:63:8c:b1:2a:bd:1b:85:64:40:5f:
                    29:e2:e1:03:f2:6d:35:9a:83:ba:88:e2:07:da:41:
                    ee:3d:5d:66:84:e3:30:3d:a1:86:bb:c1:f2:4f:82:
                    e6:ea:52:05:f2:08:6f:d7:c7:a9:6c:69:b8:f7:75:
                    4f:b6:dc:c4:99:a5:0c:e4:84:66:d6:e6:ad:d3:33:
                    59:d6:a1:26:c3:63:96:f4:28:7f:d8:2c:f2:63:84:
                    d9:c6:82:29:4f:f1:6f:2a:18:d2:a3:f3:2d:b7:9a:
                    6b:77:73:88:96:14:7f:d9:74:6f:4b:35:9f:c7:0b:
                    3c:83:1a:32:4c:a9:a4:fe:a5:83:fb:7a:38:47:40:
                    fe:c8:9a:3a:47:ab:85:12:ac:2c:35:f0:08:86:4e:
                    97:2c:cc:6e:9c:fb:57:18:7b:2b:62:07:20:37:ea:
                    0d:72:a7:32:21:ff:bb:31:09:d6:3d:7f:fb:3a:d6:
                    27:3d:ea:b1:34:22:ec:25:04:51:2b:0f:58:9d:e5:
                    81:43:e6:3c:89:76:94:66:8e:21:de:fe:0b:7f:78:
                    56:31:3c:69:1e:d2:32:d3:67:55:44:76:c8:b2:17:
                    0a:61:76:3a:68:36:db:09:48:15:9e:93:14:72:41:
                    d4:86:92:af:54:37:01:01:20:6c:ea:1b:66:64:48:
                    a7:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:12:5C:0B:DB:D5:9C:11:69:EB:84:AB:05:64:30:67:37:D2:0F:50
            X509v3 Authority Key Identifier:
                keyid:FB:0F:94:A1:D3:10:5F:76:66:2D:BD:84:2E:9D:2B:03:BB:A5:91:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A9427/3A408886E80211EE8CA1AC31C4F9AE02/-w-UodMQX3ZmLb2ELp0rA7ulkXE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-w-UodMQX3ZmLb2ELp0rA7ulkXE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9427/3A408886E80211EE8CA1AC31C4F9AE02/61B828C0E80611EE9F467C0CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.96.233.0/24
                  103.146.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:a9:0c:eb:a6:3b:8a:23:71:99:b6:e2:03:1e:f3:a2:b1:0d:
         71:cb:82:9e:68:22:8a:c0:70:08:d0:cd:5e:f6:99:e7:ff:e0:
         13:7f:ca:88:e9:d0:d4:f2:37:f1:5f:b8:6c:1e:c9:4c:08:c7:
         a6:d6:61:5d:53:91:0d:ae:c0:86:72:e4:d5:40:35:7c:7b:98:
         42:cc:db:87:a9:f8:e5:22:fe:86:8f:24:48:db:2d:d4:e7:d7:
         ec:07:76:32:fd:f5:28:b0:60:f8:89:1a:34:b3:46:a1:aa:bb:
         71:84:36:9c:0f:b4:24:4e:6d:64:cd:11:05:80:d5:e2:e8:cc:
         6d:eb:92:2a:d6:ae:04:4e:c5:2d:aa:f7:22:3f:0c:11:6e:63:
         dc:fc:f5:fc:0a:11:01:f7:a7:51:36:d0:96:78:19:83:0d:9d:
         2f:3a:63:c8:e8:ac:27:47:8c:10:aa:aa:7b:5b:8c:1a:ce:48:
         1c:25:9b:06:8f:d8:ca:5b:19:5b:ce:ac:fe:f0:0f:e1:4a:9a:
         19:1a:4a:ab:53:ef:a3:55:2a:83:2c:f4:05:4c:d2:10:80:21:
         b7:a2:dd:fe:d1:00:52:68:fb:da:4a:36:3d:42:1a:c2:d3:96:
         9c:5f:72:bf:97:86:80:05:c3:8a:ad:8c:a1:fc:2b:f7:6e:c4:
         eb:d1:dc:c6
-----BEGIN CERTIFICATE-----
MIIFdjCCBF6gAwIBAgIBZTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB
OTQyNzExMC8GA1UEBRMoRkIwRjk0QTFEMzEwNUY3NjY2MkRCRDg0MkU5RDJCMDNC
QkE1OTE3MTAeFw0yNDA5MjMwNTE5MjVaFw0yNTA5MzAwMDAwMDBaMBgxFjAUBgNV
BAMTDTY2ZjBmYTVjLTA5NWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDLNwopY4yxKr0bhWRAXyni4QPybTWag7qI4gfaQe49XWaE4zA9oYa7wfJPgubq
UgXyCG/Xx6lsabj3dU+23MSZpQzkhGbW5q3TM1nWoSbDY5b0KH/YLPJjhNnGgilP
8W8qGNKj8y23mmt3c4iWFH/ZdG9LNZ/HCzyDGjJMqaT+pYP7ejhHQP7ImjpHq4US
rCw18AiGTpcszG6c+1cYeytiByA36g1ypzIh/7sxCdY9f/s61ic96rE0IuwlBFEr
D1id5YFD5jyJdpRmjiHe/gt/eFYxPGke0jLTZ1VEdsiyFwphdjpoNtsJSBWekxRy
QdSGkq9UNwEBIGzqG2ZkSKerAgMBAAGjggKbMIIClzAdBgNVHQ4EFgQUXBJcC9vV
nBFp64SrBWQwZzfSD1AwHwYDVR0jBBgwFoAU+w+UodMQX3ZmLb2ELp0rA7ulkXEw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE5NDI3LzNBNDA4ODg2RTgw
MjExRUU4Q0ExQUMzMUM0RjlBRTAyLy13LVVvZE1RWDNabUxiMkVMcDByQTd1bGtY
RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvLXctVW9kTVFYM1ptTGIyRUxwMHJBN3Vsa1hFLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
OTQyNy8zQTQwODg4NkU4MDIxMUVFOENBMUFDMzFDNEY5QUUwMi82MUI4MjhDMEU4
MDYxMUVFOUY0NjdDMENDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAlBggrBgEFBQcBBwEB/wQW
MBQwEgQCAAEwDAMEAGdg6QMEAGeSaDANBgkqhkiG9w0BAQsFAAOCAQEAYKkM66Y7
iiNxmbbiAx7zorENccuCnmgiisBwCNDNXvaZ5//gE3/KiOnQ1PI38V+4bB7JTAjH
ptZhXVORDa7AhnLk1UA1fHuYQszbh6n45SL+ho8kSNst1OfX7Ad2Mv31KLBg+Ika
NLNGoaq7cYQ2nA+0JE5tZM0RBYDV4ujMbeuSKtauBE7FLar3Ij8MEW5j3Pz1/AoR
AfenUTbQlngZgw2dLzpjyOisJ0eMEKqqe1uMGs5IHCWbBo/YylsZW86s/vAP4Uqa
GRpKq1Pvo1Uqgyz0BUzSEIAht6Ld/tEAUmj72ko2PUIawtOWnF9yv5eGgAXDiq2M
ofwr927E69Hcxg==
-----END CERTIFICATE-----
Generated at Sat Nov 23 06:13:19 2024 by rpki-client on console-ams.rpki-client.org