Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AFB4C/C470B22AB29711ED94EF0926C4F9AE02/AD286018B29C11EDB216812EC4F9AE02.roa
File:                     AD286018B29C11EDB216812EC4F9AE02.roa (raw, json)
Hash identifier:          VONiHwejXacpBeR7rVkbydMQIhwSgiZRwegZVDVvf5E=
Subject key identifier:   DA:C9:A6:6D:BF:E4:46:CE:0B:87:8E:72:F9:9F:86:F8:B8:0F:28:9F
Certificate issuer:       /CN=A91AFB4C/serialNumber=6349735904E1BC0D65BD594A07762BB5299C038A
Certificate serial:       E4
Authority key identifier: 63:49:73:59:04:E1:BC:0D:65:BD:59:4A:07:76:2B:B5:29:9C:03:8A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y0lzWQThvA1lvVlKB3YrtSmcA4o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AFB4C/C470B22AB29711ED94EF0926C4F9AE02/AD286018B29C11EDB216812EC4F9AE02.roa
Signing time:             Fri 19 Apr 2024 06:08:28 +0000
ROA not before:           Fri 19 Apr 2024 06:08:28 +0000
ROA not after:            Wed 28 May 2025 00:00:00 +0000
asID:                     147314
IP address blocks:        103.89.240.0/23 maxlen: 23
                          103.89.240.0/24 maxlen: 24
                          103.89.241.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AFB4C/C470B22AB29711ED94EF0926C4F9AE02/Y0lzWQThvA1lvVlKB3YrtSmcA4o.crl
                          rsync://rpki.apnic.net/member_repository/A91AFB4C/C470B22AB29711ED94EF0926C4F9AE02/Y0lzWQThvA1lvVlKB3YrtSmcA4o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y0lzWQThvA1lvVlKB3YrtSmcA4o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 02:26:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 228 (0xe4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AFB4C/serialNumber=6349735904E1BC0D65BD594A07762BB5299C038A
        Validity
            Not Before: Apr 19 06:08:28 2024 GMT
            Not After : May 28 00:00:00 2025 GMT
        Subject: CN=66220a5b-3220
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:66:75:02:51:78:27:1f:cb:92:f0:e2:f1:89:
                    ea:60:97:1f:7f:49:42:fa:69:07:a0:0f:36:87:b5:
                    20:9d:eb:0e:24:bc:af:b0:9e:98:b8:2f:74:b4:1e:
                    18:43:04:ca:6a:dd:b4:f0:f3:cc:a6:c5:a0:b5:2f:
                    46:ad:f3:28:7c:ac:87:ac:47:fd:43:ff:d8:50:a9:
                    bd:d2:f0:0c:fa:6c:84:9c:61:47:dc:20:7d:cb:ba:
                    3e:12:fb:53:78:7e:dd:52:bc:23:26:e2:a1:3c:60:
                    29:d3:b9:a2:84:81:a3:70:bd:5e:3b:0e:b3:25:e2:
                    c1:ba:89:86:dc:a1:2f:5f:5f:2a:16:ad:c5:8f:25:
                    76:47:b9:29:15:dc:fe:92:01:52:d9:50:4b:d1:84:
                    2a:f5:34:d7:64:e3:e0:f0:73:a2:eb:a3:9a:ac:a0:
                    41:01:2a:37:98:2c:cd:4c:81:69:c1:5b:b5:9d:de:
                    32:f3:3f:b9:f0:60:65:a2:12:f8:1a:77:57:d1:a6:
                    93:69:e3:6e:74:2b:d4:6c:2b:0b:12:2a:8d:d2:3d:
                    e3:d1:48:d6:81:c8:86:70:fd:ae:1c:fc:bb:8a:9d:
                    d5:c2:5c:87:ed:12:94:1c:2d:ee:e3:55:24:51:d4:
                    69:3f:42:37:f5:94:f3:68:b7:46:64:a4:95:b1:d9:
                    91:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:C9:A6:6D:BF:E4:46:CE:0B:87:8E:72:F9:9F:86:F8:B8:0F:28:9F
            X509v3 Authority Key Identifier:
                keyid:63:49:73:59:04:E1:BC:0D:65:BD:59:4A:07:76:2B:B5:29:9C:03:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AFB4C/C470B22AB29711ED94EF0926C4F9AE02/Y0lzWQThvA1lvVlKB3YrtSmcA4o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y0lzWQThvA1lvVlKB3YrtSmcA4o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFB4C/C470B22AB29711ED94EF0926C4F9AE02/AD286018B29C11EDB216812EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.89.240.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5f:c4:66:9a:e1:4d:42:3d:88:f6:bc:0c:06:d3:35:72:83:50:
         2c:22:99:9d:87:3c:73:f6:0f:a7:09:32:88:d9:31:28:22:4a:
         b2:60:e7:fe:8c:a8:08:5e:ba:81:65:9e:a6:01:db:e7:89:0f:
         80:13:4b:82:2f:61:09:a2:0f:0d:57:f8:89:5e:fa:af:e4:41:
         e5:a4:76:e7:89:db:83:99:1a:97:53:e5:79:12:f7:ac:2c:2f:
         77:07:0a:b4:b7:18:48:f4:a3:eb:45:ee:16:45:8c:21:f2:ce:
         43:73:84:aa:29:ab:69:35:88:03:94:e4:75:d9:2a:68:25:32:
         fe:63:12:ea:b2:76:e5:d4:77:82:9e:c4:e3:a0:a3:12:f0:a2:
         06:6c:5a:1d:80:f1:44:19:66:0d:54:10:8d:1e:fd:33:52:4e:
         2b:32:8b:c3:3b:6c:df:7e:f9:eb:12:44:a8:6b:a3:d2:c1:63:
         03:2e:64:2b:9d:b7:d9:6a:44:05:56:42:0c:fb:c9:0e:20:2a:
         20:3f:c2:c4:18:29:bf:fa:40:bf:5c:d8:27:74:3a:5b:ed:93:
         8b:c2:91:99:17:b3:d4:8a:80:c7:58:94:ab:15:a2:2b:f4:59:
         a5:42:1c:52:32:ef:94:1e:61:04:87:52:65:18:a0:2a:38:84:
         7a:44:87:cf
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAOQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUZCNEMxMTAvBgNVBAUTKDYzNDk3MzU5MDRFMUJDMEQ2NUJENTk0QTA3NzYyQkI1
Mjk5QzAzOEEwHhcNMjQwNDE5MDYwODI4WhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02NjIyMGE1Yi0zMjIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5GZ1AlF4Jx/LkvDi8YnqYJcff0lC+mkHoA82h7UgnesOJLyvsJ6YuC90tB4Y
QwTKat208PPMpsWgtS9GrfMofKyHrEf9Q//YUKm90vAM+myEnGFH3CB9y7o+EvtT
eH7dUrwjJuKhPGAp07mihIGjcL1eOw6zJeLBuomG3KEvX18qFq3FjyV2R7kpFdz+
kgFS2VBL0YQq9TTXZOPg8HOi66OarKBBASo3mCzNTIFpwVu1nd4y8z+58GBlohL4
GndX0aaTaeNudCvUbCsLEiqN0j3j0UjWgciGcP2uHPy7ip3VwlyH7RKUHC3u41Uk
UdRpP0I39ZTzaLdGZKSVsdmROQIDAQABo4IClTCCApEwHQYDVR0OBBYEFNrJpm2/
5EbOC4eOcvmfhvi4DyifMB8GA1UdIwQYMBaAFGNJc1kE4bwNZb1ZSgd2K7UpnAOK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRkI0Qy9DNDcwQjIyQUIy
OTcxMUVEOTRFRjA5MjZDNEY5QUUwMi9ZMGx6V1FUaHZBMWx2VmxLQjNZcnRTbWNB
NG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1kwbHpXUVRodkExbHZWbEtCM1lydFNtY0E0by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QUZCNEMvQzQ3MEIyMkFCMjk3MTFFRDk0RUYwOTI2QzRGOUFFMDIvQUQyODYwMThC
MjlDMTFFREIyMTY4MTJFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnWfAwDQYJKoZIhvcNAQELBQADggEBAF/EZprhTUI9iPa8
DAbTNXKDUCwimZ2HPHP2D6cJMojZMSgiSrJg5/6MqAheuoFlnqYB2+eJD4ATS4Iv
YQmiDw1X+Ile+q/kQeWkdueJ24OZGpdT5XkS96wsL3cHCrS3GEj0o+tF7hZFjCHy
zkNzhKopq2k1iAOU5HXZKmglMv5jEuqyduXUd4KexOOgoxLwogZsWh2A8UQZZg1U
EI0e/TNSTisyi8M7bN9++esSRKhro9LBYwMuZCudt9lqRAVWQgz7yQ4gKiA/wsQY
Kb/6QL9c2Cd0Olvtk4vCkZkXs9SKgMdYlKsVoiv0WaVCHFIy75QeYQSHUmUYoCo4
hHpEh88=
-----END CERTIFICATE-----
Generated at Mon Nov 25 04:43:58 2024 by rpki-client on console-ams.rpki-client.org