Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/4072F91E9C8211EC86AE3D68C4F9AE02.roa
File:                     4072F91E9C8211EC86AE3D68C4F9AE02.roa (raw, json)
Hash identifier:          0ddkZi9qTO49z6ZuAoCOMoJP1tbejU/oVWG5cp39xBU=
Subject key identifier:   0B:C4:F4:05:48:24:3E:C5:4D:D9:D1:7F:A9:32:FB:89:52:F5:15:F4
Certificate issuer:       /CN=A91B0E3A/serialNumber=877F25A41FB6DB3CF4DB5AD92144EFB71E92677A
Certificate serial:       0BED
Authority key identifier: 87:7F:25:A4:1F:B6:DB:3C:F4:DB:5A:D9:21:44:EF:B7:1E:92:67:7A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h38lpB-22zz021rZIUTvtx6SZ3o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/4072F91E9C8211EC86AE3D68C4F9AE02.roa
Signing time:             Sat 26 Oct 2024 18:58:24 +0000
ROA not before:           Sat 26 Oct 2024 18:58:24 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     139009
IP address blocks:        103.143.139.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.crl
                          rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h38lpB-22zz021rZIUTvtx6SZ3o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 18:28:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3053 (0xbed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B0E3A/serialNumber=877F25A41FB6DB3CF4DB5AD92144EFB71E92677A
        Validity
            Not Before: Oct 26 18:58:24 2024 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=671d3bd0-b607
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ac:04:de:21:fd:47:e5:df:a2:0d:e0:1e:14:
                    b5:c4:7c:3c:81:c5:0a:06:c3:d0:37:21:a8:e2:ae:
                    9e:25:ba:2e:1f:71:64:d8:81:87:06:0c:18:d5:69:
                    15:78:ad:4b:ab:39:37:f8:5e:55:45:a8:04:46:58:
                    30:60:63:4f:d3:78:c1:16:19:ed:64:44:57:72:f8:
                    0d:26:23:56:2a:05:3b:5d:bd:6b:d8:36:7c:24:74:
                    96:54:6d:06:97:d6:54:70:a9:c7:e4:8a:92:d7:0c:
                    ab:12:d4:d1:58:fc:25:8a:93:51:17:b4:22:39:44:
                    24:2b:d2:32:bb:11:cb:44:39:d4:8f:fc:8f:72:ae:
                    fe:63:52:45:77:1d:98:f8:b4:27:f8:b7:ab:04:6a:
                    d3:23:b3:3f:f9:7c:9b:23:5d:b8:5a:d7:0d:87:4f:
                    ac:78:7f:20:cb:a8:2e:4d:2c:91:7f:c1:2d:5b:e4:
                    95:20:94:27:f6:2a:6c:fd:da:02:ca:b4:1e:f0:32:
                    69:2c:77:6a:19:ca:79:d3:78:66:2e:e7:ec:1b:ed:
                    99:92:2f:59:ea:81:65:bd:9d:1f:fb:a6:e2:93:13:
                    9e:3f:c1:02:69:d3:91:32:c3:b4:a4:4a:74:29:b9:
                    de:6c:fb:90:8d:86:da:75:43:ba:0a:d9:3b:83:3e:
                    00:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:C4:F4:05:48:24:3E:C5:4D:D9:D1:7F:A9:32:FB:89:52:F5:15:F4
            X509v3 Authority Key Identifier:
                keyid:87:7F:25:A4:1F:B6:DB:3C:F4:DB:5A:D9:21:44:EF:B7:1E:92:67:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h38lpB-22zz021rZIUTvtx6SZ3o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/4072F91E9C8211EC86AE3D68C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.143.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:2f:ca:02:e2:96:ca:e7:4f:be:09:73:ef:29:85:4c:c6:03:
         fc:ae:46:50:c2:07:c9:ac:19:0d:5a:c2:23:3c:d3:42:7b:76:
         f6:f1:35:c8:21:a7:a5:eb:d3:db:4c:fc:4e:dd:4b:b8:2b:22:
         ae:85:97:a2:47:fc:7d:bc:7b:b0:16:3e:b6:52:0b:b4:22:40:
         b8:35:42:25:51:31:d3:e0:68:83:e6:e2:98:b3:69:64:27:07:
         c1:07:53:1c:93:46:b9:f6:34:d1:ae:f0:e7:8d:06:f8:0a:35:
         65:91:e7:c7:d8:83:70:6d:5f:42:8b:3e:21:83:85:53:41:e8:
         ff:a3:7e:38:9c:03:c1:ce:21:f7:9b:4b:a9:1e:20:98:9b:43:
         a3:c6:4b:46:c3:51:50:c2:03:17:24:e3:ba:6f:4d:59:9f:34:
         7b:77:65:7e:ab:78:11:de:c3:8e:7f:b3:42:df:c7:65:6d:cd:
         9d:37:5e:23:be:2d:7f:32:a7:7d:29:e9:88:8a:46:1b:69:81:
         4b:0c:a6:92:56:1a:29:8c:2e:91:af:f8:91:6b:d1:ca:04:01:
         4a:df:f1:7d:51:c3:07:1f:9b:20:9f:f4:e9:33:62:fb:02:6e:
         95:90:a0:22:d1:ef:77:79:a0:7a:88:05:34:52:bd:4b:b9:ab:
         74:22:70:a6
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICC+0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjBFM0ExMTAvBgNVBAUTKDg3N0YyNUE0MUZCNkRCM0NGNERCNUFEOTIxNDRFRkI3
MUU5MjY3N0EwHhcNMjQxMDI2MTg1ODI0WhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzFkM2JkMC1iNjA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqKwE3iH9R+Xfog3gHhS1xHw8gcUKBsPQNyGo4q6eJbouH3Fk2IGHBgwY1WkV
eK1Lqzk3+F5VRagERlgwYGNP03jBFhntZERXcvgNJiNWKgU7Xb1r2DZ8JHSWVG0G
l9ZUcKnH5IqS1wyrEtTRWPwlipNRF7QiOUQkK9IyuxHLRDnUj/yPcq7+Y1JFdx2Y
+LQn+LerBGrTI7M/+XybI124WtcNh0+seH8gy6guTSyRf8EtW+SVIJQn9ips/doC
yrQe8DJpLHdqGcp503hmLufsG+2Zki9Z6oFlvZ0f+6bikxOeP8ECadORMsO0pEp0
KbnebPuQjYbadUO6Ctk7gz4AlQIDAQABo4IClTCCApEwHQYDVR0OBBYEFAvE9AVI
JD7FTdnRf6ky+4lS9RX0MB8GA1UdIwQYMBaAFId/JaQftts89Nta2SFE77cekmd6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMEUzQS84RTQzRjVENjA2
QzQxMUVBOEJFQjQxMThDNEY5QUUwMi9oMzhscEItMjJ6ejAyMXJaSVVUdnR4NlNa
M28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2gzOGxwQi0yMnp6MDIxclpJVVR2dHg2U1ozby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QjBFM0EvOEU0M0Y1RDYwNkM0MTFFQThCRUI0MTE4QzRGOUFFMDIvNDA3MkY5MUU5
QzgyMTFFQzg2QUUzRDY4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnj4swDQYJKoZIhvcNAQELBQADggEBAC8vygLilsrnT74J
c+8phUzGA/yuRlDCB8msGQ1awiM800J7dvbxNcghp6Xr09tM/E7dS7grIq6Fl6JH
/H28e7AWPrZSC7QiQLg1QiVRMdPgaIPm4pizaWQnB8EHUxyTRrn2NNGu8OeNBvgK
NWWR58fYg3BtX0KLPiGDhVNB6P+jfjicA8HOIfebS6keIJibQ6PGS0bDUVDCAxck
47pvTVmfNHt3ZX6reBHew45/s0Lfx2VtzZ03XiO+LX8yp30p6YiKRhtpgUsMppJW
GimMLpGv+JFr0coEAUrf8X1RwwcfmyCf9OkzYvsCbpWQoCLR73d5oHqIBTRSvUu5
q3QicKY=
-----END CERTIFICATE-----
Generated at Fri Nov 22 19:45:02 2024 by rpki-client on console-fra.rpki-client.org