Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1833/FE68E0B28E3311ECAD674675C4F9AE02/48ECA4C48EE411EC9936A210C4F9AE02.roa
File:                     48ECA4C48EE411EC9936A210C4F9AE02.roa (raw, json)
Hash identifier:          zdEvp35AtLul1lNPb9Y1k2o38xCTsGSqsDNRh4rYAss=
Subject key identifier:   3F:9C:03:AE:5D:C3:CE:66:D7:FA:D1:79:FF:AB:62:80:69:26:FE:39
Certificate issuer:       /CN=A91B1833/serialNumber=DB3C49B1B2DAA669E81725395DF711E83F8AD3D1
Certificate serial:       02B0
Authority key identifier: DB:3C:49:B1:B2:DA:A6:69:E8:17:25:39:5D:F7:11:E8:3F:8A:D3:D1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2zxJsbLapmnoFyU5XfcR6D-K09E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B1833/FE68E0B28E3311ECAD674675C4F9AE02/48ECA4C48EE411EC9936A210C4F9AE02.roa
Signing time:             Thu 07 Dec 2023 02:53:57 +0000
ROA not before:           Thu 07 Dec 2023 02:53:56 +0000
ROA not after:            Fri 31 Jan 2025 00:00:00 +0000
asID:                     14618
IP address blocks:        103.78.50.0/24 maxlen: 24
                          103.151.39.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B1833/FE68E0B28E3311ECAD674675C4F9AE02/2zxJsbLapmnoFyU5XfcR6D-K09E.crl
                          rsync://rpki.apnic.net/member_repository/A91B1833/FE68E0B28E3311ECAD674675C4F9AE02/2zxJsbLapmnoFyU5XfcR6D-K09E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2zxJsbLapmnoFyU5XfcR6D-K09E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 May 2024 03:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 688 (0x2b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B1833/serialNumber=DB3C49B1B2DAA669E81725395DF711E83F8AD3D1
        Validity
            Not Before: Dec  7 02:53:56 2023 GMT
            Not After : Jan 31 00:00:00 2025 GMT
        Subject: CN=657133c4-ab4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:87:76:08:82:98:4f:37:8d:14:01:17:6e:de:
                    21:0b:82:27:22:06:93:bf:73:7e:ec:2a:0d:1d:4b:
                    1a:ea:b0:6f:4a:30:da:80:0e:1f:d1:cb:0f:78:cd:
                    86:22:64:40:35:a2:b2:c1:62:a1:d9:35:de:20:c8:
                    49:13:e4:53:84:45:70:f2:5e:d4:38:af:14:ea:ec:
                    7c:3e:56:e9:fc:fd:e1:31:31:db:7c:f2:50:13:a3:
                    39:3b:93:ac:63:e6:1f:06:6f:80:43:cd:3f:b8:33:
                    85:fb:1e:74:d3:18:31:ab:e2:6e:91:fd:9e:d7:a8:
                    98:17:d0:8e:2f:5e:9f:12:75:17:16:84:9a:6a:ae:
                    1b:e7:7a:14:ae:47:d1:f2:b5:d9:81:0c:13:c3:5f:
                    d3:4c:de:41:b2:fd:c9:b4:3c:92:10:e7:c9:e6:fc:
                    4b:8b:23:59:4a:b4:82:e6:65:36:84:67:a6:7e:94:
                    fb:b2:93:8f:30:5f:0d:e3:20:6c:41:50:f0:08:b2:
                    2a:b0:95:5a:a5:82:71:e5:3a:81:35:a7:6e:2e:36:
                    56:e0:16:1f:87:5d:f8:f9:9c:e2:94:27:7f:28:37:
                    4a:12:b2:75:a5:53:a0:e7:8d:f6:86:4b:2f:74:d8:
                    b8:f9:6a:74:fe:6a:db:e1:3f:13:d6:42:2f:23:3c:
                    5f:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:9C:03:AE:5D:C3:CE:66:D7:FA:D1:79:FF:AB:62:80:69:26:FE:39
            X509v3 Authority Key Identifier:
                keyid:DB:3C:49:B1:B2:DA:A6:69:E8:17:25:39:5D:F7:11:E8:3F:8A:D3:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B1833/FE68E0B28E3311ECAD674675C4F9AE02/2zxJsbLapmnoFyU5XfcR6D-K09E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2zxJsbLapmnoFyU5XfcR6D-K09E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1833/FE68E0B28E3311ECAD674675C4F9AE02/48ECA4C48EE411EC9936A210C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.78.50.0/24
                  103.151.39.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:9a:45:d8:cc:8f:52:ef:fe:53:ad:f3:36:22:cc:2f:bd:ed:
         c6:32:ad:95:22:e6:91:48:0e:df:49:66:c5:7d:b3:d2:b9:6e:
         e4:03:3a:c9:de:28:5a:ae:be:17:6e:43:f2:3d:d3:f7:ea:f0:
         d2:18:63:e6:8c:e7:43:79:de:1b:97:31:ba:1f:43:e9:33:e3:
         c6:0f:0c:ce:92:ad:df:fa:e8:30:f4:fe:14:22:a2:c6:b0:cc:
         cb:d2:21:83:3e:f6:29:ea:12:69:4d:1b:45:a8:97:2c:74:5a:
         23:de:e0:29:af:81:2a:88:79:f1:5a:e9:b5:01:41:67:1a:28:
         56:f8:22:ff:65:9b:36:7b:b1:7f:5b:f3:b2:b6:69:09:ce:c9:
         89:35:b4:25:04:c1:fa:4e:8c:5e:79:42:6a:81:d2:7b:1e:a5:
         d1:5b:4b:36:4b:fb:71:1d:9f:07:59:24:97:27:ea:7d:4e:8a:
         79:69:98:e6:17:50:09:42:c9:07:dc:f0:86:61:bf:7a:ab:1d:
         c9:ff:11:13:87:ed:78:f2:4f:bf:79:e8:d5:ff:bb:0c:06:28:
         10:81:90:03:14:9d:2b:fc:06:89:dc:e6:9e:07:91:ac:c5:e1:
         32:80:59:8b:6a:dc:84:d0:15:cb:a9:13:2d:8e:02:27:22:8a:
         3e:49:c8:a7
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICArAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjE4MzMxMTAvBgNVBAUTKERCM0M0OUIxQjJEQUE2NjlFODE3MjUzOTVERjcxMUU4
M0Y4QUQzRDEwHhcNMjMxMjA3MDI1MzU2WhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NTcxMzNjNC1hYjRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwYd2CIKYTzeNFAEXbt4hC4InIgaTv3N+7CoNHUsa6rBvSjDagA4f0csPeM2G
ImRANaKywWKh2TXeIMhJE+RThEVw8l7UOK8U6ux8Plbp/P3hMTHbfPJQE6M5O5Os
Y+YfBm+AQ80/uDOF+x500xgxq+Jukf2e16iYF9COL16fEnUXFoSaaq4b53oUrkfR
8rXZgQwTw1/TTN5Bsv3JtDySEOfJ5vxLiyNZSrSC5mU2hGemfpT7spOPMF8N4yBs
QVDwCLIqsJVapYJx5TqBNaduLjZW4BYfh134+ZzilCd/KDdKErJ1pVOg5432hksv
dNi4+Wp0/mrb4T8T1kIvIzxfywIDAQABo4ICmzCCApcwHQYDVR0OBBYEFD+cA65d
w85m1/rRef+rYoBpJv45MB8GA1UdIwQYMBaAFNs8SbGy2qZp6BclOV33Eeg/itPR
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTgzMy9GRTY4RTBCMjhF
MzMxMUVDQUQ2NzQ2NzVDNEY5QUUwMi8yenhKc2JMYXBtbm9GeVU1WGZjUjZELUsw
OUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJ6eEpzYkxhcG1ub0Z5VTVYZmNSNkQtSzA5RS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QjE4MzMvRkU2OEUwQjI4RTMzMTFFQ0FENjc0Njc1QzRGOUFFMDIvNDhFQ0E0QzQ4
RUU0MTFFQzk5MzZBMjEwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBABnTjIDBABnlycwDQYJKoZIhvcNAQELBQADggEBAA6aRdjM
j1Lv/lOt8zYizC+97cYyrZUi5pFIDt9JZsV9s9K5buQDOsneKFquvhduQ/I90/fq
8NIYY+aM50N53huXMbofQ+kz48YPDM6Srd/66DD0/hQiosawzMvSIYM+9inqEmlN
G0Wolyx0WiPe4CmvgSqIefFa6bUBQWcaKFb4Iv9lmzZ7sX9b87K2aQnOyYk1tCUE
wfpOjF55QmqB0nsepdFbSzZL+3EdnwdZJJcn6n1OinlpmOYXUAlCyQfc8IZhv3qr
Hcn/EROH7XjyT7956NX/uwwGKBCBkAMUnSv8Bonc5p4HkazF4TKAWYtq3ITQFcup
Ey2OAiciij5JyKc=
-----END CERTIFICATE-----
Generated at Thu Apr 25 04:06:41 2024 by rpki-client on console-ams.rpki-client.org