Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/BB701D0A8C5211EF8F13723AC4F9AE02.roa
File:                     BB701D0A8C5211EF8F13723AC4F9AE02.roa (raw, json)
Hash identifier:          xQtZ27HCMJDhRu2GTHStInAtAmFTEPOOnXaNIlpTnQQ=
Subject key identifier:   C2:E6:9E:F4:F3:C3:3E:26:F6:24:DB:18:24:40:CB:49:20:61:4B:8B
Certificate issuer:       /CN=A91B3B4C/serialNumber=B63DFD686CE0A90076E4F5FF428685F63FB08EDD
Certificate serial:       09
Authority key identifier: B6:3D:FD:68:6C:E0:A9:00:76:E4:F5:FF:42:86:85:F6:3F:B0:8E:DD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tj39aGzgqQB25PX_QoaF9j-wjt0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/BB701D0A8C5211EF8F13723AC4F9AE02.roa
Signing time:             Thu 17 Oct 2024 06:40:43 +0000
ROA not before:           Thu 17 Oct 2024 06:40:43 +0000
ROA not after:            Mon 01 Dec 2025 00:00:00 +0000
asID:                     140227
IP address blocks:        103.110.220.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.crl
                          rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tj39aGzgqQB25PX_QoaF9j-wjt0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 05:18:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9 (0x9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B3B4C/serialNumber=B63DFD686CE0A90076E4F5FF428685F63FB08EDD
        Validity
            Not Before: Oct 17 06:40:43 2024 GMT
            Not After : Dec  1 00:00:00 2025 GMT
        Subject: CN=6710b16b-a969
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d4:ba:bb:3e:41:33:a4:3e:ab:5f:71:72:c1:
                    6c:7b:1b:3a:7e:37:af:19:45:66:61:5a:24:01:f2:
                    18:bd:7d:61:4c:f2:9e:59:89:c8:91:30:a0:d5:5c:
                    43:f8:e9:fe:c5:85:78:7b:0e:86:d7:1b:6d:e3:1b:
                    e0:93:51:87:c7:bc:b4:37:3c:da:bd:ab:b6:3e:0f:
                    7c:1d:e0:e9:89:8f:0a:46:45:5a:6b:53:ff:25:02:
                    f1:43:99:c2:47:44:38:ca:64:d7:7b:8e:76:f9:5f:
                    30:d0:60:12:c5:06:88:46:b9:46:d7:3e:16:dc:94:
                    14:81:2e:60:73:3f:c6:f1:b5:47:ae:1f:2f:af:0e:
                    6b:c4:80:0a:cf:a1:ea:27:dc:0a:e4:c0:b2:c1:60:
                    19:d1:47:a7:49:f5:ba:50:92:a9:5d:50:b0:06:89:
                    e4:a3:39:b6:12:83:07:bc:35:9b:91:dc:4e:88:db:
                    23:30:b8:6f:99:dc:b9:15:39:38:5a:20:35:27:e0:
                    1a:e5:25:80:14:77:4d:d1:f6:77:1d:1b:f2:3b:c2:
                    76:cd:2a:9a:db:88:b8:e5:ac:f5:ff:4d:db:f1:1a:
                    bb:68:35:af:62:23:46:e1:47:9a:ee:7c:c3:f2:9a:
                    ff:b9:1c:ff:06:56:41:5a:f2:a4:1d:ca:7e:9d:0c:
                    2d:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:E6:9E:F4:F3:C3:3E:26:F6:24:DB:18:24:40:CB:49:20:61:4B:8B
            X509v3 Authority Key Identifier:
                keyid:B6:3D:FD:68:6C:E0:A9:00:76:E4:F5:FF:42:86:85:F6:3F:B0:8E:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tj39aGzgqQB25PX_QoaF9j-wjt0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/BB701D0A8C5211EF8F13723AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.110.220.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b5:30:06:67:d8:bf:bf:79:79:0b:65:8b:e1:b9:6a:91:a9:8b:
         30:ce:da:86:73:79:a0:b4:75:6a:67:94:03:42:1b:78:c4:e5:
         8b:28:77:67:d5:92:03:75:67:b1:3c:5d:2c:b7:26:bd:06:c9:
         0f:37:13:1c:e4:53:ae:5b:bc:59:c7:b3:e5:8d:fd:6a:63:ef:
         06:14:51:58:43:0c:0f:b2:99:c9:64:28:31:72:50:cf:a6:73:
         6f:a0:e0:61:7f:81:14:87:cd:72:ff:bc:7c:88:f2:c6:19:50:
         14:40:fe:94:cd:6c:22:6f:fc:e2:6a:19:77:50:2c:c5:c4:cc:
         eb:ea:f2:79:05:56:49:f6:18:51:50:59:b5:97:6d:f1:1b:d3:
         e5:51:70:62:dd:af:3a:f4:7b:b8:41:a0:33:8b:62:76:89:24:
         04:98:b8:6d:45:fd:10:86:1f:c6:b2:b6:9a:91:bd:a4:17:76:
         84:32:1e:5d:e2:0d:c6:14:95:91:12:a3:43:3d:1a:92:cb:6b:
         51:cd:a3:cf:2b:46:3f:3d:f4:5e:ef:68:d1:31:a4:e7:72:c5:
         f7:c5:f9:8b:c3:78:02:76:73:74:01:1c:73:ba:fb:ef:44:00:
         3d:01:cb:2d:fc:73:e6:3d:d6:95:c8:25:06:f6:74:07:e2:3b:
         b5:f4:ec:df
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBCTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC
M0I0QzExMC8GA1UEBRMoQjYzREZENjg2Q0UwQTkwMDc2RTRGNUZGNDI4Njg1RjYz
RkIwOEVERDAeFw0yNDEwMTcwNjQwNDNaFw0yNTEyMDEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY3MTBiMTZiLWE5NjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC91Lq7PkEzpD6rX3FywWx7Gzp+N68ZRWZhWiQB8hi9fWFM8p5ZiciRMKDVXEP4
6f7FhXh7DobXG23jG+CTUYfHvLQ3PNq9q7Y+D3wd4OmJjwpGRVprU/8lAvFDmcJH
RDjKZNd7jnb5XzDQYBLFBohGuUbXPhbclBSBLmBzP8bxtUeuHy+vDmvEgArPoeon
3ArkwLLBYBnRR6dJ9bpQkqldULAGieSjObYSgwe8NZuR3E6I2yMwuG+Z3LkVOTha
IDUn4BrlJYAUd03R9ncdG/I7wnbNKprbiLjlrPX/TdvxGrtoNa9iI0bhR5rufMPy
mv+5HP8GVkFa8qQdyn6dDC3/AgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUwuae9PPD
Pib2JNsYJEDLSSBhS4swHwYDVR0jBBgwFoAUtj39aGzgqQB25PX/QoaF9j+wjt0w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIzQjRDL0RDOURFMjhFOEM1
MDExRUZBMDY3QzgxNUM0RjlBRTAyL3RqMzlhR3pncVFCMjVQWF9Rb2FGOWotd2p0
MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvdGozOWFHemdxUUIyNVBYX1FvYUY5ai13anQwLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
M0I0Qy9EQzlERTI4RThDNTAxMUVGQTA2N0M4MTVDNEY5QUUwMi9CQjcwMUQwQThD
NTIxMUVGOEYxMzcyM0FDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAWdu3DANBgkqhkiG9w0BAQsFAAOCAQEAtTAGZ9i/v3l5C2WL
4blqkamLMM7ahnN5oLR1ameUA0IbeMTliyh3Z9WSA3VnsTxdLLcmvQbJDzcTHORT
rlu8Wcez5Y39amPvBhRRWEMMD7KZyWQoMXJQz6Zzb6DgYX+BFIfNcv+8fIjyxhlQ
FED+lM1sIm/84moZd1AsxcTM6+ryeQVWSfYYUVBZtZdt8RvT5VFwYt2vOvR7uEGg
M4tidokkBJi4bUX9EIYfxrK2mpG9pBd2hDIeXeINxhSVkRKjQz0akstrUc2jzytG
Pz30Xu9o0TGk53LF98X5i8N4AnZzdAEcc7r770QAPQHLLfxz5j3WlcglBvZ0B+I7
tfTs3w==
-----END CERTIFICATE-----
Generated at Thu Nov 21 06:50:48 2024 by rpki-client on console-fra.rpki-client.org