Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5552/6F60F77C0BCC11EC8570CD1FC4F9AE02/0E183FBE516911ED9B5EF024C4F9AE02.roa
File:                     0E183FBE516911ED9B5EF024C4F9AE02.roa (raw, json)
Hash identifier:          ZSVjtijV+Et42Y6SlGoz0UPyq2QiZ9xC7vE305M8da8=
Subject key identifier:   EF:D3:F6:BA:5B:02:D7:AA:9D:82:30:C2:1A:E4:9D:FA:F4:BD:BE:52
Certificate issuer:       /CN=A91B5552/serialNumber=7829136F79B7F89B3CD47C536FC7496232B9E13A
Certificate serial:       03FE
Authority key identifier: 78:29:13:6F:79:B7:F8:9B:3C:D4:7C:53:6F:C7:49:62:32:B9:E1:3A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eCkTb3m3-Js81HxTb8dJYjK54To.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B5552/6F60F77C0BCC11EC8570CD1FC4F9AE02/0E183FBE516911ED9B5EF024C4F9AE02.roa
Signing time:             Sun 17 Dec 2023 01:33:41 +0000
ROA not before:           Sun 17 Dec 2023 01:33:41 +0000
ROA not after:            Fri 31 Jan 2025 00:00:00 +0000
asID:                     131324
IP address blocks:        43.225.172.0/22 maxlen: 24
                          103.44.132.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B5552/6F60F77C0BCC11EC8570CD1FC4F9AE02/eCkTb3m3-Js81HxTb8dJYjK54To.crl
                          rsync://rpki.apnic.net/member_repository/A91B5552/6F60F77C0BCC11EC8570CD1FC4F9AE02/eCkTb3m3-Js81HxTb8dJYjK54To.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eCkTb3m3-Js81HxTb8dJYjK54To.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1022 (0x3fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B5552/serialNumber=7829136F79B7F89B3CD47C536FC7496232B9E13A
        Validity
            Not Before: Dec 17 01:33:41 2023 GMT
            Not After : Jan 31 00:00:00 2025 GMT
        Subject: CN=657e4ff5-5ead
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:8a:04:68:83:4a:9f:a5:20:53:f1:17:59:35:
                    5c:96:09:ff:7e:9c:0d:1e:19:6e:b9:be:73:c5:ad:
                    3c:4e:82:75:02:db:a6:29:4c:19:fd:4d:e5:36:f9:
                    cf:61:0c:ba:55:59:8a:c1:42:fd:0f:c2:08:b7:b5:
                    78:3f:e1:5f:cf:e2:d9:19:73:60:f4:40:07:d3:ca:
                    2f:79:87:8e:88:d7:b0:86:53:03:3b:89:6d:cd:a8:
                    40:7e:d4:53:36:3e:85:51:b2:5e:41:21:83:7f:1c:
                    6f:58:d7:88:a9:9b:8a:71:ec:63:05:48:7a:84:1a:
                    46:ba:91:0f:8a:3a:8f:cc:77:af:82:85:a6:88:b1:
                    97:09:19:b9:02:80:57:1d:4d:45:f0:43:b3:86:d4:
                    09:cb:06:56:42:79:5c:e9:27:6d:9d:62:c7:d3:63:
                    15:22:a1:eb:2b:06:ce:d3:fc:52:e6:b1:c3:ae:a4:
                    76:4a:8f:44:64:a8:f7:07:50:8c:ec:d5:a2:d8:7f:
                    e7:9f:72:73:4c:e4:98:fe:46:92:94:8d:39:56:19:
                    02:f7:dd:16:39:61:c7:db:bb:9d:53:44:d0:df:95:
                    73:cf:04:5a:e2:d1:26:34:7a:d6:41:13:26:88:41:
                    d1:8a:32:c0:0f:6f:61:c7:7d:22:f8:39:aa:69:05:
                    c6:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:D3:F6:BA:5B:02:D7:AA:9D:82:30:C2:1A:E4:9D:FA:F4:BD:BE:52
            X509v3 Authority Key Identifier:
                keyid:78:29:13:6F:79:B7:F8:9B:3C:D4:7C:53:6F:C7:49:62:32:B9:E1:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B5552/6F60F77C0BCC11EC8570CD1FC4F9AE02/eCkTb3m3-Js81HxTb8dJYjK54To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eCkTb3m3-Js81HxTb8dJYjK54To.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5552/6F60F77C0BCC11EC8570CD1FC4F9AE02/0E183FBE516911ED9B5EF024C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.225.172.0/22
                  103.44.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1b:75:7e:e6:87:8b:f6:7c:ca:c9:e3:2a:46:eb:3d:57:df:a9:
         ce:17:fe:9a:97:9c:96:84:39:4a:6a:ea:43:eb:00:f5:59:9e:
         bb:85:3a:7f:9c:31:48:b7:ae:74:56:7f:c3:62:ac:0b:16:cd:
         b4:7a:20:6a:a8:0b:18:03:18:b4:fe:11:3f:4b:d2:a6:41:c6:
         34:81:af:f1:96:f5:f0:b9:7f:ef:b9:0a:61:5b:30:e7:39:04:
         ca:b4:78:45:4a:8d:fa:2b:83:b7:70:4a:f3:2f:e1:6d:5c:82:
         c6:9d:b3:7e:bf:4d:66:0e:c0:d9:0b:ac:c2:a0:3b:07:d9:b8:
         a9:59:a2:3b:93:62:ab:38:cf:f3:3d:ff:45:f0:a4:94:2c:6d:
         eb:61:4a:21:cf:64:0e:a2:67:c7:66:28:be:31:c9:1a:e5:9c:
         0f:20:1d:a2:23:1e:bb:b1:6f:72:4c:76:ed:57:9d:29:e8:07:
         a5:59:7e:a1:92:0f:bf:14:83:ee:bd:c4:03:da:8c:83:4a:50:
         d1:15:cb:d4:8f:d5:1f:e4:f1:72:89:b3:30:b8:be:33:dd:90:
         0e:82:ca:79:b6:95:4c:84:8b:e7:a3:6e:54:55:6c:52:b1:ea:
         b2:8a:62:36:fd:78:ad:0d:d4:58:d3:3c:8b:1b:41:c6:c4:57:
         88:f2:c0:78
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICA/4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjU1NTIxMTAvBgNVBAUTKDc4MjkxMzZGNzlCN0Y4OUIzQ0Q0N0M1MzZGQzc0OTYy
MzJCOUUxM0EwHhcNMjMxMjE3MDEzMzQxWhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NTdlNGZmNS01ZWFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAv4oEaINKn6UgU/EXWTVclgn/fpwNHhluub5zxa08ToJ1AtumKUwZ/U3lNvnP
YQy6VVmKwUL9D8IIt7V4P+Ffz+LZGXNg9EAH08oveYeOiNewhlMDO4ltzahAftRT
Nj6FUbJeQSGDfxxvWNeIqZuKcexjBUh6hBpGupEPijqPzHevgoWmiLGXCRm5AoBX
HU1F8EOzhtQJywZWQnlc6SdtnWLH02MVIqHrKwbO0/xS5rHDrqR2So9EZKj3B1CM
7NWi2H/nn3JzTOSY/kaSlI05VhkC990WOWHH27udU0TQ35VzzwRa4tEmNHrWQRMm
iEHRijLAD29hx30i+DmqaQXG2QIDAQABo4ICmzCCApcwHQYDVR0OBBYEFO/T9rpb
AteqnYIwwhrknfr0vb5SMB8GA1UdIwQYMBaAFHgpE295t/ibPNR8U2/HSWIyueE6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTU1Mi82RjYwRjc3QzBC
Q0MxMUVDODU3MENEMUZDNEY5QUUwMi9lQ2tUYjNtMy1KczgxSHhUYjhkSllqSzU0
VG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2VDa1RiM20zLUpzODFIeFRiOGRKWWpLNTRUby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QjU1NTIvNkY2MEY3N0MwQkNDMTFFQzg1NzBDRDFGQzRGOUFFMDIvMEUxODNGQkU1
MTY5MTFFRDlCNUVGMDI0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBAIr4awDBAJnLIQwDQYJKoZIhvcNAQELBQADggEBABt1fuaH
i/Z8ysnjKkbrPVffqc4X/pqXnJaEOUpq6kPrAPVZnruFOn+cMUi3rnRWf8NirAsW
zbR6IGqoCxgDGLT+ET9L0qZBxjSBr/GW9fC5f++5CmFbMOc5BMq0eEVKjforg7dw
SvMv4W1cgsads36/TWYOwNkLrMKgOwfZuKlZojuTYqs4z/M9/0XwpJQsbethSiHP
ZA6iZ8dmKL4xyRrlnA8gHaIjHruxb3JMdu1XnSnoB6VZfqGSD78Ug+69xAPajINK
UNEVy9SP1R/k8XKJszC4vjPdkA6Cynm2lUyEi+ejblRVbFKx6rKKYjb9eK0N1FjT
PIsbQcbEV4jywHg=
-----END CERTIFICATE-----
Generated at Sat Nov 23 00:49:37 2024 by rpki-client on console-fra.rpki-client.org