Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B734D/11584326B94F11EB9A6AEF32C4F9AE02/E8C597A6CAC311EC910B8C20C4F9AE02.roa
File:                     E8C597A6CAC311EC910B8C20C4F9AE02.roa (raw, json)
Hash identifier:          ca8WhLHbBa7EcZLiVkbwKc/O4N20Afp/5/zNnD+5YJY=
Subject key identifier:   6A:A2:8C:30:CF:CA:0B:56:46:F9:9A:AD:65:C1:C6:ED:AC:19:58:5A
Certificate issuer:       /CN=A91B734D/serialNumber=F4C332458BEDC878B96A07E1E081E5BF4A91A194
Certificate serial:       056D
Authority key identifier: F4:C3:32:45:8B:ED:C8:78:B9:6A:07:E1:E0:81:E5:BF:4A:91:A1:94
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MMyRYvtyHi5agfh4IHlv0qRoZQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B734D/11584326B94F11EB9A6AEF32C4F9AE02/E8C597A6CAC311EC910B8C20C4F9AE02.roa
Signing time:             Sun 15 Sep 2024 01:42:40 +0000
ROA not before:           Sun 15 Sep 2024 01:42:40 +0000
ROA not after:            Mon 01 Dec 2025 00:00:00 +0000
asID:                     136778
IP address blocks:        103.155.214.0/23 maxlen: 23
                          103.155.214.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B734D/11584326B94F11EB9A6AEF32C4F9AE02/9MMyRYvtyHi5agfh4IHlv0qRoZQ.crl
                          rsync://rpki.apnic.net/member_repository/A91B734D/11584326B94F11EB9A6AEF32C4F9AE02/9MMyRYvtyHi5agfh4IHlv0qRoZQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MMyRYvtyHi5agfh4IHlv0qRoZQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 20:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1389 (0x56d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B734D/serialNumber=F4C332458BEDC878B96A07E1E081E5BF4A91A194
        Validity
            Not Before: Sep 15 01:42:40 2024 GMT
            Not After : Dec  1 00:00:00 2025 GMT
        Subject: CN=66e63b8f-4d2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:62:84:44:df:57:8c:42:01:c7:7f:f7:b7:ab:
                    eb:a5:ab:e6:1b:b9:e6:76:56:27:aa:d6:a7:13:20:
                    99:84:c6:1b:63:7e:1b:40:63:13:3f:b5:57:95:46:
                    e6:90:fc:6e:3f:4c:3f:72:5a:c4:80:8e:26:19:c7:
                    49:8f:76:ab:15:16:5a:71:dd:99:9f:03:ad:d5:46:
                    c7:bb:2e:12:ad:38:1d:d9:15:46:22:6f:8e:4c:a1:
                    cb:20:f5:b8:f0:36:40:20:28:48:7d:0c:3f:99:e1:
                    b9:c1:39:7b:0d:25:84:8c:9b:13:61:cc:48:f6:06:
                    48:a3:ff:cf:07:a0:ab:5b:99:6a:35:93:ed:49:ae:
                    ee:dd:ba:48:3e:7e:62:4a:b0:c0:dc:dc:b9:4b:53:
                    10:26:9a:d0:33:71:69:0e:84:17:a6:a6:9e:6b:dc:
                    40:f2:f8:e4:45:c2:0e:13:a8:c0:66:b4:82:80:95:
                    74:7a:ef:76:53:3b:48:58:1e:a6:ea:06:09:51:92:
                    07:59:e8:4a:ea:1e:8a:d4:24:f5:4d:67:b2:2a:e6:
                    98:1e:53:d8:77:1d:93:ad:59:15:48:64:df:4c:2d:
                    a2:9b:d4:a7:0b:2a:0b:9b:44:be:9a:53:f4:8c:3c:
                    87:bc:df:74:ea:ac:f7:e6:73:9a:ce:ba:4f:27:05:
                    d2:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:A2:8C:30:CF:CA:0B:56:46:F9:9A:AD:65:C1:C6:ED:AC:19:58:5A
            X509v3 Authority Key Identifier:
                keyid:F4:C3:32:45:8B:ED:C8:78:B9:6A:07:E1:E0:81:E5:BF:4A:91:A1:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B734D/11584326B94F11EB9A6AEF32C4F9AE02/9MMyRYvtyHi5agfh4IHlv0qRoZQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MMyRYvtyHi5agfh4IHlv0qRoZQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B734D/11584326B94F11EB9A6AEF32C4F9AE02/E8C597A6CAC311EC910B8C20C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.155.214.0/23

    Signature Algorithm: sha256WithRSAEncryption
         97:09:44:ad:bb:7e:3b:e7:17:56:f9:30:04:e9:5d:03:19:06:
         a4:ac:50:ca:41:e6:2b:48:b0:38:5b:d6:c1:93:3d:87:34:e2:
         16:39:b8:4f:2f:e3:4c:d7:ba:82:dc:bf:ef:9f:65:4a:fc:fc:
         67:44:cd:94:53:75:d2:27:b3:f3:59:88:8e:fe:05:66:10:cc:
         2e:53:f5:73:0f:f2:6c:52:c2:a8:b8:fd:5b:8e:cf:9a:c0:b9:
         bb:38:ab:44:fe:ac:33:f1:45:18:f8:7d:71:8a:4e:e6:16:52:
         f0:5e:14:90:c0:15:9a:15:44:50:22:30:52:b5:8d:f6:02:ae:
         5c:12:af:25:3a:17:f1:b9:6f:5d:12:44:ac:c0:1f:9c:28:47:
         b6:7f:d2:94:5c:ee:c7:64:03:39:49:6e:a7:e8:a1:13:d5:62:
         57:cf:a0:25:5b:bb:34:e8:0b:1d:1e:88:b0:8b:ef:9a:76:97:
         7e:19:d7:f8:9b:0f:9f:67:b2:8c:e3:0a:df:d6:dd:fc:72:b7:
         08:9d:02:0e:d5:d4:84:85:37:8a:d5:ef:d4:5b:91:57:5e:6a:
         7b:f2:79:28:09:09:e2:3d:ee:c3:38:1e:d3:61:8e:9c:cf:d8:
         8f:71:c9:58:77:56:6d:6a:8b:ca:f4:6e:20:54:22:3b:b6:35:
         ca:3c:0f:9b
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBW0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjczNEQxMTAvBgNVBAUTKEY0QzMzMjQ1OEJFREM4NzhCOTZBMDdFMUUwODFFNUJG
NEE5MUExOTQwHhcNMjQwOTE1MDE0MjQwWhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmU2M2I4Zi00ZDJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA12KERN9XjEIBx3/3t6vrpavmG7nmdlYnqtanEyCZhMYbY34bQGMTP7VXlUbm
kPxuP0w/clrEgI4mGcdJj3arFRZacd2ZnwOt1UbHuy4SrTgd2RVGIm+OTKHLIPW4
8DZAIChIfQw/meG5wTl7DSWEjJsTYcxI9gZIo//PB6CrW5lqNZPtSa7u3bpIPn5i
SrDA3Ny5S1MQJprQM3FpDoQXpqaea9xA8vjkRcIOE6jAZrSCgJV0eu92UztIWB6m
6gYJUZIHWehK6h6K1CT1TWeyKuaYHlPYdx2TrVkVSGTfTC2im9SnCyoLm0S+mlP0
jDyHvN906qz35nOazrpPJwXS3wIDAQABo4IClTCCApEwHQYDVR0OBBYEFGqijDDP
ygtWRvmarWXBxu2sGVhaMB8GA1UdIwQYMBaAFPTDMkWL7ch4uWoH4eCB5b9KkaGU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzM0RC8xMTU4NDMyNkI5
NEYxMUVCOUE2QUVGMzJDNEY5QUUwMi85TU15Ull2dHlIaTVhZ2ZoNElIbHYwcVJv
WlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzlNTXlSWXZ0eUhpNWFnZmg0SUhsdjBxUm9aUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QjczNEQvMTE1ODQzMjZCOTRGMTFFQjlBNkFFRjMyQzRGOUFFMDIvRThDNTk3QTZD
QUMzMTFFQzkxMEI4QzIwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnm9YwDQYJKoZIhvcNAQELBQADggEBAJcJRK27fjvnF1b5
MATpXQMZBqSsUMpB5itIsDhb1sGTPYc04hY5uE8v40zXuoLcv++fZUr8/GdEzZRT
ddIns/NZiI7+BWYQzC5T9XMP8mxSwqi4/VuOz5rAubs4q0T+rDPxRRj4fXGKTuYW
UvBeFJDAFZoVRFAiMFK1jfYCrlwSryU6F/G5b10SRKzAH5woR7Z/0pRc7sdkAzlJ
bqfooRPVYlfPoCVbuzToCx0eiLCL75p2l34Z1/ibD59nsozjCt/W3fxytwidAg7V
1ISFN4rV79RbkVdeanvyeSgJCeI97sM4HtNhjpzP2I9xyVh3Vm1qi8r0biBUIju2
Nco8D5s=
-----END CERTIFICATE-----
Generated at Thu Nov 21 00:21:23 2024 by rpki-client on console-fra.rpki-client.org