Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA0DE/CEF181DC4AC911EEAD89E528C4F9AE02/049C5BF84ACB11EE9CB50538C4F9AE02.roa
File:                     049C5BF84ACB11EE9CB50538C4F9AE02.roa (raw, json)
Hash identifier:          CvXEG66DL+FfRTippw4jA32jFcvBiI/nHgMxSZ95sC8=
Subject key identifier:   A4:14:14:0B:BC:29:0D:DB:0B:85:83:26:76:09:6B:70:DB:A3:95:FE
Certificate issuer:       /CN=A91BA0DE/serialNumber=7EEBFAEF79BF883EBF07077A9BF410EA31EFF7CA
Certificate serial:       B9
Authority key identifier: 7E:EB:FA:EF:79:BF:88:3E:BF:07:07:7A:9B:F4:10:EA:31:EF:F7:CA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuv673m_iD6_Bwd6m_QQ6jHv98o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BA0DE/CEF181DC4AC911EEAD89E528C4F9AE02/049C5BF84ACB11EE9CB50538C4F9AE02.roa
Signing time:             Thu 15 Aug 2024 05:26:48 +0000
ROA not before:           Thu 15 Aug 2024 05:26:48 +0000
ROA not after:            Tue 30 Sep 2025 00:00:00 +0000
asID:                     151398
IP address blocks:        103.215.92.0/23 maxlen: 23
                          103.215.92.0/24 maxlen: 24
                          103.215.93.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BA0DE/CEF181DC4AC911EEAD89E528C4F9AE02/fuv673m_iD6_Bwd6m_QQ6jHv98o.crl
                          rsync://rpki.apnic.net/member_repository/A91BA0DE/CEF181DC4AC911EEAD89E528C4F9AE02/fuv673m_iD6_Bwd6m_QQ6jHv98o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuv673m_iD6_Bwd6m_QQ6jHv98o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 185 (0xb9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BA0DE/serialNumber=7EEBFAEF79BF883EBF07077A9BF410EA31EFF7CA
        Validity
            Not Before: Aug 15 05:26:48 2024 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=66bd9198-4a30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:6a:b5:92:26:42:fb:69:53:a8:e4:9f:81:b8:
                    7c:2e:31:34:fb:1c:06:a8:49:95:cc:66:46:cb:fa:
                    d9:04:82:fd:58:ce:08:16:c6:8d:e6:40:6b:44:f4:
                    5c:b0:8d:7f:59:3c:c9:af:e5:31:60:bb:23:d1:a0:
                    34:0b:1d:e9:fb:e8:a1:6e:bc:76:7c:d7:49:dd:57:
                    50:2d:d9:d2:86:4b:d5:09:d5:82:90:5f:0a:10:53:
                    54:3a:73:19:a2:1b:be:b3:de:d5:11:2d:0d:76:d5:
                    8c:c8:d0:8a:1c:14:7b:be:64:ed:f0:72:5f:41:2d:
                    75:67:1c:50:a6:db:b6:a2:26:86:1d:c4:48:75:09:
                    a1:37:27:59:94:91:2a:cf:3f:6e:ec:6b:7f:1e:bd:
                    a3:63:06:8b:9e:ee:5b:43:01:5f:14:c1:f3:e2:6d:
                    51:2f:20:2a:e2:0f:6d:98:06:e1:81:e4:52:3f:da:
                    cc:25:b6:b4:a3:6d:58:d1:24:a7:a6:d2:ff:95:50:
                    29:36:73:e9:68:d1:1d:76:d9:8e:46:d4:28:c1:71:
                    d5:85:11:10:cf:25:f8:4d:00:44:35:a7:b0:33:17:
                    70:d6:ce:96:26:f6:68:19:f5:98:dc:a3:1b:2d:50:
                    30:b2:0c:55:1a:2c:e8:aa:5f:29:90:75:84:97:c9:
                    4c:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:14:14:0B:BC:29:0D:DB:0B:85:83:26:76:09:6B:70:DB:A3:95:FE
            X509v3 Authority Key Identifier:
                keyid:7E:EB:FA:EF:79:BF:88:3E:BF:07:07:7A:9B:F4:10:EA:31:EF:F7:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BA0DE/CEF181DC4AC911EEAD89E528C4F9AE02/fuv673m_iD6_Bwd6m_QQ6jHv98o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuv673m_iD6_Bwd6m_QQ6jHv98o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA0DE/CEF181DC4AC911EEAD89E528C4F9AE02/049C5BF84ACB11EE9CB50538C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.215.92.0/23

    Signature Algorithm: sha256WithRSAEncryption
         88:a2:a5:fc:32:8a:4c:32:5a:da:0c:a7:67:f0:d2:96:68:83:
         40:00:e0:9e:42:bd:6b:4a:55:c9:07:b1:d6:6a:4f:d8:9f:40:
         0d:e9:35:d3:e4:7e:1f:23:92:b2:55:f6:bd:60:3c:db:3d:09:
         ca:82:0f:f2:10:ad:36:ad:4c:05:51:15:0e:6d:47:27:15:39:
         7a:ea:6d:a0:0c:b3:3f:3e:33:6c:3c:36:9c:64:69:d6:2a:af:
         25:a3:88:f8:81:24:6a:c8:eb:16:88:bf:8e:76:32:2d:1a:da:
         6a:c8:45:dd:c6:87:9f:6d:33:84:f7:82:38:42:4d:a8:17:e7:
         2a:91:a4:86:f7:ea:14:3a:d8:06:bd:c9:5b:c6:bf:80:fc:06:
         f4:9c:86:9a:60:ec:da:77:8c:40:42:44:18:72:7d:fd:ca:ba:
         ee:11:04:9d:37:56:d4:f8:07:22:69:9e:f4:55:72:61:82:0e:
         8e:a6:76:de:e4:63:55:ae:53:3b:f5:19:47:1c:3b:3a:8b:f2:
         08:a6:f0:08:5e:8e:54:05:20:39:a0:03:48:ab:44:d8:cb:c7:
         06:cf:c9:01:51:c8:ab:af:06:aa:df:8f:0e:a3:6a:e3:66:6f:
         33:b0:b8:fd:a9:b7:91:47:49:07:dc:dc:e4:7d:a7:e2:70:7c:
         f5:c8:a0:9e
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICALkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkEwREUxMTAvBgNVBAUTKDdFRUJGQUVGNzlCRjg4M0VCRjA3MDc3QTlCRjQxMEVB
MzFFRkY3Q0EwHhcNMjQwODE1MDUyNjQ4WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmJkOTE5OC00YTMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1Wq1kiZC+2lTqOSfgbh8LjE0+xwGqEmVzGZGy/rZBIL9WM4IFsaN5kBrRPRc
sI1/WTzJr+UxYLsj0aA0Cx3p++ihbrx2fNdJ3VdQLdnShkvVCdWCkF8KEFNUOnMZ
ohu+s97VES0NdtWMyNCKHBR7vmTt8HJfQS11ZxxQptu2oiaGHcRIdQmhNydZlJEq
zz9u7Gt/Hr2jYwaLnu5bQwFfFMHz4m1RLyAq4g9tmAbhgeRSP9rMJba0o21Y0SSn
ptL/lVApNnPpaNEddtmORtQowXHVhREQzyX4TQBENaewMxdw1s6WJvZoGfWY3KMb
LVAwsgxVGizoql8pkHWEl8lMvQIDAQABo4IClTCCApEwHQYDVR0OBBYEFKQUFAu8
KQ3bC4WDJnYJa3Dbo5X+MB8GA1UdIwQYMBaAFH7r+u95v4g+vwcHepv0EOox7/fK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTBERS9DRUYxODFEQzRB
QzkxMUVFQUQ4OUU1MjhDNEY5QUUwMi9mdXY2NzNtX2lENl9Cd2Q2bV9RUTZqSHY5
OG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2Z1djY3M21faUQ2X0J3ZDZtX1FRNmpIdjk4by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QkEwREUvQ0VGMTgxREM0QUM5MTFFRUFEODlFNTI4QzRGOUFFMDIvMDQ5QzVCRjg0
QUNCMTFFRTlDQjUwNTM4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFn11wwDQYJKoZIhvcNAQELBQADggEBAIiipfwyikwyWtoM
p2fw0pZog0AA4J5CvWtKVckHsdZqT9ifQA3pNdPkfh8jkrJV9r1gPNs9CcqCD/IQ
rTatTAVRFQ5tRycVOXrqbaAMsz8+M2w8NpxkadYqryWjiPiBJGrI6xaIv452Mi0a
2mrIRd3Gh59tM4T3gjhCTagX5yqRpIb36hQ62Aa9yVvGv4D8BvSchppg7Np3jEBC
RBhyff3Kuu4RBJ03VtT4ByJpnvRVcmGCDo6mdt7kY1WuUzv1GUccOzqL8gim8Ahe
jlQFIDmgA0irRNjLxwbPyQFRyKuvBqrfjw6jauNmbzOwuP2pt5FHSQfc3OR9p+Jw
fPXIoJ4=
-----END CERTIFICATE-----
Generated at Sat Nov 23 05:02:56 2024 by rpki-client on console-fra.rpki-client.org