Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA867/816E7462197F11EF8D16684FC4F9AE02/118CC10A1E2D11EFBD391A28C4F9AE02.roa
File:                     118CC10A1E2D11EFBD391A28C4F9AE02.roa (raw, json)
Hash identifier:          O7fg9iroArmQam+Zvrb8ErfLlJtOTwquz4VKfNfGfqo=
Subject key identifier:   A7:BA:BE:40:9B:BD:21:9B:4C:27:8F:B5:F4:C1:4B:85:07:59:1C:7E
Certificate issuer:       /CN=A91BA867/serialNumber=75A40CED24ACAD62C58AB28EA0E0F7C5E5E1C788
Certificate serial:       0B
Authority key identifier: 75:A4:0C:ED:24:AC:AD:62:C5:8A:B2:8E:A0:E0:F7:C5:E5:E1:C7:88
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/daQM7SSsrWLFirKOoOD3xeXhx4g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BA867/816E7462197F11EF8D16684FC4F9AE02/118CC10A1E2D11EFBD391A28C4F9AE02.roa
Signing time:             Thu 30 May 2024 02:33:59 +0000
ROA not before:           Thu 30 May 2024 02:33:59 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     198949
IP address blocks:        103.49.122.0/24 maxlen: 24
                          103.49.123.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BA867/816E7462197F11EF8D16684FC4F9AE02/daQM7SSsrWLFirKOoOD3xeXhx4g.crl
                          rsync://rpki.apnic.net/member_repository/A91BA867/816E7462197F11EF8D16684FC4F9AE02/daQM7SSsrWLFirKOoOD3xeXhx4g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/daQM7SSsrWLFirKOoOD3xeXhx4g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Oct 2024 05:40:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11 (0xb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BA867/serialNumber=75A40CED24ACAD62C58AB28EA0E0F7C5E5E1C788
        Validity
            Not Before: May 30 02:33:59 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=6657e597-afb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:47:ad:7c:6d:54:27:ed:64:9d:90:07:c2:2b:
                    2e:ab:42:76:67:c6:78:39:ae:b2:c1:e0:41:bf:2a:
                    08:24:75:5f:ae:d5:9e:dc:13:cd:b8:08:0e:2d:0d:
                    82:64:86:64:3a:59:73:2e:cc:d2:5f:58:91:af:58:
                    eb:6c:ea:1f:05:56:3c:6d:fe:b1:e7:2f:5a:28:c7:
                    a1:98:c5:9e:a4:4f:c6:89:7b:a6:2d:03:e8:89:1c:
                    1b:bc:b9:d6:7e:fd:f1:73:09:9b:c1:26:4f:d3:a5:
                    77:b3:2a:3d:54:0e:0d:e5:fb:97:54:8a:39:9a:96:
                    bc:4d:79:bb:e4:3d:4f:62:e6:97:7f:35:4a:ae:bc:
                    f6:11:33:a6:d4:58:fc:d1:9f:45:67:dc:8c:37:b5:
                    02:91:ac:78:e4:cc:87:cf:5a:d9:99:cd:1f:c2:2f:
                    b1:62:2a:0b:b6:5f:11:be:3d:23:e5:ad:eb:d9:4e:
                    58:34:0b:5e:22:f4:a7:5b:f1:8a:9a:32:a3:c2:9b:
                    e1:8b:52:04:9f:36:1d:5c:ec:f4:bd:97:49:49:50:
                    2a:51:79:e6:4d:89:4a:b7:30:8e:99:8c:f7:db:e7:
                    83:76:9b:2c:ae:6d:73:ab:97:71:ea:55:8e:56:ba:
                    df:c6:ee:be:0f:8d:99:76:51:f8:5d:f0:76:f6:12:
                    79:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:BA:BE:40:9B:BD:21:9B:4C:27:8F:B5:F4:C1:4B:85:07:59:1C:7E
            X509v3 Authority Key Identifier:
                keyid:75:A4:0C:ED:24:AC:AD:62:C5:8A:B2:8E:A0:E0:F7:C5:E5:E1:C7:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BA867/816E7462197F11EF8D16684FC4F9AE02/daQM7SSsrWLFirKOoOD3xeXhx4g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/daQM7SSsrWLFirKOoOD3xeXhx4g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA867/816E7462197F11EF8D16684FC4F9AE02/118CC10A1E2D11EFBD391A28C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.49.122.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5f:6d:91:d2:d4:80:5c:6a:ec:e9:1a:3e:b7:21:5e:8e:41:b8:
         5b:22:4c:05:9c:01:4f:d2:6d:c4:10:69:7e:90:39:4e:a9:03:
         fb:10:53:c6:52:59:01:c0:e8:60:f9:00:42:f0:13:79:ab:bc:
         db:d8:64:7a:e9:a7:ca:80:3f:ed:4a:73:12:6e:49:9f:48:32:
         f6:2a:2d:1a:a7:2e:a1:3c:b4:d2:7e:28:e6:a3:24:d3:8a:e3:
         36:dc:f7:52:8e:a2:39:db:82:a3:e8:e4:e5:66:0a:25:4e:8b:
         22:62:21:55:8e:e7:c6:c2:90:a5:e0:ef:87:b9:6f:7b:4d:55:
         6d:33:c7:3a:c1:d6:4c:6f:aa:e0:37:00:88:56:dc:92:28:a3:
         44:1b:b7:53:09:f7:1e:47:1f:2e:f3:5a:47:85:8c:ab:dc:6e:
         6f:25:22:ed:15:d8:d8:c4:27:0d:e4:32:5a:6f:f3:29:f1:1f:
         04:66:96:c4:bb:dc:b8:c9:8b:b8:22:ac:6e:e1:dd:b6:ca:e7:
         6a:6a:62:16:9e:1f:5f:ce:98:90:80:89:96:63:8a:bb:9e:63:
         e9:20:f8:46:0b:e1:92:5e:6c:eb:d2:7e:a5:38:4d:c0:39:1e:
         b8:fd:b7:67:da:ef:75:48:c6:60:68:3d:5c:30:69:85:a7:db:
         fc:6f:96:91
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBCzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC
QTg2NzExMC8GA1UEBRMoNzVBNDBDRUQyNEFDQUQ2MkM1OEFCMjhFQTBFMEY3QzVF
NUUxQzc4ODAeFw0yNDA1MzAwMjMzNTlaFw0yNTA3MzAwMDAwMDBaMBgxFjAUBgNV
BAMTDTY2NTdlNTk3LWFmYjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDMR618bVQn7WSdkAfCKy6rQnZnxng5rrLB4EG/KggkdV+u1Z7cE824CA4tDYJk
hmQ6WXMuzNJfWJGvWOts6h8FVjxt/rHnL1oox6GYxZ6kT8aJe6YtA+iJHBu8udZ+
/fFzCZvBJk/TpXezKj1UDg3l+5dUijmalrxNebvkPU9i5pd/NUquvPYRM6bUWPzR
n0Vn3Iw3tQKRrHjkzIfPWtmZzR/CL7FiKgu2XxG+PSPlrevZTlg0C14i9Kdb8Yqa
MqPCm+GLUgSfNh1c7PS9l0lJUCpReeZNiUq3MI6ZjPfb54N2myyubXOrl3HqVY5W
ut/G7r4PjZl2Ufhd8Hb2Enl3AgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUp7q+QJu9
IZtMJ4+19MFLhQdZHH4wHwYDVR0jBBgwFoAUdaQM7SSsrWLFirKOoOD3xeXhx4gw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJBODY3LzgxNkU3NDYyMTk3
RjExRUY4RDE2Njg0RkM0RjlBRTAyL2RhUU03U1NzcldMRmlyS09vT0QzeGVYaHg0
Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvZGFRTTdTU3NyV0xGaXJLT29PRDN4ZVhoeDRnLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
QTg2Ny84MTZFNzQ2MjE5N0YxMUVGOEQxNjY4NEZDNEY5QUUwMi8xMThDQzEwQTFF
MkQxMUVGQkQzOTFBMjhDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAWcxejANBgkqhkiG9w0BAQsFAAOCAQEAX22R0tSAXGrs6Ro+
tyFejkG4WyJMBZwBT9JtxBBpfpA5TqkD+xBTxlJZAcDoYPkAQvATeau829hkeumn
yoA/7UpzEm5Jn0gy9iotGqcuoTy00n4o5qMk04rjNtz3Uo6iOduCo+jk5WYKJU6L
ImIhVY7nxsKQpeDvh7lve01VbTPHOsHWTG+q4DcAiFbckiijRBu3Uwn3HkcfLvNa
R4WMq9xubyUi7RXY2MQnDeQyWm/zKfEfBGaWxLvcuMmLuCKsbuHdtsrnampiFp4f
X86YkICJlmOKu55j6SD4Rgvhkl5s69J+pThNwDkeuP23Z9rvdUjGYGg9XDBphafb
/G+WkQ==
-----END CERTIFICATE-----
Generated at Thu Oct 17 08:06:27 2024 by rpki-client on console-ams.rpki-client.org