Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BAD56/818B4D021AAE11ED9B74AE51C4F9AE02/2080359097F711EF91AB0436C4F9AE02.roa
File:                     2080359097F711EF91AB0436C4F9AE02.roa (raw, json)
Hash identifier:          gciK0yNDrtj7QWiNKwvkaRxFbo52Lv+ZpsDvj/21B+E=
Subject key identifier:   83:FC:0D:DB:AE:4A:68:8A:58:60:D9:9F:75:41:4E:1C:1B:8A:C9:0A
Certificate issuer:       /CN=A91BAD56/serialNumber=1EECA03A77652B9070B5E133809A223830C89CF9
Certificate serial:       01F7
Authority key identifier: 1E:EC:A0:3A:77:65:2B:90:70:B5:E1:33:80:9A:22:38:30:C8:9C:F9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HuygOndlK5BwteEzgJoiODDInPk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BAD56/818B4D021AAE11ED9B74AE51C4F9AE02/2080359097F711EF91AB0436C4F9AE02.roa
Signing time:             Fri 01 Nov 2024 02:15:13 +0000
ROA not before:           Fri 01 Nov 2024 02:15:13 +0000
ROA not after:            Sun 02 Mar 2025 00:00:00 +0000
asID:                     139880
IP address blocks:        103.176.91.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BAD56/818B4D021AAE11ED9B74AE51C4F9AE02/HuygOndlK5BwteEzgJoiODDInPk.crl
                          rsync://rpki.apnic.net/member_repository/A91BAD56/818B4D021AAE11ED9B74AE51C4F9AE02/HuygOndlK5BwteEzgJoiODDInPk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HuygOndlK5BwteEzgJoiODDInPk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 20:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 503 (0x1f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BAD56/serialNumber=1EECA03A77652B9070B5E133809A223830C89CF9
        Validity
            Not Before: Nov  1 02:15:13 2024 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=672439b1-c55f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:66:e7:9a:4d:32:ce:dd:04:b1:8f:cd:5f:6f:
                    46:7b:f2:55:99:9a:82:36:20:be:40:33:17:1e:da:
                    8a:d7:72:8a:a2:19:e2:82:80:c8:84:2e:70:db:9b:
                    bf:e6:b2:6b:42:fb:83:02:7c:ed:f9:4f:a2:42:be:
                    be:75:0c:1f:29:b2:6f:c3:80:34:d5:78:3d:95:ed:
                    c5:d6:15:7a:82:16:5f:38:8b:65:b5:99:76:d3:39:
                    f5:1a:8b:17:da:0d:81:76:e0:4f:49:19:46:ca:94:
                    16:49:af:eb:ed:32:3d:10:6b:97:61:56:71:5e:e4:
                    ec:cc:44:8c:d1:96:3c:f1:43:2b:38:b6:c8:07:8f:
                    b5:3c:0c:03:b9:f5:5d:ec:39:5c:33:66:7d:46:db:
                    ed:06:31:3a:3a:4c:8e:81:d2:e7:f2:70:3b:77:c5:
                    3c:2a:19:5a:fa:14:b0:4d:e5:e5:fe:64:ed:fa:f9:
                    83:35:82:3c:a2:c1:4d:e8:d2:ec:58:b2:3b:f3:1e:
                    85:fa:72:a5:28:dd:54:36:8e:99:14:1b:83:23:c0:
                    a1:00:d3:84:b9:90:53:a3:d1:66:ce:c6:30:a0:55:
                    6b:e0:54:5d:27:d0:32:1d:a5:59:76:26:cb:0f:36:
                    ab:6a:bd:90:47:f0:cb:e9:19:c4:00:40:35:3e:4c:
                    9d:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:FC:0D:DB:AE:4A:68:8A:58:60:D9:9F:75:41:4E:1C:1B:8A:C9:0A
            X509v3 Authority Key Identifier:
                keyid:1E:EC:A0:3A:77:65:2B:90:70:B5:E1:33:80:9A:22:38:30:C8:9C:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BAD56/818B4D021AAE11ED9B74AE51C4F9AE02/HuygOndlK5BwteEzgJoiODDInPk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HuygOndlK5BwteEzgJoiODDInPk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAD56/818B4D021AAE11ED9B74AE51C4F9AE02/2080359097F711EF91AB0436C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.176.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:67:02:40:28:97:97:02:48:ce:ca:81:ab:c4:f9:4b:b4:30:
         8c:3c:2a:43:17:1f:3d:90:ec:c4:dd:1b:dc:7b:f0:fe:48:22:
         d5:7a:d9:10:23:16:93:ad:f0:85:7f:65:3d:0f:f7:ce:29:b7:
         9f:5f:19:d1:47:66:7e:1c:37:03:c5:78:45:c6:d5:9a:a1:d5:
         dc:02:13:e0:42:fb:da:a2:33:65:69:81:a8:b6:e0:48:0d:14:
         d5:54:db:83:55:fd:dc:41:1e:bc:00:cf:58:32:65:8d:cc:db:
         f3:0e:7b:14:12:b4:0c:2f:8d:b2:bf:a9:5a:85:22:40:92:95:
         1d:c6:44:9d:95:80:7c:f7:e0:74:f9:8a:ec:d6:e2:52:7d:e6:
         0a:9f:c2:af:0c:c4:6a:c6:5e:45:61:0d:5f:07:46:9d:80:af:
         bc:02:71:31:d3:92:5f:4a:c2:16:8c:df:53:2d:af:f6:fc:54:
         0e:3e:b0:c9:c4:54:cd:3d:40:17:24:c8:03:36:4c:76:94:5a:
         15:64:e7:9a:27:9a:33:ed:c2:41:57:27:5d:0c:a7:d2:93:57:
         83:fe:07:29:78:7c:24:df:c9:01:a4:c4:2d:86:a9:cd:13:20:
         8e:91:83:87:16:e4:95:f9:0a:fe:35:20:5b:e5:07:48:e8:24:
         c4:d6:45:f8
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAfcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkFENTYxMTAvBgNVBAUTKDFFRUNBMDNBNzc2NTJCOTA3MEI1RTEzMzgwOUEyMjM4
MzBDODlDRjkwHhcNMjQxMTAxMDIxNTEzWhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzI0MzliMS1jNTVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA9Wbnmk0yzt0EsY/NX29Ge/JVmZqCNiC+QDMXHtqK13KKohnigoDIhC5w25u/
5rJrQvuDAnzt+U+iQr6+dQwfKbJvw4A01Xg9le3F1hV6ghZfOItltZl20zn1GosX
2g2BduBPSRlGypQWSa/r7TI9EGuXYVZxXuTszESM0ZY88UMrOLbIB4+1PAwDufVd
7DlcM2Z9RtvtBjE6OkyOgdLn8nA7d8U8Khla+hSwTeXl/mTt+vmDNYI8osFN6NLs
WLI78x6F+nKlKN1UNo6ZFBuDI8ChANOEuZBTo9FmzsYwoFVr4FRdJ9AyHaVZdibL
Dzarar2QR/DL6RnEAEA1Pkyd9QIDAQABo4IClTCCApEwHQYDVR0OBBYEFIP8Dduu
SmiKWGDZn3VBThwbiskKMB8GA1UdIwQYMBaAFB7soDp3ZSuQcLXhM4CaIjgwyJz5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQUQ1Ni84MThCNEQwMjFB
QUUxMUVEOUI3NEFFNTFDNEY5QUUwMi9IdXlnT25kbEs1Qnd0ZUV6Z0pvaU9ERElu
UGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0h1eWdPbmRsSzVCd3RlRXpnSm9pT0RESW5Qay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QkFENTYvODE4QjREMDIxQUFFMTFFRDlCNzRBRTUxQzRGOUFFMDIvMjA4MDM1OTA5
N0Y3MTFFRjkxQUIwNDM2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnsFswDQYJKoZIhvcNAQELBQADggEBAI5nAkAol5cCSM7K
gavE+Uu0MIw8KkMXHz2Q7MTdG9x78P5IItV62RAjFpOt8IV/ZT0P984pt59fGdFH
Zn4cNwPFeEXG1Zqh1dwCE+BC+9qiM2Vpgai24EgNFNVU24NV/dxBHrwAz1gyZY3M
2/MOexQStAwvjbK/qVqFIkCSlR3GRJ2VgHz34HT5iuzW4lJ95gqfwq8MxGrGXkVh
DV8HRp2Ar7wCcTHTkl9KwhaM31Mtr/b8VA4+sMnEVM09QBckyAM2THaUWhVk55on
mjPtwkFXJ10Mp9KTV4P+Byl4fCTfyQGkxC2Gqc0TII6Rg4cW5JX5Cv41IFvlB0jo
JMTWRfg=
-----END CERTIFICATE-----
Generated at Thu Nov 21 03:12:04 2024 by rpki-client on console-fra.rpki-client.org