Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/FAA525207A4411EB804B7430C4F9AE02.roa
File:                     FAA525207A4411EB804B7430C4F9AE02.roa (raw, json)
Hash identifier:          qRd5pNy25aeVVisd65wzJ8hT+cyr+S2QBDIpDf9Jz7M=
Subject key identifier:   DD:28:33:42:DD:40:1B:C5:5D:7C:F3:3C:18:29:84:40:8A:75:43:FF
Certificate issuer:       /CN=A91BB94D/serialNumber=747C86C3CC14A77973805315408CDCA10A2147B2
Certificate serial:       06E1
Authority key identifier: 74:7C:86:C3:CC:14:A7:79:73:80:53:15:40:8C:DC:A1:0A:21:47:B2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dHyGw8wUp3lzgFMVQIzcoQohR7I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/FAA525207A4411EB804B7430C4F9AE02.roa
Signing time:             Fri 30 Aug 2024 23:31:34 +0000
ROA not before:           Fri 30 Aug 2024 23:31:34 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     132825
IP address blocks:        103.153.100.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.crl
                          rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dHyGw8wUp3lzgFMVQIzcoQohR7I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 20:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1761 (0x6e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BB94D/serialNumber=747C86C3CC14A77973805315408CDCA10A2147B2
        Validity
            Not Before: Aug 30 23:31:34 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=66d25655-b2e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:43:9a:ec:57:f7:cc:3c:3d:5d:1c:72:db:77:
                    fb:2c:35:bf:5f:27:cf:40:84:01:79:74:4a:94:a3:
                    d9:bb:a9:be:f2:c1:ec:43:60:09:2b:86:d1:2f:06:
                    c2:1e:37:fa:d8:86:b7:4a:c7:05:b8:f6:c5:d9:f7:
                    5e:52:94:d7:83:94:e2:e7:76:52:be:ce:42:04:25:
                    41:67:7c:95:d8:3e:39:4f:49:38:a5:5a:9f:5a:83:
                    ad:75:a0:42:a8:f4:79:9b:85:81:0f:a1:e3:42:d3:
                    e2:62:c6:41:20:35:7f:9a:49:c6:4f:ba:bf:31:48:
                    15:56:7f:b3:37:8f:60:42:73:ad:cb:b9:e9:0d:e5:
                    61:7d:a6:48:ac:01:4b:cb:e6:2b:26:2c:b7:af:e0:
                    f8:c1:9a:67:5a:90:89:5a:ec:a7:aa:80:76:b5:99:
                    7c:8d:91:df:00:93:b5:62:ef:2d:15:bc:62:d2:2d:
                    c8:24:1f:e9:40:92:f2:3b:7f:21:47:31:ac:47:c4:
                    97:d2:9c:45:41:0e:e3:70:1a:6e:06:29:9e:ad:a5:
                    c5:fd:4a:3c:3a:c9:ef:bd:bc:07:54:6b:20:cb:35:
                    c1:5a:6d:2e:7c:71:4a:dd:40:d3:e6:f2:66:aa:95:
                    bd:2b:99:f8:b2:e1:6d:c7:5c:f6:83:9b:e5:1b:ad:
                    04:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:28:33:42:DD:40:1B:C5:5D:7C:F3:3C:18:29:84:40:8A:75:43:FF
            X509v3 Authority Key Identifier:
                keyid:74:7C:86:C3:CC:14:A7:79:73:80:53:15:40:8C:DC:A1:0A:21:47:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dHyGw8wUp3lzgFMVQIzcoQohR7I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/FAA525207A4411EB804B7430C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.153.100.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c8:10:f2:a2:59:e8:4f:2d:b9:99:88:e6:ff:19:41:f4:55:be:
         ca:9a:fd:f5:fc:70:1a:02:c1:fe:e6:2c:8d:57:1d:6e:5f:83:
         cc:42:65:4b:15:c9:57:ed:5a:e4:06:f7:70:86:dd:39:2f:2b:
         74:02:53:0c:53:bc:ef:5d:67:e9:9d:56:b8:57:76:b1:c3:fe:
         25:3d:a0:8f:72:d7:cf:5a:38:fb:51:dd:00:31:53:8f:70:3b:
         8c:38:d4:0b:f4:4e:fb:e5:21:4b:a6:9d:75:ff:53:dd:05:14:
         98:d9:eb:cb:03:61:de:12:6d:2c:b4:dc:90:79:8f:27:35:fb:
         49:be:96:ec:d6:98:82:a2:0f:bf:75:43:7c:1c:4d:62:43:b1:
         1e:52:b5:7d:0e:5d:03:bc:82:32:6d:73:f0:74:1c:6c:c2:10:
         5c:e4:ea:03:06:8f:13:4d:92:ec:0e:06:98:0b:a5:ca:76:93:
         52:fd:85:dc:86:35:02:1d:1f:b6:44:54:99:39:99:8d:85:b0:
         49:4d:34:a5:5e:de:c7:07:46:45:57:94:5c:36:66:81:4c:45:
         54:1a:c5:39:d9:d1:7b:48:15:3e:c6:4d:8c:2d:14:7c:d5:10:
         50:4b:20:38:7b:aa:7d:7d:91:27:8c:da:bc:49:b8:9f:7f:ed:
         64:ae:9f:c9
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBuEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkI5NEQxMTAvBgNVBAUTKDc0N0M4NkMzQ0MxNEE3Nzk3MzgwNTMxNTQwOENEQ0Ex
MEEyMTQ3QjIwHhcNMjQwODMwMjMzMTM0WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmQyNTY1NS1iMmU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6UOa7Ff3zDw9XRxy23f7LDW/XyfPQIQBeXRKlKPZu6m+8sHsQ2AJK4bRLwbC
Hjf62Ia3SscFuPbF2fdeUpTXg5Ti53ZSvs5CBCVBZ3yV2D45T0k4pVqfWoOtdaBC
qPR5m4WBD6HjQtPiYsZBIDV/mknGT7q/MUgVVn+zN49gQnOty7npDeVhfaZIrAFL
y+YrJiy3r+D4wZpnWpCJWuynqoB2tZl8jZHfAJO1Yu8tFbxi0i3IJB/pQJLyO38h
RzGsR8SX0pxFQQ7jcBpuBimeraXF/Uo8OsnvvbwHVGsgyzXBWm0ufHFK3UDT5vJm
qpW9K5n4suFtx1z2g5vlG60E3QIDAQABo4IClTCCApEwHQYDVR0OBBYEFN0oM0Ld
QBvFXXzzPBgphECKdUP/MB8GA1UdIwQYMBaAFHR8hsPMFKd5c4BTFUCM3KEKIUey
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjk0RC8yQzcxNjJDQzIz
MjgxMUVCOUZGNkU5MUFDNEY5QUUwMi9kSHlHdzh3VXAzbHpnRk1WUUl6Y29Rb2hS
N0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2RIeUd3OHdVcDNsemdGTVZRSXpjb1FvaFI3SS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QkI5NEQvMkM3MTYyQ0MyMzI4MTFFQjlGRjZFOTFBQzRGOUFFMDIvRkFBNTI1MjA3
QTQ0MTFFQjgwNEI3NDMwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnmWQwDQYJKoZIhvcNAQELBQADggEBAMgQ8qJZ6E8tuZmI
5v8ZQfRVvsqa/fX8cBoCwf7mLI1XHW5fg8xCZUsVyVftWuQG93CG3TkvK3QCUwxT
vO9dZ+mdVrhXdrHD/iU9oI9y189aOPtR3QAxU49wO4w41Av0TvvlIUumnXX/U90F
FJjZ68sDYd4SbSy03JB5jyc1+0m+luzWmIKiD791Q3wcTWJDsR5StX0OXQO8gjJt
c/B0HGzCEFzk6gMGjxNNkuwOBpgLpcp2k1L9hdyGNQIdH7ZEVJk5mY2FsElNNKVe
3scHRkVXlFw2ZoFMRVQaxTnZ0XtIFT7GTYwtFHzVEFBLIDh7qn19kSeM2rxJuJ9/
7WSun8k=
-----END CERTIFICATE-----
Generated at Wed Nov 20 23:55:52 2024 by rpki-client on console-ams.rpki-client.org