Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/A6CBF914AC3411EDB324F037C4F9AE02.roa
File:                     A6CBF914AC3411EDB324F037C4F9AE02.roa (raw, json)
Hash identifier:          mUitWyAia7OYZSrqATEphyypaSxSHUc51lFfEosaW+E=
Subject key identifier:   23:40:47:F9:AF:AC:68:4F:48:DC:60:E6:06:C1:52:02:BD:92:F9:28
Certificate issuer:       /CN=A91BE374/serialNumber=D84BCD6C5809279BCBCC0A56AD4A1683230F433E
Certificate serial:       EB
Authority key identifier: D8:4B:CD:6C:58:09:27:9B:CB:CC:0A:56:AD:4A:16:83:23:0F:43:3E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2EvNbFgJJ5vLzApWrUoWgyMPQz4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/A6CBF914AC3411EDB324F037C4F9AE02.roa
Signing time:             Tue 07 May 2024 06:08:56 +0000
ROA not before:           Tue 07 May 2024 06:08:56 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     135345
IP address blocks:        103.186.106.0/24 maxlen: 24
                          103.186.107.0/24 maxlen: 24
                          2400:6fe0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.crl
                          rsync://rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2EvNbFgJJ5vLzApWrUoWgyMPQz4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:30:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 235 (0xeb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BE374/serialNumber=D84BCD6C5809279BCBCC0A56AD4A1683230F433E
        Validity
            Not Before: May  7 06:08:56 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=6639c578-f1eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:e1:11:1c:36:c0:66:79:14:a4:c3:0b:0c:3f:
                    44:e7:db:13:4b:e6:e3:45:fd:d0:71:e3:53:a1:66:
                    06:51:b8:c1:36:63:24:d5:12:b6:66:81:13:ac:b6:
                    8b:b8:02:48:66:79:9f:13:6a:fb:1b:77:1f:91:d4:
                    4a:86:97:c6:ec:74:d6:fe:8a:d2:7e:67:bd:35:8d:
                    d2:41:eb:55:3b:e2:47:3c:3a:d0:fc:11:5b:02:ac:
                    94:da:34:4d:e0:63:97:cd:03:0c:08:73:d8:29:e6:
                    6f:12:ab:65:15:94:4c:f2:df:34:54:ca:ce:08:ce:
                    9c:3c:0c:3d:9b:de:4c:d1:1e:ec:0c:ac:c9:a0:99:
                    af:5d:76:1c:b7:f6:cf:0d:4f:9b:34:80:ed:2e:f5:
                    62:03:2f:1d:79:72:c0:a9:e2:ce:7c:bf:81:a2:5c:
                    22:1d:9a:f2:18:b1:ca:c8:37:3a:4e:89:2f:1a:0f:
                    ec:67:b0:b7:28:a7:e6:ba:7a:d2:16:49:4e:3b:e8:
                    2d:38:29:e8:f3:0c:0a:9d:92:21:b1:f9:a7:d6:c9:
                    c5:80:6a:eb:d8:b3:35:63:56:03:3c:ef:be:69:fe:
                    d3:3d:92:0b:22:de:be:65:2c:19:9f:a1:1a:ff:af:
                    0c:cc:d2:a0:1f:94:17:18:c3:f7:62:29:13:5d:85:
                    ef:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:40:47:F9:AF:AC:68:4F:48:DC:60:E6:06:C1:52:02:BD:92:F9:28
            X509v3 Authority Key Identifier:
                keyid:D8:4B:CD:6C:58:09:27:9B:CB:CC:0A:56:AD:4A:16:83:23:0F:43:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2EvNbFgJJ5vLzApWrUoWgyMPQz4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/A6CBF914AC3411EDB324F037C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.186.106.0/23
                IPv6:
                  2400:6fe0::/32

    Signature Algorithm: sha256WithRSAEncryption
         9a:14:a6:52:c7:af:51:84:eb:83:7c:9f:17:75:d3:6a:c7:0c:
         13:64:48:12:8f:f8:a5:d9:76:89:ea:97:a4:eb:29:dc:3f:12:
         d7:4b:60:9b:ef:00:00:a5:de:34:f1:98:c3:8a:ef:1b:92:a6:
         73:01:91:e5:ec:0c:cc:b2:fd:dc:ec:2c:6f:28:0f:1a:1a:8b:
         93:23:f3:18:d9:c6:08:44:cb:08:6e:53:5c:49:b3:30:92:be:
         60:94:54:c6:1c:b8:df:59:28:53:b8:8d:bc:63:c1:7d:8f:4b:
         ee:f4:1f:4c:bf:5e:63:21:49:12:ea:43:09:ed:e5:00:b9:b8:
         77:bd:5c:23:39:36:4f:2d:57:37:59:d2:00:dd:1d:7d:76:1c:
         e0:cc:69:0c:c0:7c:a7:c1:51:32:3b:67:f3:6a:f5:08:9d:64:
         54:61:85:cf:76:9c:36:a7:61:0c:38:1a:10:e0:89:d9:63:fa:
         64:04:81:3e:98:16:58:e8:6b:47:29:21:9a:59:18:4a:e2:ba:
         ad:a8:3f:a7:eb:03:c9:5c:15:e4:68:6c:48:c6:bf:3c:4c:9b:
         e0:3a:71:80:26:81:ea:54:cb:cb:b1:a2:68:7f:1f:76:e2:d6:
         0d:9b:86:6e:68:ef:bf:ec:87:e1:17:30:da:c0:7c:63:f5:97:
         65:35:12:75
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICAOswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkUzNzQxMTAvBgNVBAUTKEQ4NEJDRDZDNTgwOTI3OUJDQkNDMEE1NkFENEExNjgz
MjMwRjQzM0UwHhcNMjQwNTA3MDYwODU2WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NjM5YzU3OC1mMWViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6uERHDbAZnkUpMMLDD9E59sTS+bjRf3QceNToWYGUbjBNmMk1RK2ZoETrLaL
uAJIZnmfE2r7G3cfkdRKhpfG7HTW/orSfme9NY3SQetVO+JHPDrQ/BFbAqyU2jRN
4GOXzQMMCHPYKeZvEqtlFZRM8t80VMrOCM6cPAw9m95M0R7sDKzJoJmvXXYct/bP
DU+bNIDtLvViAy8deXLAqeLOfL+BolwiHZryGLHKyDc6TokvGg/sZ7C3KKfmunrS
FklOO+gtOCno8wwKnZIhsfmn1snFgGrr2LM1Y1YDPO++af7TPZILIt6+ZSwZn6Ea
/68MzNKgH5QXGMP3YikTXYXvHQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFCNAR/mv
rGhPSNxg5gbBUgK9kvkoMB8GA1UdIwQYMBaAFNhLzWxYCSeby8wKVq1KFoMjD0M+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRTM3NC80MDYwMzU2MkFD
MzExMUVEOTI4QjE5MzZDNEY5QUUwMi8yRXZOYkZnSko1dkx6QXBXclVvV2d5TVBR
ejQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJFdk5iRmdKSjV2THpBcFdyVW9XZ3lNUFF6NC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QkUzNzQvNDA2MDM1NjJBQzMxMTFFRDkyOEIxOTM2QzRGOUFFMDIvQTZDQkY5MTRB
QzM0MTFFREIzMjRGMDM3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E
HzAdMAwEAgABMAYDBAFnumowDQQCAAIwBwMFACQAb+AwDQYJKoZIhvcNAQELBQAD
ggEBAJoUplLHr1GE64N8nxd102rHDBNkSBKP+KXZdonql6TrKdw/EtdLYJvvAACl
3jTxmMOK7xuSpnMBkeXsDMyy/dzsLG8oDxoai5Mj8xjZxghEywhuU1xJszCSvmCU
VMYcuN9ZKFO4jbxjwX2PS+70H0y/XmMhSRLqQwnt5QC5uHe9XCM5Nk8tVzdZ0gDd
HX12HODMaQzAfKfBUTI7Z/Nq9QidZFRhhc92nDanYQw4GhDgidlj+mQEgT6YFljo
a0cpIZpZGEriuq2oP6frA8lcFeRobEjGvzxMm+A6cYAmgepUy8uxomh/H3bi1g2b
hm5o77/sh+EXMNrAfGP1l2U1EnU=
-----END CERTIFICATE-----
Generated at Sat Nov 23 05:02:56 2024 by rpki-client on console-fra.rpki-client.org