Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF039/25676DF045BB11EAA648771EC4F9AE02/6D49440845BC11EAB591BD20C4F9AE02.roa
File:                     6D49440845BC11EAB591BD20C4F9AE02.roa (raw, json)
Hash identifier:          +EH85YAp1dcpIF99ICzGj5geNh5nH/fjSqrNCHc2CX4=
Subject key identifier:   A7:07:B3:F5:20:01:62:99:03:F5:7D:A7:72:A7:41:28:CE:9C:61:B0
Certificate issuer:       /CN=A91BF039/serialNumber=4BC562956D07D06FAADC923388B98660F7287C9A
Certificate serial:       0A02
Authority key identifier: 4B:C5:62:95:6D:07:D0:6F:AA:DC:92:33:88:B9:86:60:F7:28:7C:9A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S8VilW0H0G-q3JIziLmGYPcofJo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BF039/25676DF045BB11EAA648771EC4F9AE02/6D49440845BC11EAB591BD20C4F9AE02.roa
Signing time:             Sun 28 Jan 2024 20:18:49 +0000
ROA not before:           Sun 28 Jan 2024 20:18:49 +0000
ROA not after:            Mon 31 Mar 2025 00:00:00 +0000
asID:                     137252
IP address blocks:        103.106.32.0/22 maxlen: 24
                          2402:3940::/32 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BF039/25676DF045BB11EAA648771EC4F9AE02/S8VilW0H0G-q3JIziLmGYPcofJo.crl
                          rsync://rpki.apnic.net/member_repository/A91BF039/25676DF045BB11EAA648771EC4F9AE02/S8VilW0H0G-q3JIziLmGYPcofJo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S8VilW0H0G-q3JIziLmGYPcofJo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 19:19:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2562 (0xa02)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BF039/serialNumber=4BC562956D07D06FAADC923388B98660F7287C9A
        Validity
            Not Before: Jan 28 20:18:49 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=65b6b6a9-c88c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:1d:d2:ae:0b:6f:40:ec:21:a5:5d:f2:26:2b:
                    ef:9f:2c:3b:30:1f:38:95:94:93:e7:d9:20:7a:ef:
                    73:c5:1e:6d:ce:b5:d4:40:5e:45:58:3d:3a:fa:d7:
                    ca:70:30:27:d5:ac:82:7e:a4:06:bc:81:d2:15:99:
                    26:de:51:2e:5d:da:00:46:93:2a:f1:6c:c9:da:29:
                    1b:c0:6c:d6:7c:cd:76:4a:92:70:19:37:6e:65:2f:
                    72:02:01:53:cf:a0:ff:ad:d0:0b:43:df:eb:d2:97:
                    5e:cc:29:ee:24:ab:2c:a2:1a:9b:5d:cb:8c:74:b8:
                    2b:e8:3b:da:07:13:28:74:ca:44:41:4c:ec:4c:fc:
                    81:65:e4:b1:47:54:5d:cd:d9:e8:8d:c6:b1:1b:2e:
                    80:84:55:fd:43:62:15:fc:62:51:d3:eb:c5:ae:f5:
                    4f:4b:cd:b9:04:f1:05:a2:8e:87:b4:85:0d:78:6f:
                    1f:5d:77:6f:da:e2:bf:f5:47:76:c2:15:7f:5a:78:
                    dd:0b:33:68:6c:a4:f1:7c:24:ef:af:ef:70:15:da:
                    c6:e4:e2:d5:af:0e:18:3f:d9:c6:e7:00:63:36:8c:
                    9d:2a:66:db:74:86:3e:ad:af:c6:b4:15:8b:94:1e:
                    8f:ae:e2:ff:85:80:7e:09:5c:a5:d6:54:63:f6:50:
                    83:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:07:B3:F5:20:01:62:99:03:F5:7D:A7:72:A7:41:28:CE:9C:61:B0
            X509v3 Authority Key Identifier:
                keyid:4B:C5:62:95:6D:07:D0:6F:AA:DC:92:33:88:B9:86:60:F7:28:7C:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BF039/25676DF045BB11EAA648771EC4F9AE02/S8VilW0H0G-q3JIziLmGYPcofJo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S8VilW0H0G-q3JIziLmGYPcofJo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF039/25676DF045BB11EAA648771EC4F9AE02/6D49440845BC11EAB591BD20C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.106.32.0/22
                IPv6:
                  2402:3940::/32

    Signature Algorithm: sha256WithRSAEncryption
         45:29:d3:09:5a:4f:68:4e:b2:2c:f0:9f:b8:33:5c:2b:03:b9:
         55:77:34:95:7c:c0:1b:ed:91:ed:60:98:2d:a1:09:96:9e:97:
         15:27:e4:50:75:32:32:07:69:16:1d:ed:0c:8b:d3:8a:a4:3e:
         fb:c5:a7:3f:7f:c7:ef:ae:a2:8c:a1:47:67:c3:0c:c5:39:e9:
         c2:c5:ba:74:70:74:92:0b:a2:2b:d0:ee:8a:48:de:a9:58:ca:
         fa:6a:3c:9b:a1:29:cd:fa:aa:b8:c6:30:54:83:0f:c0:2f:9c:
         50:47:15:d8:62:d7:2b:9d:5f:a0:2d:b0:db:b6:2d:2e:54:42:
         76:68:1e:56:87:ac:9f:b1:89:e8:2a:a9:36:12:24:55:c5:a8:
         b9:c9:4f:8a:f7:8e:a1:26:2e:d9:89:5e:2f:69:b1:7e:77:21:
         a3:1d:34:f5:e9:66:80:dd:dd:0a:58:0e:c6:4f:b9:26:e2:ca:
         d5:3b:82:7b:ea:2e:cb:f8:12:5e:39:47:9b:86:fa:03:28:9a:
         8a:ce:3a:8f:3e:2c:7b:63:fa:61:04:38:47:28:59:1f:61:38:
         7a:77:ae:bf:1c:17:14:09:34:2e:b2:ac:e3:f0:dc:d6:b0:a0:
         ca:11:34:1e:9b:fb:77:88:b4:7a:3b:a2:98:d8:a6:1f:44:95:
         f5:5c:6f:3a
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICCgIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkYwMzkxMTAvBgNVBAUTKDRCQzU2Mjk1NkQwN0QwNkZBQURDOTIzMzg4Qjk4NjYw
RjcyODdDOUEwHhcNMjQwMTI4MjAxODQ5WhcNMjUwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NWI2YjZhOS1jODhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsh3SrgtvQOwhpV3yJivvnyw7MB84lZST59kgeu9zxR5tzrXUQF5FWD06+tfK
cDAn1ayCfqQGvIHSFZkm3lEuXdoARpMq8WzJ2ikbwGzWfM12SpJwGTduZS9yAgFT
z6D/rdALQ9/r0pdezCnuJKssohqbXcuMdLgr6DvaBxModMpEQUzsTPyBZeSxR1Rd
zdnojcaxGy6AhFX9Q2IV/GJR0+vFrvVPS825BPEFoo6HtIUNeG8fXXdv2uK/9Ud2
whV/WnjdCzNobKTxfCTvr+9wFdrG5OLVrw4YP9nG5wBjNoydKmbbdIY+ra/GtBWL
lB6PruL/hYB+CVyl1lRj9lCD5QIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFKcHs/Ug
AWKZA/V9p3KnQSjOnGGwMB8GA1UdIwQYMBaAFEvFYpVtB9BvqtySM4i5hmD3KHya
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjAzOS8yNTY3NkRGMDQ1
QkIxMUVBQTY0ODc3MUVDNEY5QUUwMi9TOFZpbFcwSDBHLXEzSkl6aUxtR1lQY29m
Sm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1M4VmlsVzBIMEctcTNKSXppTG1HWVBjb2ZKby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QkYwMzkvMjU2NzZERjA0NUJCMTFFQUE2NDg3NzFFQzRGOUFFMDIvNkQ0OTQ0MDg0
NUJDMTFFQUI1OTFCRDIwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E
HzAdMAwEAgABMAYDBAJnaiAwDQQCAAIwBwMFACQCOUAwDQYJKoZIhvcNAQELBQAD
ggEBAEUp0wlaT2hOsizwn7gzXCsDuVV3NJV8wBvtke1gmC2hCZaelxUn5FB1MjIH
aRYd7QyL04qkPvvFpz9/x++uooyhR2fDDMU56cLFunRwdJILoivQ7opI3qlYyvpq
PJuhKc36qrjGMFSDD8AvnFBHFdhi1yudX6AtsNu2LS5UQnZoHlaHrJ+xiegqqTYS
JFXFqLnJT4r3jqEmLtmJXi9psX53IaMdNPXpZoDd3QpYDsZPuSbiytU7gnvqLsv4
El45R5uG+gMomorOOo8+LHtj+mEEOEcoWR9hOHp3rr8cFxQJNC6yrOPw3NawoMoR
NB6b+3eItHo7opjYph9ElfVcbzo=
-----END CERTIFICATE-----
Generated at Fri Nov 22 22:14:39 2024 by rpki-client on console-ams.rpki-client.org