Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0FCC/F5C42408A41F11EABDC2F531C4F9AE02/A778AAF6A42111EAB3108934C4F9AE02.roa
File:                     A778AAF6A42111EAB3108934C4F9AE02.roa (raw, json)
Hash identifier:          y624BzVkuEiikHslOtq6hgxDkVhcX1eWu3QlNuMQNRA=
Subject key identifier:   41:5A:5A:73:7C:66:F9:57:1E:FA:91:94:85:CD:CA:01:69:7D:6F:7E
Certificate issuer:       /CN=A91C0FCC/serialNumber=F92ADB30DB6C0F9CE980B5DB977145F8C19C824B
Certificate serial:       0859
Authority key identifier: F9:2A:DB:30:DB:6C:0F:9C:E9:80:B5:DB:97:71:45:F8:C1:9C:82:4B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-SrbMNtsD5zpgLXbl3FF-MGcgks.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C0FCC/F5C42408A41F11EABDC2F531C4F9AE02/A778AAF6A42111EAB3108934C4F9AE02.roa
Signing time:             Sat 18 May 2024 22:00:43 +0000
ROA not before:           Sat 18 May 2024 22:00:43 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     140631
IP address blocks:        103.150.74.0/23 maxlen: 23
                          103.150.74.0/24 maxlen: 24
                          103.150.75.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C0FCC/F5C42408A41F11EABDC2F531C4F9AE02/-SrbMNtsD5zpgLXbl3FF-MGcgks.crl
                          rsync://rpki.apnic.net/member_repository/A91C0FCC/F5C42408A41F11EABDC2F531C4F9AE02/-SrbMNtsD5zpgLXbl3FF-MGcgks.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-SrbMNtsD5zpgLXbl3FF-MGcgks.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:14:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2137 (0x859)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C0FCC/serialNumber=F92ADB30DB6C0F9CE980B5DB977145F8C19C824B
        Validity
            Not Before: May 18 22:00:43 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=6649250b-df1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:98:24:13:14:f1:1c:78:60:a4:78:3e:a2:2f:
                    05:c4:d9:a8:8f:a9:ae:f0:78:c3:86:0e:ef:3a:a3:
                    a8:c7:be:47:e2:5d:7d:70:3a:e2:44:0e:ef:83:3a:
                    35:71:a1:7f:1f:98:0a:40:4b:0c:7a:11:e1:96:0c:
                    90:a5:25:08:39:a6:fe:0f:33:97:26:38:c3:72:f0:
                    05:12:2e:b3:96:38:37:1e:ee:d7:e3:25:ba:10:fa:
                    d9:3d:f3:9f:7b:0d:fd:f6:5c:9c:b3:8b:ea:0d:28:
                    a7:a3:2f:14:7f:3e:d4:68:97:c4:ec:df:ca:c7:e4:
                    f1:1b:0c:53:84:41:7f:d2:36:ef:78:33:4f:58:c0:
                    77:05:15:42:39:1c:e4:14:d3:b9:2c:15:ec:17:52:
                    ff:c4:ce:23:7d:75:d6:86:ee:24:f4:a5:b1:8c:da:
                    d7:e1:14:5a:d6:a0:51:a1:31:da:f4:4e:52:56:a5:
                    f0:ae:d1:2f:c0:ae:cf:e9:5a:86:e2:27:c4:27:eb:
                    e8:e2:68:6b:8a:03:82:b2:1a:3a:44:46:1e:c2:10:
                    69:b1:57:e4:43:dd:3d:47:70:7a:e9:d8:21:ce:40:
                    90:b4:4d:70:a0:ec:8a:fc:64:33:a7:35:81:fe:77:
                    fc:df:89:b1:11:34:c7:c8:68:b9:10:58:92:05:6c:
                    f2:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:5A:5A:73:7C:66:F9:57:1E:FA:91:94:85:CD:CA:01:69:7D:6F:7E
            X509v3 Authority Key Identifier:
                keyid:F9:2A:DB:30:DB:6C:0F:9C:E9:80:B5:DB:97:71:45:F8:C1:9C:82:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C0FCC/F5C42408A41F11EABDC2F531C4F9AE02/-SrbMNtsD5zpgLXbl3FF-MGcgks.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-SrbMNtsD5zpgLXbl3FF-MGcgks.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0FCC/F5C42408A41F11EABDC2F531C4F9AE02/A778AAF6A42111EAB3108934C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.150.74.0/23

    Signature Algorithm: sha256WithRSAEncryption
         57:f0:30:22:f0:4a:eb:02:a5:2c:c4:77:55:2b:a0:d0:e9:4c:
         af:fe:0b:83:6c:ce:d9:9b:9d:ea:50:16:ce:a9:17:36:71:29:
         47:c3:fd:f0:19:a0:37:49:41:02:dd:f5:88:24:60:56:f8:ad:
         5f:b4:39:75:23:56:12:80:0e:d4:12:9f:63:d2:16:f4:1f:64:
         6e:83:89:78:d2:5f:11:e2:37:74:0e:8e:9a:8f:e5:97:40:ae:
         36:7c:50:a8:ec:4b:eb:88:bb:31:33:05:0d:38:6d:68:c0:9f:
         a5:b5:3e:77:66:dd:65:3f:ff:18:46:c5:49:7a:fc:1d:74:6f:
         74:a1:53:10:b2:6f:b8:ce:bc:37:ab:9c:22:3d:9d:a0:b2:1e:
         32:1d:34:f0:70:f3:fc:9f:20:67:fb:66:a5:10:b7:bd:2a:40:
         43:66:9c:8b:3c:eb:c2:bb:90:b4:89:69:1e:b8:e1:c1:88:54:
         cd:4b:22:17:1d:6b:1b:a4:4f:e3:56:59:8f:5e:c5:93:de:46:
         b0:e4:11:3e:07:45:14:b2:cf:ba:01:d8:be:10:a4:58:61:0e:
         bf:c9:0e:9f:ac:d7:2b:49:be:d3:86:7c:53:99:e8:19:b1:2b:
         00:10:b5:3e:71:f8:36:19:d0:26:b5:3c:a7:bd:28:f1:c2:ed:
         00:1e:06:51
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICCFkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzBGQ0MxMTAvBgNVBAUTKEY5MkFEQjMwREI2QzBGOUNFOTgwQjVEQjk3NzE0NUY4
QzE5QzgyNEIwHhcNMjQwNTE4MjIwMDQzWhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NjQ5MjUwYi1kZjFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0ZgkExTxHHhgpHg+oi8FxNmoj6mu8HjDhg7vOqOox75H4l19cDriRA7vgzo1
caF/H5gKQEsMehHhlgyQpSUIOab+DzOXJjjDcvAFEi6zljg3Hu7X4yW6EPrZPfOf
ew399lycs4vqDSinoy8Ufz7UaJfE7N/Kx+TxGwxThEF/0jbveDNPWMB3BRVCORzk
FNO5LBXsF1L/xM4jfXXWhu4k9KWxjNrX4RRa1qBRoTHa9E5SVqXwrtEvwK7P6VqG
4ifEJ+vo4mhrigOCsho6REYewhBpsVfkQ909R3B66dghzkCQtE1woOyK/GQzpzWB
/nf834mxETTHyGi5EFiSBWzyawIDAQABo4IClTCCApEwHQYDVR0OBBYEFEFaWnN8
ZvlXHvqRlIXNygFpfW9+MB8GA1UdIwQYMBaAFPkq2zDbbA+c6YC125dxRfjBnIJL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEZDQy9GNUM0MjQwOEE0
MUYxMUVBQkRDMkY1MzFDNEY5QUUwMi8tU3JiTU50c0Q1enBnTFhibDNGRi1NR2Nn
a3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLy1TcmJNTnRzRDV6cGdMWGJsM0ZGLU1HY2drcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QzBGQ0MvRjVDNDI0MDhBNDFGMTFFQUJEQzJGNTMxQzRGOUFFMDIvQTc3OEFBRjZB
NDIxMTFFQUIzMTA4OTM0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnlkowDQYJKoZIhvcNAQELBQADggEBAFfwMCLwSusCpSzE
d1UroNDpTK/+C4NsztmbnepQFs6pFzZxKUfD/fAZoDdJQQLd9YgkYFb4rV+0OXUj
VhKADtQSn2PSFvQfZG6DiXjSXxHiN3QOjpqP5ZdArjZ8UKjsS+uIuzEzBQ04bWjA
n6W1Pndm3WU//xhGxUl6/B10b3ShUxCyb7jOvDernCI9naCyHjIdNPBw8/yfIGf7
ZqUQt70qQENmnIs868K7kLSJaR644cGIVM1LIhcdaxukT+NWWY9exZPeRrDkET4H
RRSyz7oB2L4QpFhhDr/JDp+s1ytJvtOGfFOZ6BmxKwAQtT5x+DYZ0Ca1PKe9KPHC
7QAeBlE=
-----END CERTIFICATE-----
Generated at Fri Nov 22 22:14:39 2024 by rpki-client on console-ams.rpki-client.org