Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C162D/6A0CFE901C1411EB82C09A62C4F9AE02/460D934A1C1611EB8BD35065C4F9AE02.roa
File:                     460D934A1C1611EB8BD35065C4F9AE02.roa (raw, json)
Hash identifier:          lRmEF7OdQxrawwnYP3zjW/dSXGqk4ZIrvP4DGro+L9M=
Subject key identifier:   49:4F:AF:C2:03:B4:D0:3D:87:73:8A:D8:40:5C:54:B5:C6:41:C7:6F
Certificate issuer:       /CN=A91C162D/serialNumber=7D78A8870B1E5573D633C9A7B0040A2EE405D951
Certificate serial:       06F1
Authority key identifier: 7D:78:A8:87:0B:1E:55:73:D6:33:C9:A7:B0:04:0A:2E:E4:05:D9:51
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fXiohwseVXPWM8mnsAQKLuQF2VE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C162D/6A0CFE901C1411EB82C09A62C4F9AE02/460D934A1C1611EB8BD35065C4F9AE02.roa
Signing time:             Mon 30 Sep 2024 22:11:19 +0000
ROA not before:           Mon 30 Sep 2024 22:11:19 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     141185
IP address blocks:        103.155.252.0/24 maxlen: 24
                          103.155.253.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C162D/6A0CFE901C1411EB82C09A62C4F9AE02/fXiohwseVXPWM8mnsAQKLuQF2VE.crl
                          rsync://rpki.apnic.net/member_repository/A91C162D/6A0CFE901C1411EB82C09A62C4F9AE02/fXiohwseVXPWM8mnsAQKLuQF2VE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fXiohwseVXPWM8mnsAQKLuQF2VE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1777 (0x6f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C162D/serialNumber=7D78A8870B1E5573D633C9A7B0040A2EE405D951
        Validity
            Not Before: Sep 30 22:11:19 2024 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=66fb2206-8d1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:5f:fd:17:a2:a6:c4:6b:da:3b:cb:f4:b4:3b:
                    ae:af:d0:73:90:34:bd:63:e9:d4:65:25:6e:d3:ac:
                    b2:64:ef:b6:1a:e1:37:17:c3:d3:6d:37:38:2e:7f:
                    72:3d:b8:4e:5a:79:c2:05:bf:2c:11:70:08:57:e4:
                    b8:25:f8:79:c5:98:32:74:6e:9b:92:2a:9e:0d:74:
                    ff:47:b9:66:5c:17:85:f4:79:30:f2:3b:15:e0:73:
                    7a:f0:96:4b:89:50:72:99:4f:c8:7d:7a:d9:4d:50:
                    d3:11:6c:2b:0a:5c:6f:d1:42:c3:af:36:b8:86:65:
                    74:f4:cc:d2:09:90:e5:73:32:70:de:43:ce:58:67:
                    cd:22:6a:3b:08:e1:09:2a:b8:63:c4:96:be:10:e9:
                    d3:5b:32:2b:af:57:4c:13:43:55:e3:1f:ea:62:ed:
                    08:7c:c0:9e:7d:0a:e6:65:49:d6:d7:4b:c6:9a:34:
                    cf:ae:1a:0a:57:67:a3:fc:82:34:f6:6f:12:44:d1:
                    79:af:69:87:08:f1:b7:4d:93:bc:6c:d7:a5:41:98:
                    7c:1f:9e:83:fb:4a:b8:df:c9:56:4a:b5:73:02:b1:
                    3f:06:9d:be:46:bc:7c:b9:5e:3d:d6:66:81:f6:87:
                    60:1d:7d:e3:8e:b0:56:a8:50:72:e9:0b:de:d4:19:
                    d9:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:4F:AF:C2:03:B4:D0:3D:87:73:8A:D8:40:5C:54:B5:C6:41:C7:6F
            X509v3 Authority Key Identifier:
                keyid:7D:78:A8:87:0B:1E:55:73:D6:33:C9:A7:B0:04:0A:2E:E4:05:D9:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C162D/6A0CFE901C1411EB82C09A62C4F9AE02/fXiohwseVXPWM8mnsAQKLuQF2VE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fXiohwseVXPWM8mnsAQKLuQF2VE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C162D/6A0CFE901C1411EB82C09A62C4F9AE02/460D934A1C1611EB8BD35065C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.155.252.0/23

    Signature Algorithm: sha256WithRSAEncryption
         80:e2:f2:ee:61:85:5a:3b:9d:94:ff:ad:e3:91:31:df:a0:41:
         12:92:97:d3:53:52:ac:0d:bc:58:5c:8e:32:90:0b:c2:cf:5c:
         db:16:de:14:2f:1f:63:12:fb:d2:ac:6f:e3:7e:66:36:4e:60:
         b6:81:cb:39:f8:35:8c:47:f1:6a:43:f9:db:12:60:df:a1:29:
         91:1b:70:8b:81:2c:70:54:8b:7b:ac:2d:b7:ca:33:16:3f:f7:
         e7:33:63:4c:24:5b:7c:48:5b:28:71:2c:58:b2:da:3e:17:a7:
         73:2c:bf:21:db:51:de:4e:61:e4:58:0c:b4:c2:f9:21:da:61:
         1d:e8:c5:90:fb:23:c7:aa:53:46:63:d4:64:f6:1b:8a:2a:99:
         2a:4b:12:9d:06:fa:b6:1f:47:0f:10:8a:f8:ad:6b:4e:53:c0:
         7b:4b:27:09:2d:81:e1:c6:ad:29:4d:d2:bd:09:f1:94:f0:0c:
         27:b0:32:e2:5e:fc:a4:0a:d5:a2:c4:0f:59:9b:73:e9:8d:01:
         cd:f8:6f:63:fe:f3:1f:eb:33:46:01:46:26:2e:73:6f:f8:aa:
         38:f0:e0:2f:9f:30:c1:f4:ef:f6:82:54:2d:32:db:2f:51:d3:
         cc:54:45:44:f9:1e:25:0f:44:5a:86:92:b1:1e:16:35:b2:66:
         6f:70:c0:35
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBvEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzE2MkQxMTAvBgNVBAUTKDdENzhBODg3MEIxRTU1NzNENjMzQzlBN0IwMDQwQTJF
RTQwNUQ5NTEwHhcNMjQwOTMwMjIxMTE5WhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmZiMjIwNi04ZDFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2V/9F6KmxGvaO8v0tDuur9BzkDS9Y+nUZSVu06yyZO+2GuE3F8PTbTc4Ln9y
PbhOWnnCBb8sEXAIV+S4Jfh5xZgydG6bkiqeDXT/R7lmXBeF9Hkw8jsV4HN68JZL
iVBymU/IfXrZTVDTEWwrClxv0ULDrza4hmV09MzSCZDlczJw3kPOWGfNImo7COEJ
KrhjxJa+EOnTWzIrr1dME0NV4x/qYu0IfMCefQrmZUnW10vGmjTPrhoKV2ej/II0
9m8SRNF5r2mHCPG3TZO8bNelQZh8H56D+0q438lWSrVzArE/Bp2+Rrx8uV491maB
9odgHX3jjrBWqFBy6Qve1BnZPwIDAQABo4IClTCCApEwHQYDVR0OBBYEFElPr8ID
tNA9h3OK2EBcVLXGQcdvMB8GA1UdIwQYMBaAFH14qIcLHlVz1jPJp7AECi7kBdlR
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTYyRC82QTBDRkU5MDFD
MTQxMUVCODJDMDlBNjJDNEY5QUUwMi9mWGlvaHdzZVZYUFdNOG1uc0FRS0x1UUYy
VkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2ZYaW9od3NlVlhQV004bW5zQVFLTHVRRjJWRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QzE2MkQvNkEwQ0ZFOTAxQzE0MTFFQjgyQzA5QTYyQzRGOUFFMDIvNDYwRDkzNEEx
QzE2MTFFQjhCRDM1MDY1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnm/wwDQYJKoZIhvcNAQELBQADggEBAIDi8u5hhVo7nZT/
reORMd+gQRKSl9NTUqwNvFhcjjKQC8LPXNsW3hQvH2MS+9Ksb+N+ZjZOYLaByzn4
NYxH8WpD+dsSYN+hKZEbcIuBLHBUi3usLbfKMxY/9+czY0wkW3xIWyhxLFiy2j4X
p3MsvyHbUd5OYeRYDLTC+SHaYR3oxZD7I8eqU0Zj1GT2G4oqmSpLEp0G+rYfRw8Q
ivita05TwHtLJwktgeHGrSlN0r0J8ZTwDCewMuJe/KQK1aLED1mbc+mNAc34b2P+
8x/rM0YBRiYuc2/4qjjw4C+fMMH07/aCVC0y2y9R08xURUT5HiUPRFqGkrEeFjWy
Zm9wwDU=
-----END CERTIFICATE-----
Generated at Sat Nov 23 00:08:49 2024 by rpki-client on console-ams.rpki-client.org