Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/F15AD62031FA11EE96640F3EC4F9AE02.roa
File:                     F15AD62031FA11EE96640F3EC4F9AE02.roa (raw, json)
Hash identifier:          ZBqZrZzLa2IT8UIY6w09sQHwLL5zrRzqV4vns9/3wIc=
Subject key identifier:   A2:2A:1D:01:D4:BF:3A:02:C6:B0:59:26:05:A8:50:52:5B:88:11:66
Certificate issuer:       /CN=A91C1FCC/serialNumber=08D256D426CA2171FCE817C64523F832A36917BD
Certificate serial:       0998
Authority key identifier: 08:D2:56:D4:26:CA:21:71:FC:E8:17:C6:45:23:F8:32:A3:69:17:BD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNJW1CbKIXH86BfGRSP4MqNpF70.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/F15AD62031FA11EE96640F3EC4F9AE02.roa
Signing time:             Wed 03 Jul 2024 09:44:56 +0000
ROA not before:           Wed 03 Jul 2024 09:44:56 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     149456
IP address blocks:        103.203.45.0/24 maxlen: 24
                          103.203.47.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/CNJW1CbKIXH86BfGRSP4MqNpF70.crl
                          rsync://rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/CNJW1CbKIXH86BfGRSP4MqNpF70.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNJW1CbKIXH86BfGRSP4MqNpF70.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 19:45:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2456 (0x998)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C1FCC/serialNumber=08D256D426CA2171FCE817C64523F832A36917BD
        Validity
            Not Before: Jul  3 09:44:56 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=66851d97-6658
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:fa:63:b7:d9:de:3a:01:06:53:27:f2:2a:ea:
                    92:f0:9d:e4:23:08:32:f2:8b:0d:2f:fe:69:a9:20:
                    ec:11:cf:36:1d:a7:6d:61:d2:29:0f:42:cc:bf:69:
                    ef:95:cb:12:1a:3b:9a:ed:6b:42:dd:a2:c2:da:43:
                    63:06:83:32:22:f4:02:45:9c:c1:ad:19:3d:e0:22:
                    6c:ce:be:97:d3:5a:59:5a:0d:76:94:b1:34:42:25:
                    95:e0:c2:63:7f:03:6e:31:95:ed:db:2b:dd:a2:c7:
                    af:dd:d6:0b:49:c4:f6:8f:5a:e8:55:94:fa:fb:14:
                    24:35:60:18:5c:4d:12:cd:62:ff:0a:c5:1d:ef:39:
                    38:3d:88:b3:1b:fd:aa:4a:05:c6:b0:3b:82:04:d1:
                    b9:76:5e:3f:60:6c:09:bf:d4:c5:1b:89:9f:cc:72:
                    65:c8:0b:8c:90:60:a1:39:84:23:92:8d:03:d3:3f:
                    30:e3:41:61:4b:f3:1d:80:9a:f7:24:b7:9f:03:00:
                    9f:1d:55:6a:43:15:c9:7d:e5:ae:30:08:27:a4:21:
                    f8:80:1a:86:71:27:ba:fb:e8:2f:99:09:7b:3c:2a:
                    0e:47:07:39:13:d9:89:72:3f:be:56:38:e0:4a:4e:
                    2d:e4:f5:7d:0e:ef:57:4e:ef:4f:cd:aa:c7:2d:67:
                    0b:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:2A:1D:01:D4:BF:3A:02:C6:B0:59:26:05:A8:50:52:5B:88:11:66
            X509v3 Authority Key Identifier:
                keyid:08:D2:56:D4:26:CA:21:71:FC:E8:17:C6:45:23:F8:32:A3:69:17:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/CNJW1CbKIXH86BfGRSP4MqNpF70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNJW1CbKIXH86BfGRSP4MqNpF70.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/F15AD62031FA11EE96640F3EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.203.45.0/24
                  103.203.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:fc:75:55:e5:5c:10:bc:c7:ab:6b:11:56:51:c9:3f:54:d0:
         e7:10:74:a1:15:58:2f:00:e9:85:1d:54:5d:2a:64:8e:25:44:
         b4:a0:d6:f4:1e:72:c3:ae:df:f0:ea:ca:a6:e1:9e:17:4d:5c:
         48:d0:fe:cb:c0:c2:c5:08:55:55:08:79:23:ef:83:fc:cc:fa:
         1c:80:17:24:3f:17:ee:29:fc:04:ed:d8:7f:3b:77:f5:69:3e:
         d5:17:8a:f1:15:ff:ca:b1:fc:84:e8:ff:96:d2:6f:90:62:0e:
         e6:3f:6c:0d:a1:d4:44:32:a2:7d:69:3e:c6:80:4a:63:2d:d9:
         75:2e:f4:67:04:f4:5a:1e:f5:fa:58:2f:7d:ee:d0:93:8e:e8:
         a5:96:f1:29:fe:0c:37:ab:c3:27:44:e7:51:52:18:aa:14:5c:
         d9:ce:4a:d1:7f:20:1d:f6:39:13:de:03:d8:1f:ec:ca:f2:15:
         88:d4:5f:ba:06:64:54:74:39:f6:55:7e:2f:2d:a5:15:94:70:
         86:33:f8:66:5f:28:2d:0d:41:55:21:53:7b:fc:92:72:4e:7e:
         09:d9:f0:f0:bd:b6:5e:75:a9:34:cd:dc:d9:54:51:90:8f:37:
         e6:c9:da:f5:b4:d9:d1:a7:88:9c:84:f6:68:7a:04:dc:d8:7c:
         02:49:2a:64
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICCZgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzFGQ0MxMTAvBgNVBAUTKDA4RDI1NkQ0MjZDQTIxNzFGQ0U4MTdDNjQ1MjNGODMy
QTM2OTE3QkQwHhcNMjQwNzAzMDk0NDU2WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02Njg1MWQ5Ny02NjU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3/pjt9neOgEGUyfyKuqS8J3kIwgy8osNL/5pqSDsEc82HadtYdIpD0LMv2nv
lcsSGjua7WtC3aLC2kNjBoMyIvQCRZzBrRk94CJszr6X01pZWg12lLE0QiWV4MJj
fwNuMZXt2yvdosev3dYLScT2j1roVZT6+xQkNWAYXE0SzWL/CsUd7zk4PYizG/2q
SgXGsDuCBNG5dl4/YGwJv9TFG4mfzHJlyAuMkGChOYQjko0D0z8w40FhS/MdgJr3
JLefAwCfHVVqQxXJfeWuMAgnpCH4gBqGcSe6++gvmQl7PCoORwc5E9mJcj++Vjjg
Sk4t5PV9Du9XTu9PzarHLWcLNQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFKIqHQHU
vzoCxrBZJgWoUFJbiBFmMB8GA1UdIwQYMBaAFAjSVtQmyiFx/OgXxkUj+DKjaRe9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMUZDQy9DREJDNTk4Njcz
MDkxMUVBQTg4MjAwMzBDNEY5QUUwMi9DTkpXMUNiS0lYSDg2QmZHUlNQNE1xTnBG
NzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0NOSlcxQ2JLSVhIODZCZkdSU1A0TXFOcEY3MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QzFGQ0MvQ0RCQzU5ODY3MzA5MTFFQUE4ODIwMDMwQzRGOUFFMDIvRjE1QUQ2MjAz
MUZBMTFFRTk2NjQwRjNFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBABnyy0DBABnyy8wDQYJKoZIhvcNAQELBQADggEBAJ78dVXl
XBC8x6trEVZRyT9U0OcQdKEVWC8A6YUdVF0qZI4lRLSg1vQecsOu3/DqyqbhnhdN
XEjQ/svAwsUIVVUIeSPvg/zM+hyAFyQ/F+4p/ATt2H87d/VpPtUXivEV/8qx/ITo
/5bSb5BiDuY/bA2h1EQyon1pPsaASmMt2XUu9GcE9Foe9fpYL33u0JOO6KWW8Sn+
DDerwydE51FSGKoUXNnOStF/IB32ORPeA9gf7MryFYjUX7oGZFR0OfZVfi8tpRWU
cIYz+GZfKC0NQVUhU3v8knJOfgnZ8PC9tl51qTTN3NlUUZCPN+bJ2vW02dGniJyE
9mh6BNzYfAJJKmQ=
-----END CERTIFICATE-----
Generated at Fri Nov 22 21:05:32 2024 by rpki-client on console-fra.rpki-client.org