Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5A9F/021A960CF67811E9B5209625C4F9AE02/498956B8FFC411EEB2369013C4F9AE02.roa
File:                     498956B8FFC411EEB2369013C4F9AE02.roa (raw, json)
Hash identifier:          Ly9hpQTLhULkeXXO/f2nnDPPqs2A3147ewj8jXTvYPQ=
Subject key identifier:   E2:FE:F8:D2:4C:E6:7B:C4:BD:4A:E9:19:71:E4:77:A0:FB:D8:6F:A1
Certificate issuer:       /CN=A91C5A9F/serialNumber=6BEAC097B578F17C9D7119777B3F5114FBE0971B
Certificate serial:       0BD6
Authority key identifier: 6B:EA:C0:97:B5:78:F1:7C:9D:71:19:77:7B:3F:51:14:FB:E0:97:1B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a-rAl7V48XydcRl3ez9RFPvglxs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C5A9F/021A960CF67811E9B5209625C4F9AE02/498956B8FFC411EEB2369013C4F9AE02.roa
Signing time:             Sun 21 Apr 2024 09:48:21 +0000
ROA not before:           Sun 21 Apr 2024 09:48:21 +0000
ROA not after:            Sat 31 Aug 2024 00:00:00 +0000
asID:                     139282
IP address blocks:        103.140.205.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C5A9F/021A960CF67811E9B5209625C4F9AE02/a-rAl7V48XydcRl3ez9RFPvglxs.crl
                          rsync://rpki.apnic.net/member_repository/A91C5A9F/021A960CF67811E9B5209625C4F9AE02/a-rAl7V48XydcRl3ez9RFPvglxs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a-rAl7V48XydcRl3ez9RFPvglxs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 May 2024 19:03:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3030 (0xbd6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C5A9F/serialNumber=6BEAC097B578F17C9D7119777B3F5114FBE0971B
        Validity
            Not Before: Apr 21 09:48:21 2024 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=6624e0e5-645b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:95:ae:49:6e:0e:a1:9b:cb:ac:73:fb:46:48:
                    e4:3d:af:c0:10:8a:d7:32:81:95:79:f7:85:b2:e5:
                    3b:68:81:c8:d3:5c:16:d0:84:82:f7:94:d2:ba:2f:
                    37:d0:80:7e:94:d7:00:7a:11:5a:79:0f:ab:c8:3c:
                    6b:56:19:a0:d6:cd:57:1b:f4:68:b1:02:a0:89:b4:
                    c7:96:2c:ef:78:98:df:3d:9d:10:1b:aa:44:1b:5c:
                    46:2c:72:ae:ec:b3:aa:88:af:42:fd:9c:16:38:fb:
                    6b:be:43:79:64:42:1a:15:07:e3:b5:a7:fe:c2:73:
                    f3:0f:68:0f:e8:7c:ab:e9:95:1b:26:fa:94:c4:ad:
                    a8:d9:10:41:a9:5f:bb:1b:cc:2c:f6:c0:96:15:40:
                    2a:78:1e:5c:11:de:99:38:47:7e:73:1e:87:4e:48:
                    ab:ae:fa:f7:a6:e2:e6:72:96:b5:37:c9:3b:75:f7:
                    98:2a:5c:5a:98:1e:a3:05:52:b1:89:7a:5e:9c:ca:
                    7c:7d:3f:2d:19:bc:77:bc:a1:13:7c:49:46:cb:9d:
                    f3:dd:4f:b5:e9:c4:30:77:8e:f4:bc:a6:bb:a1:a6:
                    5f:a4:36:9e:11:d8:37:c5:de:a3:1b:3d:2d:33:72:
                    78:61:45:c8:dc:58:c1:37:cc:d8:33:b7:5b:cb:dd:
                    9e:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:FE:F8:D2:4C:E6:7B:C4:BD:4A:E9:19:71:E4:77:A0:FB:D8:6F:A1
            X509v3 Authority Key Identifier:
                keyid:6B:EA:C0:97:B5:78:F1:7C:9D:71:19:77:7B:3F:51:14:FB:E0:97:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C5A9F/021A960CF67811E9B5209625C4F9AE02/a-rAl7V48XydcRl3ez9RFPvglxs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a-rAl7V48XydcRl3ez9RFPvglxs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5A9F/021A960CF67811E9B5209625C4F9AE02/498956B8FFC411EEB2369013C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.140.205.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:6b:9a:78:1b:9c:4e:c1:de:7f:7e:c8:6c:25:ae:88:c3:c6:
         16:77:75:5b:26:15:d7:ff:f4:54:71:81:35:ff:c7:f6:5d:2f:
         53:35:dd:df:42:f3:ba:13:7e:b0:61:57:b0:79:27:7e:80:de:
         8e:ff:d4:c9:21:f9:d8:d3:bc:59:74:92:8f:20:6e:3f:1d:f4:
         46:e8:52:dc:27:4a:78:c1:40:97:c5:e4:30:fa:7e:0a:14:8e:
         57:e8:44:77:a3:4d:03:4d:44:0e:c1:80:8c:fa:79:55:7f:1a:
         d3:cc:0c:75:df:d9:6d:c3:63:08:e0:68:11:d9:aa:75:14:ca:
         70:fb:3e:52:2c:90:8e:34:2b:53:8e:14:1c:c5:01:a8:bc:ce:
         d0:0f:95:11:31:cd:e7:84:ac:1d:3a:63:bc:3a:0a:a3:2c:03:
         0e:17:c4:9e:2d:ce:e4:49:d6:dd:a9:a3:39:cf:f2:34:f8:73:
         1b:98:6b:44:ce:43:91:a8:da:da:1b:a6:2d:29:e7:2e:3d:e5:
         41:0f:c5:89:06:57:55:4c:d8:be:78:6b:ff:f7:85:06:d5:e6:
         c7:7b:2c:97:3b:5a:f7:db:73:94:68:6d:44:28:35:e6:8a:e9:
         ce:42:34:8f:b7:ca:ea:e5:38:e5:e7:ff:5f:92:dd:79:29:fb:
         24:94:da:9e
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICC9YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzVBOUYxMTAvBgNVBAUTKDZCRUFDMDk3QjU3OEYxN0M5RDcxMTk3NzdCM0Y1MTE0
RkJFMDk3MUIwHhcNMjQwNDIxMDk0ODIxWhcNMjQwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NjI0ZTBlNS02NDViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvZWuSW4OoZvLrHP7RkjkPa/AEIrXMoGVefeFsuU7aIHI01wW0ISC95TSui83
0IB+lNcAehFaeQ+ryDxrVhmg1s1XG/RosQKgibTHlizveJjfPZ0QG6pEG1xGLHKu
7LOqiK9C/ZwWOPtrvkN5ZEIaFQfjtaf+wnPzD2gP6Hyr6ZUbJvqUxK2o2RBBqV+7
G8ws9sCWFUAqeB5cEd6ZOEd+cx6HTkirrvr3puLmcpa1N8k7dfeYKlxamB6jBVKx
iXpenMp8fT8tGbx3vKETfElGy53z3U+16cQwd470vKa7oaZfpDaeEdg3xd6jGz0t
M3J4YUXI3FjBN8zYM7dby92elQIDAQABo4IClTCCApEwHQYDVR0OBBYEFOL++NJM
5nvEvUrpGXHkd6D72G+hMB8GA1UdIwQYMBaAFGvqwJe1ePF8nXEZd3s/URT74Jcb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNUE5Ri8wMjFBOTYwQ0Y2
NzgxMUU5QjUyMDk2MjVDNEY5QUUwMi9hLXJBbDdWNDhYeWRjUmwzZXo5UkZQdmds
eHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2EtckFsN1Y0OFh5ZGNSbDNlejlSRlB2Z2x4cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QzVBOUYvMDIxQTk2MENGNjc4MTFFOUI1MjA5NjI1QzRGOUFFMDIvNDk4OTU2QjhG
RkM0MTFFRUIyMzY5MDEzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnjM0wDQYJKoZIhvcNAQELBQADggEBABNrmngbnE7B3n9+
yGwlrojDxhZ3dVsmFdf/9FRxgTX/x/ZdL1M13d9C87oTfrBhV7B5J36A3o7/1Mkh
+djTvFl0ko8gbj8d9EboUtwnSnjBQJfF5DD6fgoUjlfoRHejTQNNRA7BgIz6eVV/
GtPMDHXf2W3DYwjgaBHZqnUUynD7PlIskI40K1OOFBzFAai8ztAPlRExzeeErB06
Y7w6CqMsAw4XxJ4tzuRJ1t2poznP8jT4cxuYa0TOQ5Go2tobpi0p5y495UEPxYkG
V1VM2L54a//3hQbV5sd7LJc7Wvfbc5RobUQoNeaK6c5CNI+3yurlOOXn/1+S3Xkp
+ySU2p4=
-----END CERTIFICATE-----
Generated at Thu May 16 19:50:00 2024 by rpki-client on console-fra.rpki-client.org