Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D025A/D5EF1A9030AD11EC95B15D18C4F9AE02/4B95A58630B111ECAC3FE61DC4F9AE02.roa
File:                     4B95A58630B111ECAC3FE61DC4F9AE02.roa (raw, json)
Hash identifier:          Jk80jeO05hd8HdpNBJKbydf23WQjdBY/wJrAaPYnYxI=
Subject key identifier:   3C:AB:28:E1:9D:03:EA:5D:8A:89:A9:F9:0E:23:1E:11:CF:E2:57:73
Certificate issuer:       /CN=A91D025A/serialNumber=734090EFC37983FD175BE02F4949668A21437221
Certificate serial:       0423
Authority key identifier: 73:40:90:EF:C3:79:83:FD:17:5B:E0:2F:49:49:66:8A:21:43:72:21
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c0CQ78N5g_0XW-AvSUlmiiFDciE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D025A/D5EF1A9030AD11EC95B15D18C4F9AE02/4B95A58630B111ECAC3FE61DC4F9AE02.roa
Signing time:             Sun 11 Aug 2024 00:51:57 +0000
ROA not before:           Sun 11 Aug 2024 00:51:57 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     142575
IP address blocks:        103.174.125.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D025A/D5EF1A9030AD11EC95B15D18C4F9AE02/c0CQ78N5g_0XW-AvSUlmiiFDciE.crl
                          rsync://rpki.apnic.net/member_repository/A91D025A/D5EF1A9030AD11EC95B15D18C4F9AE02/c0CQ78N5g_0XW-AvSUlmiiFDciE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c0CQ78N5g_0XW-AvSUlmiiFDciE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1059 (0x423)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D025A/serialNumber=734090EFC37983FD175BE02F4949668A21437221
        Validity
            Not Before: Aug 11 00:51:57 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=66b80b2d-8030
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:7e:0c:26:04:89:d0:12:4b:e9:c2:9a:df:6d:
                    89:b7:01:0d:46:63:88:7b:e7:3c:17:12:93:03:b1:
                    e5:11:5e:2b:e5:99:1e:ec:00:e1:e8:54:80:31:80:
                    7e:6a:6f:02:54:96:32:5f:04:2b:d8:3b:42:6d:d5:
                    7e:69:49:87:f7:25:03:15:26:ac:67:15:26:78:67:
                    c6:b4:e1:ff:82:81:91:3b:62:56:85:fe:96:1f:ba:
                    d9:19:e9:94:69:3d:20:9c:ee:0d:dc:a1:73:69:28:
                    40:80:f6:77:cd:e4:f1:0a:b4:a4:9e:8d:39:6b:31:
                    e5:c2:dc:e3:94:1c:94:71:e0:8c:1d:ca:01:8a:97:
                    5f:34:59:81:2d:e9:11:da:01:8c:5a:d8:bb:66:0e:
                    8e:b9:c2:22:43:22:88:0d:fd:11:9f:82:31:c2:bd:
                    ea:e3:c7:6b:6a:bc:5a:5e:33:76:18:ad:0e:3f:1a:
                    17:82:0c:71:a8:d4:d4:7d:31:12:af:71:28:f9:f6:
                    f7:c9:29:83:bb:f3:d0:72:07:a0:1a:f0:e3:61:3f:
                    60:1b:3c:7d:22:8e:3f:76:b9:9a:84:65:d2:36:d5:
                    5c:ec:39:5c:14:8c:16:98:ee:fa:56:f2:05:42:45:
                    eb:5c:8f:37:83:46:a9:df:fe:8e:70:16:8d:4f:ad:
                    4b:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:AB:28:E1:9D:03:EA:5D:8A:89:A9:F9:0E:23:1E:11:CF:E2:57:73
            X509v3 Authority Key Identifier:
                keyid:73:40:90:EF:C3:79:83:FD:17:5B:E0:2F:49:49:66:8A:21:43:72:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D025A/D5EF1A9030AD11EC95B15D18C4F9AE02/c0CQ78N5g_0XW-AvSUlmiiFDciE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c0CQ78N5g_0XW-AvSUlmiiFDciE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D025A/D5EF1A9030AD11EC95B15D18C4F9AE02/4B95A58630B111ECAC3FE61DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.174.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:db:fc:13:f3:f7:26:01:7a:32:7a:fc:a2:96:9b:12:2f:f7:
         59:b0:54:75:8f:76:0a:cb:ab:4a:8e:e6:06:d3:d0:56:69:45:
         51:d1:2a:67:60:5e:85:c8:6b:9f:c5:01:9c:81:d5:94:46:0e:
         6d:45:64:17:49:d0:77:6a:30:6a:b4:86:09:e2:78:a7:be:e0:
         3b:2f:df:bf:a4:c8:e6:ba:76:41:7b:a4:67:54:3a:6d:60:cf:
         24:00:35:94:62:5c:16:84:33:cd:8f:1f:f1:b5:fe:7b:a7:5a:
         37:d1:08:eb:0d:54:3b:6a:b4:92:0d:25:56:83:85:cd:91:cb:
         21:54:63:a0:96:19:48:4a:0a:80:f1:ff:9b:37:6d:67:57:bb:
         03:ee:42:34:00:88:0b:0e:e8:99:75:c3:f5:90:3f:61:e6:86:
         24:2f:2f:8b:a9:f9:e2:24:0f:e1:82:0e:05:d7:35:d8:71:f3:
         d0:1a:26:5f:cb:d9:53:fb:44:ac:f6:8c:a2:9c:9f:b4:83:39:
         6b:33:45:78:fc:8f:df:06:bc:9a:c1:4a:ef:65:6f:1a:fb:63:
         7d:a0:2f:74:2d:9b:26:1f:41:b3:43:49:a3:61:8f:97:cc:fa:
         39:a8:eb:6a:c4:22:d1:7e:b4:70:df:d8:e5:8a:08:1e:82:ae:
         04:f2:2e:08
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBCMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDAyNUExMTAvBgNVBAUTKDczNDA5MEVGQzM3OTgzRkQxNzVCRTAyRjQ5NDk2NjhB
MjE0MzcyMjEwHhcNMjQwODExMDA1MTU3WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmI4MGIyZC04MDMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtX4MJgSJ0BJL6cKa322JtwENRmOIe+c8FxKTA7HlEV4r5Zke7ADh6FSAMYB+
am8CVJYyXwQr2DtCbdV+aUmH9yUDFSasZxUmeGfGtOH/goGRO2JWhf6WH7rZGemU
aT0gnO4N3KFzaShAgPZ3zeTxCrSkno05azHlwtzjlByUceCMHcoBipdfNFmBLekR
2gGMWti7Zg6OucIiQyKIDf0Rn4Ixwr3q48drarxaXjN2GK0OPxoXggxxqNTUfTES
r3Eo+fb3ySmDu/PQcgegGvDjYT9gGzx9Io4/drmahGXSNtVc7DlcFIwWmO76VvIF
QkXrXI83g0ap3/6OcBaNT61LMwIDAQABo4IClTCCApEwHQYDVR0OBBYEFDyrKOGd
A+pdiomp+Q4jHhHP4ldzMB8GA1UdIwQYMBaAFHNAkO/DeYP9F1vgL0lJZoohQ3Ih
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMDI1QS9ENUVGMUE5MDMw
QUQxMUVDOTVCMTVEMThDNEY5QUUwMi9jMENRNzhONWdfMFhXLUF2U1VsbWlpRkRj
aUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2MwQ1E3OE41Z18wWFctQXZTVWxtaWlGRGNpRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RDAyNUEvRDVFRjFBOTAzMEFEMTFFQzk1QjE1RDE4QzRGOUFFMDIvNEI5NUE1ODYz
MEIxMTFFQ0FDM0ZFNjFEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnrn0wDQYJKoZIhvcNAQELBQADggEBAC7b/BPz9yYBejJ6
/KKWmxIv91mwVHWPdgrLq0qO5gbT0FZpRVHRKmdgXoXIa5/FAZyB1ZRGDm1FZBdJ
0HdqMGq0hgnieKe+4Dsv37+kyOa6dkF7pGdUOm1gzyQANZRiXBaEM82PH/G1/nun
WjfRCOsNVDtqtJINJVaDhc2RyyFUY6CWGUhKCoDx/5s3bWdXuwPuQjQAiAsO6Jl1
w/WQP2HmhiQvL4up+eIkD+GCDgXXNdhx89AaJl/L2VP7RKz2jKKcn7SDOWszRXj8
j98GvJrBSu9lbxr7Y32gL3QtmyYfQbNDSaNhj5fM+jmo62rEItF+tHDf2OWKCB6C
rgTyLgg=
-----END CERTIFICATE-----
Generated at Sat Nov 23 01:27:28 2024 by rpki-client on console-ams.rpki-client.org