Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D50A2/EE31D874D02711EEBF5B693CC4F9AE02/7447BEF0928411EFB854A522C4F9AE02.roa
File:                     7447BEF0928411EFB854A522C4F9AE02.roa (raw, json)
Hash identifier:          FahO57/kleWU7XXU2TFFnm9z6kb0GxU9AkbmiTKJzXc=
Subject key identifier:   E1:B8:2B:76:DE:6E:BD:54:23:00:15:96:9A:61:98:54:13:0F:73:C4
Certificate issuer:       /CN=A91D50A2/serialNumber=626109BBECC98BA52E7F399B80962D3AFE5AB2D4
Certificate serial:       88
Authority key identifier: 62:61:09:BB:EC:C9:8B:A5:2E:7F:39:9B:80:96:2D:3A:FE:5A:B2:D4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YmEJu-zJi6UufzmbgJYtOv5astQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D50A2/EE31D874D02711EEBF5B693CC4F9AE02/7447BEF0928411EFB854A522C4F9AE02.roa
Signing time:             Thu 07 Nov 2024 19:45:34 +0000
ROA not before:           Thu 07 Nov 2024 19:45:34 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     135858
IP address blocks:        103.79.116.0/24 maxlen: 24
                          103.144.116.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D50A2/EE31D874D02711EEBF5B693CC4F9AE02/YmEJu-zJi6UufzmbgJYtOv5astQ.crl
                          rsync://rpki.apnic.net/member_repository/A91D50A2/EE31D874D02711EEBF5B693CC4F9AE02/YmEJu-zJi6UufzmbgJYtOv5astQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YmEJu-zJi6UufzmbgJYtOv5astQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 04:38:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 136 (0x88)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D50A2/serialNumber=626109BBECC98BA52E7F399B80962D3AFE5AB2D4
        Validity
            Not Before: Nov  7 19:45:34 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=672d18dd-094a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:8b:9a:16:7f:8f:f7:22:ff:ab:e5:0b:39:60:
                    3e:ca:08:a3:e1:cf:da:84:db:0d:03:8a:1d:19:5d:
                    bd:05:7f:80:2f:df:ea:3a:ab:cd:7a:59:61:1f:a2:
                    9f:12:53:5d:4d:28:9b:be:79:e4:1f:53:7f:52:d8:
                    5b:61:32:12:cc:ea:9b:68:f4:f7:09:ec:79:42:12:
                    d3:9e:a5:3f:f1:3e:f9:43:4d:82:d8:27:3d:b0:6e:
                    61:0e:b1:2f:81:9f:40:50:ea:09:32:8d:b9:97:e9:
                    f3:4b:63:ae:0d:16:63:6f:9c:e4:99:68:e0:e4:60:
                    b1:e2:34:b2:fe:86:35:2e:db:08:b5:e2:b9:17:9b:
                    6f:39:f8:d1:00:4d:54:52:c6:a5:43:b1:85:6f:38:
                    92:8b:2b:e5:f8:89:3f:77:fd:c9:6c:c9:6a:08:51:
                    17:93:dc:f3:08:91:65:34:7c:03:8f:eb:9c:08:dd:
                    5f:2a:f0:8a:74:0a:0f:93:79:06:bd:fa:87:af:06:
                    9b:28:b3:5a:95:89:03:0c:97:69:4d:2e:75:e5:9a:
                    b8:01:d9:97:ff:f9:cc:9a:7a:1d:e6:dd:9a:d3:e2:
                    1d:08:3c:e1:7a:3c:31:09:73:0f:42:0e:46:8d:d6:
                    32:63:45:7b:3d:0a:df:6f:bc:4c:4e:6a:a0:9b:02:
                    47:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:B8:2B:76:DE:6E:BD:54:23:00:15:96:9A:61:98:54:13:0F:73:C4
            X509v3 Authority Key Identifier:
                keyid:62:61:09:BB:EC:C9:8B:A5:2E:7F:39:9B:80:96:2D:3A:FE:5A:B2:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D50A2/EE31D874D02711EEBF5B693CC4F9AE02/YmEJu-zJi6UufzmbgJYtOv5astQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YmEJu-zJi6UufzmbgJYtOv5astQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D50A2/EE31D874D02711EEBF5B693CC4F9AE02/7447BEF0928411EFB854A522C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.79.116.0/24
                  103.144.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c2:70:ff:47:c4:07:f1:8b:ba:89:c1:9a:d0:39:ea:28:2e:5b:
         41:52:3e:03:0a:eb:8b:fb:01:91:1c:2c:02:32:fd:aa:cb:c3:
         37:b7:b9:a3:39:2f:cd:90:94:68:2d:da:10:67:5f:01:37:72:
         9f:14:5f:73:6a:13:2e:15:58:c7:5a:7f:59:ac:30:d6:f7:68:
         be:81:a8:d5:02:19:00:c0:f6:74:f2:47:46:67:5d:66:86:86:
         80:4c:0e:06:ab:b2:cf:6f:33:81:ff:32:7e:f1:f7:07:3c:91:
         dd:4e:ac:ae:7a:a3:1a:ee:7b:6a:81:92:07:65:cc:b9:2e:70:
         6a:2c:75:b4:e0:ca:c8:6c:4a:7e:73:b2:16:d7:2e:8d:35:a2:
         30:0f:8f:a2:89:35:f1:43:38:f3:f8:34:f4:1f:46:eb:4d:ba:
         be:97:c9:01:f0:78:4a:0a:c5:e2:22:77:f2:11:26:fa:91:73:
         23:e4:e1:e2:28:92:ac:2c:8c:21:c6:d3:13:a1:6a:f2:ef:d9:
         de:43:93:86:2b:13:4c:c2:b9:29:65:84:ef:b3:e9:a8:02:5a:
         f9:1f:3c:ee:40:0a:83:ba:cd:c6:7d:a3:c2:97:9b:2e:ed:ab:
         52:b5:36:00:99:e2:79:c8:09:b9:c5:63:8c:bd:42:b8:fd:06:
         93:b2:aa:e5
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICAIgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDUwQTIxMTAvBgNVBAUTKDYyNjEwOUJCRUNDOThCQTUyRTdGMzk5QjgwOTYyRDNB
RkU1QUIyRDQwHhcNMjQxMTA3MTk0NTM0WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzJkMThkZC0wOTRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAy4uaFn+P9yL/q+ULOWA+ygij4c/ahNsNA4odGV29BX+AL9/qOqvNellhH6Kf
ElNdTSibvnnkH1N/UthbYTISzOqbaPT3Cex5QhLTnqU/8T75Q02C2Cc9sG5hDrEv
gZ9AUOoJMo25l+nzS2OuDRZjb5zkmWjg5GCx4jSy/oY1LtsIteK5F5tvOfjRAE1U
UsalQ7GFbziSiyvl+Ik/d/3JbMlqCFEXk9zzCJFlNHwDj+ucCN1fKvCKdAoPk3kG
vfqHrwabKLNalYkDDJdpTS515Zq4AdmX//nMmnod5t2a0+IdCDzhejwxCXMPQg5G
jdYyY0V7PQrfb7xMTmqgmwJHnQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFOG4K3be
br1UIwAVlpphmFQTD3PEMB8GA1UdIwQYMBaAFGJhCbvsyYulLn85m4CWLTr+WrLU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTBBMi9FRTMxRDg3NEQw
MjcxMUVFQkY1QjY5M0NDNEY5QUUwMi9ZbUVKdS16Smk2VXVmem1iZ0pZdE92NWFz
dFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1ltRUp1LXpKaTZVdWZ6bWJnSll0T3Y1YXN0US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RDUwQTIvRUUzMUQ4NzREMDI3MTFFRUJGNUI2OTNDQzRGOUFFMDIvNzQ0N0JFRjA5
Mjg0MTFFRkI4NTRBNTIyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBABnT3QDBABnkHQwDQYJKoZIhvcNAQELBQADggEBAMJw/0fE
B/GLuonBmtA56iguW0FSPgMK64v7AZEcLAIy/arLwze3uaM5L82QlGgt2hBnXwE3
cp8UX3NqEy4VWMdaf1msMNb3aL6BqNUCGQDA9nTyR0ZnXWaGhoBMDgarss9vM4H/
Mn7x9wc8kd1OrK56oxrue2qBkgdlzLkucGosdbTgyshsSn5zshbXLo01ojAPj6KJ
NfFDOPP4NPQfRutNur6XyQHweEoKxeIid/IRJvqRcyPk4eIokqwsjCHG0xOhavLv
2d5Dk4YrE0zCuSllhO+z6agCWvkfPO5ACoO6zcZ9o8KXmy7tq1K1NgCZ4nnICbnF
Y4y9Qrj9BpOyquU=
-----END CERTIFICATE-----
Generated at Thu Nov 21 05:37:17 2024 by rpki-client on console-ams.rpki-client.org