Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC75C/ACAC39BE687111EC8BDB346BC4F9AE02/2CB0D29E211411EE82DE6110C4F9AE02.roa
File:                     2CB0D29E211411EE82DE6110C4F9AE02.roa (raw, json)
Hash identifier:          xR++HKx2/CX4Nmho6j8S0iYBmzjpwSdyTju+T62AQfw=
Subject key identifier:   C8:F3:BE:AF:C3:6B:B8:8C:E6:C5:70:E7:2D:C3:D9:F3:43:F1:05:28
Certificate issuer:       /CN=A91DC75C/serialNumber=A536A54DB41E441DE74C33F6F736C5AD7A6685C6
Certificate serial:       02EA
Authority key identifier: A5:36:A5:4D:B4:1E:44:1D:E7:4C:33:F6:F7:36:C5:AD:7A:66:85:C6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pTalTbQeRB3nTDP29zbFrXpmhcY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DC75C/ACAC39BE687111EC8BDB346BC4F9AE02/2CB0D29E211411EE82DE6110C4F9AE02.roa
Signing time:             Sat 23 Sep 2023 01:43:15 +0000
ROA not before:           Sat 23 Sep 2023 01:43:15 +0000
ROA not after:            Sun 01 Dec 2024 00:00:00 +0000
asID:                     151415
IP address blocks:        103.228.124.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DC75C/ACAC39BE687111EC8BDB346BC4F9AE02/pTalTbQeRB3nTDP29zbFrXpmhcY.crl
                          rsync://rpki.apnic.net/member_repository/A91DC75C/ACAC39BE687111EC8BDB346BC4F9AE02/pTalTbQeRB3nTDP29zbFrXpmhcY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pTalTbQeRB3nTDP29zbFrXpmhcY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 01 Jun 2024 02:50:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 746 (0x2ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DC75C/serialNumber=A536A54DB41E441DE74C33F6F736C5AD7A6685C6
        Validity
            Not Before: Sep 23 01:43:15 2023 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=650e42b2-8341
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d5:29:10:43:a5:88:52:ea:f9:d2:6d:c7:27:
                    28:4e:86:55:d1:e7:2b:ba:91:42:08:13:fd:35:8c:
                    39:1a:ca:a5:1e:8b:3d:3c:9f:38:38:81:bc:2d:b9:
                    98:37:f1:d6:d0:ba:8e:4a:1f:09:7e:eb:90:b1:bf:
                    9f:ca:db:3e:77:ba:eb:6e:3d:a9:9c:6e:01:ce:aa:
                    3d:f8:95:02:e5:78:a3:82:bd:ad:da:91:78:b0:92:
                    7c:24:d8:db:da:8e:09:cc:f7:ef:62:4c:43:31:1d:
                    be:24:30:39:90:38:82:d0:11:bd:70:bd:63:55:72:
                    0c:63:a7:ff:de:61:91:7d:0c:6e:09:fd:bf:09:37:
                    a1:61:ea:65:77:d0:d4:b7:4e:36:b9:6b:e6:77:51:
                    d8:73:10:30:44:17:ec:6e:59:27:51:ec:31:69:9b:
                    f8:d0:b8:27:24:b7:50:49:f6:53:b5:63:8d:50:a6:
                    c7:51:a3:3f:49:35:53:09:f1:c6:dc:31:16:ba:27:
                    c2:73:dc:ca:ce:3f:06:9c:ba:b1:6e:a8:87:02:2a:
                    c9:52:46:69:36:7b:8c:42:39:06:30:db:6b:18:09:
                    eb:b4:f4:61:45:ae:19:5c:8f:21:dc:c1:f5:74:4b:
                    07:b3:46:a5:0a:c1:4a:bc:3a:a6:1e:48:94:dc:c8:
                    1e:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:F3:BE:AF:C3:6B:B8:8C:E6:C5:70:E7:2D:C3:D9:F3:43:F1:05:28
            X509v3 Authority Key Identifier:
                keyid:A5:36:A5:4D:B4:1E:44:1D:E7:4C:33:F6:F7:36:C5:AD:7A:66:85:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DC75C/ACAC39BE687111EC8BDB346BC4F9AE02/pTalTbQeRB3nTDP29zbFrXpmhcY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pTalTbQeRB3nTDP29zbFrXpmhcY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC75C/ACAC39BE687111EC8BDB346BC4F9AE02/2CB0D29E211411EE82DE6110C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.228.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:ae:7b:9f:aa:d6:04:7a:4f:80:76:41:2c:23:bf:71:6d:b7:
         9b:c9:3f:01:fc:47:36:15:2a:3f:fa:d9:28:ae:3c:28:29:14:
         65:f6:67:6e:17:db:a4:ca:e7:70:89:a9:a2:21:9f:6c:fa:51:
         f0:5e:b2:f3:3d:7d:e2:f4:ae:4d:2d:f4:f6:d9:19:ea:91:3e:
         d8:44:3f:64:0c:3a:3b:df:fd:0a:4e:b5:0f:9b:76:94:28:76:
         8c:8a:67:35:fd:66:dc:85:71:03:d3:0a:6e:44:3b:ba:8b:92:
         17:5d:5b:03:e6:7c:c7:29:dd:8a:56:bf:84:38:e8:c8:63:75:
         76:80:78:8a:44:26:e6:29:25:0e:c5:00:86:a8:59:fb:39:b9:
         7d:be:7d:c4:4d:1c:7d:ee:f3:7c:e0:52:25:1f:64:bf:04:82:
         47:2b:3f:3a:00:54:dc:5c:fb:f4:3d:39:0b:31:50:a7:18:95:
         b2:e6:f0:12:36:4e:64:8c:2b:26:46:8a:fb:6f:b0:cf:bd:ae:
         63:1f:48:52:cc:76:2d:fa:0c:fd:6a:04:cb:59:b1:10:5d:91:
         dc:b4:d5:12:9c:91:5b:6e:57:a5:81:c2:ef:84:d3:1c:79:5f:
         86:b4:89:74:74:02:f5:be:95:01:81:e4:3f:c4:08:07:d4:e9:
         de:dd:dc:da
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAuowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REM3NUMxMTAvBgNVBAUTKEE1MzZBNTREQjQxRTQ0MURFNzRDMzNGNkY3MzZDNUFE
N0E2Njg1QzYwHhcNMjMwOTIzMDE0MzE1WhcNMjQxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NTBlNDJiMi04MzQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuNUpEEOliFLq+dJtxycoToZV0ecrupFCCBP9NYw5GsqlHos9PJ84OIG8LbmY
N/HW0LqOSh8JfuuQsb+fyts+d7rrbj2pnG4Bzqo9+JUC5Xijgr2t2pF4sJJ8JNjb
2o4JzPfvYkxDMR2+JDA5kDiC0BG9cL1jVXIMY6f/3mGRfQxuCf2/CTehYepld9DU
t042uWvmd1HYcxAwRBfsblknUewxaZv40LgnJLdQSfZTtWONUKbHUaM/STVTCfHG
3DEWuifCc9zKzj8GnLqxbqiHAirJUkZpNnuMQjkGMNtrGAnrtPRhRa4ZXI8h3MH1
dEsHs0alCsFKvDqmHkiU3MgerwIDAQABo4IClTCCApEwHQYDVR0OBBYEFMjzvq/D
a7iM5sVw5y3D2fND8QUoMB8GA1UdIwQYMBaAFKU2pU20HkQd50wz9vc2xa16ZoXG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzc1Qy9BQ0FDMzlCRTY4
NzExMUVDOEJEQjM0NkJDNEY5QUUwMi9wVGFsVGJRZVJCM25URFAyOXpiRnJYcG1o
Y1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3BUYWxUYlFlUkIzblREUDI5emJGclhwbWhjWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
REM3NUMvQUNBQzM5QkU2ODcxMTFFQzhCREIzNDZCQzRGOUFFMDIvMkNCMEQyOUUy
MTE0MTFFRTgyREU2MTEwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABn5HwwDQYJKoZIhvcNAQELBQADggEBAKque5+q1gR6T4B2
QSwjv3Ftt5vJPwH8RzYVKj/62SiuPCgpFGX2Z24X26TK53CJqaIhn2z6UfBesvM9
feL0rk0t9PbZGeqRPthEP2QMOjvf/QpOtQ+bdpQodoyKZzX9ZtyFcQPTCm5EO7qL
khddWwPmfMcp3YpWv4Q46MhjdXaAeIpEJuYpJQ7FAIaoWfs5uX2+fcRNHH3u83zg
UiUfZL8EgkcrPzoAVNxc+/Q9OQsxUKcYlbLm8BI2TmSMKyZGivtvsM+9rmMfSFLM
di36DP1qBMtZsRBdkdy01RKckVtuV6WBwu+E0xx5X4a0iXR0AvW+lQGB5D/ECAfU
6d7d3No=
-----END CERTIFICATE-----
Generated at Sat May 25 04:35:33 2024 by rpki-client on console-ams.rpki-client.org