Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/91FD24BA23C511EDA6D7F073C4F9AE02.roa
File:                     91FD24BA23C511EDA6D7F073C4F9AE02.roa (raw, json)
Hash identifier:          lALAU96uBUqRbrTkDfaqUsPuADDi3BxVAQqhmKJyzX4=
Subject key identifier:   82:D5:24:F7:8D:E4:D2:A5:42:8F:AA:9D:20:92:A0:8E:81:1D:BF:64
Certificate issuer:       /CN=A91E28C1/serialNumber=25841FA77C05716585FE7BDB0600B9864E3406D2
Certificate serial:       08BD
Authority key identifier: 25:84:1F:A7:7C:05:71:65:85:FE:7B:DB:06:00:B9:86:4E:34:06:D2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYQfp3wFcWWF_nvbBgC5hk40BtI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/91FD24BA23C511EDA6D7F073C4F9AE02.roa
Signing time:             Thu 18 Jul 2024 21:19:00 +0000
ROA not before:           Thu 18 Jul 2024 21:19:00 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     58629
IP address blocks:        103.138.122.0/24 maxlen: 24
                          103.138.123.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/JYQfp3wFcWWF_nvbBgC5hk40BtI.crl
                          rsync://rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/JYQfp3wFcWWF_nvbBgC5hk40BtI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYQfp3wFcWWF_nvbBgC5hk40BtI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 19:56:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2237 (0x8bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E28C1/serialNumber=25841FA77C05716585FE7BDB0600B9864E3406D2
        Validity
            Not Before: Jul 18 21:19:00 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=669986c4-e29e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:63:56:e1:4e:86:b5:e9:30:8a:12:d9:eb:f8:
                    88:d1:11:33:6c:f2:14:94:f4:c5:cc:b1:0e:73:2b:
                    4e:1b:8f:43:fa:c5:d4:8a:e9:e8:60:0d:f9:25:c2:
                    fc:53:a4:05:f1:c7:47:93:0b:06:d0:01:ed:fa:39:
                    bd:3e:bc:db:5a:f2:66:1b:1e:51:aa:81:ad:3c:ef:
                    fc:5c:8c:4a:1c:a6:13:5b:09:46:86:06:e2:85:ee:
                    d4:b0:13:6b:53:1c:5c:bb:fc:6d:e8:95:06:f6:bc:
                    67:c8:97:8e:91:e0:f3:65:65:f4:09:c1:2a:31:28:
                    5b:3d:2b:58:03:16:a3:b7:1b:48:62:1d:c0:3e:5d:
                    8c:11:0d:83:6e:4e:a5:42:70:1f:02:72:0a:2b:9d:
                    08:80:66:9a:f7:32:c9:34:42:71:34:db:82:23:62:
                    72:58:0d:cd:05:03:26:ac:67:64:b2:a9:66:59:71:
                    d3:af:9f:2f:bb:27:39:1f:28:8b:0e:95:63:bc:87:
                    6a:5f:c5:30:f9:dd:32:a3:07:35:c0:c1:17:2f:3b:
                    f4:71:ef:d3:2b:66:82:a4:2e:63:ad:67:d5:aa:d8:
                    65:df:96:b8:fc:06:87:f7:52:11:05:2c:0a:6f:d8:
                    b9:71:21:39:ad:1b:5a:70:87:8d:87:80:ee:31:1f:
                    2a:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:D5:24:F7:8D:E4:D2:A5:42:8F:AA:9D:20:92:A0:8E:81:1D:BF:64
            X509v3 Authority Key Identifier:
                keyid:25:84:1F:A7:7C:05:71:65:85:FE:7B:DB:06:00:B9:86:4E:34:06:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/JYQfp3wFcWWF_nvbBgC5hk40BtI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYQfp3wFcWWF_nvbBgC5hk40BtI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/91FD24BA23C511EDA6D7F073C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.138.122.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2b:fc:58:a6:84:9c:de:2c:60:8e:64:1c:06:73:4e:85:cf:24:
         e5:1d:dc:06:90:f2:99:91:a8:3f:42:96:35:70:f5:87:8f:dd:
         74:a3:fc:cc:9b:66:4a:43:31:9d:72:f5:65:e0:56:b6:af:8d:
         4b:75:19:e7:56:ae:b9:5a:7e:d4:d4:2c:88:95:c4:8c:2f:72:
         82:0f:de:2f:09:fe:4c:2b:86:2c:3e:29:2c:b6:a0:64:b9:9c:
         a0:8a:cd:69:d2:05:08:99:63:ea:8c:d2:67:9a:38:d6:7d:b4:
         7e:2f:6d:ad:f1:97:dd:ea:76:76:46:7a:df:ec:d6:91:b3:c1:
         46:c2:ac:a2:1e:58:37:3e:15:58:a1:4f:04:ad:9a:42:ac:2f:
         21:d0:ab:95:af:ef:94:59:bc:de:54:14:79:ad:e9:5e:7e:de:
         61:2f:c0:a6:33:18:a4:a3:37:b5:c3:bb:81:49:ac:cd:09:bb:
         cc:43:31:cc:44:32:76:b7:e7:75:df:06:41:0a:3c:aa:42:24:
         bb:41:4b:4b:12:74:cc:79:78:db:7e:a6:f5:87:b4:a5:6e:e4:
         e0:4b:b0:db:12:05:c7:e4:1e:d2:07:49:df:c8:85:56:7a:2c:
         70:9a:68:a9:cb:31:3a:50:f5:1f:e4:f3:7d:8f:d5:85:ab:3e:
         1b:54:4b:cd
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICCL0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTI4QzExMTAvBgNVBAUTKDI1ODQxRkE3N0MwNTcxNjU4NUZFN0JEQjA2MDBCOTg2
NEUzNDA2RDIwHhcNMjQwNzE4MjExOTAwWhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02Njk5ODZjNC1lMjllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAr2NW4U6GtekwihLZ6/iI0REzbPIUlPTFzLEOcytOG49D+sXUiunoYA35JcL8
U6QF8cdHkwsG0AHt+jm9PrzbWvJmGx5RqoGtPO/8XIxKHKYTWwlGhgbihe7UsBNr
Uxxcu/xt6JUG9rxnyJeOkeDzZWX0CcEqMShbPStYAxajtxtIYh3APl2MEQ2Dbk6l
QnAfAnIKK50IgGaa9zLJNEJxNNuCI2JyWA3NBQMmrGdksqlmWXHTr58vuyc5HyiL
DpVjvIdqX8Uw+d0yowc1wMEXLzv0ce/TK2aCpC5jrWfVqthl35a4/AaH91IRBSwK
b9i5cSE5rRtacIeNh4DuMR8qSQIDAQABo4IClTCCApEwHQYDVR0OBBYEFILVJPeN
5NKlQo+qnSCSoI6BHb9kMB8GA1UdIwQYMBaAFCWEH6d8BXFlhf572wYAuYZONAbS
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjhDMS9GOEFGQTE0MDk5
RTAxMUVBOTY2NTJGMzJDNEY5QUUwMi9KWVFmcDN3RmNXV0ZfbnZiQmdDNWhrNDBC
dEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0pZUWZwM3dGY1dXRl9udmJCZ0M1aGs0MEJ0SS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTI4QzEvRjhBRkExNDA5OUUwMTFFQTk2NjUyRjMyQzRGOUFFMDIvOTFGRDI0QkEy
M0M1MTFFREE2RDdGMDczQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFninowDQYJKoZIhvcNAQELBQADggEBACv8WKaEnN4sYI5k
HAZzToXPJOUd3AaQ8pmRqD9CljVw9YeP3XSj/MybZkpDMZ1y9WXgVravjUt1GedW
rrlaftTULIiVxIwvcoIP3i8J/kwrhiw+KSy2oGS5nKCKzWnSBQiZY+qM0meaONZ9
tH4vba3xl93qdnZGet/s1pGzwUbCrKIeWDc+FVihTwStmkKsLyHQq5Wv75RZvN5U
FHmt6V5+3mEvwKYzGKSjN7XDu4FJrM0Ju8xDMcxEMna353XfBkEKPKpCJLtBS0sS
dMx5eNt+pvWHtKVu5OBLsNsSBcfkHtIHSd/IhVZ6LHCaaKnLMTpQ9R/k832P1YWr
PhtUS80=
-----END CERTIFICATE-----
Generated at Fri Nov 22 21:05:34 2024 by rpki-client on console-fra.rpki-client.org