Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/B0F9178297B811ECA8AA4230C4F9AE02.roa
File:                     B0F9178297B811ECA8AA4230C4F9AE02.roa (raw, json)
Hash identifier:          7UvGO2r60JLS/okHiWx8rHAHMyUcsuX/jNwXXCmMBho=
Subject key identifier:   28:8E:A1:60:CA:02:EF:5D:FF:D9:F8:A8:7E:FC:4A:AB:F8:27:F3:A9
Certificate issuer:       /CN=A91E2A61/serialNumber=2B517C6B79E3CEB0389D41ABC5ECE2107FEC53FB
Certificate serial:       0344
Authority key identifier: 2B:51:7C:6B:79:E3:CE:B0:38:9D:41:AB:C5:EC:E2:10:7F:EC:53:FB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1F8a3njzrA4nUGrxeziEH_sU_s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/B0F9178297B811ECA8AA4230C4F9AE02.roa
Signing time:             Thu 17 Oct 2024 01:14:31 +0000
ROA not before:           Thu 17 Oct 2024 01:14:31 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     139659
IP address blocks:        103.74.192.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.crl
                          rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1F8a3njzrA4nUGrxeziEH_sU_s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 20:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 836 (0x344)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E2A61/serialNumber=2B517C6B79E3CEB0389D41ABC5ECE2107FEC53FB
        Validity
            Not Before: Oct 17 01:14:31 2024 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=671064f7-c61e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:c3:0e:ac:1a:88:e3:26:34:32:68:d6:95:a1:
                    48:b4:d6:77:ac:97:3f:ef:a0:3c:ad:4a:b2:3c:48:
                    65:c7:dd:2f:a3:b9:8e:4f:60:32:87:41:ad:2a:1a:
                    3d:11:cd:92:b9:f2:9e:d8:9b:ab:fb:2f:ea:f7:46:
                    e1:25:2e:84:ee:40:30:00:eb:2a:50:84:2b:01:13:
                    e4:aa:2b:63:09:86:fb:6b:eb:44:6f:59:0e:26:77:
                    0b:ea:3f:c7:b8:46:cc:59:98:91:13:4a:cb:3b:41:
                    97:48:b0:87:59:2c:d2:09:96:8c:de:97:1e:9a:cf:
                    59:68:f4:57:fe:77:e3:77:8c:38:5d:2a:9d:44:86:
                    43:85:68:40:0d:f5:e5:45:91:d7:6b:14:ae:f4:77:
                    b9:51:e4:91:23:7f:c5:97:14:a7:d8:27:bf:98:2a:
                    5d:c7:b6:17:54:dc:13:b6:0a:b0:9c:07:9c:0e:ff:
                    dc:a0:4a:ee:2d:22:58:7e:cd:1e:94:d2:a5:ca:19:
                    83:a6:cb:0e:23:96:12:d4:13:e8:f0:1f:84:a3:ac:
                    7b:9c:57:db:93:9e:77:0d:c3:55:3a:00:87:a0:79:
                    0e:35:98:a9:e4:a0:e9:23:a4:66:66:2f:c6:68:08:
                    1f:bf:e7:83:5b:82:a9:99:0b:e5:12:da:50:e6:e5:
                    fd:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:8E:A1:60:CA:02:EF:5D:FF:D9:F8:A8:7E:FC:4A:AB:F8:27:F3:A9
            X509v3 Authority Key Identifier:
                keyid:2B:51:7C:6B:79:E3:CE:B0:38:9D:41:AB:C5:EC:E2:10:7F:EC:53:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1F8a3njzrA4nUGrxeziEH_sU_s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/B0F9178297B811ECA8AA4230C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.74.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:f9:87:0c:2e:4e:ce:aa:f4:3d:59:48:df:ae:82:5b:ba:61:
         63:ca:d3:a4:da:84:50:c8:1a:80:ff:75:35:20:b8:41:6d:63:
         b4:0e:8f:5c:02:fc:ee:a0:8b:71:84:d2:75:33:df:23:89:76:
         b7:d8:fe:1b:2c:0e:82:45:7d:ee:d6:e7:8c:9a:a4:e2:34:d2:
         17:bd:a7:67:a1:2c:91:62:5c:9e:ad:8d:c5:a5:02:6f:50:ef:
         f7:8e:f2:ca:bb:59:c1:c5:1b:21:06:cf:7f:b0:09:c9:b6:90:
         82:e1:7f:95:f0:52:a5:45:02:fa:0a:ba:6e:69:1c:ef:2b:99:
         47:1b:09:93:49:a1:a5:1b:f8:42:fa:57:7f:64:bb:0a:a1:70:
         d7:7d:69:29:42:02:97:c4:a9:ef:26:df:73:a9:51:b5:0c:28:
         47:dd:de:0b:22:3d:5a:7f:98:be:0a:64:6d:f1:00:8b:12:9c:
         3f:9f:8a:4b:be:5b:5d:1c:8d:94:ee:8b:29:24:24:b5:25:9b:
         7d:0f:d8:1d:fd:26:32:d6:4c:3d:01:65:d0:ab:e7:b5:3e:82:
         d7:31:83:87:54:c1:2d:0f:99:83:dd:86:83:12:1d:5f:b4:69:
         70:20:f8:88:c3:c5:69:3f:aa:d6:44:d4:46:01:f9:88:e1:2e:
         41:52:a1:0b
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICA0QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTJBNjExMTAvBgNVBAUTKDJCNTE3QzZCNzlFM0NFQjAzODlENDFBQkM1RUNFMjEw
N0ZFQzUzRkIwHhcNMjQxMDE3MDExNDMxWhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzEwNjRmNy1jNjFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3MMOrBqI4yY0MmjWlaFItNZ3rJc/76A8rUqyPEhlx90vo7mOT2Ayh0GtKho9
Ec2SufKe2Jur+y/q90bhJS6E7kAwAOsqUIQrARPkqitjCYb7a+tEb1kOJncL6j/H
uEbMWZiRE0rLO0GXSLCHWSzSCZaM3pcems9ZaPRX/nfjd4w4XSqdRIZDhWhADfXl
RZHXaxSu9He5UeSRI3/FlxSn2Ce/mCpdx7YXVNwTtgqwnAecDv/coEruLSJYfs0e
lNKlyhmDpssOI5YS1BPo8B+Eo6x7nFfbk553DcNVOgCHoHkONZip5KDpI6RmZi/G
aAgfv+eDW4KpmQvlEtpQ5uX9xwIDAQABo4IClTCCApEwHQYDVR0OBBYEFCiOoWDK
Au9d/9n4qH78Sqv4J/OpMB8GA1UdIwQYMBaAFCtRfGt5486wOJ1Bq8Xs4hB/7FP7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMkE2MS9FREMwOEZFNjk2
MEIxMUVDQkJFNEJFNjRDNEY5QUUwMi9LMUY4YTNuanpyQTRuVUdyeGV6aUVIX3NV
X3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0sxRjhhM25qenJBNG5VR3J4ZXppRUhfc1Vfcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTJBNjEvRURDMDhGRTY5NjBCMTFFQ0JCRTRCRTY0QzRGOUFFMDIvQjBGOTE3ODI5
N0I4MTFFQ0E4QUE0MjMwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnSsAwDQYJKoZIhvcNAQELBQADggEBABj5hwwuTs6q9D1Z
SN+uglu6YWPK06TahFDIGoD/dTUguEFtY7QOj1wC/O6gi3GE0nUz3yOJdrfY/hss
DoJFfe7W54yapOI00he9p2ehLJFiXJ6tjcWlAm9Q7/eO8sq7WcHFGyEGz3+wCcm2
kILhf5XwUqVFAvoKum5pHO8rmUcbCZNJoaUb+EL6V39kuwqhcNd9aSlCApfEqe8m
33OpUbUMKEfd3gsiPVp/mL4KZG3xAIsSnD+fiku+W10cjZTuiykkJLUlm30P2B39
JjLWTD0BZdCr57U+gtcxg4dUwS0PmYPdhoMSHV+0aXAg+IjDxWk/qtZE1EYB+Yjh
LkFSoQs=
-----END CERTIFICATE-----
Generated at Thu Nov 21 01:26:06 2024 by rpki-client on console-ams.rpki-client.org