Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9004/5B82EA9098C411ED9871E431C4F9AE02/660CF80498C711ED81343D33C4F9AE02.roa
File:                     660CF80498C711ED81343D33C4F9AE02.roa (raw, json)
Hash identifier:          S5NN+vMCMoLs1RUTBXkhwKFnc6yBmNKV4e3pMAdbQrw=
Subject key identifier:   B0:C5:5D:5C:58:64:D3:95:0D:59:0D:5C:96:BF:0F:7B:96:CA:DD:4C
Certificate issuer:       /CN=A91E9004/serialNumber=25CA44C10EA592E42B136E59D08F6751D1818FAB
Certificate serial:       B5
Authority key identifier: 25:CA:44:C1:0E:A5:92:E4:2B:13:6E:59:D0:8F:67:51:D1:81:8F:AB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E9004/5B82EA9098C411ED9871E431C4F9AE02/660CF80498C711ED81343D33C4F9AE02.roa
Signing time:             Sun 31 Dec 2023 05:05:35 +0000
ROA not before:           Sun 31 Dec 2023 05:05:35 +0000
ROA not after:            Mon 31 Mar 2025 00:00:00 +0000
asID:                     135175
IP address blocks:        103.61.224.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E9004/5B82EA9098C411ED9871E431C4F9AE02/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.crl
                          rsync://rpki.apnic.net/member_repository/A91E9004/5B82EA9098C411ED9871E431C4F9AE02/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 02:18:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 181 (0xb5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E9004/serialNumber=25CA44C10EA592E42B136E59D08F6751D1818FAB
        Validity
            Not Before: Dec 31 05:05:35 2023 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=6590f69e-a83f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:bc:e3:27:3c:33:6c:8b:08:47:aa:8a:71:74:
                    50:ef:c2:c8:b1:c3:3c:10:ee:6e:6f:e9:bd:dc:57:
                    f6:1d:2f:17:a2:2e:1c:f9:4f:65:9e:3d:08:9e:fa:
                    9d:92:e8:e4:38:24:7c:09:63:de:c5:5a:77:2a:b9:
                    5c:bd:c8:99:e6:b8:19:39:11:1d:7b:0c:92:ce:51:
                    2c:c8:12:2d:34:11:c4:25:56:3b:1b:2b:8b:c6:7e:
                    0f:b1:6f:2b:da:b6:e7:f5:f4:b8:c3:5e:ae:c7:6f:
                    41:23:f7:d6:ab:35:a4:cc:a7:fb:7e:3e:99:4b:4b:
                    85:e3:3b:a8:c1:41:cd:e9:8c:4f:de:d3:91:7c:02:
                    11:49:a3:0e:e1:63:57:fa:a7:16:47:89:9b:a5:a4:
                    3b:bd:dd:ba:13:b8:cb:31:38:46:a2:0d:ae:04:06:
                    41:1f:2e:a7:b2:b5:1f:ee:cb:10:19:4f:0b:ff:87:
                    2f:d8:48:af:f6:41:41:6a:5f:0d:4c:6d:a2:f0:82:
                    cc:83:23:b7:29:8f:30:0a:12:48:e6:3f:64:60:a8:
                    de:2f:8c:19:5d:89:86:42:c0:8b:96:81:4e:19:67:
                    79:6a:91:b5:df:76:51:00:0e:6a:3d:af:11:e0:08:
                    2d:66:b9:c5:a0:ec:94:23:f5:1f:05:b2:5e:d9:41:
                    42:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:C5:5D:5C:58:64:D3:95:0D:59:0D:5C:96:BF:0F:7B:96:CA:DD:4C
            X509v3 Authority Key Identifier:
                keyid:25:CA:44:C1:0E:A5:92:E4:2B:13:6E:59:D0:8F:67:51:D1:81:8F:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E9004/5B82EA9098C411ED9871E431C4F9AE02/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9004/5B82EA9098C411ED9871E431C4F9AE02/660CF80498C711ED81343D33C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.61.224.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ac:9c:1b:2e:1b:81:e3:7f:b4:b6:ca:33:a8:fc:0d:9e:1f:62:
         61:36:30:f8:22:e5:44:f6:c0:89:0c:34:ec:d8:ac:21:3d:71:
         e0:a4:86:ca:b7:2c:71:44:85:3d:8c:e0:9e:da:66:5b:a0:56:
         19:e3:85:18:7d:73:15:4a:49:bc:e0:67:ae:95:d0:6e:a6:c6:
         58:34:5c:87:d2:ef:f5:e8:ad:0a:c9:7b:39:f0:85:5e:2a:09:
         7e:03:e3:68:3d:64:0b:73:5e:4d:44:be:f0:89:0b:bf:1f:70:
         6f:3d:fb:ea:2c:03:fe:aa:67:06:80:51:e5:c0:5d:84:6f:10:
         54:2c:4b:f9:3b:23:82:a5:5a:16:76:be:76:ec:a6:fa:02:8d:
         58:3a:d9:5e:d6:fa:05:4b:f3:c8:21:d6:5d:d7:3e:29:24:78:
         15:c3:91:ac:e2:ab:28:58:0d:94:6d:0d:ed:29:b6:d1:91:fb:
         b6:15:85:9a:3c:b4:a8:0f:ef:d3:f9:29:24:41:90:b1:3d:35:
         9e:8e:bd:28:a9:8c:a0:9f:61:1c:76:72:86:5e:91:e2:4f:9c:
         16:0f:60:0b:00:ac:06:8a:47:3e:92:53:1a:5c:d2:5e:03:2a:
         45:57:92:53:ea:95:5a:af:f2:df:e7:fd:30:df:e4:cf:ed:87:
         8f:8b:74:bc
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICALUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTkwMDQxMTAvBgNVBAUTKDI1Q0E0NEMxMEVBNTkyRTQyQjEzNkU1OUQwOEY2NzUx
RDE4MThGQUIwHhcNMjMxMjMxMDUwNTM1WhcNMjUwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NTkwZjY5ZS1hODNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyrzjJzwzbIsIR6qKcXRQ78LIscM8EO5ub+m93Ff2HS8Xoi4c+U9lnj0Invqd
kujkOCR8CWPexVp3KrlcvciZ5rgZOREdewySzlEsyBItNBHEJVY7GyuLxn4PsW8r
2rbn9fS4w16ux29BI/fWqzWkzKf7fj6ZS0uF4zuowUHN6YxP3tORfAIRSaMO4WNX
+qcWR4mbpaQ7vd26E7jLMThGog2uBAZBHy6nsrUf7ssQGU8L/4cv2Eiv9kFBal8N
TG2i8ILMgyO3KY8wChJI5j9kYKjeL4wZXYmGQsCLloFOGWd5apG133ZRAA5qPa8R
4AgtZrnFoOyUI/UfBbJe2UFCBwIDAQABo4IClTCCApEwHQYDVR0OBBYEFLDFXVxY
ZNOVDVkNXJa/D3uWyt1MMB8GA1UdIwQYMBaAFCXKRMEOpZLkKxNuWdCPZ1HRgY+r
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTAwNC81QjgyRUE5MDk4
QzQxMUVEOTg3MUU0MzFDNEY5QUUwMi9KY3BFd1E2bGt1UXJFMjVaMEk5blVkR0Jq
NnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0pjcEV3UTZsa3VRckUyNVowSTluVWRHQmo2cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTkwMDQvNUI4MkVBOTA5OEM0MTFFRDk4NzFFNDMxQzRGOUFFMDIvNjYwQ0Y4MDQ5
OEM3MTFFRDgxMzQzRDMzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnPeAwDQYJKoZIhvcNAQELBQADggEBAKycGy4bgeN/tLbK
M6j8DZ4fYmE2MPgi5UT2wIkMNOzYrCE9ceCkhsq3LHFEhT2M4J7aZlugVhnjhRh9
cxVKSbzgZ66V0G6mxlg0XIfS7/XorQrJeznwhV4qCX4D42g9ZAtzXk1EvvCJC78f
cG89++osA/6qZwaAUeXAXYRvEFQsS/k7I4KlWhZ2vnbspvoCjVg62V7W+gVL88gh
1l3XPikkeBXDkaziqyhYDZRtDe0pttGR+7YVhZo8tKgP79P5KSRBkLE9NZ6OvSip
jKCfYRx2coZekeJPnBYPYAsArAaKRz6SUxpc0l4DKkVXklPqlVqv8t/n/TDf5M/t
h4+LdLw=
-----END CERTIFICATE-----
Generated at Mon Nov 25 04:44:02 2024 by rpki-client on console-ams.rpki-client.org