Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9004/5B82EA9098C411ED9871E431C4F9AE02/6722D08898C711ED81343D33C4F9AE02.roa
File:                     6722D08898C711ED81343D33C4F9AE02.roa (raw, json)
Hash identifier:          Hna7T6Sp8fvOtegFR0Xc4FRUwsAZ3jFq84MsvM7qVuk=
Subject key identifier:   05:05:E3:52:81:55:E3:45:17:17:BF:44:30:93:00:00:68:A9:5F:99
Certificate issuer:       /CN=A91E9004/serialNumber=25CA44C10EA592E42B136E59D08F6751D1818FAB
Certificate serial:       B7
Authority key identifier: 25:CA:44:C1:0E:A5:92:E4:2B:13:6E:59:D0:8F:67:51:D1:81:8F:AB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E9004/5B82EA9098C411ED9871E431C4F9AE02/6722D08898C711ED81343D33C4F9AE02.roa
Signing time:             Sun 31 Dec 2023 05:05:37 +0000
ROA not before:           Sun 31 Dec 2023 05:05:37 +0000
ROA not after:            Mon 31 Mar 2025 00:00:00 +0000
asID:                     58678
IP address blocks:        103.61.224.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E9004/5B82EA9098C411ED9871E431C4F9AE02/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.crl
                          rsync://rpki.apnic.net/member_repository/A91E9004/5B82EA9098C411ED9871E431C4F9AE02/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 20:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 183 (0xb7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E9004/serialNumber=25CA44C10EA592E42B136E59D08F6751D1818FAB
        Validity
            Not Before: Dec 31 05:05:37 2023 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=6590f6a0-becd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:76:ae:d5:7b:61:97:41:2d:49:de:b4:0e:8d:
                    7a:88:7b:30:d0:60:f4:13:7a:88:b7:4a:2f:e0:f9:
                    72:a0:b0:73:77:d5:a4:4c:df:ef:6f:f0:b9:82:97:
                    91:a7:9a:57:c7:84:5d:5a:02:95:52:06:36:6e:9b:
                    bd:87:b3:b6:6d:a6:1a:2a:b6:f7:ae:51:10:fb:44:
                    ec:c7:63:2c:6c:36:8f:41:f6:e8:9e:74:b7:70:2b:
                    24:53:88:0d:7f:45:9c:01:ee:a2:36:5d:1f:82:bf:
                    7a:60:93:f0:a5:2a:8c:24:15:ef:b3:42:24:c0:c9:
                    0a:86:75:2e:2f:42:fc:88:6c:c0:4a:8b:de:09:f4:
                    2c:fc:99:c8:0a:94:9b:62:e1:a5:1c:7a:48:ec:bc:
                    23:6a:f9:42:a5:fb:72:0e:a2:89:26:0d:7d:37:38:
                    7e:0e:84:fd:6b:8d:a3:ee:de:56:82:e6:10:00:fa:
                    eb:99:bf:db:12:92:98:14:32:44:fe:60:5b:30:10:
                    2c:27:8a:d6:a4:a6:6a:73:1e:78:c6:10:2c:a2:2a:
                    f2:d2:c0:91:04:d4:e1:93:6d:96:19:cb:98:b9:a3:
                    91:9d:78:8c:62:99:66:d8:b0:6a:cd:eb:4a:85:44:
                    f4:27:51:76:ec:cb:86:1e:ef:46:8c:62:88:6a:bf:
                    8f:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:05:E3:52:81:55:E3:45:17:17:BF:44:30:93:00:00:68:A9:5F:99
            X509v3 Authority Key Identifier:
                keyid:25:CA:44:C1:0E:A5:92:E4:2B:13:6E:59:D0:8F:67:51:D1:81:8F:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E9004/5B82EA9098C411ED9871E431C4F9AE02/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9004/5B82EA9098C411ED9871E431C4F9AE02/6722D08898C711ED81343D33C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.61.224.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1b:df:65:bd:4f:cd:5f:d4:c0:2c:4d:7d:4e:d6:c7:af:40:cc:
         ce:07:5d:ab:d7:97:9c:c7:67:48:99:f3:92:14:db:b9:61:30:
         6d:99:47:6a:3c:31:88:6f:ff:12:cb:2f:c3:42:c5:cb:b8:96:
         80:8d:63:c9:4f:87:9d:ce:b2:9e:4c:05:2a:87:7e:e6:2a:1d:
         8d:21:8d:be:15:e0:78:9c:7d:2c:f3:3f:5c:6d:d8:08:4b:54:
         c8:93:c8:7c:32:69:58:8f:22:3d:07:26:b2:c3:51:b9:1c:6f:
         fb:2f:a6:cb:c7:ce:b2:3d:df:83:10:55:21:71:55:b9:f5:31:
         3a:4f:05:c2:2a:60:33:7d:ac:1c:7e:f5:4c:66:de:59:22:7b:
         d1:e5:ac:c9:72:5f:c1:e1:64:25:d1:c9:d2:7e:70:71:15:1e:
         23:0c:86:e8:87:a9:d1:4f:ba:fe:72:ef:02:fc:2f:a6:e7:db:
         94:ab:86:49:86:28:9d:33:cd:00:25:2c:d2:cb:a4:14:7d:7c:
         a6:b6:d7:8a:d8:81:7f:ca:04:64:16:4a:f3:e7:89:0b:4a:fe:
         df:59:ee:51:13:91:76:4f:93:ef:ad:c6:1e:bc:3d:06:ea:39:
         b7:e2:b4:bb:85:fe:49:13:5e:68:b1:b8:55:c9:16:c1:26:36:
         23:7b:2b:bb
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICALcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTkwMDQxMTAvBgNVBAUTKDI1Q0E0NEMxMEVBNTkyRTQyQjEzNkU1OUQwOEY2NzUx
RDE4MThGQUIwHhcNMjMxMjMxMDUwNTM3WhcNMjUwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NTkwZjZhMC1iZWNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnXau1Xthl0EtSd60Do16iHsw0GD0E3qIt0ov4PlyoLBzd9WkTN/vb/C5gpeR
p5pXx4RdWgKVUgY2bpu9h7O2baYaKrb3rlEQ+0Tsx2MsbDaPQfbonnS3cCskU4gN
f0WcAe6iNl0fgr96YJPwpSqMJBXvs0IkwMkKhnUuL0L8iGzASoveCfQs/JnICpSb
YuGlHHpI7LwjavlCpftyDqKJJg19Nzh+DoT9a42j7t5WguYQAPrrmb/bEpKYFDJE
/mBbMBAsJ4rWpKZqcx54xhAsoiry0sCRBNThk22WGcuYuaORnXiMYplm2LBqzetK
hUT0J1F27MuGHu9GjGKIar+PCQIDAQABo4IClTCCApEwHQYDVR0OBBYEFAUF41KB
VeNFFxe/RDCTAABoqV+ZMB8GA1UdIwQYMBaAFCXKRMEOpZLkKxNuWdCPZ1HRgY+r
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTAwNC81QjgyRUE5MDk4
QzQxMUVEOTg3MUU0MzFDNEY5QUUwMi9KY3BFd1E2bGt1UXJFMjVaMEk5blVkR0Jq
NnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0pjcEV3UTZsa3VRckUyNVowSTluVWRHQmo2cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTkwMDQvNUI4MkVBOTA5OEM0MTFFRDk4NzFFNDMxQzRGOUFFMDIvNjcyMkQwODg5
OEM3MTFFRDgxMzQzRDMzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnPeAwDQYJKoZIhvcNAQELBQADggEBABvfZb1PzV/UwCxN
fU7Wx69AzM4HXavXl5zHZ0iZ85IU27lhMG2ZR2o8MYhv/xLLL8NCxcu4loCNY8lP
h53Osp5MBSqHfuYqHY0hjb4V4HicfSzzP1xt2AhLVMiTyHwyaViPIj0HJrLDUbkc
b/svpsvHzrI934MQVSFxVbn1MTpPBcIqYDN9rBx+9Uxm3lkie9HlrMlyX8HhZCXR
ydJ+cHEVHiMMhuiHqdFPuv5y7wL8L6bn25SrhkmGKJ0zzQAlLNLLpBR9fKa214rY
gX/KBGQWSvPniQtK/t9Z7lETkXZPk++txh68PQbqObfitLuF/kkTXmixuFXJFsEm
NiN7K7s=
-----END CERTIFICATE-----
Generated at Thu Nov 21 03:21:53 2024 by rpki-client on console-ams.rpki-client.org