Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9509/274ED15E601A11EDB7416B6CC4F9AE02/F23AE0AE632D11ED8C102087C4F9AE02.roa
File:                     F23AE0AE632D11ED8C102087C4F9AE02.roa (raw, json)
Hash identifier:          +i5zlUVZwvgQMdFQbJOC4NbaY5nHuhFOwvGIqz9z6XY=
Subject key identifier:   66:62:8D:59:41:A3:EA:A8:49:70:4D:69:C1:1B:DF:63:3B:A2:A1:13
Certificate issuer:       /CN=A91E9509/serialNumber=51BEA3609429D91B1C4E4022DA68BD643C33C3FB
Certificate serial:       CD
Authority key identifier: 51:BE:A3:60:94:29:D9:1B:1C:4E:40:22:DA:68:BD:64:3C:33:C3:FB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ub6jYJQp2RscTkAi2mi9ZDwzw_s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E9509/274ED15E601A11EDB7416B6CC4F9AE02/F23AE0AE632D11ED8C102087C4F9AE02.roa
Signing time:             Tue 28 Nov 2023 13:49:01 +0000
ROA not before:           Tue 28 Nov 2023 13:49:01 +0000
ROA not after:            Sun 01 Dec 2024 00:00:00 +0000
asID:                     150302
IP address blocks:        103.217.98.0/24 maxlen: 24
                          103.217.99.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E9509/274ED15E601A11EDB7416B6CC4F9AE02/Ub6jYJQp2RscTkAi2mi9ZDwzw_s.crl
                          rsync://rpki.apnic.net/member_repository/A91E9509/274ED15E601A11EDB7416B6CC4F9AE02/Ub6jYJQp2RscTkAi2mi9ZDwzw_s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ub6jYJQp2RscTkAi2mi9ZDwzw_s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 May 2024 05:09:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 205 (0xcd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E9509/serialNumber=51BEA3609429D91B1C4E4022DA68BD643C33C3FB
        Validity
            Not Before: Nov 28 13:49:01 2023 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=6565efcd-d2b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:68:55:37:52:c5:9f:9a:53:6d:0a:56:de:5e:
                    cb:12:58:25:5e:6b:f6:7a:52:7b:df:10:7d:cc:57:
                    24:9a:c8:ac:f1:09:f8:1a:90:f0:95:dd:72:27:f5:
                    7e:9e:2a:ea:4d:c7:86:f9:28:b6:7d:b2:65:55:c8:
                    2c:6f:2f:38:b3:41:94:51:71:3f:7e:3e:42:9a:b3:
                    b9:12:73:03:1d:df:4b:e9:9b:9e:98:64:da:c8:63:
                    22:98:fb:c9:36:1d:f0:2e:90:a6:a6:51:47:ac:71:
                    57:d1:78:e7:61:a0:7b:1e:55:32:9b:a4:36:a4:6a:
                    ed:08:5c:d6:64:b4:64:c9:e8:87:21:aa:36:fc:9f:
                    26:75:5f:70:e2:38:e0:09:f9:ac:e8:70:79:88:c3:
                    f9:35:79:02:2d:6f:e0:e4:98:1d:93:ad:39:8a:14:
                    a8:bc:6a:36:f4:8e:c6:36:49:58:72:1e:bd:e3:ab:
                    e1:5f:a1:3a:f8:c5:8f:3f:1b:17:1a:61:3b:44:1a:
                    0a:9b:f3:49:c8:5c:b2:7a:91:ae:94:91:e9:1a:cd:
                    64:68:3f:43:00:77:4e:2e:2b:5c:37:59:f6:a9:9a:
                    17:88:9d:8e:1d:09:6a:3f:2b:7b:98:28:2b:f1:a3:
                    78:88:38:89:39:ae:f6:ab:66:32:03:b5:fd:b7:ee:
                    1f:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:62:8D:59:41:A3:EA:A8:49:70:4D:69:C1:1B:DF:63:3B:A2:A1:13
            X509v3 Authority Key Identifier:
                keyid:51:BE:A3:60:94:29:D9:1B:1C:4E:40:22:DA:68:BD:64:3C:33:C3:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E9509/274ED15E601A11EDB7416B6CC4F9AE02/Ub6jYJQp2RscTkAi2mi9ZDwzw_s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ub6jYJQp2RscTkAi2mi9ZDwzw_s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9509/274ED15E601A11EDB7416B6CC4F9AE02/F23AE0AE632D11ED8C102087C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.217.98.0/23

    Signature Algorithm: sha256WithRSAEncryption
         93:04:e5:2b:c5:b1:7a:34:c2:b7:b2:5a:4a:81:ef:be:24:38:
         9d:b3:59:f9:7f:a6:ee:54:7b:0a:be:e3:e5:4d:d2:dc:26:2b:
         17:58:f4:a2:49:14:5a:70:7a:78:af:41:0a:36:49:5f:03:05:
         b5:2d:54:74:df:5b:1d:5a:f9:64:f8:d9:4e:ea:98:c3:c6:93:
         af:0c:e6:dc:81:25:5f:c0:8c:38:84:0e:73:9d:36:57:90:93:
         01:c8:6a:4b:75:62:4c:60:33:21:7b:15:b5:e0:d8:16:56:c5:
         91:24:15:b8:52:32:31:31:1f:44:0b:0b:cb:80:a0:8d:d9:75:
         68:c7:e6:e0:a3:80:a7:e3:a7:15:fc:83:40:92:5a:f0:58:6f:
         30:06:e4:27:a0:c7:8b:a5:b8:7b:67:f0:bd:93:8f:15:23:dd:
         34:21:c2:a5:74:65:03:04:d8:db:8f:b5:f7:b8:39:1a:26:b5:
         89:77:0b:c2:c8:40:55:e1:76:9c:8a:f6:e3:27:af:27:66:45:
         a7:07:4b:65:33:7e:fc:3f:74:a5:47:b5:91:20:4b:eb:75:b6:
         af:e3:4d:bd:35:05:d6:31:56:d4:01:cc:6e:ac:f0:28:7e:73:
         41:f0:41:0c:aa:0e:ac:ab:94:89:7a:c4:6e:ce:e9:20:e8:59:
         4b:1e:86:cb
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAM0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTk1MDkxMTAvBgNVBAUTKDUxQkVBMzYwOTQyOUQ5MUIxQzRFNDAyMkRBNjhCRDY0
M0MzM0MzRkIwHhcNMjMxMTI4MTM0OTAxWhcNMjQxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NTY1ZWZjZC1kMmIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3mhVN1LFn5pTbQpW3l7LElglXmv2elJ73xB9zFckmsis8Qn4GpDwld1yJ/V+
nirqTceG+Si2fbJlVcgsby84s0GUUXE/fj5CmrO5EnMDHd9L6ZuemGTayGMimPvJ
Nh3wLpCmplFHrHFX0XjnYaB7HlUym6Q2pGrtCFzWZLRkyeiHIao2/J8mdV9w4jjg
Cfms6HB5iMP5NXkCLW/g5Jgdk605ihSovGo29I7GNklYch6946vhX6E6+MWPPxsX
GmE7RBoKm/NJyFyyepGulJHpGs1kaD9DAHdOLitcN1n2qZoXiJ2OHQlqPyt7mCgr
8aN4iDiJOa72q2YyA7X9t+4fPwIDAQABo4IClTCCApEwHQYDVR0OBBYEFGZijVlB
o+qoSXBNacEb32M7oqETMB8GA1UdIwQYMBaAFFG+o2CUKdkbHE5AItpovWQ8M8P7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTUwOS8yNzRFRDE1RTYw
MUExMUVEQjc0MTZCNkNDNEY5QUUwMi9VYjZqWUpRcDJSc2NUa0FpMm1pOVpEd3p3
X3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1ViNmpZSlFwMlJzY1RrQWkybWk5WkR3endfcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTk1MDkvMjc0RUQxNUU2MDFBMTFFREI3NDE2QjZDQzRGOUFFMDIvRjIzQUUwQUU2
MzJEMTFFRDhDMTAyMDg3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFn2WIwDQYJKoZIhvcNAQELBQADggEBAJME5SvFsXo0wrey
WkqB774kOJ2zWfl/pu5Uewq+4+VN0twmKxdY9KJJFFpwenivQQo2SV8DBbUtVHTf
Wx1a+WT42U7qmMPGk68M5tyBJV/AjDiEDnOdNleQkwHIakt1YkxgMyF7FbXg2BZW
xZEkFbhSMjExH0QLC8uAoI3ZdWjH5uCjgKfjpxX8g0CSWvBYbzAG5Cegx4uluHtn
8L2TjxUj3TQhwqV0ZQME2NuPtfe4ORomtYl3C8LIQFXhdpyK9uMnrydmRacHS2Uz
fvw/dKVHtZEgS+t1tq/jTb01BdYxVtQBzG6s8Ch+c0HwQQyqDqyrlIl6xG7O6SDo
WUsehss=
-----END CERTIFICATE-----
Generated at Tue May 21 06:21:02 2024 by rpki-client on console-ams.rpki-client.org