Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED6B5/EF469BFC594411ECAF575A6CC4F9AE02/06A899FECCF311EC86719729C4F9AE02.roa
File:                     06A899FECCF311EC86719729C4F9AE02.roa (raw, json)
Hash identifier:          R0Eg5VTlGn4g/E+8sB7ehm+T8ICQ6nRwL2adzlDHX6w=
Subject key identifier:   68:02:A3:BE:69:84:D4:22:55:5F:F9:39:45:B2:DF:7D:78:41:F8:19
Certificate issuer:       /CN=A91ED6B5/serialNumber=4117D76C3EC04B6211334850A5CD6EA30553505C
Certificate serial:       035B
Authority key identifier: 41:17:D7:6C:3E:C0:4B:62:11:33:48:50:A5:CD:6E:A3:05:53:50:5C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRfXbD7AS2IRM0hQpc1uowVTUFw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ED6B5/EF469BFC594411ECAF575A6CC4F9AE02/06A899FECCF311EC86719729C4F9AE02.roa
Signing time:             Tue 27 Feb 2024 02:44:40 +0000
ROA not before:           Tue 27 Feb 2024 02:44:40 +0000
ROA not after:            Mon 31 Mar 2025 00:00:00 +0000
asID:                     4764
IP address blocks:        203.24.73.0/24 maxlen: 24
                          203.32.71.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ED6B5/EF469BFC594411ECAF575A6CC4F9AE02/QRfXbD7AS2IRM0hQpc1uowVTUFw.crl
                          rsync://rpki.apnic.net/member_repository/A91ED6B5/EF469BFC594411ECAF575A6CC4F9AE02/QRfXbD7AS2IRM0hQpc1uowVTUFw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRfXbD7AS2IRM0hQpc1uowVTUFw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 20:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 859 (0x35b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ED6B5/serialNumber=4117D76C3EC04B6211334850A5CD6EA30553505C
        Validity
            Not Before: Feb 27 02:44:40 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=65dd4c98-51e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:15:14:22:93:02:15:58:1e:28:b2:3a:38:59:
                    c7:e2:0e:43:99:fd:cb:d3:a3:14:d8:92:6c:61:09:
                    2a:ff:fb:10:83:34:20:3d:af:78:3d:ca:06:cb:0c:
                    2d:2c:24:b0:1a:11:a5:93:22:49:5b:a1:c2:50:0b:
                    0d:57:59:3b:4d:59:37:d8:d7:5c:6e:d6:03:70:a5:
                    2c:66:c9:df:43:9a:7d:5b:3c:54:12:ca:81:c2:8b:
                    31:75:61:9c:c7:e8:68:fc:30:96:e8:21:ce:f5:bc:
                    56:15:c7:82:10:69:c7:ae:80:26:84:7c:a3:45:67:
                    9d:23:77:c1:ad:22:63:71:d4:69:aa:fe:1e:f0:44:
                    76:d4:e0:56:5b:0e:b1:15:36:0a:38:ab:5e:3d:07:
                    2d:94:66:9d:0f:ab:48:e6:fd:7f:a9:1c:2a:c3:09:
                    0a:2d:d8:ec:1f:b2:41:75:ce:07:27:35:ec:74:20:
                    83:bc:40:0e:bc:7d:99:5f:de:db:84:52:f8:d4:4e:
                    aa:3d:06:df:4e:0f:2f:b0:3a:9a:db:57:a7:5c:c0:
                    c8:22:27:40:59:eb:87:c0:4a:25:8a:87:74:3a:08:
                    da:dc:42:21:d4:26:53:e1:07:3c:b8:f0:91:8b:13:
                    0b:e5:56:ed:c4:ad:86:28:d8:bd:62:b2:a5:78:72:
                    5d:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:02:A3:BE:69:84:D4:22:55:5F:F9:39:45:B2:DF:7D:78:41:F8:19
            X509v3 Authority Key Identifier:
                keyid:41:17:D7:6C:3E:C0:4B:62:11:33:48:50:A5:CD:6E:A3:05:53:50:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ED6B5/EF469BFC594411ECAF575A6CC4F9AE02/QRfXbD7AS2IRM0hQpc1uowVTUFw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRfXbD7AS2IRM0hQpc1uowVTUFw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED6B5/EF469BFC594411ECAF575A6CC4F9AE02/06A899FECCF311EC86719729C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.24.73.0/24
                  203.32.71.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b8:a7:70:fa:8e:de:2e:c5:77:ff:a4:25:04:1a:fb:54:61:ec:
         f2:bd:b7:6f:d4:1c:04:61:27:28:95:9d:b8:2f:5c:c8:56:e4:
         30:eb:04:ae:e5:36:67:7b:5f:56:e9:26:3b:8d:0e:81:ab:e4:
         a8:7b:5c:80:1e:bc:b9:76:17:d5:06:c2:95:7a:5b:15:a7:b2:
         14:0a:a8:68:7b:ff:61:e9:3f:58:b0:6f:19:4f:ec:57:94:6d:
         b7:31:88:f2:25:66:5e:51:7b:f6:45:f0:36:c2:bf:dc:3c:08:
         2b:c0:0d:c4:31:5c:97:76:e6:01:5e:2c:b6:12:57:d7:09:99:
         1f:62:28:3a:de:32:63:3b:7a:98:65:83:1d:71:4f:20:65:e8:
         41:b1:9f:df:8c:b9:60:10:57:6b:25:10:ca:df:21:f4:9c:14:
         da:0f:8c:56:41:fa:37:39:64:96:09:68:1e:66:35:d7:27:74:
         d1:1f:d9:23:66:43:76:b5:c1:9d:a1:16:73:69:28:eb:c3:44:
         1b:98:19:97:c9:98:8c:9a:b9:97:ee:fe:7a:0b:97:b3:cc:fe:
         a9:9a:e9:b3:f8:24:9a:5c:34:2c:f0:f9:e7:4d:3d:66:ba:b3:
         55:86:a6:90:21:a7:b2:ae:f1:f6:36:c8:20:27:30:3a:59:e4:
         8a:a3:e2:e3
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICA1swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUQ2QjUxMTAvBgNVBAUTKDQxMTdENzZDM0VDMDRCNjIxMTMzNDg1MEE1Q0Q2RUEz
MDU1MzUwNUMwHhcNMjQwMjI3MDI0NDQwWhcNMjUwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NWRkNGM5OC01MWUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwBUUIpMCFVgeKLI6OFnH4g5Dmf3L06MU2JJsYQkq//sQgzQgPa94PcoGywwt
LCSwGhGlkyJJW6HCUAsNV1k7TVk32NdcbtYDcKUsZsnfQ5p9WzxUEsqBwosxdWGc
x+ho/DCW6CHO9bxWFceCEGnHroAmhHyjRWedI3fBrSJjcdRpqv4e8ER21OBWWw6x
FTYKOKtePQctlGadD6tI5v1/qRwqwwkKLdjsH7JBdc4HJzXsdCCDvEAOvH2ZX97b
hFL41E6qPQbfTg8vsDqa21enXMDIIidAWeuHwEoliod0Ogja3EIh1CZT4Qc8uPCR
ixML5VbtxK2GKNi9YrKleHJddQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFGgCo75p
hNQiVV/5OUWy3314QfgZMB8GA1UdIwQYMBaAFEEX12w+wEtiETNIUKXNbqMFU1Bc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRDZCNS9FRjQ2OUJGQzU5
NDQxMUVDQUY1NzVBNkNDNEY5QUUwMi9RUmZYYkQ3QVMySVJNMGhRcGMxdW93VlRV
RncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1FSZlhiRDdBUzJJUk0waFFwYzF1b3dWVFVGdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RUQ2QjUvRUY0NjlCRkM1OTQ0MTFFQ0FGNTc1QTZDQzRGOUFFMDIvMDZBODk5RkVD
Q0YzMTFFQzg2NzE5NzI5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBADLGEkDBADLIEcwDQYJKoZIhvcNAQELBQADggEBALincPqO
3i7Fd/+kJQQa+1Rh7PK9t2/UHARhJyiVnbgvXMhW5DDrBK7lNmd7X1bpJjuNDoGr
5Kh7XIAevLl2F9UGwpV6WxWnshQKqGh7/2HpP1iwbxlP7FeUbbcxiPIlZl5Re/ZF
8DbCv9w8CCvADcQxXJd25gFeLLYSV9cJmR9iKDreMmM7ephlgx1xTyBl6EGxn9+M
uWAQV2slEMrfIfScFNoPjFZB+jc5ZJYJaB5mNdcndNEf2SNmQ3a1wZ2hFnNpKOvD
RBuYGZfJmIyauZfu/noLl7PM/qma6bP4JJpcNCzw+edNPWa6s1WGppAhp7Ku8fY2
yCAnMDpZ5Iqj4uM=
-----END CERTIFICATE-----
Generated at Thu Nov 21 01:32:00 2024 by rpki-client on console-fra.rpki-client.org