Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F185F/700BED9C9EC811EBB7016448C4F9AE02/636BEC0EDE2911EB9B09A334C4F9AE02.roa
File:                     636BEC0EDE2911EB9B09A334C4F9AE02.roa (raw, json)
Hash identifier:          /h8J/popASB/enq7ZCbERS1Oj0/TN/HVqhlVaGun2i4=
Subject key identifier:   8D:9C:15:84:F6:8E:FA:74:91:56:E9:C0:4E:DD:4A:48:B2:86:B6:3C
Certificate issuer:       /CN=A91F185F/serialNumber=58E33F0D5A326881140715D1316E01DEAF24AD0F
Certificate serial:       055B
Authority key identifier: 58:E3:3F:0D:5A:32:68:81:14:07:15:D1:31:6E:01:DE:AF:24:AD:0F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WOM_DVoyaIEUBxXRMW4B3q8krQ8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F185F/700BED9C9EC811EBB7016448C4F9AE02/636BEC0EDE2911EB9B09A334C4F9AE02.roa
Signing time:             Wed 03 Apr 2024 01:03:58 +0000
ROA not before:           Wed 03 Apr 2024 01:03:58 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     48024
IP address blocks:        103.90.136.0/22 maxlen: 24
                          202.8.104.0/22 maxlen: 24
                          2403:4f40::/32 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F185F/700BED9C9EC811EBB7016448C4F9AE02/WOM_DVoyaIEUBxXRMW4B3q8krQ8.crl
                          rsync://rpki.apnic.net/member_repository/A91F185F/700BED9C9EC811EBB7016448C4F9AE02/WOM_DVoyaIEUBxXRMW4B3q8krQ8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WOM_DVoyaIEUBxXRMW4B3q8krQ8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Dec 2024 17:11:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1371 (0x55b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F185F/serialNumber=58E33F0D5A326881140715D1316E01DEAF24AD0F
        Validity
            Not Before: Apr  3 01:03:58 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=660caafe-88ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:30:f5:81:06:e3:09:aa:96:a5:5b:0b:99:fd:
                    67:c3:c5:1f:2f:40:11:9d:92:95:3f:7b:2e:a8:e0:
                    5d:c8:0f:89:ef:68:d1:b5:bf:81:13:f1:e4:ae:d9:
                    20:67:ee:2e:9f:bc:46:41:b9:20:58:de:ec:3c:10:
                    bf:df:0f:db:b4:98:8f:28:42:c9:12:d4:bc:d8:66:
                    d5:d6:7f:25:b4:7a:13:b5:94:08:d6:c5:6a:a3:4c:
                    0c:e4:0b:0a:e7:06:63:d6:aa:3b:88:8a:64:0d:15:
                    b5:16:dc:9f:d1:4b:e5:df:b2:35:54:dd:54:cf:a7:
                    da:b4:da:28:c1:73:18:d7:29:5d:74:7d:e2:57:17:
                    9c:13:f3:36:75:fc:9a:17:3f:4e:99:bc:43:2a:8c:
                    43:60:bf:40:52:07:4c:a9:ed:b2:59:69:f0:55:37:
                    a2:e8:c3:cb:d1:4e:a4:9a:25:15:f9:82:6c:28:a0:
                    a4:e0:a6:3a:d8:5d:28:1b:d4:11:6c:42:df:64:d9:
                    cc:58:25:24:8d:f0:08:83:f3:c7:d7:69:c2:28:f8:
                    47:cc:6a:31:c3:e4:c8:14:a7:bf:26:93:14:95:e1:
                    26:1e:7a:5f:c7:55:2d:a5:16:e7:72:ab:d5:e3:63:
                    a8:80:6f:36:da:b6:0b:de:2c:46:f8:04:1e:43:9a:
                    49:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:9C:15:84:F6:8E:FA:74:91:56:E9:C0:4E:DD:4A:48:B2:86:B6:3C
            X509v3 Authority Key Identifier:
                keyid:58:E3:3F:0D:5A:32:68:81:14:07:15:D1:31:6E:01:DE:AF:24:AD:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F185F/700BED9C9EC811EBB7016448C4F9AE02/WOM_DVoyaIEUBxXRMW4B3q8krQ8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WOM_DVoyaIEUBxXRMW4B3q8krQ8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F185F/700BED9C9EC811EBB7016448C4F9AE02/636BEC0EDE2911EB9B09A334C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.90.136.0/22
                  202.8.104.0/22
                IPv6:
                  2403:4f40::/32

    Signature Algorithm: sha256WithRSAEncryption
         ad:1c:1c:eb:07:81:1f:1a:4c:77:8e:39:94:01:b9:d1:10:27:
         6a:8a:f8:bd:7c:82:93:35:32:28:ce:dc:a3:99:0b:2b:82:0a:
         a5:25:cb:6e:30:1b:89:11:a1:68:02:97:a5:53:5a:41:ac:30:
         6d:29:79:9d:99:60:11:3e:0f:97:3c:4f:1c:94:55:bd:a8:dc:
         22:94:65:92:28:c2:17:b4:56:09:e1:d7:c6:ba:e5:c0:d5:6d:
         be:4b:f2:44:55:3e:d3:5a:c9:ee:e7:cd:96:a5:81:60:ba:59:
         52:10:d4:19:a9:54:be:19:5a:4d:fb:91:8d:d4:36:36:e4:c5:
         e5:84:d3:ad:8b:29:dc:14:76:b5:b9:41:50:5c:eb:42:fd:19:
         da:dc:be:a4:d9:c7:d8:f8:fd:1a:85:55:0d:07:45:28:fd:90:
         2f:18:45:2f:01:ad:07:32:1c:36:ec:64:dc:5f:86:a9:c2:03:
         7a:55:8b:6f:d7:64:f5:74:79:0d:43:2b:fe:66:65:90:fd:26:
         94:4c:1a:7c:3c:cf:c0:85:ce:fe:a6:6f:cc:e8:d8:5b:d2:8c:
         43:6d:78:c2:30:2e:e3:0b:5a:53:c9:37:f5:ba:aa:c1:3a:2b:
         d8:ab:e7:07:eb:39:30:81:f0:3b:2b:48:bd:7b:c5:05:8d:4b:
         d5:ff:9e:f3
-----BEGIN CERTIFICATE-----
MIIFhjCCBG6gAwIBAgICBVswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjE4NUYxMTAvBgNVBAUTKDU4RTMzRjBENUEzMjY4ODExNDA3MTVEMTMxNkUwMURF
QUYyNEFEMEYwHhcNMjQwNDAzMDEwMzU4WhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NjBjYWFmZS04OGNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzzD1gQbjCaqWpVsLmf1nw8UfL0ARnZKVP3suqOBdyA+J72jRtb+BE/Hkrtkg
Z+4un7xGQbkgWN7sPBC/3w/btJiPKELJEtS82GbV1n8ltHoTtZQI1sVqo0wM5AsK
5wZj1qo7iIpkDRW1Ftyf0Uvl37I1VN1Uz6fatNoowXMY1ylddH3iVxecE/M2dfya
Fz9OmbxDKoxDYL9AUgdMqe2yWWnwVTei6MPL0U6kmiUV+YJsKKCk4KY62F0oG9QR
bELfZNnMWCUkjfAIg/PH12nCKPhHzGoxw+TIFKe/JpMUleEmHnpfx1UtpRbncqvV
42OogG822rYL3ixG+AQeQ5pJtQIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFI2cFYT2
jvp0kVbpwE7dSkiyhrY8MB8GA1UdIwQYMBaAFFjjPw1aMmiBFAcV0TFuAd6vJK0P
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTg1Ri83MDBCRUQ5QzlF
QzgxMUVCQjcwMTY0NDhDNEY5QUUwMi9XT01fRFZveWFJRVVCeFhSTVc0QjNxOGty
UTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1dPTV9EVm95YUlFVUJ4WFJNVzRCM3E4a3JROC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RjE4NUYvNzAwQkVEOUM5RUM4MTFFQkI3MDE2NDQ4QzRGOUFFMDIvNjM2QkVDMEVE
RTI5MTFFQjlCMDlBMzM0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E
JTAjMBIEAgABMAwDBAJnWogDBALKCGgwDQQCAAIwBwMFACQDT0AwDQYJKoZIhvcN
AQELBQADggEBAK0cHOsHgR8aTHeOOZQBudEQJ2qK+L18gpM1MijO3KOZCyuCCqUl
y24wG4kRoWgCl6VTWkGsMG0peZ2ZYBE+D5c8TxyUVb2o3CKUZZIowhe0Vgnh18a6
5cDVbb5L8kRVPtNaye7nzZalgWC6WVIQ1BmpVL4ZWk37kY3UNjbkxeWE062LKdwU
drW5QVBc60L9GdrcvqTZx9j4/RqFVQ0HRSj9kC8YRS8BrQcyHDbsZNxfhqnCA3pV
i2/XZPV0eQ1DK/5mZZD9JpRMGnw8z8CFzv6mb8zo2FvSjENteMIwLuMLWlPJN/W6
qsE6K9ir5wfrOTCB8DsrSL17xQWNS9X/nvM=
-----END CERTIFICATE-----
Generated at Sun Nov 24 23:58:54 2024 by rpki-client on console-fra.rpki-client.org