Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F18DE/EEA13C9C75DA11EAB493F049C4F9AE02/8880996075DC11EA84E0A94CC4F9AE02.roa
File:                     8880996075DC11EA84E0A94CC4F9AE02.roa (raw, json)
Hash identifier:          KSkeshNL6ybRiQ1oR9k2xFNVFJPTv2DYVpT1APVFu2g=
Subject key identifier:   57:5B:59:C1:C1:27:0D:A6:7E:9D:37:91:87:BE:80:36:37:9C:0F:49
Certificate issuer:       /CN=A91F18DE/serialNumber=F0FDA24882C675A3C601DBFA5C0263C23A692A22
Certificate serial:       0933
Authority key identifier: F0:FD:A2:48:82:C6:75:A3:C6:01:DB:FA:5C:02:63:C2:3A:69:2A:22
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8P2iSILGdaPGAdv6XAJjwjppKiI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F18DE/EEA13C9C75DA11EAB493F049C4F9AE02/8880996075DC11EA84E0A94CC4F9AE02.roa
Signing time:             Sun 14 Apr 2024 21:29:34 +0000
ROA not before:           Sun 14 Apr 2024 21:29:34 +0000
ROA not after:            Wed 28 May 2025 00:00:00 +0000
asID:                     140090
IP address blocks:        103.148.98.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F18DE/EEA13C9C75DA11EAB493F049C4F9AE02/8P2iSILGdaPGAdv6XAJjwjppKiI.crl
                          rsync://rpki.apnic.net/member_repository/A91F18DE/EEA13C9C75DA11EAB493F049C4F9AE02/8P2iSILGdaPGAdv6XAJjwjppKiI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8P2iSILGdaPGAdv6XAJjwjppKiI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 19:48:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2355 (0x933)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F18DE/serialNumber=F0FDA24882C675A3C601DBFA5C0263C23A692A22
        Validity
            Not Before: Apr 14 21:29:34 2024 GMT
            Not After : May 28 00:00:00 2025 GMT
        Subject: CN=661c4abe-52b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ff:5d:8d:78:bb:05:35:7d:36:04:48:96:58:
                    9f:b4:f1:3f:9e:af:2d:bd:de:de:25:70:fc:99:cf:
                    80:b4:d6:d5:59:83:86:c0:76:46:fb:86:80:a8:c8:
                    33:1e:5b:69:83:25:c1:f8:56:bf:b3:4a:ca:2e:b2:
                    15:8e:f9:c5:e5:e7:a4:6f:10:c2:94:cc:b8:86:1b:
                    ac:9d:af:c1:0e:69:d1:fd:1d:1e:74:9c:ee:75:75:
                    6c:42:16:f5:61:ee:ee:ff:e6:88:d0:8d:1e:c2:73:
                    f2:69:19:e5:00:0a:6e:12:e3:a6:9c:e0:ee:ea:8a:
                    2c:d8:ea:39:b9:3c:38:79:8b:91:35:5c:98:9a:49:
                    bb:20:85:ba:60:cb:b8:20:fb:ee:a0:c0:5d:fe:85:
                    46:48:87:26:09:b0:b3:2a:4a:24:ea:17:4e:3e:10:
                    71:93:9d:81:a3:64:07:32:78:6d:1a:2b:16:a8:7c:
                    c7:b1:dd:20:f6:9b:fd:a8:2c:8c:ec:81:fb:23:c9:
                    e9:2f:58:0a:f5:17:e6:31:ca:1c:8f:c8:3e:22:6d:
                    5d:ca:36:2d:d0:ad:48:30:df:e4:26:8c:20:75:63:
                    42:88:63:05:e0:62:dc:ac:1a:5d:58:46:1d:1d:47:
                    f6:5d:17:f3:84:f2:fe:e2:07:ae:25:99:24:94:7a:
                    d7:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:5B:59:C1:C1:27:0D:A6:7E:9D:37:91:87:BE:80:36:37:9C:0F:49
            X509v3 Authority Key Identifier:
                keyid:F0:FD:A2:48:82:C6:75:A3:C6:01:DB:FA:5C:02:63:C2:3A:69:2A:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F18DE/EEA13C9C75DA11EAB493F049C4F9AE02/8P2iSILGdaPGAdv6XAJjwjppKiI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8P2iSILGdaPGAdv6XAJjwjppKiI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F18DE/EEA13C9C75DA11EAB493F049C4F9AE02/8880996075DC11EA84E0A94CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.148.98.0/23

    Signature Algorithm: sha256WithRSAEncryption
         37:f8:f6:42:44:d7:ef:e3:99:39:13:ba:50:f4:d7:0e:cc:58:
         ab:68:b7:58:54:1c:f4:97:2c:5b:2d:33:8b:87:ce:e0:11:90:
         1c:58:e1:ce:a6:79:26:2c:88:a4:33:bc:05:bc:fc:14:38:42:
         71:cb:62:e8:8f:5d:b0:cf:a1:62:ed:7e:57:43:79:9e:bb:90:
         37:69:0e:3b:06:b2:91:7a:f9:98:20:96:41:63:6e:d3:5e:2c:
         13:a7:c0:06:3a:d7:ff:5a:93:98:09:b0:a4:5a:8c:0b:8c:8d:
         3f:15:5d:f9:43:cb:4a:61:99:91:52:33:8a:ce:e6:ba:12:c6:
         5a:da:e7:7a:c8:d3:c6:97:b0:c6:7d:4f:f6:1a:b0:55:72:c7:
         38:3e:ad:68:8c:cc:5e:19:2f:88:df:d0:d5:4a:ea:0b:57:96:
         f6:70:c8:d7:d6:c4:74:37:d9:07:9d:e9:47:88:85:0a:8a:85:
         29:0e:26:2c:cb:88:1e:bb:30:4e:b6:e1:4d:79:25:45:66:fd:
         85:26:be:25:7a:ca:21:c6:17:55:6d:31:fd:ce:b4:8e:ce:81:
         86:cc:03:15:ff:73:0e:51:cc:53:3e:56:36:cb:ec:e5:43:27:
         73:5a:18:18:fb:0d:96:fe:57:13:7a:bb:73:da:3d:e1:7d:24:
         09:54:31:39
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICCTMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjE4REUxMTAvBgNVBAUTKEYwRkRBMjQ4ODJDNjc1QTNDNjAxREJGQTVDMDI2M0My
M0E2OTJBMjIwHhcNMjQwNDE0MjEyOTM0WhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02NjFjNGFiZS01MmIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0v9djXi7BTV9NgRIlliftPE/nq8tvd7eJXD8mc+AtNbVWYOGwHZG+4aAqMgz
HltpgyXB+Fa/s0rKLrIVjvnF5eekbxDClMy4hhusna/BDmnR/R0edJzudXVsQhb1
Ye7u/+aI0I0ewnPyaRnlAApuEuOmnODu6oos2Oo5uTw4eYuRNVyYmkm7IIW6YMu4
IPvuoMBd/oVGSIcmCbCzKkok6hdOPhBxk52Bo2QHMnhtGisWqHzHsd0g9pv9qCyM
7IH7I8npL1gK9RfmMcocj8g+Im1dyjYt0K1IMN/kJowgdWNCiGMF4GLcrBpdWEYd
HUf2XRfzhPL+4geuJZkklHrXXwIDAQABo4IClTCCApEwHQYDVR0OBBYEFFdbWcHB
Jw2mfp03kYe+gDY3nA9JMB8GA1UdIwQYMBaAFPD9okiCxnWjxgHb+lwCY8I6aSoi
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMThERS9FRUExM0M5Qzc1
REExMUVBQjQ5M0YwNDlDNEY5QUUwMi84UDJpU0lMR2RhUEdBZHY2WEFKandqcHBL
aUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzhQMmlTSUxHZGFQR0FkdjZYQUpqd2pwcEtpSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RjE4REUvRUVBMTNDOUM3NURBMTFFQUI0OTNGMDQ5QzRGOUFFMDIvODg4MDk5NjA3
NURDMTFFQTg0RTBBOTRDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnlGIwDQYJKoZIhvcNAQELBQADggEBADf49kJE1+/jmTkT
ulD01w7MWKtot1hUHPSXLFstM4uHzuARkBxY4c6meSYsiKQzvAW8/BQ4QnHLYuiP
XbDPoWLtfldDeZ67kDdpDjsGspF6+ZgglkFjbtNeLBOnwAY61/9ak5gJsKRajAuM
jT8VXflDy0phmZFSM4rO5roSxlra53rI08aXsMZ9T/YasFVyxzg+rWiMzF4ZL4jf
0NVK6gtXlvZwyNfWxHQ32Qed6UeIhQqKhSkOJizLiB67ME624U15JUVm/YUmviV6
yiHGF1VtMf3OtI7OgYbMAxX/cw5RzFM+VjbL7OVDJ3NaGBj7DZb+VxN6u3PaPeF9
JAlUMTk=
-----END CERTIFICATE-----
Generated at Fri Nov 22 22:14:49 2024 by rpki-client on console-ams.rpki-client.org