Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2A41/BD4146DAE93511ECAC665452C4F9AE02/ADBF1F6EE93C11ECA5406975C4F9AE02.roa
File:                     ADBF1F6EE93C11ECA5406975C4F9AE02.roa (raw, json)
Hash identifier:          qb7qUtAkoHjPv30O4ulR321GUnOwL4yDIMYd10CmtCA=
Subject key identifier:   32:6C:72:4E:6D:79:24:90:BF:95:E4:3D:CC:CF:CF:DB:9E:FB:1F:99
Certificate issuer:       /CN=A91F2A41/serialNumber=EEFBC65363F5716D724C117CD54221E412D923CC
Certificate serial:       0228
Authority key identifier: EE:FB:C6:53:63:F5:71:6D:72:4C:11:7C:D5:42:21:E4:12:D9:23:CC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7vvGU2P1cW1yTBF81UIh5BLZI8w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F2A41/BD4146DAE93511ECAC665452C4F9AE02/ADBF1F6EE93C11ECA5406975C4F9AE02.roa
Signing time:             Wed 05 Jun 2024 04:32:13 +0000
ROA not before:           Wed 05 Jun 2024 04:32:13 +0000
ROA not after:            Sun 31 Aug 2025 00:00:00 +0000
asID:                     4826
IP address blocks:        103.188.182.0/23 maxlen: 23
                          103.188.182.0/24 maxlen: 24
                          103.188.183.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F2A41/BD4146DAE93511ECAC665452C4F9AE02/7vvGU2P1cW1yTBF81UIh5BLZI8w.crl
                          rsync://rpki.apnic.net/member_repository/A91F2A41/BD4146DAE93511ECAC665452C4F9AE02/7vvGU2P1cW1yTBF81UIh5BLZI8w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7vvGU2P1cW1yTBF81UIh5BLZI8w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 552 (0x228)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F2A41/serialNumber=EEFBC65363F5716D724C117CD54221E412D923CC
        Validity
            Not Before: Jun  5 04:32:13 2024 GMT
            Not After : Aug 31 00:00:00 2025 GMT
        Subject: CN=665fea4d-f0eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:f0:5b:99:6f:2d:cd:03:7d:66:f6:20:6c:0d:
                    5f:fb:30:5a:dc:37:8d:95:6d:ab:36:79:e0:a3:d8:
                    73:7c:91:bc:2f:fa:85:43:c2:4c:a4:30:00:dc:ba:
                    0b:fd:66:f9:99:e9:49:47:44:6a:3a:fc:2b:8d:f6:
                    4f:fd:92:d1:38:f2:65:8c:86:84:28:61:6e:90:20:
                    1a:07:ad:bf:6f:b6:c6:76:9b:9a:ae:3d:2f:f8:21:
                    2b:50:9c:bb:99:f9:11:03:f5:ac:f7:da:9e:e7:5e:
                    04:e1:02:0d:f9:87:ba:66:fe:75:ef:58:34:7a:3f:
                    4f:c6:8e:78:a8:18:6e:6a:e8:35:1d:07:1c:3e:c3:
                    24:fe:ef:0a:7c:a9:da:b9:d7:3e:b3:fb:4f:e0:8f:
                    f9:76:24:c7:81:c1:51:2b:90:32:a3:5a:19:df:02:
                    a1:14:f4:8e:b0:fb:ea:c6:cd:c2:d1:5f:89:db:fc:
                    c9:86:7f:3b:a6:e4:e5:97:12:e6:89:8e:fa:cb:a7:
                    67:24:60:0c:91:aa:ab:cc:10:d9:1e:a6:26:15:8a:
                    66:f3:14:cd:80:25:07:0d:3a:46:d9:58:36:ea:00:
                    62:21:08:d0:21:69:73:a1:1b:58:46:23:91:ce:c3:
                    ed:84:01:e0:6d:86:c2:f9:ac:9b:58:08:10:36:8f:
                    30:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:6C:72:4E:6D:79:24:90:BF:95:E4:3D:CC:CF:CF:DB:9E:FB:1F:99
            X509v3 Authority Key Identifier:
                keyid:EE:FB:C6:53:63:F5:71:6D:72:4C:11:7C:D5:42:21:E4:12:D9:23:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F2A41/BD4146DAE93511ECAC665452C4F9AE02/7vvGU2P1cW1yTBF81UIh5BLZI8w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7vvGU2P1cW1yTBF81UIh5BLZI8w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2A41/BD4146DAE93511ECAC665452C4F9AE02/ADBF1F6EE93C11ECA5406975C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.188.182.0/23

    Signature Algorithm: sha256WithRSAEncryption
         79:6c:df:df:97:49:b9:cc:43:54:94:f3:aa:71:8c:23:d8:38:
         3e:af:ac:d6:93:a2:3d:71:85:72:c0:81:1c:a0:36:ef:f1:e3:
         c3:da:2d:2a:ca:9e:c3:dd:3c:c5:f4:ef:5b:b5:11:bf:03:9d:
         71:6d:b5:f2:b0:60:fe:36:bf:00:99:ad:8c:fe:a0:cf:7f:02:
         0d:31:0d:e3:c0:7f:27:77:fa:fb:f1:a7:e0:9f:b1:86:76:20:
         c4:fd:e9:2a:84:42:d2:fb:45:7b:83:6e:20:57:73:bc:58:f5:
         19:0d:9d:a5:6a:d9:90:15:02:9d:3f:6e:bb:ac:7b:70:a7:5d:
         10:a8:83:10:cc:2c:17:9b:b0:f1:38:7d:83:e4:3a:63:21:18:
         38:cf:8e:79:54:63:cd:37:86:93:a9:13:92:6c:99:1f:7b:70:
         0a:79:db:bd:10:e0:57:2f:01:4d:f5:90:c5:09:f7:9d:21:29:
         56:93:ab:2d:9e:35:56:a8:1f:15:4b:b6:64:50:68:a7:8b:39:
         de:58:bc:28:b4:21:1a:41:d3:c6:13:c4:f2:70:b9:ea:3f:f1:
         7a:7c:bf:6a:0c:f6:be:67:6d:8d:8f:f0:2f:de:b1:bd:fb:0a:
         6c:8d:9f:b9:15:81:64:82:f9:aa:63:97:ee:ef:a4:bc:ce:37:
         f2:9c:1c:66
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAigwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjJBNDExMTAvBgNVBAUTKEVFRkJDNjUzNjNGNTcxNkQ3MjRDMTE3Q0Q1NDIyMUU0
MTJEOTIzQ0MwHhcNMjQwNjA1MDQzMjEzWhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NjVmZWE0ZC1mMGViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1vBbmW8tzQN9ZvYgbA1f+zBa3DeNlW2rNnngo9hzfJG8L/qFQ8JMpDAA3LoL
/Wb5melJR0RqOvwrjfZP/ZLROPJljIaEKGFukCAaB62/b7bGdpuarj0v+CErUJy7
mfkRA/Ws99qe514E4QIN+Ye6Zv5171g0ej9Pxo54qBhuaug1HQccPsMk/u8KfKna
udc+s/tP4I/5diTHgcFRK5Ayo1oZ3wKhFPSOsPvqxs3C0V+J2/zJhn87puTllxLm
iY76y6dnJGAMkaqrzBDZHqYmFYpm8xTNgCUHDTpG2Vg26gBiIQjQIWlzoRtYRiOR
zsPthAHgbYbC+aybWAgQNo8wqwIDAQABo4IClTCCApEwHQYDVR0OBBYEFDJsck5t
eSSQv5XkPczPz9ue+x+ZMB8GA1UdIwQYMBaAFO77xlNj9XFtckwRfNVCIeQS2SPM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMkE0MS9CRDQxNDZEQUU5
MzUxMUVDQUM2NjU0NTJDNEY5QUUwMi83dnZHVTJQMWNXMXlUQkY4MVVJaDVCTFpJ
OHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzd2dkdVMlAxY1cxeVRCRjgxVUloNUJMWkk4dy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RjJBNDEvQkQ0MTQ2REFFOTM1MTFFQ0FDNjY1NDUyQzRGOUFFMDIvQURCRjFGNkVF
OTNDMTFFQ0E1NDA2OTc1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnvLYwDQYJKoZIhvcNAQELBQADggEBAHls39+XSbnMQ1SU
86pxjCPYOD6vrNaToj1xhXLAgRygNu/x48PaLSrKnsPdPMX071u1Eb8DnXFttfKw
YP42vwCZrYz+oM9/Ag0xDePAfyd3+vvxp+CfsYZ2IMT96SqEQtL7RXuDbiBXc7xY
9RkNnaVq2ZAVAp0/bruse3CnXRCogxDMLBebsPE4fYPkOmMhGDjPjnlUY803hpOp
E5JsmR97cAp5270Q4FcvAU31kMUJ950hKVaTqy2eNVaoHxVLtmRQaKeLOd5YvCi0
IRpB08YTxPJwueo/8Xp8v2oM9r5nbY2P8C/esb37CmyNn7kVgWSC+apjl+7vpLzO
N/KcHGY=
-----END CERTIFICATE-----
Generated at Sat Nov 23 02:33:50 2024 by rpki-client on console-fra.rpki-client.org