Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F39EC/1355E75266BB11EE8462EE84C4F9AE02/8B510B0E9AAB11EF80067478C4F9AE02.roa
File:                     8B510B0E9AAB11EF80067478C4F9AE02.roa (raw, json)
Hash identifier:          YZngeoED5erZiA8jhFEGKyLUX1pGDyOBVXlXB5jJC/M=
Subject key identifier:   CE:05:26:0F:12:DC:8D:5B:41:B5:CC:8A:2F:18:2C:35:FB:85:9B:9C
Certificate issuer:       /CN=A91F39EC/serialNumber=E1B9A6EB0C8FAFF7F54C68C05624A28CFD3FADEC
Certificate serial:       D2
Authority key identifier: E1:B9:A6:EB:0C:8F:AF:F7:F5:4C:68:C0:56:24:A2:8C:FD:3F:AD:EC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bmm6wyPr_f1TGjAViSijP0_rew.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F39EC/1355E75266BB11EE8462EE84C4F9AE02/8B510B0E9AAB11EF80067478C4F9AE02.roa
Signing time:             Mon 04 Nov 2024 12:51:44 +0000
ROA not before:           Mon 04 Nov 2024 12:51:44 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     151832
IP address blocks:        103.213.220.0/23 maxlen: 23
                          103.213.220.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F39EC/1355E75266BB11EE8462EE84C4F9AE02/4bmm6wyPr_f1TGjAViSijP0_rew.crl
                          rsync://rpki.apnic.net/member_repository/A91F39EC/1355E75266BB11EE8462EE84C4F9AE02/4bmm6wyPr_f1TGjAViSijP0_rew.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bmm6wyPr_f1TGjAViSijP0_rew.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 210 (0xd2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F39EC/serialNumber=E1B9A6EB0C8FAFF7F54C68C05624A28CFD3FADEC
        Validity
            Not Before: Nov  4 12:51:44 2024 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=6728c360-11ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:23:80:e8:f4:ce:f7:5a:d8:94:6c:a9:de:ce:
                    7b:cd:f4:a3:ee:4c:ac:ec:6f:0a:9b:15:c8:62:26:
                    87:56:f4:59:b5:1b:48:90:29:58:88:30:30:7f:a3:
                    98:83:d8:70:b6:58:ae:ed:21:cf:8a:46:91:b2:9e:
                    5a:1c:21:d4:a5:dc:43:27:21:d1:77:e5:81:33:4c:
                    ee:ec:cc:5e:05:70:47:29:e8:8b:74:a7:53:9d:15:
                    c7:87:93:76:5b:6d:54:f4:4a:b8:85:9d:bf:73:a3:
                    f7:72:d4:fd:d6:cb:e3:c4:46:53:5a:a8:94:08:ad:
                    83:b7:96:c8:45:60:2a:ef:a9:38:2d:8e:a1:67:da:
                    1b:ff:b1:e1:bf:b8:91:37:b0:e8:33:85:7d:6e:67:
                    76:70:24:91:bd:94:79:cc:2a:6d:69:6e:9b:eb:26:
                    7f:dc:4f:71:13:87:5e:e7:f4:5e:b6:09:56:8e:41:
                    50:ad:d5:87:41:fb:23:9a:ce:3b:97:8a:80:0e:97:
                    de:49:40:36:f8:01:f4:58:87:de:8d:75:d3:49:88:
                    d5:d4:1a:d6:db:ae:19:01:45:a4:9c:aa:68:d0:a4:
                    1d:fb:c7:ad:5e:64:9f:18:c0:90:71:73:38:d3:73:
                    04:56:5b:ec:ca:04:15:3b:cf:b3:fa:f5:fe:04:10:
                    77:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:05:26:0F:12:DC:8D:5B:41:B5:CC:8A:2F:18:2C:35:FB:85:9B:9C
            X509v3 Authority Key Identifier:
                keyid:E1:B9:A6:EB:0C:8F:AF:F7:F5:4C:68:C0:56:24:A2:8C:FD:3F:AD:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F39EC/1355E75266BB11EE8462EE84C4F9AE02/4bmm6wyPr_f1TGjAViSijP0_rew.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bmm6wyPr_f1TGjAViSijP0_rew.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F39EC/1355E75266BB11EE8462EE84C4F9AE02/8B510B0E9AAB11EF80067478C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.213.220.0/23

    Signature Algorithm: sha256WithRSAEncryption
         22:7c:04:3a:4d:c4:f1:b3:bb:ef:77:16:9e:ea:32:a5:40:9d:
         e2:20:a4:05:3d:fb:26:85:77:8b:5b:d8:45:be:c9:df:32:b6:
         f3:7f:d0:31:c4:20:30:61:0b:14:ae:e5:2c:75:0a:15:ee:2d:
         b4:e2:ac:9a:af:a9:87:27:62:8f:a5:94:c3:14:c9:b7:02:48:
         6f:e3:d1:81:4d:67:d8:89:16:e9:42:e9:bc:6a:2a:eb:2a:df:
         5f:ad:f2:f1:cf:17:03:5c:12:92:69:e0:c0:6b:5b:39:35:ef:
         c4:8b:85:77:36:84:6d:3a:ec:c8:cd:bb:e9:04:e1:cf:48:fb:
         ca:93:ea:dc:06:53:9f:d6:d2:95:5e:ab:c2:1f:f1:b7:38:69:
         bd:35:d1:96:9d:e9:e2:2d:3f:4a:69:31:33:d7:37:7d:e9:76:
         04:2c:85:bb:b8:e7:7e:35:f1:15:3b:5d:a9:85:86:54:d7:3a:
         f8:b9:80:59:39:08:d9:41:62:3a:ff:f4:4a:36:61:e9:b6:9e:
         19:96:a6:1b:c5:dc:2f:f8:76:74:ad:99:37:2b:b6:9d:2c:3a:
         4c:2d:38:40:c1:1c:bb:8b:24:63:ba:b5:66:1b:ad:de:9f:80:
         2b:99:13:0c:1c:57:7c:ae:8f:c0:9b:67:07:4a:9b:99:98:a5:
         69:db:32:1a
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICANIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjM5RUMxMTAvBgNVBAUTKEUxQjlBNkVCMEM4RkFGRjdGNTRDNjhDMDU2MjRBMjhD
RkQzRkFERUMwHhcNMjQxMTA0MTI1MTQ0WhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzI4YzM2MC0xMWVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmCOA6PTO91rYlGyp3s57zfSj7kys7G8KmxXIYiaHVvRZtRtIkClYiDAwf6OY
g9hwtliu7SHPikaRsp5aHCHUpdxDJyHRd+WBM0zu7MxeBXBHKeiLdKdTnRXHh5N2
W21U9Eq4hZ2/c6P3ctT91svjxEZTWqiUCK2Dt5bIRWAq76k4LY6hZ9ob/7Hhv7iR
N7DoM4V9bmd2cCSRvZR5zCptaW6b6yZ/3E9xE4de5/RetglWjkFQrdWHQfsjms47
l4qADpfeSUA2+AH0WIfejXXTSYjV1BrW264ZAUWknKpo0KQd+8etXmSfGMCQcXM4
03MEVlvsygQVO8+z+vX+BBB37QIDAQABo4IClTCCApEwHQYDVR0OBBYEFM4FJg8S
3I1bQbXMii8YLDX7hZucMB8GA1UdIwQYMBaAFOG5pusMj6/39UxowFYkooz9P63s
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzlFQy8xMzU1RTc1MjY2
QkIxMUVFODQ2MkVFODRDNEY5QUUwMi80Ym1tNnd5UHJfZjFUR2pBVmlTaWpQMF9y
ZXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzRibW02d3lQcl9mMVRHakFWaVNpalAwX3Jldy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RjM5RUMvMTM1NUU3NTI2NkJCMTFFRTg0NjJFRTg0QzRGOUFFMDIvOEI1MTBCMEU5
QUFCMTFFRjgwMDY3NDc4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFn1dwwDQYJKoZIhvcNAQELBQADggEBACJ8BDpNxPGzu+93
Fp7qMqVAneIgpAU9+yaFd4tb2EW+yd8ytvN/0DHEIDBhCxSu5Sx1ChXuLbTirJqv
qYcnYo+llMMUybcCSG/j0YFNZ9iJFulC6bxqKusq31+t8vHPFwNcEpJp4MBrWzk1
78SLhXc2hG067MjNu+kE4c9I+8qT6twGU5/W0pVeq8If8bc4ab010Zad6eItP0pp
MTPXN33pdgQshbu453418RU7XamFhlTXOvi5gFk5CNlBYjr/9Eo2Yem2nhmWphvF
3C/4dnStmTcrtp0sOkwtOEDBHLuLJGO6tWYbrd6fgCuZEwwcV3yuj8CbZwdKm5mY
pWnbMho=
-----END CERTIFICATE-----
Generated at Sat Nov 23 06:13:26 2024 by rpki-client on console-ams.rpki-client.org