Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/1132F3026BD811EF90DBC631C4F9AE02.roa
File:                     1132F3026BD811EF90DBC631C4F9AE02.roa (raw, json)
Hash identifier:          zPKvF8zxdu//FyrlKrsovUWXLD3CMiK5ihnLC2Ks3fU=
Subject key identifier:   A9:6D:CD:12:27:CB:E1:E0:36:AC:F2:62:45:F2:D3:9E:62:B0:86:A9
Certificate issuer:       /CN=A91FE9DC/serialNumber=0F9F7158DBDFFA2A57AE02487C98206B78380496
Certificate serial:       5A
Authority key identifier: 0F:9F:71:58:DB:DF:FA:2A:57:AE:02:48:7C:98:20:6B:78:38:04:96
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D59xWNvf-ipXrgJIfJgga3g4BJY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/1132F3026BD811EF90DBC631C4F9AE02.roa
Signing time:             Thu 05 Sep 2024 22:42:02 +0000
ROA not before:           Thu 05 Sep 2024 22:42:02 +0000
ROA not after:            Tue 30 Sep 2025 00:00:00 +0000
asID:                     17547
IP address blocks:        103.230.92.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.crl
                          rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D59xWNvf-ipXrgJIfJgga3g4BJY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 04:51:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 90 (0x5a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FE9DC/serialNumber=0F9F7158DBDFFA2A57AE02487C98206B78380496
        Validity
            Not Before: Sep  5 22:42:02 2024 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=66da33b9-9497
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:e3:53:e1:29:b3:6c:a4:11:09:57:05:79:b4:
                    b8:c1:2d:75:ef:72:92:ac:7f:87:0c:91:46:b8:96:
                    d5:e0:5b:97:bf:b6:af:27:7a:3f:ad:cb:5f:5a:63:
                    d8:44:f1:83:59:a4:d2:ba:f4:aa:03:5e:fc:5a:41:
                    a5:d9:0a:48:5e:d5:5d:dc:47:98:39:2c:c1:5a:55:
                    e6:1c:e3:a4:7f:a6:93:37:10:a0:0c:23:b8:4a:3b:
                    cc:4f:01:b2:46:48:65:a7:48:e2:95:29:a0:aa:c7:
                    d0:2f:18:ae:20:10:e4:48:ff:92:8d:b8:c4:68:15:
                    50:76:eb:fd:62:4c:24:85:0c:93:4c:34:60:21:3e:
                    86:73:67:d0:51:48:87:8e:0f:f2:e6:60:8e:4b:f9:
                    e1:1c:ff:05:27:30:9e:cb:a1:02:d1:91:3e:84:e7:
                    81:17:68:d3:99:71:95:05:c4:26:7c:f8:78:85:1d:
                    92:9c:50:ce:47:1d:70:34:2b:3f:7c:5a:c1:7a:6c:
                    af:0a:8c:e3:4b:3b:1e:b1:75:3a:28:3d:78:48:6c:
                    3b:c0:21:aa:24:5c:5e:f7:5b:19:fa:d5:18:73:4b:
                    d1:47:e6:14:d1:19:55:76:d8:9c:e5:da:bb:3f:b3:
                    15:8b:bb:81:7d:a6:bb:d0:08:3a:e0:0a:0c:68:e8:
                    1b:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:6D:CD:12:27:CB:E1:E0:36:AC:F2:62:45:F2:D3:9E:62:B0:86:A9
            X509v3 Authority Key Identifier:
                keyid:0F:9F:71:58:DB:DF:FA:2A:57:AE:02:48:7C:98:20:6B:78:38:04:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D59xWNvf-ipXrgJIfJgga3g4BJY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/1132F3026BD811EF90DBC631C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.230.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:b4:1d:47:13:a8:e4:06:d1:91:87:66:28:8e:fe:dc:3f:8b:
         e6:ff:80:be:02:f7:9b:d1:04:41:09:a8:6e:65:88:c3:96:fb:
         34:90:cd:b8:8b:aa:1a:71:28:da:26:7b:c6:0e:51:6e:a5:97:
         5a:eb:2c:c6:a0:e5:78:70:e0:50:fd:1e:fe:3a:69:c9:f5:6e:
         84:df:14:71:09:49:55:a3:39:ee:2b:4e:70:f1:fb:3d:ce:a6:
         ef:2a:42:0d:0a:e2:6e:24:43:aa:e8:eb:18:a4:02:8f:9a:25:
         27:46:af:c9:26:fe:45:22:6a:18:b5:b3:26:7c:16:d7:19:17:
         85:4e:09:cd:0d:67:32:4a:d1:d7:84:2e:94:7f:71:38:d7:e1:
         d2:7d:2d:82:31:19:9a:5d:13:4e:8d:f5:76:d3:29:27:ac:bf:
         ca:b2:e7:35:b2:b2:17:96:13:4d:1b:b2:8a:e6:a8:b5:07:be:
         02:46:90:52:1d:a4:5a:6b:4a:5b:0a:d5:39:d0:2f:18:9f:11:
         5a:5e:4d:aa:d0:3b:f6:b0:04:cc:67:c2:c7:87:ab:9e:36:f5:
         49:4b:14:93:67:a8:12:b2:1f:13:d6:4a:49:a1:9d:a2:58:a8:
         2a:93:66:67:0e:6a:f0:5f:7b:21:6f:cc:00:17:91:31:50:ff:
         4b:f2:ea:8f
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBWjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG
RTlEQzExMC8GA1UEBRMoMEY5RjcxNThEQkRGRkEyQTU3QUUwMjQ4N0M5ODIwNkI3
ODM4MDQ5NjAeFw0yNDA5MDUyMjQyMDJaFw0yNTA5MzAwMDAwMDBaMBgxFjAUBgNV
BAMTDTY2ZGEzM2I5LTk0OTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDW41PhKbNspBEJVwV5tLjBLXXvcpKsf4cMkUa4ltXgW5e/tq8nej+ty19aY9hE
8YNZpNK69KoDXvxaQaXZCkhe1V3cR5g5LMFaVeYc46R/ppM3EKAMI7hKO8xPAbJG
SGWnSOKVKaCqx9AvGK4gEORI/5KNuMRoFVB26/1iTCSFDJNMNGAhPoZzZ9BRSIeO
D/LmYI5L+eEc/wUnMJ7LoQLRkT6E54EXaNOZcZUFxCZ8+HiFHZKcUM5HHXA0Kz98
WsF6bK8KjONLOx6xdTooPXhIbDvAIaokXF73Wxn61RhzS9FH5hTRGVV22Jzl2rs/
sxWLu4F9prvQCDrgCgxo6BtTAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUqW3NEifL
4eA2rPJiRfLTnmKwhqkwHwYDVR0jBBgwFoAUD59xWNvf+ipXrgJIfJgga3g4BJYw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZFOURDLzZFRUMxRjVDRUZG
RDExRUU5MDI4OEE3MkM0RjlBRTAyL0Q1OXhXTnZmLWlwWHJnSklmSmdnYTNnNEJK
WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvRDU5eFdOdmYtaXBYcmdKSWZKZ2dhM2c0QkpZLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
RTlEQy82RUVDMUY1Q0VGRkQxMUVFOTAyODhBNzJDNEY5QUUwMi8xMTMyRjMwMjZC
RDgxMUVGOTBEQkM2MzFDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAGfmXDANBgkqhkiG9w0BAQsFAAOCAQEACLQdRxOo5AbRkYdm
KI7+3D+L5v+AvgL3m9EEQQmobmWIw5b7NJDNuIuqGnEo2iZ7xg5RbqWXWussxqDl
eHDgUP0e/jppyfVuhN8UcQlJVaM57itOcPH7Pc6m7ypCDQribiRDqujrGKQCj5ol
J0avySb+RSJqGLWzJnwW1xkXhU4JzQ1nMkrR14QulH9xONfh0n0tgjEZml0TTo31
dtMpJ6y/yrLnNbKyF5YTTRuyiuaotQe+AkaQUh2kWmtKWwrVOdAvGJ8RWl5NqtA7
9rAEzGfCx4ernjb1SUsUk2eoErIfE9ZKSaGdolioKpNmZw5q8F97IW/MABeRMVD/
S/Lqjw==
-----END CERTIFICATE-----
Generated at Thu Nov 21 07:40:40 2024 by rpki-client on console-ams.rpki-client.org