Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911898E/10390FF831D811EEB9DE2237C4F9AE02/671E96C631D811EE8F448240C4F9AE02.roa
File:                     671E96C631D811EE8F448240C4F9AE02.roa (raw, json)
Hash identifier:          //5f/Eebu1ZIucQCCTF4pus5UbQIqyZSXwXiKVYSyoI=
Subject key identifier:   9E:B5:64:40:DD:25:F3:27:89:88:72:00:9A:4E:30:91:24:2F:60:74
Certificate issuer:       /CN=A911898E/serialNumber=771D23C5DF1A7371DD92F02106FEE59C5BA7C041
Certificate serial:       02
Authority key identifier: 77:1D:23:C5:DF:1A:73:71:DD:92:F0:21:06:FE:E5:9C:5B:A7:C0:41
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dx0jxd8ac3HdkvAhBv7lnFunwEE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911898E/10390FF831D811EEB9DE2237C4F9AE02/671E96C631D811EE8F448240C4F9AE02.roa
Signing time:             Thu 03 Aug 2023 08:33:21 +0000
ROA not before:           Thu 03 Aug 2023 08:33:21 +0000
ROA not after:            Sat 31 Aug 2024 00:00:00 +0000
asID:                     140734
IP address blocks:        103.152.60.0/23 maxlen: 23
                          2406:2a40::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911898E/10390FF831D811EEB9DE2237C4F9AE02/dx0jxd8ac3HdkvAhBv7lnFunwEE.crl
                          rsync://rpki.apnic.net/member_repository/A911898E/10390FF831D811EEB9DE2237C4F9AE02/dx0jxd8ac3HdkvAhBv7lnFunwEE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dx0jxd8ac3HdkvAhBv7lnFunwEE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 07:43:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911898E/serialNumber=771D23C5DF1A7371DD92F02106FEE59C5BA7C041
        Validity
            Not Before: Aug  3 08:33:21 2023 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=64cb6651-e82a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:3d:4e:78:54:a0:b8:fd:46:e4:ba:a5:40:ea:
                    35:be:ca:fd:c4:5d:b5:07:10:4a:1d:b2:ad:17:7b:
                    58:5e:95:90:c6:df:c8:5e:de:b3:77:e5:ad:d6:55:
                    b3:57:60:41:c7:6a:f4:69:58:eb:fa:8f:e3:28:fd:
                    d3:c8:77:8b:34:cc:e5:04:f4:2f:73:b0:64:e0:8c:
                    08:2f:02:b5:90:99:32:38:5c:ac:f5:40:de:63:0d:
                    f6:02:d9:63:4c:4e:0e:9e:ca:69:85:76:c1:7c:c7:
                    60:ee:7d:bb:ab:82:13:59:04:9e:ef:0e:c6:c9:42:
                    3a:ef:04:c1:e3:1b:39:03:49:c7:ff:b1:41:db:b2:
                    69:54:6a:9c:05:78:07:d9:42:f7:91:93:8f:c1:69:
                    64:89:6e:83:5c:17:51:45:70:c9:d6:9b:a1:99:55:
                    3b:f8:7f:b1:c7:47:3c:ae:38:b1:0c:a5:6b:6a:db:
                    7d:96:1b:3d:05:a7:01:35:5e:fb:a1:d7:0b:3b:c3:
                    e9:cd:9f:ca:40:2f:f2:bf:37:83:38:4d:71:3b:f9:
                    6f:4a:0d:be:3e:98:03:f2:f1:a4:ea:74:55:31:04:
                    43:8a:fc:8a:2f:56:af:7a:7d:fe:a9:b5:d0:cb:d3:
                    61:2b:0b:38:90:78:82:33:56:26:a1:1b:c1:5d:72:
                    80:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:B5:64:40:DD:25:F3:27:89:88:72:00:9A:4E:30:91:24:2F:60:74
            X509v3 Authority Key Identifier:
                keyid:77:1D:23:C5:DF:1A:73:71:DD:92:F0:21:06:FE:E5:9C:5B:A7:C0:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911898E/10390FF831D811EEB9DE2237C4F9AE02/dx0jxd8ac3HdkvAhBv7lnFunwEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dx0jxd8ac3HdkvAhBv7lnFunwEE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911898E/10390FF831D811EEB9DE2237C4F9AE02/671E96C631D811EE8F448240C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.152.60.0/23
                IPv6:
                  2406:2a40::/32

    Signature Algorithm: sha256WithRSAEncryption
         20:f8:94:42:4c:a5:19:55:3f:1e:7f:56:1b:0f:a4:75:61:b8:
         be:6a:54:20:7e:50:6a:e8:15:73:ad:3c:09:c6:d5:ae:cd:d8:
         df:1f:ef:69:a5:bd:7a:03:32:1a:f7:8e:16:5b:c2:0d:d4:fc:
         71:31:53:ca:4a:c0:47:e2:d0:04:88:47:15:fa:b3:40:44:40:
         b0:16:68:76:f9:39:7a:01:e1:ac:6f:dd:82:72:6b:bd:a8:ba:
         7c:80:22:73:f6:7e:bb:2e:4e:a0:86:03:9c:46:cf:c3:c2:f9:
         e7:cf:04:a5:fe:1b:23:17:94:b3:83:52:6d:95:20:34:17:0b:
         af:9a:a2:8d:2a:28:27:f4:88:00:7e:29:c4:37:f8:4f:f8:07:
         c0:43:d8:61:e1:55:ac:70:ce:c6:91:45:1a:68:73:ea:1b:a5:
         fb:d0:8a:ef:46:ec:4e:64:60:1d:f3:8a:1b:10:50:be:e8:f2:
         da:89:8b:82:3c:1c:4c:82:84:dc:43:94:62:65:09:db:d6:3e:
         a6:d5:54:50:04:00:b2:9e:79:46:79:64:26:0a:c5:25:55:1c:
         b4:34:a4:be:af:f4:25:4c:83:97:c1:99:f5:25:e4:97:d4:63:
         d2:4e:16:0c:29:46:c8:52:91:b5:f6:cb:f5:9a:74:28:bb:3a:
         aa:88:1e:86
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx
ODk4RTExMC8GA1UEBRMoNzcxRDIzQzVERjFBNzM3MUREOTJGMDIxMDZGRUU1OUM1
QkE3QzA0MTAeFw0yMzA4MDMwODMzMjFaFw0yNDA4MzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY0Y2I2NjUxLWU4MmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDXPU54VKC4/UbkuqVA6jW+yv3EXbUHEEodsq0Xe1helZDG38he3rN35a3WVbNX
YEHHavRpWOv6j+Mo/dPId4s0zOUE9C9zsGTgjAgvArWQmTI4XKz1QN5jDfYC2WNM
Tg6eymmFdsF8x2DufburghNZBJ7vDsbJQjrvBMHjGzkDScf/sUHbsmlUapwFeAfZ
QveRk4/BaWSJboNcF1FFcMnWm6GZVTv4f7HHRzyuOLEMpWtq232WGz0FpwE1Xvuh
1ws7w+nNn8pAL/K/N4M4TXE7+W9KDb4+mAPy8aTqdFUxBEOK/IovVq96ff6ptdDL
02ErCziQeIIzViahG8FdcoAPAgMBAAGjggKkMIICoDAdBgNVHQ4EFgQUnrVkQN0l
8yeJiHIAmk4wkSQvYHQwHwYDVR0jBBgwFoAUdx0jxd8ac3HdkvAhBv7lnFunwEEw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE4OThFLzEwMzkwRkY4MzFE
ODExRUVCOURFMjIzN0M0RjlBRTAyL2R4MGp4ZDhhYzNIZGt2QWhCdjdsbkZ1bndF
RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvZHgwanhkOGFjM0hka3ZBaEJ2N2xuRnVud0VFLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
ODk4RS8xMDM5MEZGODMxRDgxMUVFQjlERTIyMzdDNEY5QUUwMi82NzFFOTZDNjMx
RDgxMUVFOEY0NDgyNDBDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAWeYPDANBAIAAjAHAwUAJAYqQDANBgkqhkiG9w0BAQsFAAOC
AQEAIPiUQkylGVU/Hn9WGw+kdWG4vmpUIH5QaugVc608CcbVrs3Y3x/vaaW9egMy
GveOFlvCDdT8cTFTykrAR+LQBIhHFfqzQERAsBZodvk5egHhrG/dgnJrvai6fIAi
c/Z+uy5OoIYDnEbPw8L5588Epf4bIxeUs4NSbZUgNBcLr5qijSooJ/SIAH4pxDf4
T/gHwEPYYeFVrHDOxpFFGmhz6hul+9CK70bsTmRgHfOKGxBQvujy2omLgjwcTIKE
3EOUYmUJ29Y+ptVUUAQAsp55RnlkJgrFJVUctDSkvq/0JUyDl8GZ9SXkl9Rj0k4W
DClGyFKRtfbL9Zp0KLs6qogehg==
-----END CERTIFICATE-----
Generated at Sat Jun 1 09:10:28 2024 by rpki-client on console-fra.rpki-client.org