Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919879C/E1D20292073411EDB04D372DC4F9AE02/E7C34456073711ED8BA93630C4F9AE02.roa
File:                     E7C34456073711ED8BA93630C4F9AE02.roa (raw, json)
Hash identifier:          XpGKna3Ys3eJ7IujestgyZU0+h8bkOMncEnuBeYCD/U=
Subject key identifier:   C7:1F:68:C1:4B:6B:4C:6A:17:00:DB:FB:06:04:1F:E1:4C:09:F3:D6
Certificate issuer:       /CN=A919879C/serialNumber=932BF63931C347E76BC9089D41BE24F6370F2582
Certificate serial:       0143
Authority key identifier: 93:2B:F6:39:31:C3:47:E7:6B:C9:08:9D:41:BE:24:F6:37:0F:25:82
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kyv2OTHDR-dryQidQb4k9jcPJYI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919879C/E1D20292073411EDB04D372DC4F9AE02/E7C34456073711ED8BA93630C4F9AE02.roa
Signing time:             Thu 31 Aug 2023 03:33:50 +0000
ROA not before:           Thu 31 Aug 2023 03:33:50 +0000
ROA not after:            Thu 31 Oct 2024 00:00:00 +0000
asID:                     58423
IP address blocks:        43.254.20.0/24 maxlen: 24
                          43.254.21.0/24 maxlen: 24
                          43.254.22.0/24 maxlen: 24
                          43.254.23.0/24 maxlen: 24
                          103.5.72.0/24 maxlen: 24
                          103.5.73.0/24 maxlen: 24
                          103.5.74.0/24 maxlen: 24
                          103.5.75.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919879C/E1D20292073411EDB04D372DC4F9AE02/kyv2OTHDR-dryQidQb4k9jcPJYI.crl
                          rsync://rpki.apnic.net/member_repository/A919879C/E1D20292073411EDB04D372DC4F9AE02/kyv2OTHDR-dryQidQb4k9jcPJYI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kyv2OTHDR-dryQidQb4k9jcPJYI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 05:37:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 323 (0x143)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919879C/serialNumber=932BF63931C347E76BC9089D41BE24F6370F2582
        Validity
            Not Before: Aug 31 03:33:50 2023 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=64f00a1e-cccb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:c4:5f:d6:8f:dd:c3:88:ee:28:a3:19:e2:2d:
                    6b:4d:b9:12:97:9f:41:9f:86:69:2c:d4:1e:00:ff:
                    13:00:c3:32:61:bf:25:4b:f2:66:40:d4:84:2a:8d:
                    9e:4a:b2:0e:34:f0:6e:7b:7b:7f:bc:71:aa:88:6e:
                    1b:72:c9:b3:57:22:c1:a1:11:c5:9f:c5:1d:74:3f:
                    ac:f3:c7:ac:f9:43:b6:6a:8d:33:f0:5d:c9:4d:0e:
                    80:4a:33:06:56:3a:d2:fc:7c:72:49:49:ca:5c:fa:
                    d8:57:13:ec:e5:7f:79:0e:3a:94:e0:3d:0d:7d:a4:
                    6d:83:08:ab:00:43:28:d6:a6:ac:9e:93:cc:09:e6:
                    78:6f:1d:ff:f3:14:cc:12:02:88:d9:a8:5b:9d:35:
                    68:1c:59:c8:b4:f4:18:73:92:cb:29:15:b1:6d:5e:
                    4d:a0:83:3a:e3:54:8e:35:d9:7b:14:d2:82:bb:81:
                    b3:6c:dc:0c:04:46:56:f9:c4:22:6f:38:01:2f:44:
                    d7:ee:15:94:12:87:fd:a3:7c:e4:d2:b4:96:37:0c:
                    c8:d3:f4:4a:59:ca:15:bf:7b:aa:cd:32:68:5b:7b:
                    ca:77:c4:22:42:2b:a6:1e:e8:45:92:37:12:71:07:
                    90:f2:10:0a:0f:2d:95:d4:8c:b4:6d:d2:84:f8:f3:
                    0c:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:1F:68:C1:4B:6B:4C:6A:17:00:DB:FB:06:04:1F:E1:4C:09:F3:D6
            X509v3 Authority Key Identifier:
                keyid:93:2B:F6:39:31:C3:47:E7:6B:C9:08:9D:41:BE:24:F6:37:0F:25:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919879C/E1D20292073411EDB04D372DC4F9AE02/kyv2OTHDR-dryQidQb4k9jcPJYI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kyv2OTHDR-dryQidQb4k9jcPJYI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919879C/E1D20292073411EDB04D372DC4F9AE02/E7C34456073711ED8BA93630C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.254.20.0/22
                  103.5.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         98:a8:28:c6:06:0a:4c:d2:1a:02:f9:1a:b5:28:a3:bb:9f:cd:
         d4:8b:20:50:f5:f1:86:d4:83:30:51:17:e8:97:06:67:03:bc:
         66:d5:ec:e2:46:1c:0f:18:24:19:2e:ea:cd:e1:76:20:d1:4e:
         3b:08:60:ca:ee:44:66:e9:35:50:a5:5a:4d:76:90:57:3c:75:
         84:9a:0b:bc:4a:86:1e:5c:89:a0:ff:f8:e5:09:41:70:be:4c:
         fa:6d:6c:00:14:2d:f1:1e:fd:e5:e6:79:0f:b9:5f:fb:57:e6:
         ed:46:59:57:41:90:87:b7:69:ab:92:77:1f:cd:19:27:88:89:
         9a:58:59:43:6f:ee:82:61:29:9c:96:1b:55:23:67:bd:89:16:
         f8:5d:8b:7f:ae:93:31:d1:c4:d7:c3:60:13:94:91:35:1e:82:
         01:93:ce:a5:8b:b0:e8:a0:a0:e9:f3:1e:b1:fe:9d:ef:63:d0:
         16:83:87:81:5d:ad:0b:bc:b1:f7:a1:bb:c8:e3:3f:0f:97:7e:
         95:d3:a8:b1:5b:0d:f6:49:10:2b:3d:09:48:e0:cb:a6:a0:af:
         0e:27:b5:2b:69:28:a6:30:f0:d0:ff:f3:bb:38:5e:7a:40:d5:
         88:4b:52:59:e9:ec:4f:be:97:17:3b:49:58:11:80:f1:71:4c:
         3d:23:e8:f7
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICAUMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTg3OUMxMTAvBgNVBAUTKDkzMkJGNjM5MzFDMzQ3RTc2QkM5MDg5RDQxQkUyNEY2
MzcwRjI1ODIwHhcNMjMwODMxMDMzMzUwWhcNMjQxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NGYwMGExZS1jY2NiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA8cRf1o/dw4juKKMZ4i1rTbkSl59Bn4ZpLNQeAP8TAMMyYb8lS/JmQNSEKo2e
SrIONPBue3t/vHGqiG4bcsmzVyLBoRHFn8UddD+s88es+UO2ao0z8F3JTQ6ASjMG
VjrS/HxySUnKXPrYVxPs5X95DjqU4D0NfaRtgwirAEMo1qasnpPMCeZ4bx3/8xTM
EgKI2ahbnTVoHFnItPQYc5LLKRWxbV5NoIM641SONdl7FNKCu4GzbNwMBEZW+cQi
bzgBL0TX7hWUEof9o3zk0rSWNwzI0/RKWcoVv3uqzTJoW3vKd8QiQiumHuhFkjcS
cQeQ8hAKDy2V1Iy0bdKE+PMMFQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFMcfaMFL
a0xqFwDb+wYEH+FMCfPWMB8GA1UdIwQYMBaAFJMr9jkxw0fna8kInUG+JPY3DyWC
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODc5Qy9FMUQyMDI5MjA3
MzQxMUVEQjA0RDM3MkRDNEY5QUUwMi9reXYyT1RIRFItZHJ5UWlkUWI0azlqY1BK
WUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2t5djJPVEhEUi1kcnlRaWRRYjRrOWpjUEpZSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTg3OUMvRTFEMjAyOTIwNzM0MTFFREIwNEQzNzJEQzRGOUFFMDIvRTdDMzQ0NTYw
NzM3MTFFRDhCQTkzNjMwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBAIr/hQDBAJnBUgwDQYJKoZIhvcNAQELBQADggEBAJioKMYG
CkzSGgL5GrUoo7ufzdSLIFD18YbUgzBRF+iXBmcDvGbV7OJGHA8YJBku6s3hdiDR
TjsIYMruRGbpNVClWk12kFc8dYSaC7xKhh5ciaD/+OUJQXC+TPptbAAULfEe/eXm
eQ+5X/tX5u1GWVdBkIe3aauSdx/NGSeIiZpYWUNv7oJhKZyWG1UjZ72JFvhdi3+u
kzHRxNfDYBOUkTUeggGTzqWLsOigoOnzHrH+ne9j0BaDh4FdrQu8sfehu8jjPw+X
fpXTqLFbDfZJECs9CUjgy6agrw4ntStpKKYw8ND/87s4XnpA1YhLUlnp7E++lxc7
SVgRgPFxTD0j6Pc=
-----END CERTIFICATE-----
Generated at Sat Jun 1 06:27:37 2024 by rpki-client on console-fra.rpki-client.org