Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/31D2BFEE839311EE89CA110FC4F9AE02.roa
File:                     31D2BFEE839311EE89CA110FC4F9AE02.roa (raw, json)
Hash identifier:          qVyWbEo+W7br9vA9yLVdL2EaJ2zZ1d9cFjFb5KqVjis=
Subject key identifier:   6B:F5:57:9E:C1:DD:E5:05:CA:B7:B1:E9:0D:1C:F5:16:EE:C2:9D:45
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       4083
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/31D2BFEE839311EE89CA110FC4F9AE02.roa
Signing time:             Wed 15 Nov 2023 08:44:32 +0000
ROA not before:           Wed 15 Nov 2023 08:44:32 +0000
ROA not after:            Thu 31 Oct 2024 00:00:00 +0000
asID:                     151866
IP address blocks:        103.93.92.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 14:37:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16515 (0x4083)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Nov 15 08:44:32 2023 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=655484ef-947f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:bb:43:1a:80:22:4c:b2:86:d4:45:f8:e4:26:
                    a0:2e:b7:52:ce:0c:c5:60:7a:92:6d:21:4f:d2:fb:
                    bc:fe:a7:fe:ed:95:84:a2:73:98:c0:4f:87:4f:c9:
                    ef:b6:bb:5b:02:47:6e:52:00:40:bc:61:4d:f6:c0:
                    34:42:71:3d:0d:a2:4e:c8:c0:ce:8a:7a:7d:ce:00:
                    43:38:5c:70:25:2f:78:b1:9d:7b:9e:de:8d:61:3f:
                    02:ec:5e:75:44:41:4b:9a:2f:7f:5a:62:5b:c4:ea:
                    f6:a8:ea:e9:97:4e:a3:bb:81:21:55:8a:ec:eb:83:
                    62:eb:e3:47:34:5c:93:6f:db:02:dc:0b:6d:0d:85:
                    9b:e0:af:1d:b9:91:c4:63:6b:be:98:a6:59:db:6e:
                    22:83:29:f7:3b:22:50:39:1e:eb:2a:1a:a9:8a:39:
                    ee:bf:62:1b:8e:19:a3:f0:cd:b6:2b:47:28:e0:47:
                    5f:73:6e:93:72:26:4e:2a:b4:71:6b:a2:4a:0b:6e:
                    19:1f:91:15:1e:7c:20:92:ba:3b:50:af:3a:62:4e:
                    b6:f1:ed:ed:5e:02:a1:84:de:9b:12:66:e3:63:65:
                    23:e6:1d:2f:2f:67:ec:30:5d:65:58:a5:2e:38:93:
                    94:4b:2d:7d:b0:e6:bd:64:07:55:9c:a1:13:d6:b6:
                    64:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:F5:57:9E:C1:DD:E5:05:CA:B7:B1:E9:0D:1C:F5:16:EE:C2:9D:45
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/31D2BFEE839311EE89CA110FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.93.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:1e:cc:af:ac:c6:80:a6:ba:d7:ef:79:8d:14:0a:ec:0e:c8:
         78:5d:82:13:91:1f:d6:23:13:90:70:d4:77:84:18:53:50:f1:
         25:e2:35:19:ca:44:d3:ae:dc:32:97:52:3f:ca:1e:a7:18:f7:
         e8:a0:98:fe:62:3c:9d:85:06:2e:4f:a6:23:1c:20:06:c3:03:
         b2:99:08:70:6a:9f:ea:6f:47:bd:55:d2:ce:b3:3e:1b:ae:ca:
         44:a6:82:7a:7b:86:ac:a6:59:90:03:e9:ee:da:50:2a:83:bd:
         d1:42:af:39:5d:84:9e:92:b1:2c:41:5b:f4:9b:60:61:a9:12:
         05:bf:46:58:40:a3:f0:02:96:35:e4:ec:7c:71:c7:16:4b:e7:
         f4:08:6a:f3:b3:79:e0:43:40:24:eb:70:22:36:44:45:6b:3f:
         3e:8a:1c:64:ba:e7:6e:07:43:e5:45:5a:45:d7:dd:bd:7b:ec:
         b8:90:8e:91:82:29:52:65:29:33:dc:5f:5f:d7:2b:a8:a9:66:
         0e:bc:15:17:54:98:60:c1:af:c0:71:60:21:74:d5:06:d0:3b:
         aa:1e:de:bf:a9:42:28:a6:d6:a2:40:b2:4d:a4:34:d8:f6:be:
         72:4a:b0:8c:87:ab:fb:b8:b9:fc:7e:6f:c2:ef:0a:9b:fe:86:
         02:dd:31:1a
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICQIMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3
NTZBQzZGMEEwHhcNMjMxMTE1MDg0NDMyWhcNMjQxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NTU0ODRlZi05NDdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAx7tDGoAiTLKG1EX45CagLrdSzgzFYHqSbSFP0vu8/qf+7ZWEonOYwE+HT8nv
trtbAkduUgBAvGFN9sA0QnE9DaJOyMDOinp9zgBDOFxwJS94sZ17nt6NYT8C7F51
REFLmi9/WmJbxOr2qOrpl06ju4EhVYrs64Ni6+NHNFyTb9sC3AttDYWb4K8duZHE
Y2u+mKZZ224igyn3OyJQOR7rKhqpijnuv2Ibjhmj8M22K0co4Edfc26TciZOKrRx
a6JKC24ZH5EVHnwgkro7UK86Yk628e3tXgKhhN6bEmbjY2Uj5h0vL2fsMF1lWKUu
OJOUSy19sOa9ZAdVnKET1rZk5QIDAQABo4IClTCCApEwHQYDVR0OBBYEFGv1V57B
3eUFyrex6Q0c9Rbuwp1FMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE
OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi
d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvMzFEMkJGRUU4
MzkzMTFFRTg5Q0ExMTBGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnXVwwDQYJKoZIhvcNAQELBQADggEBAHwezK+sxoCmutfv
eY0UCuwOyHhdghORH9YjE5Bw1HeEGFNQ8SXiNRnKRNOu3DKXUj/KHqcY9+igmP5i
PJ2FBi5PpiMcIAbDA7KZCHBqn+pvR71V0s6zPhuuykSmgnp7hqymWZAD6e7aUCqD
vdFCrzldhJ6SsSxBW/SbYGGpEgW/RlhAo/ACljXk7HxxxxZL5/QIavOzeeBDQCTr
cCI2REVrPz6KHGS6524HQ+VFWkXX3b177LiQjpGCKVJlKTPcX1/XK6ipZg68FRdU
mGDBr8BxYCF01QbQO6oe3r+pQiim1qJAsk2kNNj2vnJKsIyHq/u4ufx+b8LvCpv+
hgLdMRo=
-----END CERTIFICATE-----
Generated at Fri May 31 16:41:39 2024 by rpki-client on console-ams.rpki-client.org