Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6990/42145F983DD811EA9F16957CC4F9AE02/BFE023663DD911EA89EB0782C4F9AE02.roa
File:                     BFE023663DD911EA89EB0782C4F9AE02.roa (raw, json)
Hash identifier:          AeTLEvIImEeEIFDLcyyzsKZIqpZz08BSLMKw6j/d4o8=
Subject key identifier:   F4:14:07:B3:92:B7:CC:A7:A6:58:CB:AC:6C:E3:BD:8C:56:C4:00:C0
Certificate issuer:       /CN=A91A6990/serialNumber=5AE361EB606B5D316F0E9597DD68CDDB9C6F6005
Certificate serial:       0A62
Authority key identifier: 5A:E3:61:EB:60:6B:5D:31:6F:0E:95:97:DD:68:CD:DB:9C:6F:60:05
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WuNh62BrXTFvDpWX3WjN25xvYAU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A6990/42145F983DD811EA9F16957CC4F9AE02/BFE023663DD911EA89EB0782C4F9AE02.roa
Signing time:             Thu 16 May 2024 20:59:25 +0000
ROA not before:           Thu 16 May 2024 20:59:25 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     138924
IP address blocks:        103.137.54.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A6990/42145F983DD811EA9F16957CC4F9AE02/WuNh62BrXTFvDpWX3WjN25xvYAU.crl
                          rsync://rpki.apnic.net/member_repository/A91A6990/42145F983DD811EA9F16957CC4F9AE02/WuNh62BrXTFvDpWX3WjN25xvYAU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WuNh62BrXTFvDpWX3WjN25xvYAU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 19:11:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2658 (0xa62)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A6990/serialNumber=5AE361EB606B5D316F0E9597DD68CDDB9C6F6005
        Validity
            Not Before: May 16 20:59:25 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=664673ad-8352
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:35:17:45:bc:ce:dc:21:9a:04:5c:bd:36:2d:
                    da:c4:ee:f5:9c:95:41:e0:d2:6a:d2:24:7e:ef:5d:
                    7b:3f:d5:e2:f5:71:72:6e:2a:62:d5:a0:c3:cf:80:
                    92:bd:58:aa:11:35:4c:2a:e1:95:53:cd:8f:53:4b:
                    05:17:cc:47:7d:1e:e9:e9:31:fc:7a:94:ae:5b:57:
                    1d:ea:d6:c6:07:51:ec:54:58:8a:ee:36:19:f8:a5:
                    25:9b:51:24:3a:a1:ac:52:be:5e:71:67:76:8e:04:
                    4e:bd:3e:a2:87:42:92:45:26:e6:43:bf:76:0a:ed:
                    56:6c:ed:76:aa:d0:55:ef:94:4e:4d:19:20:ee:a5:
                    df:b1:1b:ef:80:88:00:7d:26:73:22:ff:d4:2d:f1:
                    29:c4:6d:6d:fd:5a:be:86:3c:5c:d9:ab:d8:f2:ff:
                    8d:35:94:2a:80:9f:c6:95:8e:36:03:b1:f6:3e:d8:
                    ce:74:6c:30:b3:c9:dc:71:40:9e:bb:71:d8:38:2e:
                    39:83:0f:42:f6:e6:98:01:d6:c7:1c:55:fa:b8:ea:
                    ce:bd:1b:83:8e:f8:fd:75:2b:2f:46:a5:f6:8c:85:
                    66:40:4c:52:47:17:f4:da:68:b8:6c:98:1d:e1:d8:
                    66:7c:04:57:2f:a0:c4:f6:18:de:6e:d7:40:43:08:
                    c5:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:14:07:B3:92:B7:CC:A7:A6:58:CB:AC:6C:E3:BD:8C:56:C4:00:C0
            X509v3 Authority Key Identifier:
                keyid:5A:E3:61:EB:60:6B:5D:31:6F:0E:95:97:DD:68:CD:DB:9C:6F:60:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A6990/42145F983DD811EA9F16957CC4F9AE02/WuNh62BrXTFvDpWX3WjN25xvYAU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WuNh62BrXTFvDpWX3WjN25xvYAU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6990/42145F983DD811EA9F16957CC4F9AE02/BFE023663DD911EA89EB0782C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.137.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:e2:e2:3c:ce:d1:0e:bf:8f:6e:da:8d:9a:10:cd:20:7b:f3:
         22:fc:5a:6a:b0:02:48:90:c7:a2:ae:58:7f:76:09:90:0b:52:
         90:a9:49:1d:35:d2:e9:2b:ab:46:70:3f:c7:e3:bf:c9:29:5d:
         b5:b5:96:8a:25:6e:6e:21:78:57:8f:49:e2:2e:b8:69:e3:3f:
         9b:c4:0b:86:3c:ab:c4:c8:1c:21:1b:cd:3d:55:32:32:0c:6b:
         aa:42:8f:d0:19:bf:66:75:cd:2e:ff:84:1c:15:56:36:3d:b5:
         cf:f9:c8:28:c7:48:cc:f7:2e:02:91:81:ea:32:d6:dd:a8:15:
         bc:57:e3:c5:ba:d2:b1:31:4f:80:f0:ec:0a:c6:19:97:ad:61:
         bc:2a:ca:6c:e1:c6:cb:bf:99:20:f8:fb:86:54:b1:e6:90:b9:
         96:b5:1b:5b:a4:a1:a0:8a:df:31:34:5b:3a:54:9c:5e:17:ff:
         8e:cb:6a:82:64:ab:fc:3a:25:7b:48:c2:c7:c4:c4:2a:0e:b7:
         15:b9:3f:55:d6:8d:21:cf:77:f8:8e:bd:c6:a4:4b:19:99:23:
         89:03:72:20:46:ab:cf:0d:0e:ad:48:c8:62:ba:b0:ba:61:4c:
         be:a1:14:71:9e:93:b8:70:f3:2e:0c:dd:c7:09:d6:fd:f5:76:
         3f:9b:30:9a
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICCmIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTY5OTAxMTAvBgNVBAUTKDVBRTM2MUVCNjA2QjVEMzE2RjBFOTU5N0RENjhDRERC
OUM2RjYwMDUwHhcNMjQwNTE2MjA1OTI1WhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NjQ2NzNhZC04MzUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5jUXRbzO3CGaBFy9Ni3axO71nJVB4NJq0iR+7117P9Xi9XFybipi1aDDz4CS
vViqETVMKuGVU82PU0sFF8xHfR7p6TH8epSuW1cd6tbGB1HsVFiK7jYZ+KUlm1Ek
OqGsUr5ecWd2jgROvT6ih0KSRSbmQ792Cu1WbO12qtBV75ROTRkg7qXfsRvvgIgA
fSZzIv/ULfEpxG1t/Vq+hjxc2avY8v+NNZQqgJ/GlY42A7H2PtjOdGwws8nccUCe
u3HYOC45gw9C9uaYAdbHHFX6uOrOvRuDjvj9dSsvRqX2jIVmQExSRxf02mi4bJgd
4dhmfARXL6DE9hjebtdAQwjFHwIDAQABo4IClTCCApEwHQYDVR0OBBYEFPQUB7OS
t8ynpljLrGzjvYxWxADAMB8GA1UdIwQYMBaAFFrjYetga10xbw6Vl91ozducb2AF
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNjk5MC80MjE0NUY5ODNE
RDgxMUVBOUYxNjk1N0NDNEY5QUUwMi9XdU5oNjJCclhURnZEcFdYM1dqTjI1eHZZ
QVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1d1Tmg2MkJyWFRGdkRwV1gzV2pOMjV4dllBVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTY5OTAvNDIxNDVGOTgzREQ4MTFFQTlGMTY5NTdDQzRGOUFFMDIvQkZFMDIzNjYz
REQ5MTFFQTg5RUIwNzgyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABniTYwDQYJKoZIhvcNAQELBQADggEBAFDi4jzO0Q6/j27a
jZoQzSB78yL8WmqwAkiQx6KuWH92CZALUpCpSR010ukrq0ZwP8fjv8kpXbW1lool
bm4heFePSeIuuGnjP5vEC4Y8q8TIHCEbzT1VMjIMa6pCj9AZv2Z1zS7/hBwVVjY9
tc/5yCjHSMz3LgKRgeoy1t2oFbxX48W60rExT4Dw7ArGGZetYbwqymzhxsu/mSD4
+4ZUseaQuZa1G1ukoaCK3zE0WzpUnF4X/47LaoJkq/w6JXtIwsfExCoOtxW5P1XW
jSHPd/iOvcakSxmZI4kDciBGq88NDq1IyGK6sLphTL6hFHGek7hw8y4M3ccJ1v31
dj+bMJo=
-----END CERTIFICATE-----
Generated at Fri Nov 22 22:14:37 2024 by rpki-client on console-ams.rpki-client.org