Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A98E5/1684C078404711EEABC0E24CC4F9AE02/78CAEF00404711EEBE56794DC4F9AE02.roa
File:                     78CAEF00404711EEBE56794DC4F9AE02.roa (raw, json)
Hash identifier:          o7Hy1NgfCavKhkvCbXt/0noEUrRnyYugOx1u59VzWi0=
Subject key identifier:   8C:98:81:D2:FD:D6:E1:61:00:AD:C1:70:FE:BA:D0:07:8D:3E:DC:E8
Certificate issuer:       /CN=A91A98E5/serialNumber=9B30E5530CE14C82CCDF3E77A530E73FD410E377
Certificate serial:       06
Authority key identifier: 9B:30:E5:53:0C:E1:4C:82:CC:DF:3E:77:A5:30:E7:3F:D4:10:E3:77
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mzDlUwzhTILM3z53pTDnP9QQ43c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A98E5/1684C078404711EEABC0E24CC4F9AE02/78CAEF00404711EEBE56794DC4F9AE02.roa
Signing time:             Sat 26 Aug 2023 07:31:54 +0000
ROA not before:           Sat 26 Aug 2023 07:31:54 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     151615
IP address blocks:        103.238.154.0/23 maxlen: 24
                          2401:1920::/32 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A98E5/1684C078404711EEABC0E24CC4F9AE02/mzDlUwzhTILM3z53pTDnP9QQ43c.crl
                          rsync://rpki.apnic.net/member_repository/A91A98E5/1684C078404711EEABC0E24CC4F9AE02/mzDlUwzhTILM3z53pTDnP9QQ43c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mzDlUwzhTILM3z53pTDnP9QQ43c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 22 Jun 2024 02:50:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A98E5/serialNumber=9B30E5530CE14C82CCDF3E77A530E73FD410E377
        Validity
            Not Before: Aug 26 07:31:54 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=64e9aa6a-6c3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:18:e5:4c:84:fb:b4:13:86:73:2b:cb:e4:42:
                    7f:71:89:4f:da:9b:ea:0a:6e:97:1f:25:61:bb:cb:
                    4a:7b:12:c3:7c:f4:54:e2:0d:27:b5:21:96:e0:cb:
                    1e:b3:bf:8e:fa:32:90:65:8a:27:b0:2e:ae:35:06:
                    4f:34:7b:a3:0b:c8:41:92:f0:92:1a:1a:c6:54:71:
                    d2:f7:9f:39:e9:6a:ad:19:aa:3b:59:49:11:06:f3:
                    46:bc:2a:72:67:d8:21:c7:e1:f3:73:da:35:70:b0:
                    d1:73:b8:43:fc:62:b4:4c:5c:0f:da:9e:8c:39:3f:
                    73:60:27:d1:51:9b:c5:24:92:93:80:4a:92:ea:53:
                    53:fc:cb:90:11:de:b3:f7:0c:8d:58:f4:a6:eb:86:
                    8c:9e:57:78:c3:d5:40:dc:69:e7:db:20:ec:0b:92:
                    77:c7:e9:d6:66:89:a3:fc:5e:b1:20:dc:17:67:96:
                    00:4a:5e:ef:c0:0b:41:3e:02:4b:ae:83:2d:01:4d:
                    53:a3:c5:ed:b1:f7:f3:b2:ad:ba:71:f2:b1:3d:d6:
                    a6:c0:5f:86:a1:9a:79:2c:f9:46:05:34:a7:19:a1:
                    9c:8c:9d:cf:34:43:78:11:e9:36:5e:14:66:e5:15:
                    8a:f5:81:61:50:e3:df:19:ba:4f:b1:85:7a:79:32:
                    85:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:98:81:D2:FD:D6:E1:61:00:AD:C1:70:FE:BA:D0:07:8D:3E:DC:E8
            X509v3 Authority Key Identifier:
                keyid:9B:30:E5:53:0C:E1:4C:82:CC:DF:3E:77:A5:30:E7:3F:D4:10:E3:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A98E5/1684C078404711EEABC0E24CC4F9AE02/mzDlUwzhTILM3z53pTDnP9QQ43c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mzDlUwzhTILM3z53pTDnP9QQ43c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A98E5/1684C078404711EEABC0E24CC4F9AE02/78CAEF00404711EEBE56794DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.238.154.0/23
                IPv6:
                  2401:1920::/32

    Signature Algorithm: sha256WithRSAEncryption
         71:a5:4a:4b:57:01:da:a3:ad:bd:18:d5:51:1e:9a:c3:54:b3:
         cd:4f:06:fe:03:36:8a:9c:91:22:8f:66:2b:59:72:0e:85:d2:
         a5:fd:ee:3a:89:28:2e:b3:cf:61:51:d8:10:9c:e6:fd:75:b8:
         d2:aa:8c:67:8b:67:8b:ff:85:6d:18:58:2e:7b:9b:ab:9b:10:
         56:e8:42:a6:32:83:8b:ed:1e:4d:e3:36:17:e2:f5:15:3a:62:
         dc:30:c4:2b:eb:ac:25:1a:81:c8:bd:77:be:6f:fd:64:42:4d:
         b2:d2:d8:ca:29:e2:23:c3:bd:c0:97:cd:20:bd:fa:93:eb:5d:
         99:65:7d:0a:b9:16:f2:db:a6:60:2b:7e:f9:f7:5e:76:31:d8:
         70:96:f4:99:57:37:e4:89:9b:a1:09:12:c1:db:bc:3e:3e:ce:
         f3:2f:ff:e3:57:f3:f7:f2:59:c9:b0:70:a1:51:46:74:0a:40:
         6d:6f:b3:cb:3e:2d:e7:64:85:38:b7:a0:e6:c1:14:cd:2e:d8:
         70:68:79:03:63:09:c5:05:3c:4e:82:a9:c9:99:53:43:c0:05:
         6b:57:1b:c4:c4:54:cc:e6:9e:3f:89:9b:5b:62:9e:6a:a8:e3:
         f7:43:95:9e:9d:62:15:49:fe:63:40:b9:14:2e:79:84:5e:e7:
         67:a8:1e:30
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIBBjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB
OThFNTExMC8GA1UEBRMoOUIzMEU1NTMwQ0UxNEM4MkNDREYzRTc3QTUzMEU3M0ZE
NDEwRTM3NzAeFw0yMzA4MjYwNzMxNTRaFw0yNDA5MzAwMDAwMDBaMBgxFjAUBgNV
BAMTDTY0ZTlhYTZhLTZjM2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDAGOVMhPu0E4ZzK8vkQn9xiU/am+oKbpcfJWG7y0p7EsN89FTiDSe1IZbgyx6z
v476MpBliiewLq41Bk80e6MLyEGS8JIaGsZUcdL3nznpaq0ZqjtZSREG80a8KnJn
2CHH4fNz2jVwsNFzuEP8YrRMXA/anow5P3NgJ9FRm8UkkpOASpLqU1P8y5AR3rP3
DI1Y9KbrhoyeV3jD1UDcaefbIOwLknfH6dZmiaP8XrEg3BdnlgBKXu/AC0E+Akuu
gy0BTVOjxe2x9/Oyrbpx8rE91qbAX4ahmnks+UYFNKcZoZyMnc80Q3gR6TZeFGbl
FYr1gWFQ498Zuk+xhXp5MoXFAgMBAAGjggKkMIICoDAdBgNVHQ4EFgQUjJiB0v3W
4WEArcFw/rrQB40+3OgwHwYDVR0jBBgwFoAUmzDlUwzhTILM3z53pTDnP9QQ43cw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE5OEU1LzE2ODRDMDc4NDA0
NzExRUVBQkMwRTI0Q0M0RjlBRTAyL216RGxVd3poVElMTTN6NTNwVERuUDlRUTQz
Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvbXpEbFV3emhUSUxNM3o1M3BURG5QOVFRNDNjLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
OThFNS8xNjg0QzA3ODQwNDcxMUVFQUJDMEUyNENDNEY5QUUwMi83OENBRUYwMDQw
NDcxMUVFQkU1Njc5NERDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAWfumjANBAIAAjAHAwUAJAEZIDANBgkqhkiG9w0BAQsFAAOC
AQEAcaVKS1cB2qOtvRjVUR6aw1SzzU8G/gM2ipyRIo9mK1lyDoXSpf3uOokoLrPP
YVHYEJzm/XW40qqMZ4tni/+FbRhYLnubq5sQVuhCpjKDi+0eTeM2F+L1FTpi3DDE
K+usJRqByL13vm/9ZEJNstLYyiniI8O9wJfNIL36k+tdmWV9CrkW8tumYCt++fde
djHYcJb0mVc35ImboQkSwdu8Pj7O8y//41fz9/JZybBwoVFGdApAbW+zyz4t52SF
OLeg5sEUzS7YcGh5A2MJxQU8ToKpyZlTQ8AFa1cbxMRUzOaeP4mbW2Keaqjj90OV
np1iFUn+Y0C5FC55hF7nZ6geMA==
-----END CERTIFICATE-----
Generated at Sat Jun 15 10:27:25 2024 by rpki-client on console-ams.rpki-client.org