Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE108/E3B046CCD01C11ECB354AF24C4F9AE02/E100C846D0D211EC92E5014CC4F9AE02.roa
File:                     E100C846D0D211EC92E5014CC4F9AE02.roa (raw, json)
Hash identifier:          /LGgxGmk7OJxec0kFePyyjVNXXGStmiDlKB+PEnnTLQ=
Subject key identifier:   80:4A:39:90:45:75:04:85:DE:DC:0D:48:E3:67:F3:09:A0:B5:F0:68
Certificate issuer:       /CN=A91AE108/serialNumber=02BB97FD8B1F620E02A1E2CADB59D656F01ADA45
Certificate serial:       01AB
Authority key identifier: 02:BB:97:FD:8B:1F:62:0E:02:A1:E2:CA:DB:59:D6:56:F0:1A:DA:45
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AruX_YsfYg4CoeLK21nWVvAa2kU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AE108/E3B046CCD01C11ECB354AF24C4F9AE02/E100C846D0D211EC92E5014CC4F9AE02.roa
Signing time:             Sat 17 Jun 2023 04:32:32 +0000
ROA not before:           Sat 17 Jun 2023 04:32:32 +0000
ROA not after:            Tue 30 Jul 2024 00:00:00 +0000
asID:                     45627
IP address blocks:        203.175.178.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AE108/E3B046CCD01C11ECB354AF24C4F9AE02/AruX_YsfYg4CoeLK21nWVvAa2kU.crl
                          rsync://rpki.apnic.net/member_repository/A91AE108/E3B046CCD01C11ECB354AF24C4F9AE02/AruX_YsfYg4CoeLK21nWVvAa2kU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AruX_YsfYg4CoeLK21nWVvAa2kU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 04:53:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 427 (0x1ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AE108/serialNumber=02BB97FD8B1F620E02A1E2CADB59D656F01ADA45
        Validity
            Not Before: Jun 17 04:32:32 2023 GMT
            Not After : Jul 30 00:00:00 2024 GMT
        Subject: CN=648d375f-4def
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:0d:1a:e3:86:9b:5c:16:60:09:ba:21:0d:e4:
                    3a:77:02:c8:51:83:5b:46:34:a9:9b:c0:e0:c9:b8:
                    61:dc:fb:63:a1:7b:9f:01:24:b0:46:81:97:6e:19:
                    36:af:8f:b0:03:66:3f:2e:f7:cc:48:6d:46:18:40:
                    20:cc:9f:79:90:aa:ee:70:8b:e8:03:26:5a:18:0c:
                    d0:df:8d:f1:44:47:39:cc:79:6d:67:c2:4c:3f:ac:
                    6a:02:cf:b9:1a:d7:b5:ec:7e:70:4a:8e:5e:84:1d:
                    e9:ff:3f:e8:2a:c5:1d:00:bb:ae:e9:e2:f0:54:e7:
                    d1:8a:33:fb:c6:f2:d0:6e:12:0b:63:4d:ac:f5:b7:
                    a0:0c:91:73:a8:83:66:cb:35:e8:00:e1:a8:7f:44:
                    a4:b3:d8:f8:d1:31:08:22:8f:a2:e1:8f:dc:ae:ab:
                    a3:e5:5e:aa:69:48:e8:36:a7:85:ac:7a:6d:77:f4:
                    23:bd:21:4a:a5:f7:37:61:63:80:dc:a3:27:ff:2e:
                    e0:be:0b:2d:5e:07:5d:92:4b:8a:8c:d3:72:6e:a9:
                    e8:a6:76:2e:50:7d:42:a9:59:ff:82:b2:d8:20:a3:
                    b2:f9:bc:2f:d7:fe:8d:0c:b1:77:73:1f:35:e5:97:
                    2d:6d:01:a1:0b:ca:5c:01:26:29:ac:5f:fe:4a:af:
                    73:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:4A:39:90:45:75:04:85:DE:DC:0D:48:E3:67:F3:09:A0:B5:F0:68
            X509v3 Authority Key Identifier:
                keyid:02:BB:97:FD:8B:1F:62:0E:02:A1:E2:CA:DB:59:D6:56:F0:1A:DA:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AE108/E3B046CCD01C11ECB354AF24C4F9AE02/AruX_YsfYg4CoeLK21nWVvAa2kU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AruX_YsfYg4CoeLK21nWVvAa2kU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE108/E3B046CCD01C11ECB354AF24C4F9AE02/E100C846D0D211EC92E5014CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.175.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:98:0f:3e:e0:30:d7:90:c8:a5:22:09:92:9b:76:c3:f5:20:
         a5:2d:c2:7c:58:4a:e5:d7:0a:05:fa:a1:6d:a9:77:f3:8d:ee:
         29:0e:de:58:f5:00:d3:fc:2d:8d:ca:47:ee:51:d1:ac:45:54:
         9a:11:93:aa:42:57:80:ee:4b:76:6e:74:dc:86:0b:9e:59:b6:
         28:e4:d9:24:f9:a3:65:1a:ba:20:f7:0b:18:c1:a4:bc:f8:8f:
         ac:b0:65:bf:5e:3a:89:6a:c1:3a:ae:14:b8:16:f0:f9:b1:45:
         84:31:20:ba:2b:10:99:b0:60:27:91:9c:3d:41:e1:f3:56:c5:
         da:b5:7a:c1:7d:d0:89:b4:f5:cf:b9:6e:b2:f0:41:a7:a0:9d:
         12:cf:cd:74:dc:80:db:49:5f:21:59:5b:b4:86:ca:ce:5f:47:
         02:e4:b6:45:5b:f0:a0:dd:62:04:15:b5:a6:9f:3f:bc:a3:bf:
         bd:d7:47:3e:fd:b4:8a:be:8c:9f:03:b4:55:27:b9:b2:9c:04:
         cf:3c:9c:d2:6d:92:e0:36:a1:0f:36:64:2d:be:ff:78:df:70:
         b3:00:ce:36:38:53:35:93:8b:dc:e2:69:74:8f:34:09:e4:80:
         c7:83:ff:f3:ce:ea:de:d9:69:be:00:a7:b9:4f:2c:10:fa:b8:
         a2:71:d5:c4
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAaswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUUxMDgxMTAvBgNVBAUTKDAyQkI5N0ZEOEIxRjYyMEUwMkExRTJDQURCNTlENjU2
RjAxQURBNDUwHhcNMjMwNjE3MDQzMjMyWhcNMjQwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NDhkMzc1Zi00ZGVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlw0a44abXBZgCbohDeQ6dwLIUYNbRjSpm8Dgybhh3PtjoXufASSwRoGXbhk2
r4+wA2Y/LvfMSG1GGEAgzJ95kKrucIvoAyZaGAzQ343xREc5zHltZ8JMP6xqAs+5
Gte17H5wSo5ehB3p/z/oKsUdALuu6eLwVOfRijP7xvLQbhILY02s9begDJFzqINm
yzXoAOGof0Sks9j40TEIIo+i4Y/crquj5V6qaUjoNqeFrHptd/QjvSFKpfc3YWOA
3KMn/y7gvgstXgddkkuKjNNybqnopnYuUH1CqVn/grLYIKOy+bwv1/6NDLF3cx81
5ZctbQGhC8pcASYprF/+Sq9zhwIDAQABo4IClTCCApEwHQYDVR0OBBYEFIBKOZBF
dQSF3twNSONn8wmgtfBoMB8GA1UdIwQYMBaAFAK7l/2LH2IOAqHiyttZ1lbwGtpF
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTEwOC9FM0IwNDZDQ0Qw
MUMxMUVDQjM1NEFGMjRDNEY5QUUwMi9BcnVYX1lzZllnNENvZUxLMjFuV1Z2QWEy
a1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0FydVhfWXNmWWc0Q29lTEsyMW5XVnZBYTJrVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QUUxMDgvRTNCMDQ2Q0NEMDFDMTFFQ0IzNTRBRjI0QzRGOUFFMDIvRTEwMEM4NDZE
MEQyMTFFQzkyRTUwMTRDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADLr7IwDQYJKoZIhvcNAQELBQADggEBAC2YDz7gMNeQyKUi
CZKbdsP1IKUtwnxYSuXXCgX6oW2pd/ON7ikO3lj1ANP8LY3KR+5R0axFVJoRk6pC
V4DuS3ZudNyGC55Ztijk2ST5o2UauiD3CxjBpLz4j6ywZb9eOolqwTquFLgW8Pmx
RYQxILorEJmwYCeRnD1B4fNWxdq1esF90Im09c+5brLwQaegnRLPzXTcgNtJXyFZ
W7SGys5fRwLktkVb8KDdYgQVtaafP7yjv73XRz79tIq+jJ8DtFUnubKcBM88nNJt
kuA2oQ82ZC2+/3jfcLMAzjY4UzWTi9ziaXSPNAnkgMeD//PO6t7Zab4Ap7lPLBD6
uKJx1cQ=
-----END CERTIFICATE-----
Generated at Sat Jun 1 05:48:44 2024 by rpki-client on console-fra.rpki-client.org