Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/6308A9A8618E11EC80A05E34C4F9AE02.roa
File:                     6308A9A8618E11EC80A05E34C4F9AE02.roa (raw, json)
Hash identifier:          eXmR8bVyYJl7/HZGI5zaP9+gG9XOzJWc+DWEUi3P0fc=
Subject key identifier:   5B:8D:9F:FE:7A:C7:55:97:E8:28:1A:44:30:2A:A3:79:03:68:B4:18
Certificate issuer:       /CN=A91B5073/serialNumber=17817CB8289231B4707E9D5B406D58AFF79D1E01
Certificate serial:       07F1
Authority key identifier: 17:81:7C:B8:28:92:31:B4:70:7E:9D:5B:40:6D:58:AF:F7:9D:1E:01
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4F8uCiSMbRwfp1bQG1Yr_edHgE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/6308A9A8618E11EC80A05E34C4F9AE02.roa
Signing time:             Sun 12 May 2024 18:26:47 +0000
ROA not before:           Sun 12 May 2024 18:26:47 +0000
ROA not after:            Wed 28 May 2025 00:00:00 +0000
asID:                     139673
IP address blocks:        103.134.202.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/F4F8uCiSMbRwfp1bQG1Yr_edHgE.crl
                          rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/F4F8uCiSMbRwfp1bQG1Yr_edHgE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4F8uCiSMbRwfp1bQG1Yr_edHgE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 18:28:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2033 (0x7f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B5073/serialNumber=17817CB8289231B4707E9D5B406D58AFF79D1E01
        Validity
            Not Before: May 12 18:26:47 2024 GMT
            Not After : May 28 00:00:00 2025 GMT
        Subject: CN=664109e6-40a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:31:b6:6b:31:6d:76:89:e1:da:97:b1:be:d4:
                    8a:89:0d:a7:e4:63:0a:ad:70:b1:93:22:f7:66:3f:
                    b0:a8:f3:27:8f:16:c3:26:c0:d0:d4:a9:b9:ad:f3:
                    8c:84:0a:89:a0:0e:6a:45:c1:44:8a:e2:5f:ba:88:
                    7b:90:37:1a:8a:a5:87:86:3b:80:db:0b:22:32:0c:
                    38:2e:ab:e1:38:7a:21:23:ad:bb:10:25:31:b8:e1:
                    b7:7f:cc:9f:3d:c3:1a:a8:ba:d7:27:0e:a0:f3:58:
                    46:00:88:db:29:43:79:52:0a:c5:3a:6a:62:db:b8:
                    9a:e3:fb:52:98:da:52:e7:77:0e:da:b2:fd:96:5d:
                    ec:15:eb:31:9d:cb:62:ec:86:0b:f6:17:90:c5:0d:
                    b8:7f:7b:06:cf:e5:24:57:c0:73:f4:00:bc:69:47:
                    b6:88:0c:b2:27:fd:b9:87:a8:15:4e:cf:c6:fc:32:
                    dc:3e:8d:4d:17:2d:25:a0:2a:d7:6c:1b:e1:6f:da:
                    66:a2:44:b3:c7:5f:2a:39:62:e7:19:37:a6:4b:16:
                    29:6a:b8:e7:20:d3:96:45:4e:66:bd:25:1c:01:94:
                    b1:c3:49:4b:32:1f:5e:c8:7c:a7:bb:2a:9e:ae:07:
                    3a:00:3d:03:14:4e:4f:1a:aa:a2:c5:04:7f:5e:19:
                    c2:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:8D:9F:FE:7A:C7:55:97:E8:28:1A:44:30:2A:A3:79:03:68:B4:18
            X509v3 Authority Key Identifier:
                keyid:17:81:7C:B8:28:92:31:B4:70:7E:9D:5B:40:6D:58:AF:F7:9D:1E:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/F4F8uCiSMbRwfp1bQG1Yr_edHgE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4F8uCiSMbRwfp1bQG1Yr_edHgE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/6308A9A8618E11EC80A05E34C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.134.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:fb:3d:15:29:e7:a8:5a:a3:c5:dc:81:20:d9:cc:22:39:14:
         e3:b3:f7:43:60:17:a3:cc:36:32:41:58:8b:b4:94:e4:fe:1a:
         32:df:80:6c:ab:57:09:e9:88:37:e0:28:42:10:8c:a3:96:87:
         01:31:34:d2:6f:1c:47:b4:b6:3e:d7:cf:ab:07:ef:b5:94:cd:
         57:13:ec:f4:ed:e9:2e:af:cb:ed:ba:be:e0:c6:db:d0:4d:8d:
         c9:69:2f:fb:7a:f7:81:d5:eb:14:32:46:7f:ee:eb:01:b9:94:
         66:31:51:2b:a2:4b:aa:20:00:73:45:fe:42:2b:9a:10:c2:0c:
         e4:b2:7c:a5:b1:5a:80:7c:53:1c:d5:49:79:62:08:ef:1f:df:
         a3:0f:0d:42:05:bf:f8:ea:5e:92:68:c5:ff:07:51:ff:be:e2:
         8f:ef:1b:08:b8:6b:2a:ce:24:d1:5e:2f:1a:0f:88:b9:16:f1:
         e5:15:de:2c:9b:67:20:86:57:96:78:93:9b:e3:37:11:31:85:
         0b:f2:e4:2a:47:4c:ef:b0:02:a9:0e:3e:82:82:22:33:55:9c:
         63:23:1f:6c:38:da:b3:a6:9d:04:46:18:59:8d:1d:90:20:f5:
         2f:06:a6:49:69:e2:15:02:4d:dc:de:ae:eb:65:e7:de:00:42:
         65:f9:76:e4
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICB/EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjUwNzMxMTAvBgNVBAUTKDE3ODE3Q0I4Mjg5MjMxQjQ3MDdFOUQ1QjQwNkQ1OEFG
Rjc5RDFFMDEwHhcNMjQwNTEyMTgyNjQ3WhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02NjQxMDllNi00MGE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1jG2azFtdonh2pexvtSKiQ2n5GMKrXCxkyL3Zj+wqPMnjxbDJsDQ1Km5rfOM
hAqJoA5qRcFEiuJfuoh7kDcaiqWHhjuA2wsiMgw4LqvhOHohI627ECUxuOG3f8yf
PcMaqLrXJw6g81hGAIjbKUN5UgrFOmpi27ia4/tSmNpS53cO2rL9ll3sFesxncti
7IYL9heQxQ24f3sGz+UkV8Bz9AC8aUe2iAyyJ/25h6gVTs/G/DLcPo1NFy0loCrX
bBvhb9pmokSzx18qOWLnGTemSxYparjnINOWRU5mvSUcAZSxw0lLMh9eyHynuyqe
rgc6AD0DFE5PGqqixQR/XhnCBQIDAQABo4IClTCCApEwHQYDVR0OBBYEFFuNn/56
x1WX6CgaRDAqo3kDaLQYMB8GA1UdIwQYMBaAFBeBfLgokjG0cH6dW0BtWK/3nR4B
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTA3My80M0YxNjI2NDMz
OTUxMUU5QkZCMUMyMUFDNEY5QUUwMi9GNEY4dUNpU01iUndmcDFiUUcxWXJfZWRI
Z0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0Y0Rjh1Q2lTTWJSd2ZwMWJRRzFZcl9lZEhnRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QjUwNzMvNDNGMTYyNjQzMzk1MTFFOUJGQjFDMjFBQzRGOUFFMDIvNjMwOEE5QTg2
MThFMTFFQzgwQTA1RTM0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnhsowDQYJKoZIhvcNAQELBQADggEBABb7PRUp56hao8Xc
gSDZzCI5FOOz90NgF6PMNjJBWIu0lOT+GjLfgGyrVwnpiDfgKEIQjKOWhwExNNJv
HEe0tj7Xz6sH77WUzVcT7PTt6S6vy+26vuDG29BNjclpL/t694HV6xQyRn/u6wG5
lGYxUSuiS6ogAHNF/kIrmhDCDOSyfKWxWoB8UxzVSXliCO8f36MPDUIFv/jqXpJo
xf8HUf++4o/vGwi4ayrOJNFeLxoPiLkW8eUV3iybZyCGV5Z4k5vjNxExhQvy5CpH
TO+wAqkOPoKCIjNVnGMjH2w42rOmnQRGGFmNHZAg9S8Gpklp4hUCTdzerutl594A
QmX5duQ=
-----END CERTIFICATE-----
Generated at Fri May 31 19:47:52 2024 by rpki-client on console-fra.rpki-client.org