Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8E38/51F0DB3C3FFE11ED9A87A315C4F9AE02/A6789038400211ED808CCF0DC4F9AE02.roa
File:                     A6789038400211ED808CCF0DC4F9AE02.roa (raw, json)
Hash identifier:          B0B4rBaB7RDR5K24splQuuNnMljYu/PH9jfvEV4r1Cc=
Subject key identifier:   58:A2:56:3C:40:10:CD:50:07:25:33:D6:4D:40:E7:88:0F:B5:BB:FC
Certificate issuer:       /CN=A91B8E38/serialNumber=724E1F646C451B019E1CDA36D4346ADB9B5FDBF8
Certificate serial:       93
Authority key identifier: 72:4E:1F:64:6C:45:1B:01:9E:1C:DA:36:D4:34:6A:DB:9B:5F:DB:F8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ck4fZGxFGwGeHNo21DRq25tf2_g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B8E38/51F0DB3C3FFE11ED9A87A315C4F9AE02/A6789038400211ED808CCF0DC4F9AE02.roa
Signing time:             Mon 03 Jul 2023 03:52:54 +0000
ROA not before:           Mon 03 Jul 2023 03:52:54 +0000
ROA not after:            Sat 31 Aug 2024 00:00:00 +0000
asID:                     136592
IP address blocks:        103.93.120.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B8E38/51F0DB3C3FFE11ED9A87A315C4F9AE02/ck4fZGxFGwGeHNo21DRq25tf2_g.crl
                          rsync://rpki.apnic.net/member_repository/A91B8E38/51F0DB3C3FFE11ED9A87A315C4F9AE02/ck4fZGxFGwGeHNo21DRq25tf2_g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ck4fZGxFGwGeHNo21DRq25tf2_g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 14 Jun 2024 04:06:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 147 (0x93)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B8E38/serialNumber=724E1F646C451B019E1CDA36D4346ADB9B5FDBF8
        Validity
            Not Before: Jul  3 03:52:54 2023 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=64a24616-a298
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:40:ee:57:a8:e8:7d:25:fb:b7:01:23:99:cf:
                    94:20:e2:40:ac:38:9d:8f:59:4f:a9:cc:30:64:18:
                    17:12:ff:d5:07:c2:fc:c9:1d:8d:5a:97:a0:3c:42:
                    9d:eb:08:3b:18:61:6c:76:de:1f:86:64:28:5f:b4:
                    1c:b2:07:94:70:f0:b4:4d:61:b5:95:79:b7:a4:1e:
                    f7:43:75:4e:ce:0a:bc:42:a8:39:14:ed:f1:c8:68:
                    b5:b7:ff:aa:0b:b7:f5:a8:96:5f:05:73:73:1d:04:
                    f9:39:25:13:95:55:d3:b6:20:32:5f:4d:50:37:b6:
                    6a:bf:7e:a1:90:16:f9:c5:43:ad:13:53:c1:70:eb:
                    56:af:db:e9:0d:d0:5c:2c:40:4e:8e:3e:5f:e4:ab:
                    4b:97:1a:89:b8:35:b1:0f:20:20:19:94:7c:06:d9:
                    08:b1:48:0c:eb:7c:75:8a:83:36:6d:43:1f:c1:dc:
                    f1:da:39:5d:48:2f:22:7a:43:c3:c5:1e:46:af:e7:
                    2e:6e:8c:61:a6:2e:43:b7:8d:62:0f:76:f0:00:b2:
                    73:26:3c:c9:2d:e6:7c:0e:95:05:c3:cc:88:92:a2:
                    a7:9d:cf:49:0f:61:23:97:cc:44:f9:48:d7:e1:58:
                    93:63:12:69:e2:25:0c:50:ac:06:9f:85:de:35:17:
                    2d:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:A2:56:3C:40:10:CD:50:07:25:33:D6:4D:40:E7:88:0F:B5:BB:FC
            X509v3 Authority Key Identifier:
                keyid:72:4E:1F:64:6C:45:1B:01:9E:1C:DA:36:D4:34:6A:DB:9B:5F:DB:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B8E38/51F0DB3C3FFE11ED9A87A315C4F9AE02/ck4fZGxFGwGeHNo21DRq25tf2_g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ck4fZGxFGwGeHNo21DRq25tf2_g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8E38/51F0DB3C3FFE11ED9A87A315C4F9AE02/A6789038400211ED808CCF0DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.93.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:b7:9f:2c:6d:5b:01:f9:02:d9:e9:4c:7b:cd:f6:17:93:bb:
         f5:01:db:fb:73:fd:02:17:fd:71:04:0c:77:bc:72:e7:82:46:
         f3:99:6d:82:9a:33:c4:4a:be:9a:35:73:55:cd:79:5b:48:ca:
         0b:f2:26:ad:f6:37:13:7b:35:6b:28:ac:55:68:e1:49:96:fb:
         1f:ee:30:e8:b7:3e:4c:05:1e:0c:a3:d3:69:2c:7d:5d:c4:33:
         d8:1b:4e:38:25:9d:93:29:72:0f:36:7d:11:57:d6:a4:2e:c8:
         5e:20:d8:06:5c:93:e7:3c:aa:59:5d:0d:9b:9d:c2:56:5c:08:
         d3:bc:14:02:ae:b2:74:f9:d2:c7:26:e7:68:45:9e:57:a9:bd:
         fa:4c:28:27:0b:67:14:6c:69:91:e1:cf:dc:96:a5:3d:28:06:
         e3:2f:c8:5b:57:21:c2:75:88:ac:4f:b5:cf:68:d7:dd:ad:ab:
         0e:13:5e:06:33:9a:14:f6:24:cd:47:9e:f5:78:cf:03:07:bf:
         3b:54:41:06:0a:91:3e:97:84:26:b1:ff:bb:4d:b3:29:b3:fc:
         8e:98:2e:f5:88:e2:6b:05:4a:5b:74:31:74:42:1a:e0:2f:38:
         38:d7:4b:f3:5c:85:8a:c0:5e:39:ad:df:75:f2:4c:e3:b9:11:
         e0:db:c2:1f
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAJMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjhFMzgxMTAvBgNVBAUTKDcyNEUxRjY0NkM0NTFCMDE5RTFDREEzNkQ0MzQ2QURC
OUI1RkRCRjgwHhcNMjMwNzAzMDM1MjU0WhcNMjQwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NGEyNDYxNi1hMjk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6EDuV6jofSX7twEjmc+UIOJArDidj1lPqcwwZBgXEv/VB8L8yR2NWpegPEKd
6wg7GGFsdt4fhmQoX7QcsgeUcPC0TWG1lXm3pB73Q3VOzgq8Qqg5FO3xyGi1t/+q
C7f1qJZfBXNzHQT5OSUTlVXTtiAyX01QN7Zqv36hkBb5xUOtE1PBcOtWr9vpDdBc
LEBOjj5f5KtLlxqJuDWxDyAgGZR8BtkIsUgM63x1ioM2bUMfwdzx2jldSC8iekPD
xR5Gr+cuboxhpi5Dt41iD3bwALJzJjzJLeZ8DpUFw8yIkqKnnc9JD2Ejl8xE+UjX
4ViTYxJp4iUMUKwGn4XeNRct1wIDAQABo4IClTCCApEwHQYDVR0OBBYEFFiiVjxA
EM1QByUz1k1A54gPtbv8MB8GA1UdIwQYMBaAFHJOH2RsRRsBnhzaNtQ0atubX9v4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOEUzOC81MUYwREIzQzNG
RkUxMUVEOUE4N0EzMTVDNEY5QUUwMi9jazRmWkd4Rkd3R2VITm8yMURScTI1dGYy
X2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2NrNGZaR3hGR3dHZUhObzIxRFJxMjV0ZjJfZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QjhFMzgvNTFGMERCM0MzRkZFMTFFRDlBODdBMzE1QzRGOUFFMDIvQTY3ODkwMzg0
MDAyMTFFRDgwOENDRjBEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnXXgwDQYJKoZIhvcNAQELBQADggEBADC3nyxtWwH5Atnp
THvN9heTu/UB2/tz/QIX/XEEDHe8cueCRvOZbYKaM8RKvpo1c1XNeVtIygvyJq32
NxN7NWsorFVo4UmW+x/uMOi3PkwFHgyj02ksfV3EM9gbTjglnZMpcg82fRFX1qQu
yF4g2AZck+c8qlldDZudwlZcCNO8FAKusnT50scm52hFnlepvfpMKCcLZxRsaZHh
z9yWpT0oBuMvyFtXIcJ1iKxPtc9o192tqw4TXgYzmhT2JM1HnvV4zwMHvztUQQYK
kT6XhCax/7tNsymz/I6YLvWI4msFSlt0MXRCGuAvODjXS/NchYrAXjmt33XyTOO5
EeDbwh8=
-----END CERTIFICATE-----
Generated at Fri Jun 7 06:10:05 2024 by rpki-client on console-ams.rpki-client.org