Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB6B3/7243EB9E9B6411EBB65E6E87C4F9AE02/D154F886EB7E11EE973A5D76C4F9AE02.roa
File:                     D154F886EB7E11EE973A5D76C4F9AE02.roa (raw, json)
Hash identifier:          Ft/RnLHwgz/orNjOiWOlq050h8ZqZmiyFBfY/wLPhHc=
Subject key identifier:   15:19:B4:1D:A1:47:27:B2:EB:E3:B0:E7:EA:23:B1:39:98:8E:FA:77
Certificate issuer:       /CN=A91BB6B3/serialNumber=6AD58B2C323EF40FC08940B14607D08695CE8698
Certificate serial:       0541
Authority key identifier: 6A:D5:8B:2C:32:3E:F4:0F:C0:89:40:B1:46:07:D0:86:95:CE:86:98
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/atWLLDI-9A_AiUCxRgfQhpXOhpg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BB6B3/7243EB9E9B6411EBB65E6E87C4F9AE02/D154F886EB7E11EE973A5D76C4F9AE02.roa
Signing time:             Tue 26 Mar 2024 14:40:41 +0000
ROA not before:           Tue 26 Mar 2024 14:40:41 +0000
ROA not after:            Tue 30 Jul 2024 00:00:00 +0000
asID:                     2914
IP address blocks:        103.151.6.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BB6B3/7243EB9E9B6411EBB65E6E87C4F9AE02/atWLLDI-9A_AiUCxRgfQhpXOhpg.crl
                          rsync://rpki.apnic.net/member_repository/A91BB6B3/7243EB9E9B6411EBB65E6E87C4F9AE02/atWLLDI-9A_AiUCxRgfQhpXOhpg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/atWLLDI-9A_AiUCxRgfQhpXOhpg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 May 2024 21:20:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1345 (0x541)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BB6B3/serialNumber=6AD58B2C323EF40FC08940B14607D08695CE8698
        Validity
            Not Before: Mar 26 14:40:41 2024 GMT
            Not After : Jul 30 00:00:00 2024 GMT
        Subject: CN=6602de68-46e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:6b:ae:2a:ab:5d:7b:ff:29:da:7f:d6:a2:04:
                    88:85:d8:42:ae:cf:77:ac:39:04:25:26:79:63:b9:
                    b1:d3:8d:5a:98:23:43:79:5e:2f:60:19:5a:20:ef:
                    6b:2a:70:2c:40:2a:1e:cd:fc:54:5b:a1:65:79:45:
                    61:1b:d9:1d:c0:2d:6e:e5:93:67:25:4b:d6:16:12:
                    4b:25:07:67:0f:25:ee:f3:5d:6a:92:18:b5:27:38:
                    59:8d:b0:90:d3:3e:8d:3b:17:4c:54:e4:37:30:91:
                    5e:e7:e6:30:02:c0:7a:43:a7:83:c2:5f:e1:55:52:
                    85:c8:bf:3b:24:15:f4:5a:80:84:c4:7b:ec:1e:e9:
                    9f:9b:8f:dc:65:da:33:b3:b8:5b:6b:27:14:f1:54:
                    0d:47:73:6e:17:d6:a1:70:0f:f2:ef:79:7d:bd:9b:
                    f1:ab:26:d5:5f:85:02:39:d1:f4:04:55:d7:41:83:
                    e4:8e:f4:5f:4f:f0:10:23:39:ae:11:24:c4:84:1b:
                    02:27:be:f6:34:8e:ae:bc:a2:88:60:a7:10:89:b1:
                    7f:24:6e:ae:0a:8e:b1:f7:b8:9b:c2:d1:a2:87:da:
                    d3:0f:7e:aa:c3:35:e3:7d:69:c8:62:57:92:9c:d3:
                    36:89:ed:2e:87:e2:06:a1:9c:26:bd:05:f9:cf:37:
                    bb:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:19:B4:1D:A1:47:27:B2:EB:E3:B0:E7:EA:23:B1:39:98:8E:FA:77
            X509v3 Authority Key Identifier:
                keyid:6A:D5:8B:2C:32:3E:F4:0F:C0:89:40:B1:46:07:D0:86:95:CE:86:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BB6B3/7243EB9E9B6411EBB65E6E87C4F9AE02/atWLLDI-9A_AiUCxRgfQhpXOhpg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/atWLLDI-9A_AiUCxRgfQhpXOhpg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB6B3/7243EB9E9B6411EBB65E6E87C4F9AE02/D154F886EB7E11EE973A5D76C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.151.6.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5f:61:a0:3b:31:cf:73:be:76:24:73:fc:77:36:29:36:48:b0:
         ed:3a:69:9b:9e:5c:24:f6:06:5a:88:84:cb:38:7c:e2:62:eb:
         25:55:81:a4:22:f1:1e:a6:a6:c0:d1:bd:e0:61:68:15:1f:93:
         c4:9d:80:4f:59:92:fe:83:0f:d5:d9:ea:50:ae:7b:b7:07:1d:
         1c:81:a4:37:0d:f3:06:f7:80:20:d3:aa:ac:bf:b2:39:91:9a:
         cc:ef:20:bd:67:9e:7c:58:8b:bf:a2:29:35:37:e9:dc:e0:d1:
         85:15:9f:35:33:78:42:b6:07:7c:51:a7:f0:ee:3e:3c:f0:00:
         85:37:55:61:d3:bb:58:1f:ff:66:63:f3:79:66:9f:24:3e:f4:
         7f:1f:56:bd:36:0b:b9:65:e0:8a:64:ca:74:bb:44:08:b0:f4:
         57:71:34:30:ee:d7:29:fe:76:2b:ec:18:08:d3:76:e0:62:56:
         b9:3d:61:2b:a1:39:48:36:13:96:2a:bd:2a:09:60:c4:2a:03:
         c9:1c:c9:d9:b3:83:ee:d3:9f:6e:00:90:fd:25:a7:b9:50:83:
         b3:a4:2f:d2:5d:7e:2e:0c:fe:bf:c0:6b:5f:07:51:14:2f:53:
         32:94:ff:38:c7:1e:d2:fc:e9:5e:f9:3b:3d:2e:a1:1a:8d:37:
         83:51:ec:79
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBUEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkI2QjMxMTAvBgNVBAUTKDZBRDU4QjJDMzIzRUY0MEZDMDg5NDBCMTQ2MDdEMDg2
OTVDRTg2OTgwHhcNMjQwMzI2MTQ0MDQxWhcNMjQwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NjAyZGU2OC00NmU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxWuuKqtde/8p2n/WogSIhdhCrs93rDkEJSZ5Y7mx041amCNDeV4vYBlaIO9r
KnAsQCoezfxUW6FleUVhG9kdwC1u5ZNnJUvWFhJLJQdnDyXu811qkhi1JzhZjbCQ
0z6NOxdMVOQ3MJFe5+YwAsB6Q6eDwl/hVVKFyL87JBX0WoCExHvsHumfm4/cZdoz
s7hbaycU8VQNR3NuF9ahcA/y73l9vZvxqybVX4UCOdH0BFXXQYPkjvRfT/AQIzmu
ESTEhBsCJ772NI6uvKKIYKcQibF/JG6uCo6x97ibwtGih9rTD36qwzXjfWnIYleS
nNM2ie0uh+IGoZwmvQX5zze7gwIDAQABo4IClTCCApEwHQYDVR0OBBYEFBUZtB2h
Ryey6+Ow5+ojsTmYjvp3MB8GA1UdIwQYMBaAFGrViywyPvQPwIlAsUYH0IaVzoaY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjZCMy83MjQzRUI5RTlC
NjQxMUVCQjY1RTZFODdDNEY5QUUwMi9hdFdMTERJLTlBX0FpVUN4UmdmUWhwWE9o
cGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2F0V0xMREktOUFfQWlVQ3hSZ2ZRaHBYT2hwZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QkI2QjMvNzI0M0VCOUU5QjY0MTFFQkI2NUU2RTg3QzRGOUFFMDIvRDE1NEY4ODZF
QjdFMTFFRTk3M0E1RDc2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnlwYwDQYJKoZIhvcNAQELBQADggEBAF9hoDsxz3O+diRz
/Hc2KTZIsO06aZueXCT2BlqIhMs4fOJi6yVVgaQi8R6mpsDRveBhaBUfk8SdgE9Z
kv6DD9XZ6lCue7cHHRyBpDcN8wb3gCDTqqy/sjmRmszvIL1nnnxYi7+iKTU36dzg
0YUVnzUzeEK2B3xRp/DuPjzwAIU3VWHTu1gf/2Zj83lmnyQ+9H8fVr02C7ll4Ipk
ynS7RAiw9FdxNDDu1yn+divsGAjTduBiVrk9YSuhOUg2E5YqvSoJYMQqA8kcydmz
g+7Tn24AkP0lp7lQg7OkL9Jdfi4M/r/Aa18HURQvUzKU/zjHHtL86V75Oz0uoRqN
N4NR7Hk=
-----END CERTIFICATE-----
Generated at Sun May 5 02:33:38 2024 by rpki-client on console-fra.rpki-client.org