Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE056/FB59344EFB1C11EBB5464F64C4F9AE02/0B5E5BB8116A11EC994F9D47C4F9AE02.roa
File:                     0B5E5BB8116A11EC994F9D47C4F9AE02.roa (raw, json)
Hash identifier:          Sl4jo8GoYmHvxl98IOytCg0mHw3anJ6/BGsR4r1goOQ=
Subject key identifier:   06:CE:36:3F:10:13:71:A8:FF:8F:F9:81:D0:C8:FC:18:67:60:65:1A
Certificate issuer:       /CN=A91BE056/serialNumber=8BC01CEA44D3ED88F4153172B792456715C5260B
Certificate serial:       0401
Authority key identifier: 8B:C0:1C:EA:44:D3:ED:88:F4:15:31:72:B7:92:45:67:15:C5:26:0B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i8Ac6kTT7Yj0FTFyt5JFZxXFJgs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BE056/FB59344EFB1C11EBB5464F64C4F9AE02/0B5E5BB8116A11EC994F9D47C4F9AE02.roa
Signing time:             Wed 11 Oct 2023 00:52:41 +0000
ROA not before:           Wed 11 Oct 2023 00:52:41 +0000
ROA not after:            Sun 01 Dec 2024 00:00:00 +0000
asID:                     135607
IP address blocks:        103.171.89.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BE056/FB59344EFB1C11EBB5464F64C4F9AE02/i8Ac6kTT7Yj0FTFyt5JFZxXFJgs.crl
                          rsync://rpki.apnic.net/member_repository/A91BE056/FB59344EFB1C11EBB5464F64C4F9AE02/i8Ac6kTT7Yj0FTFyt5JFZxXFJgs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i8Ac6kTT7Yj0FTFyt5JFZxXFJgs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 14 Jun 2024 02:17:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1025 (0x401)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BE056/serialNumber=8BC01CEA44D3ED88F4153172B792456715C5260B
        Validity
            Not Before: Oct 11 00:52:41 2023 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=6525f1d9-e750
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:b0:6a:07:68:fa:9a:08:30:e3:99:25:ec:71:
                    50:2c:5d:fd:0b:34:62:c5:fd:fa:46:fa:ab:f1:6f:
                    7a:15:38:be:2c:c5:c6:ea:cc:c9:45:c3:c1:e4:13:
                    3d:58:65:84:f7:41:3f:86:36:cb:d7:8c:cf:0b:03:
                    f7:06:1c:fb:79:65:1c:49:cd:c9:10:50:e7:87:7d:
                    50:39:cd:4b:3d:aa:97:45:9a:83:99:73:df:f7:2e:
                    b6:87:20:1e:32:68:03:82:24:46:10:97:4f:65:ad:
                    9a:a5:13:35:4f:2f:03:8a:a5:71:b1:6b:32:ae:e7:
                    e9:7d:b7:a4:19:04:94:81:50:dc:86:cc:fc:a1:71:
                    af:a2:bd:02:f7:7f:21:88:71:9e:3f:64:42:7d:fb:
                    6f:53:95:d0:6e:8c:05:e3:d0:82:dd:46:75:25:d4:
                    a7:57:27:58:0d:b9:4b:8d:ae:24:07:10:fb:c1:f3:
                    24:9c:fb:43:c7:10:f8:6f:ae:33:49:0e:e3:20:24:
                    e5:05:56:f1:7f:a9:00:a2:4c:09:9e:12:1c:01:27:
                    83:39:42:38:03:31:45:f6:89:d6:20:60:54:02:5d:
                    f2:a3:af:70:c4:43:ea:4d:7e:b1:d4:a8:bb:4e:4f:
                    42:e2:02:fb:7e:fd:b6:67:3c:a5:62:d4:f1:0a:7e:
                    94:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:CE:36:3F:10:13:71:A8:FF:8F:F9:81:D0:C8:FC:18:67:60:65:1A
            X509v3 Authority Key Identifier:
                keyid:8B:C0:1C:EA:44:D3:ED:88:F4:15:31:72:B7:92:45:67:15:C5:26:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BE056/FB59344EFB1C11EBB5464F64C4F9AE02/i8Ac6kTT7Yj0FTFyt5JFZxXFJgs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i8Ac6kTT7Yj0FTFyt5JFZxXFJgs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE056/FB59344EFB1C11EBB5464F64C4F9AE02/0B5E5BB8116A11EC994F9D47C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.171.89.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:d6:68:a8:4a:13:1a:86:d2:7c:e9:42:83:82:af:ba:05:8c:
         df:09:b3:4f:55:de:1e:d7:43:32:c4:17:96:c5:63:3b:54:f1:
         4e:22:dd:26:9a:32:bb:ac:21:4f:3b:db:63:f0:c7:2f:6e:57:
         3b:21:97:62:9b:6b:15:57:f8:66:05:ea:78:a4:79:af:52:25:
         7a:ef:8f:4c:63:ca:78:de:67:28:9d:7c:59:d5:45:9e:88:29:
         ce:cd:78:6f:d0:49:75:74:9e:31:64:d1:2a:20:92:36:19:14:
         21:46:23:8c:69:16:6d:df:64:e4:0a:0b:95:46:f1:3d:84:8b:
         27:4c:71:ee:8a:e3:17:b0:a9:71:d2:fe:a9:c6:88:bb:27:4f:
         04:63:98:ac:24:c6:20:7b:f4:6d:50:e1:48:e3:b7:a9:52:d7:
         04:f2:b1:f5:28:a3:88:5e:42:70:f9:73:e4:a8:86:d5:a6:a3:
         57:53:92:4c:ed:67:9a:79:77:fb:e8:68:03:f3:1e:04:54:b4:
         1f:7b:34:c7:6e:31:34:e9:ca:3c:72:4f:f2:70:9c:5e:a8:15:
         ea:e5:70:7f:4c:e6:0b:32:2e:6c:aa:34:4f:a0:9f:c9:a4:85:
         ab:b9:83:9c:9c:8a:53:20:77:9c:d7:f7:4a:2f:c0:48:ac:00:
         ba:90:40:4b
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBAEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkUwNTYxMTAvBgNVBAUTKDhCQzAxQ0VBNDREM0VEODhGNDE1MzE3MkI3OTI0NTY3
MTVDNTI2MEIwHhcNMjMxMDExMDA1MjQxWhcNMjQxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NTI1ZjFkOS1lNzUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnrBqB2j6mggw45kl7HFQLF39CzRixf36Rvqr8W96FTi+LMXG6szJRcPB5BM9
WGWE90E/hjbL14zPCwP3Bhz7eWUcSc3JEFDnh31QOc1LPaqXRZqDmXPf9y62hyAe
MmgDgiRGEJdPZa2apRM1Ty8DiqVxsWsyrufpfbekGQSUgVDchsz8oXGvor0C938h
iHGeP2RCfftvU5XQbowF49CC3UZ1JdSnVydYDblLja4kBxD7wfMknPtDxxD4b64z
SQ7jICTlBVbxf6kAokwJnhIcASeDOUI4AzFF9onWIGBUAl3yo69wxEPqTX6x1Ki7
Tk9C4gL7fv22ZzylYtTxCn6U+QIDAQABo4IClTCCApEwHQYDVR0OBBYEFAbONj8Q
E3Go/4/5gdDI/BhnYGUaMB8GA1UdIwQYMBaAFIvAHOpE0+2I9BUxcreSRWcVxSYL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRTA1Ni9GQjU5MzQ0RUZC
MUMxMUVCQjU0NjRGNjRDNEY5QUUwMi9pOEFjNmtUVDdZajBGVEZ5dDVKRlp4WEZK
Z3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2k4QWM2a1RUN1lqMEZURnl0NUpGWnhYRkpncy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QkUwNTYvRkI1OTM0NEVGQjFDMTFFQkI1NDY0RjY0QzRGOUFFMDIvMEI1RTVCQjgx
MTZBMTFFQzk5NEY5RDQ3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnq1kwDQYJKoZIhvcNAQELBQADggEBAILWaKhKExqG0nzp
QoOCr7oFjN8Js09V3h7XQzLEF5bFYztU8U4i3SaaMrusIU8722Pwxy9uVzshl2Kb
axVX+GYF6nikea9SJXrvj0xjynjeZyidfFnVRZ6IKc7NeG/QSXV0njFk0SogkjYZ
FCFGI4xpFm3fZOQKC5VG8T2EiydMce6K4xewqXHS/qnGiLsnTwRjmKwkxiB79G1Q
4Ujjt6lS1wTysfUoo4heQnD5c+SohtWmo1dTkkztZ5p5d/voaAPzHgRUtB97NMdu
MTTpyjxyT/JwnF6oFerlcH9M5gsyLmyqNE+gn8mkhau5g5ycilMgd5zX90ovwEis
ALqQQEs=
-----END CERTIFICATE-----
Generated at Fri Jun 7 03:23:28 2024 by rpki-client on console-fra.rpki-client.org