Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4E62/702A028CC99F11EEA8158E79C4F9AE02/37EB330AC9A411EE98496754C4F9AE02.roa
File:                     37EB330AC9A411EE98496754C4F9AE02.roa (raw, json)
Hash identifier:          pq3YmshSa5LiwtO4lXl1oBpAEwDO9Rdm27qbxdhtJJo=
Subject key identifier:   27:DA:65:42:CB:7E:70:7F:11:A4:51:F4:82:D0:CF:54:E5:08:02:22
Certificate issuer:       /CN=A91C4E62/serialNumber=6580910B55FAE5FF60F71EB2070470A1262E343B
Certificate serial:       05
Authority key identifier: 65:80:91:0B:55:FA:E5:FF:60:F7:1E:B2:07:04:70:A1:26:2E:34:3B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZYCRC1X65f9g9x6yBwRwoSYuNDs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C4E62/702A028CC99F11EEA8158E79C4F9AE02/37EB330AC9A411EE98496754C4F9AE02.roa
Signing time:             Mon 12 Feb 2024 12:43:16 +0000
ROA not before:           Mon 12 Feb 2024 12:43:16 +0000
ROA not after:            Sun 02 Mar 2025 00:00:00 +0000
asID:                     7545
IP address blocks:        103.42.62.0/24 maxlen: 24
                          103.42.63.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C4E62/702A028CC99F11EEA8158E79C4F9AE02/ZYCRC1X65f9g9x6yBwRwoSYuNDs.crl
                          rsync://rpki.apnic.net/member_repository/A91C4E62/702A028CC99F11EEA8158E79C4F9AE02/ZYCRC1X65f9g9x6yBwRwoSYuNDs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZYCRC1X65f9g9x6yBwRwoSYuNDs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 14 Jun 2024 07:17:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C4E62/serialNumber=6580910B55FAE5FF60F71EB2070470A1262E343B
        Validity
            Not Before: Feb 12 12:43:16 2024 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=65ca1264-7fc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:59:c6:20:ee:85:42:e8:b8:fa:9d:3e:13:bb:
                    f4:f2:b2:fd:19:1a:11:61:5b:da:a0:a3:0d:ae:29:
                    9c:ce:59:8c:b9:af:16:ee:60:ae:53:a9:40:c8:b1:
                    78:df:f9:cd:31:2a:39:24:33:f9:67:55:1f:78:92:
                    23:a9:eb:05:9b:2c:9c:4b:64:69:e3:fd:d1:91:0a:
                    1a:8f:ad:32:51:bf:a7:cb:b2:6c:62:47:fd:a5:f9:
                    89:38:cd:5c:e7:d5:17:4e:24:da:ba:01:b1:4a:84:
                    7d:e4:3d:96:07:5f:08:bd:b6:83:97:64:21:c6:b5:
                    59:b2:f4:08:d4:d7:e8:fe:20:76:80:aa:39:a2:93:
                    fd:c1:9b:37:10:80:12:10:4e:50:27:45:69:4e:c7:
                    f8:bd:a4:7a:1b:60:cc:cd:ea:6c:92:46:f5:c1:9e:
                    b5:3e:3d:6f:1a:34:40:78:74:2a:a0:05:31:cc:b7:
                    83:60:52:fc:4a:0e:30:4f:72:2a:18:ae:08:7d:d0:
                    5c:23:5e:53:98:21:34:ec:15:6e:2c:7a:ac:0e:7c:
                    7e:30:de:ad:90:1c:21:79:67:6c:36:a2:b9:a9:7f:
                    03:50:04:a3:71:fa:cf:b0:7e:d7:1d:e4:56:84:17:
                    44:50:f0:36:82:9a:87:48:d4:43:eb:ae:3c:47:78:
                    c6:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:DA:65:42:CB:7E:70:7F:11:A4:51:F4:82:D0:CF:54:E5:08:02:22
            X509v3 Authority Key Identifier:
                keyid:65:80:91:0B:55:FA:E5:FF:60:F7:1E:B2:07:04:70:A1:26:2E:34:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C4E62/702A028CC99F11EEA8158E79C4F9AE02/ZYCRC1X65f9g9x6yBwRwoSYuNDs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZYCRC1X65f9g9x6yBwRwoSYuNDs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4E62/702A028CC99F11EEA8158E79C4F9AE02/37EB330AC9A411EE98496754C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.42.62.0/23

    Signature Algorithm: sha256WithRSAEncryption
         93:88:49:b5:6b:44:a1:b3:5f:40:8c:0a:b2:bc:74:c9:88:e6:
         dd:0b:28:12:da:da:f3:13:b4:62:e4:7f:0e:2f:bc:64:b7:54:
         42:6f:4d:45:e2:31:9b:b5:25:31:72:09:4b:a3:bc:6b:fb:98:
         da:be:92:bc:14:7a:8e:dd:1b:11:d1:8d:82:9c:a1:2c:e0:72:
         47:b0:56:d3:39:a4:55:af:72:94:97:e0:94:aa:07:4a:fb:ad:
         d1:49:8e:d1:67:24:b3:6f:a5:e2:81:1d:75:97:eb:0a:21:c2:
         6f:39:c2:75:e0:3a:77:01:96:8e:92:59:68:33:ba:d0:7c:1e:
         d8:66:cf:fa:48:8d:6f:f0:7c:9b:10:1c:ed:5d:1f:a0:11:ea:
         52:61:81:e1:f1:25:84:11:ab:bf:86:a6:6d:5d:29:85:e5:7c:
         77:1a:f9:4e:b0:e3:01:d3:9d:d4:13:2d:2a:1b:8b:61:f5:9a:
         92:2f:8c:23:c7:48:ac:e2:94:d0:4a:93:8a:69:16:a5:49:5f:
         fe:60:af:04:2e:15:25:7a:00:35:ba:c0:6c:99:92:22:7c:77:
         51:4c:50:5e:af:5b:3f:ee:00:20:4d:3b:ac:70:55:25:a9:be:
         11:35:1d:f0:4e:1c:ef:bb:db:c9:79:18:81:64:24:d7:4f:dc:
         f3:b5:6d:5f
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBBTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD
NEU2MjExMC8GA1UEBRMoNjU4MDkxMEI1NUZBRTVGRjYwRjcxRUIyMDcwNDcwQTEy
NjJFMzQzQjAeFw0yNDAyMTIxMjQzMTZaFw0yNTAzMDIwMDAwMDBaMBgxFjAUBgNV
BAMTDTY1Y2ExMjY0LTdmYzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCnWcYg7oVC6Lj6nT4Tu/Tysv0ZGhFhW9qgow2uKZzOWYy5rxbuYK5TqUDIsXjf
+c0xKjkkM/lnVR94kiOp6wWbLJxLZGnj/dGRChqPrTJRv6fLsmxiR/2l+Yk4zVzn
1RdOJNq6AbFKhH3kPZYHXwi9toOXZCHGtVmy9AjU1+j+IHaAqjmik/3BmzcQgBIQ
TlAnRWlOx/i9pHobYMzN6mySRvXBnrU+PW8aNEB4dCqgBTHMt4NgUvxKDjBPcioY
rgh90FwjXlOYITTsFW4seqwOfH4w3q2QHCF5Z2w2ormpfwNQBKNx+s+wftcd5FaE
F0RQ8DaCmodI1EPrrjxHeMbBAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUJ9plQst+
cH8RpFH0gtDPVOUIAiIwHwYDVR0jBBgwFoAUZYCRC1X65f9g9x6yBwRwoSYuNDsw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM0RTYyLzcwMkEwMjhDQzk5
RjExRUVBODE1OEU3OUM0RjlBRTAyL1pZQ1JDMVg2NWY5Zzl4NnlCd1J3b1NZdU5E
cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvWllDUkMxWDY1ZjlnOXg2eUJ3UndvU1l1TkRzLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
NEU2Mi83MDJBMDI4Q0M5OUYxMUVFQTgxNThFNzlDNEY5QUUwMi8zN0VCMzMwQUM5
QTQxMUVFOTg0OTY3NTRDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAWcqPjANBgkqhkiG9w0BAQsFAAOCAQEAk4hJtWtEobNfQIwK
srx0yYjm3QsoEtra8xO0YuR/Di+8ZLdUQm9NReIxm7UlMXIJS6O8a/uY2r6SvBR6
jt0bEdGNgpyhLOByR7BW0zmkVa9ylJfglKoHSvut0UmO0Wcks2+l4oEddZfrCiHC
bznCdeA6dwGWjpJZaDO60Hwe2GbP+kiNb/B8mxAc7V0foBHqUmGB4fElhBGrv4am
bV0pheV8dxr5TrDjAdOd1BMtKhuLYfWaki+MI8dIrOKU0EqTimkWpUlf/mCvBC4V
JXoANbrAbJmSInx3UUxQXq9bP+4AIE07rHBVJam+ETUd8E4c77vbyXkYgWQk10/c
87VtXw==
-----END CERTIFICATE-----
Generated at Fri Jun 7 12:38:46 2024 by rpki-client on console-ams.rpki-client.org