Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D194C/119FEB488A7411EDB3213E3DC4F9AE02/7370EDA48A8D11ED942E6F74C4F9AE02.roa
File:                     7370EDA48A8D11ED942E6F74C4F9AE02.roa (raw, json)
Hash identifier:          2C7sMzeq2LtkwEJGz1AXTQjxV1r/E9/E1qwgnOjFR/o=
Subject key identifier:   DD:D2:D5:CE:B7:0E:EB:40:79:69:B3:5B:CB:73:F4:56:8C:E4:D0:B9
Certificate issuer:       /CN=A91D194C/serialNumber=1AE9AF3ABB8A73EF26F934F98B3A6CAB9517ACA6
Certificate serial:       BB
Authority key identifier: 1A:E9:AF:3A:BB:8A:73:EF:26:F9:34:F9:8B:3A:6C:AB:95:17:AC:A6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GumvOruKc-8m-TT5izpsq5UXrKY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D194C/119FEB488A7411EDB3213E3DC4F9AE02/7370EDA48A8D11ED942E6F74C4F9AE02.roa
Signing time:             Mon 25 Dec 2023 04:55:41 +0000
ROA not before:           Mon 25 Dec 2023 04:55:41 +0000
ROA not after:            Mon 31 Mar 2025 00:00:00 +0000
asID:                     150682
IP address blocks:        103.177.142.0/23 maxlen: 23
                          103.177.142.0/24 maxlen: 24
                          103.177.143.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D194C/119FEB488A7411EDB3213E3DC4F9AE02/GumvOruKc-8m-TT5izpsq5UXrKY.crl
                          rsync://rpki.apnic.net/member_repository/A91D194C/119FEB488A7411EDB3213E3DC4F9AE02/GumvOruKc-8m-TT5izpsq5UXrKY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GumvOruKc-8m-TT5izpsq5UXrKY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 06:47:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 187 (0xbb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D194C/serialNumber=1AE9AF3ABB8A73EF26F934F98B3A6CAB9517ACA6
        Validity
            Not Before: Dec 25 04:55:41 2023 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=65890b4d-a65c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:58:dd:32:d6:aa:1d:ab:cc:62:65:17:71:b3:
                    f7:0a:f7:34:e4:c7:8f:b7:41:3a:e6:a7:95:d8:7c:
                    87:9c:fa:97:c1:85:02:a6:6e:4a:cf:47:8b:98:26:
                    6b:cd:71:48:3a:a9:21:b3:17:84:17:57:ed:27:53:
                    ef:8d:b8:ea:41:80:55:b7:a5:5a:ae:5a:b7:c9:60:
                    79:79:a4:a2:52:ab:ee:18:ca:b4:a6:25:bd:f4:5b:
                    89:50:92:d8:96:e7:52:a7:ba:20:40:4c:28:e5:10:
                    a4:ac:05:b5:a9:2d:11:91:7f:e6:c3:a7:8a:55:6b:
                    9b:f4:b6:66:ea:07:c2:de:83:b3:f5:19:d6:b3:b9:
                    29:d3:b1:4c:f2:cf:96:fa:47:67:65:42:7e:4f:2a:
                    5e:69:38:96:3d:c1:a1:2b:9d:8c:1a:01:f8:7b:19:
                    77:ce:fb:90:b9:f7:d5:c7:69:ef:06:8c:17:ec:5d:
                    9f:1c:bb:db:a2:7f:d5:56:87:f3:36:4c:64:2b:a9:
                    98:a4:61:31:a8:1c:8b:6d:7c:ab:37:b3:33:8d:9c:
                    2c:12:65:61:91:89:22:88:a0:a1:e0:04:cb:b6:65:
                    00:a8:79:22:ee:d8:ad:8d:d4:8f:ae:2b:ea:ee:83:
                    eb:f1:d8:a2:82:ca:3a:48:25:5b:b2:a2:b0:52:fb:
                    ad:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:D2:D5:CE:B7:0E:EB:40:79:69:B3:5B:CB:73:F4:56:8C:E4:D0:B9
            X509v3 Authority Key Identifier:
                keyid:1A:E9:AF:3A:BB:8A:73:EF:26:F9:34:F9:8B:3A:6C:AB:95:17:AC:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D194C/119FEB488A7411EDB3213E3DC4F9AE02/GumvOruKc-8m-TT5izpsq5UXrKY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GumvOruKc-8m-TT5izpsq5UXrKY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D194C/119FEB488A7411EDB3213E3DC4F9AE02/7370EDA48A8D11ED942E6F74C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.177.142.0/23

    Signature Algorithm: sha256WithRSAEncryption
         57:56:8b:03:82:74:10:06:58:9c:7a:14:a3:99:69:2d:6d:34:
         66:fe:f0:2a:8a:0c:d2:05:6b:60:2c:d6:ff:41:3b:12:5f:21:
         48:61:e2:f6:ce:ba:ba:c0:21:0e:7c:5a:7a:7e:bc:83:1c:59:
         6a:45:2c:2a:b9:0b:84:f2:cd:ec:6f:f8:51:f5:cb:30:e4:c9:
         35:ff:7d:10:26:88:2d:95:84:af:88:ec:ad:31:ae:87:b9:d6:
         30:93:18:83:eb:39:f3:c0:be:c8:2a:ba:4c:36:93:34:3b:1b:
         5c:98:2a:29:0c:76:1f:11:2c:76:f1:f8:ac:09:2f:8a:10:07:
         cf:3e:94:08:b3:61:59:a8:bc:1c:10:b4:5a:61:88:72:42:45:
         13:e7:ea:34:a2:22:7c:58:23:3d:44:6a:b2:39:15:9a:0e:bb:
         4c:c4:2b:b7:af:01:de:a1:9f:2e:87:a6:d9:10:8f:22:28:1f:
         43:a9:73:05:32:88:6f:97:81:36:9e:26:1f:a0:2b:3e:91:e6:
         82:eb:c7:dd:e8:a7:bb:bc:e7:77:81:c7:a5:88:2d:54:39:56:
         e8:0a:f4:2d:d2:91:70:df:34:83:5b:ca:0e:c7:06:70:d9:f1:
         36:f2:33:a8:8c:b1:37:fa:b0:47:fe:8a:e1:6e:1f:11:8b:1e:
         9b:da:3c:9b
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICALswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDE5NEMxMTAvBgNVBAUTKDFBRTlBRjNBQkI4QTczRUYyNkY5MzRGOThCM0E2Q0FC
OTUxN0FDQTYwHhcNMjMxMjI1MDQ1NTQxWhcNMjUwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NTg5MGI0ZC1hNjVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAx1jdMtaqHavMYmUXcbP3Cvc05MePt0E65qeV2HyHnPqXwYUCpm5Kz0eLmCZr
zXFIOqkhsxeEF1ftJ1PvjbjqQYBVt6Varlq3yWB5eaSiUqvuGMq0piW99FuJUJLY
ludSp7ogQEwo5RCkrAW1qS0RkX/mw6eKVWub9LZm6gfC3oOz9RnWs7kp07FM8s+W
+kdnZUJ+TypeaTiWPcGhK52MGgH4exl3zvuQuffVx2nvBowX7F2fHLvbon/VVofz
NkxkK6mYpGExqByLbXyrN7MzjZwsEmVhkYkiiKCh4ATLtmUAqHki7titjdSPrivq
7oPr8diigso6SCVbsqKwUvut/QIDAQABo4IClTCCApEwHQYDVR0OBBYEFN3S1c63
DutAeWmzW8tz9FaM5NC5MB8GA1UdIwQYMBaAFBrprzq7inPvJvk0+Ys6bKuVF6ym
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTk0Qy8xMTlGRUI0ODhB
NzQxMUVEQjMyMTNFM0RDNEY5QUUwMi9HdW12T3J1S2MtOG0tVFQ1aXpwc3E1VVhy
S1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0d1bXZPcnVLYy04bS1UVDVpenBzcTVVWHJLWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RDE5NEMvMTE5RkVCNDg4QTc0MTFFREIzMjEzRTNEQzRGOUFFMDIvNzM3MEVEQTQ4
QThEMTFFRDk0MkU2Rjc0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnsY4wDQYJKoZIhvcNAQELBQADggEBAFdWiwOCdBAGWJx6
FKOZaS1tNGb+8CqKDNIFa2As1v9BOxJfIUhh4vbOurrAIQ58Wnp+vIMcWWpFLCq5
C4Tyzexv+FH1yzDkyTX/fRAmiC2VhK+I7K0xroe51jCTGIPrOfPAvsgqukw2kzQ7
G1yYKikMdh8RLHbx+KwJL4oQB88+lAizYVmovBwQtFphiHJCRRPn6jSiInxYIz1E
arI5FZoOu0zEK7evAd6hny6HptkQjyIoH0OpcwUyiG+XgTaeJh+gKz6R5oLrx93o
p7u853eBx6WILVQ5VugK9C3SkXDfNINbyg7HBnDZ8TbyM6iMsTf6sEf+iuFuHxGL
HpvaPJs=
-----END CERTIFICATE-----
Generated at Sat Jun 1 08:16:03 2024 by rpki-client on console-ams.rpki-client.org