Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3307/342D832842CC11EC8F13320DC4F9AE02/070CD516E1FC11EE98E5C04AC4F9AE02.roa
File:                     070CD516E1FC11EE98E5C04AC4F9AE02.roa (raw, json)
Hash identifier:          DfwyngOSZcvkO4zgfaJa9u3WMSRdtr3wy/8MkV3A3Lc=
Subject key identifier:   FB:C7:AF:E5:81:20:3B:01:6C:B8:A3:DE:AC:CB:69:51:6B:14:89:65
Certificate issuer:       /CN=A91D3307/serialNumber=53C94817EB1365F1DE8C3C2B4402239881C1943D
Certificate serial:       03AC
Authority key identifier: 53:C9:48:17:EB:13:65:F1:DE:8C:3C:2B:44:02:23:98:81:C1:94:3D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U8lIF-sTZfHejDwrRAIjmIHBlD0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D3307/342D832842CC11EC8F13320DC4F9AE02/070CD516E1FC11EE98E5C04AC4F9AE02.roa
Signing time:             Tue 19 Mar 2024 02:44:31 +0000
ROA not before:           Tue 19 Mar 2024 02:44:31 +0000
ROA not after:            Wed 28 May 2025 00:00:00 +0000
asID:                     132834
IP address blocks:        103.135.84.0/22 maxlen: 24
                          103.248.188.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D3307/342D832842CC11EC8F13320DC4F9AE02/U8lIF-sTZfHejDwrRAIjmIHBlD0.crl
                          rsync://rpki.apnic.net/member_repository/A91D3307/342D832842CC11EC8F13320DC4F9AE02/U8lIF-sTZfHejDwrRAIjmIHBlD0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U8lIF-sTZfHejDwrRAIjmIHBlD0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 03:31:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 940 (0x3ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D3307/serialNumber=53C94817EB1365F1DE8C3C2B4402239881C1943D
        Validity
            Not Before: Mar 19 02:44:31 2024 GMT
            Not After : May 28 00:00:00 2025 GMT
        Subject: CN=65f8fc0e-868c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:6b:08:bb:49:19:19:d0:70:56:22:87:6a:1b:
                    41:f5:3c:7e:67:a1:ba:51:e8:21:23:e3:78:f8:11:
                    01:9b:48:13:43:9c:d2:c7:d5:bb:a6:da:08:bb:38:
                    21:08:1b:67:65:db:f6:13:2c:f2:bc:e3:e7:ea:62:
                    37:df:3e:01:ed:42:f4:b7:dd:cb:16:c8:c9:70:2b:
                    7f:7b:51:b3:ce:52:a3:14:cd:7b:6b:e3:7d:1a:3b:
                    b1:ab:2d:cf:31:30:5a:0d:8d:f1:d1:60:96:bd:9d:
                    71:52:f4:f7:26:66:32:d6:de:94:95:6b:81:8e:ea:
                    89:f0:5d:3c:0b:3f:c6:cf:c8:f6:bc:a4:fb:b5:4b:
                    66:f3:31:51:5d:09:68:36:8e:0b:be:b7:59:39:00:
                    80:85:e1:e4:19:ba:55:77:ea:1b:b0:11:86:88:fe:
                    d9:bd:3e:8f:21:b9:f8:c8:bf:17:78:2f:77:52:c3:
                    89:0a:f4:5a:5c:8c:34:83:2c:33:e0:f7:b2:c7:c0:
                    42:d4:6e:6b:92:be:d2:9c:13:33:f4:9f:de:18:2e:
                    0e:b7:ea:c7:6e:c1:56:1d:c1:59:b7:3c:fc:1b:19:
                    77:37:38:c1:26:02:d4:09:06:b3:27:2b:b2:34:42:
                    91:c7:0e:71:e2:dd:09:f6:61:bd:62:c4:80:56:16:
                    4e:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:C7:AF:E5:81:20:3B:01:6C:B8:A3:DE:AC:CB:69:51:6B:14:89:65
            X509v3 Authority Key Identifier:
                keyid:53:C9:48:17:EB:13:65:F1:DE:8C:3C:2B:44:02:23:98:81:C1:94:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D3307/342D832842CC11EC8F13320DC4F9AE02/U8lIF-sTZfHejDwrRAIjmIHBlD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U8lIF-sTZfHejDwrRAIjmIHBlD0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3307/342D832842CC11EC8F13320DC4F9AE02/070CD516E1FC11EE98E5C04AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.135.84.0/22
                  103.248.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:90:8e:c2:a3:c9:aa:8d:c1:9e:b4:aa:66:7e:91:19:6f:3c:
         ce:58:3c:62:a1:fa:73:f5:18:b8:cd:e8:96:9e:2b:d6:df:bd:
         84:b1:7d:52:05:76:65:27:2a:2e:1f:97:17:fc:a2:ec:86:2b:
         e3:a6:5d:95:30:a7:8b:5b:c8:96:69:e2:f8:27:c9:76:e1:ab:
         04:7d:76:14:5b:31:c1:2c:98:e4:e8:d5:c3:cb:17:fb:7e:e1:
         b1:82:15:26:47:5a:c1:9a:35:e7:f0:68:d8:fc:d9:a5:2e:6f:
         b5:3c:8e:d6:b4:85:56:18:8c:5c:ba:db:fe:af:8d:59:86:10:
         14:50:dd:5d:93:3c:be:a0:21:60:13:7b:88:a8:72:c8:df:6d:
         8c:ac:91:63:7c:5d:74:38:c4:f8:36:2e:ce:ab:a4:18:e6:02:
         07:81:b4:d3:b6:ed:45:cb:46:46:bd:3e:9e:ff:cc:83:d3:fc:
         0b:cd:06:38:aa:c3:f2:a8:96:98:30:af:99:90:ad:d3:7d:f3:
         b8:62:4c:1b:8e:82:10:37:45:8e:d0:58:17:d3:35:04:32:94:
         28:d7:21:30:ef:11:b8:f4:4d:b4:c9:40:de:18:8a:ab:a9:92:
         45:2c:ed:df:c5:cd:86:d4:52:92:10:fa:cf:78:a1:26:69:45:
         cb:39:5e:c0
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICA6wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDMzMDcxMTAvBgNVBAUTKDUzQzk0ODE3RUIxMzY1RjFERThDM0MyQjQ0MDIyMzk4
ODFDMTk0M0QwHhcNMjQwMzE5MDI0NDMxWhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02NWY4ZmMwZS04NjhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1WsIu0kZGdBwViKHahtB9Tx+Z6G6UeghI+N4+BEBm0gTQ5zSx9W7ptoIuzgh
CBtnZdv2EyzyvOPn6mI33z4B7UL0t93LFsjJcCt/e1GzzlKjFM17a+N9Gjuxqy3P
MTBaDY3x0WCWvZ1xUvT3JmYy1t6UlWuBjuqJ8F08Cz/Gz8j2vKT7tUtm8zFRXQlo
No4LvrdZOQCAheHkGbpVd+obsBGGiP7ZvT6PIbn4yL8XeC93UsOJCvRaXIw0gywz
4Peyx8BC1G5rkr7SnBMz9J/eGC4Ot+rHbsFWHcFZtzz8Gxl3NzjBJgLUCQazJyuy
NEKRxw5x4t0J9mG9YsSAVhZO8QIDAQABo4ICmzCCApcwHQYDVR0OBBYEFPvHr+WB
IDsBbLij3qzLaVFrFIllMB8GA1UdIwQYMBaAFFPJSBfrE2Xx3ow8K0QCI5iBwZQ9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzMwNy8zNDJEODMyODQy
Q0MxMUVDOEYxMzMyMERDNEY5QUUwMi9VOGxJRi1zVFpmSGVqRHdyUkFJam1JSEJs
RDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1U4bElGLXNUWmZIZWpEd3JSQUlqbUlIQmxEMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RDMzMDcvMzQyRDgzMjg0MkNDMTFFQzhGMTMzMjBEQzRGOUFFMDIvMDcwQ0Q1MTZF
MUZDMTFFRTk4RTVDMDRBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBAJnh1QDBABn+LwwDQYJKoZIhvcNAQELBQADggEBAHOQjsKj
yaqNwZ60qmZ+kRlvPM5YPGKh+nP1GLjN6JaeK9bfvYSxfVIFdmUnKi4flxf8ouyG
K+OmXZUwp4tbyJZp4vgnyXbhqwR9dhRbMcEsmOTo1cPLF/t+4bGCFSZHWsGaNefw
aNj82aUub7U8jta0hVYYjFy62/6vjVmGEBRQ3V2TPL6gIWATe4iocsjfbYyskWN8
XXQ4xPg2Ls6rpBjmAgeBtNO27UXLRka9Pp7/zIPT/AvNBjiqw/Kolpgwr5mQrdN9
87hiTBuOghA3RY7QWBfTNQQylCjXITDvEbj0TbTJQN4YiqupkkUs7d/FzYbUUpIQ
+s94oSZpRcs5XsA=
-----END CERTIFICATE-----
Generated at Sat Jun 1 04:59:07 2024 by rpki-client on console-fra.rpki-client.org