Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/EFFA034837D111EC9337B812C4F9AE02.roa
File:                     EFFA034837D111EC9337B812C4F9AE02.roa (raw, json)
Hash identifier:          WznxjNlU4Br8YbmqB8P3UCKg7uwgEqA8D00AqocDQtc=
Subject key identifier:   6E:5E:52:F2:D7:21:8F:48:0D:7A:B0:18:EE:1F:43:CB:84:06:44:B2
Certificate issuer:       /CN=A91E5D0C/serialNumber=3E73B2BE13037BE744391D3A899CDD202B82F76D
Certificate serial:       039F
Authority key identifier: 3E:73:B2:BE:13:03:7B:E7:44:39:1D:3A:89:9C:DD:20:2B:82:F7:6D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PnOyvhMDe-dEOR06iZzdICuC920.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/EFFA034837D111EC9337B812C4F9AE02.roa
Signing time:             Wed 29 Nov 2023 02:13:35 +0000
ROA not before:           Wed 29 Nov 2023 02:13:35 +0000
ROA not after:            Mon 30 Dec 2024 00:00:00 +0000
asID:                     58715
IP address blocks:        103.174.45.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/PnOyvhMDe-dEOR06iZzdICuC920.crl
                          rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/PnOyvhMDe-dEOR06iZzdICuC920.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PnOyvhMDe-dEOR06iZzdICuC920.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 19 Jun 2024 22:27:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 927 (0x39f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E5D0C/serialNumber=3E73B2BE13037BE744391D3A899CDD202B82F76D
        Validity
            Not Before: Nov 29 02:13:35 2023 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=65669e4f-3af4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:9d:26:29:52:c7:ce:68:82:d0:96:6e:78:70:
                    b9:c0:aa:1b:60:ae:33:3f:bf:4a:6f:4f:08:09:53:
                    db:97:de:14:25:3e:0f:09:17:5c:38:b8:c2:33:f6:
                    43:e6:94:8a:30:7d:ca:0a:15:1c:02:40:f6:6c:19:
                    cd:ba:72:6d:7f:21:0f:2c:d9:d7:8c:69:66:20:27:
                    91:3d:57:08:88:42:da:76:7c:1b:f6:29:59:a9:fd:
                    51:e9:11:58:fc:6a:a3:bf:4d:90:57:c3:69:07:24:
                    fa:97:f2:13:f0:a3:2c:69:cf:88:1f:af:66:9e:d5:
                    19:ff:f6:76:b3:a1:d5:84:a1:77:c8:ea:27:28:a0:
                    22:2d:97:9f:c2:91:01:00:80:77:4b:fa:ca:5a:60:
                    f0:56:71:9e:4a:19:f8:98:ed:da:4d:86:3a:7e:6a:
                    7e:f8:da:7a:c9:ca:d8:85:68:64:a8:c2:ae:dc:bf:
                    d8:3a:08:16:fe:06:ab:a0:9f:2c:57:07:a0:11:0c:
                    42:90:f9:a8:1f:d5:e3:f7:59:a7:12:36:cd:f3:51:
                    22:3a:3f:81:f7:bd:bc:68:f1:97:22:49:97:09:a0:
                    4b:ec:16:36:7b:4b:ee:37:1b:08:cd:1a:0c:2d:73:
                    f6:2d:8d:d9:ef:e3:d7:5c:ba:11:50:16:84:86:45:
                    01:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:5E:52:F2:D7:21:8F:48:0D:7A:B0:18:EE:1F:43:CB:84:06:44:B2
            X509v3 Authority Key Identifier:
                keyid:3E:73:B2:BE:13:03:7B:E7:44:39:1D:3A:89:9C:DD:20:2B:82:F7:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/PnOyvhMDe-dEOR06iZzdICuC920.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PnOyvhMDe-dEOR06iZzdICuC920.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/EFFA034837D111EC9337B812C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.174.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b5:b0:21:89:01:ce:d6:09:7a:cf:c2:36:c7:34:7d:6a:7a:6f:
         f0:59:50:b1:fd:b0:64:79:4b:c7:8f:86:e9:45:a8:40:58:fd:
         4f:90:a2:a4:d6:98:58:84:77:62:8f:39:6a:8a:ff:9d:82:3e:
         2f:c6:29:48:c5:b3:f2:58:30:bf:ad:e6:64:33:a2:da:ef:d0:
         af:e8:01:54:db:dc:ac:d5:c7:04:28:e2:10:6f:36:f3:fa:5d:
         02:a3:7c:1a:bc:f2:33:98:9d:3e:e7:08:4d:af:25:3a:30:d2:
         b1:da:8e:5a:cf:0d:b7:0a:4f:c6:76:63:70:2d:11:0f:09:2c:
         91:60:71:d1:c1:74:c1:73:6b:04:f2:60:41:e6:fd:ac:93:df:
         e6:b5:e4:89:f3:54:a6:13:7e:bd:32:02:28:01:68:90:fe:86:
         fa:10:8d:68:7f:06:07:d4:d7:29:67:b2:83:f5:f5:31:95:fb:
         3f:7d:0b:2b:44:d1:06:8f:9f:dd:a8:5f:eb:9c:9a:6b:8e:1f:
         e4:6d:bc:93:5e:be:2a:3d:80:3f:c0:f2:e9:5a:e6:48:88:56:
         82:e9:8e:8c:20:97:52:61:67:ff:a7:da:87:47:c9:73:84:3c:
         80:16:b3:1b:2e:a1:85:e3:d5:5f:c5:2c:86:07:37:29:c4:02:
         28:63:d9:0d
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICA58wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTVEMEMxMTAvBgNVBAUTKDNFNzNCMkJFMTMwMzdCRTc0NDM5MUQzQTg5OUNERDIw
MkI4MkY3NkQwHhcNMjMxMTI5MDIxMzM1WhcNMjQxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NTY2OWU0Zi0zYWY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2p0mKVLHzmiC0JZueHC5wKobYK4zP79Kb08ICVPbl94UJT4PCRdcOLjCM/ZD
5pSKMH3KChUcAkD2bBnNunJtfyEPLNnXjGlmICeRPVcIiELadnwb9ilZqf1R6RFY
/Gqjv02QV8NpByT6l/IT8KMsac+IH69mntUZ//Z2s6HVhKF3yOonKKAiLZefwpEB
AIB3S/rKWmDwVnGeShn4mO3aTYY6fmp++Np6ycrYhWhkqMKu3L/YOggW/garoJ8s
VwegEQxCkPmoH9Xj91mnEjbN81EiOj+B9728aPGXIkmXCaBL7BY2e0vuNxsIzRoM
LXP2LY3Z7+PXXLoRUBaEhkUBHwIDAQABo4IClTCCApEwHQYDVR0OBBYEFG5eUvLX
IY9IDXqwGO4fQ8uEBkSyMB8GA1UdIwQYMBaAFD5zsr4TA3vnRDkdOomc3SArgvdt
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNUQwQy84OTFCNEVDQTMy
MzYxMUVDODk4Mzg3NTZDNEY5QUUwMi9Qbk95dmhNRGUtZEVPUjA2aVp6ZElDdUM5
MjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1BuT3l2aE1EZS1kRU9SMDZpWnpkSUN1QzkyMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTVEMEMvODkxQjRFQ0EzMjM2MTFFQzg5ODM4NzU2QzRGOUFFMDIvRUZGQTAzNDgz
N0QxMTFFQzkzMzdCODEyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnri0wDQYJKoZIhvcNAQELBQADggEBALWwIYkBztYJes/C
Nsc0fWp6b/BZULH9sGR5S8ePhulFqEBY/U+QoqTWmFiEd2KPOWqK/52CPi/GKUjF
s/JYML+t5mQzotrv0K/oAVTb3KzVxwQo4hBvNvP6XQKjfBq88jOYnT7nCE2vJTow
0rHajlrPDbcKT8Z2Y3AtEQ8JLJFgcdHBdMFzawTyYEHm/ayT3+a15InzVKYTfr0y
AigBaJD+hvoQjWh/BgfU1ylnsoP19TGV+z99CytE0QaPn92oX+ucmmuOH+RtvJNe
vio9gD/A8ula5kiIVoLpjowgl1JhZ/+n2odHyXOEPIAWsxsuoYXj1V/FLIYHNynE
Aihj2Q0=
-----END CERTIFICATE-----
Generated at Thu Jun 13 02:52:05 2024 by rpki-client on console-fra.rpki-client.org