Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6BEF/4EA866C4C44211E99477E21FC4F9AE02/FEBD6C62C4B511E9B7D53A7FC4F9AE02.roa
File:                     FEBD6C62C4B511E9B7D53A7FC4F9AE02.roa (raw, json)
Hash identifier:          /gYeXHKuLNjytyyeFHp/R1V+DYnstOYuJrrPT80MS8c=
Subject key identifier:   F1:31:AC:1D:75:AD:BB:36:A7:3E:F8:6D:EB:BB:68:F6:0C:D3:CE:8A
Certificate issuer:       /CN=A91E6BEF/serialNumber=811DE11E7EDC1C10760559EEB39BFD66D69AEA46
Certificate serial:       0C5C
Authority key identifier: 81:1D:E1:1E:7E:DC:1C:10:76:05:59:EE:B3:9B:FD:66:D6:9A:EA:46
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gR3hHn7cHBB2BVnus5v9Ztaa6kY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6BEF/4EA866C4C44211E99477E21FC4F9AE02/FEBD6C62C4B511E9B7D53A7FC4F9AE02.roa
Signing time:             Thu 28 Sep 2023 18:36:23 +0000
ROA not before:           Thu 28 Sep 2023 18:36:23 +0000
ROA not after:            Sun 01 Dec 2024 00:00:00 +0000
asID:                     139604
IP address blocks:        103.142.80.0/23 maxlen: 24
                          2001:df1:3680::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6BEF/4EA866C4C44211E99477E21FC4F9AE02/gR3hHn7cHBB2BVnus5v9Ztaa6kY.crl
                          rsync://rpki.apnic.net/member_repository/A91E6BEF/4EA866C4C44211E99477E21FC4F9AE02/gR3hHn7cHBB2BVnus5v9Ztaa6kY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gR3hHn7cHBB2BVnus5v9Ztaa6kY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 19:06:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3164 (0xc5c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6BEF/serialNumber=811DE11E7EDC1C10760559EEB39BFD66D69AEA46
        Validity
            Not Before: Sep 28 18:36:23 2023 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=6515c7a7-6e34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:20:41:f6:ca:e0:61:4d:98:77:8f:d0:22:e9:
                    0f:ac:5b:a6:f4:dd:aa:7e:54:ce:71:d2:3b:5b:d0:
                    af:8c:1f:ae:65:10:7c:21:0d:c9:18:06:e0:20:e7:
                    d1:ee:ca:f6:06:7b:c3:64:7f:10:36:c2:87:36:45:
                    37:e5:18:a4:a2:e1:79:59:fd:4f:15:18:7b:cc:99:
                    d2:eb:fc:85:e4:6f:bc:04:12:fc:ac:7b:91:29:df:
                    fc:ad:1b:38:af:4d:23:27:70:86:7d:6e:73:55:45:
                    6e:9e:ed:a5:5d:17:17:3f:4b:a6:dc:2c:d0:3d:15:
                    c8:73:f3:82:38:cf:60:95:6a:51:e9:1e:dd:38:b6:
                    44:0b:7c:76:d8:60:f5:68:92:16:9c:f7:a0:ea:24:
                    09:37:55:2d:48:a6:1f:85:7a:4e:16:eb:55:e7:a2:
                    05:ce:91:5c:98:a3:8f:3f:28:ce:7b:14:9c:c8:92:
                    4b:f5:36:f3:08:0b:11:0d:3d:da:44:2a:7a:5d:7c:
                    84:34:e1:b4:6d:b3:ee:da:9c:fc:16:97:74:fd:cc:
                    19:7e:fc:6c:71:76:1e:39:f4:51:46:8e:cd:e1:3a:
                    36:0a:75:b4:c7:6a:d1:56:a3:fd:3a:5c:88:9e:ed:
                    61:73:24:75:c4:79:96:ae:ff:8e:20:3a:ea:df:7e:
                    9c:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:31:AC:1D:75:AD:BB:36:A7:3E:F8:6D:EB:BB:68:F6:0C:D3:CE:8A
            X509v3 Authority Key Identifier:
                keyid:81:1D:E1:1E:7E:DC:1C:10:76:05:59:EE:B3:9B:FD:66:D6:9A:EA:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6BEF/4EA866C4C44211E99477E21FC4F9AE02/gR3hHn7cHBB2BVnus5v9Ztaa6kY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gR3hHn7cHBB2BVnus5v9Ztaa6kY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6BEF/4EA866C4C44211E99477E21FC4F9AE02/FEBD6C62C4B511E9B7D53A7FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.142.80.0/23
                IPv6:
                  2001:df1:3680::/48

    Signature Algorithm: sha256WithRSAEncryption
         03:63:15:8e:24:8e:ce:06:3f:b4:89:ff:f3:44:0f:63:c0:db:
         80:d8:90:6f:8d:13:ab:21:a5:f5:02:dc:71:a8:e8:60:33:50:
         d9:4a:12:92:e5:06:d1:4c:42:3a:e9:63:b7:54:c8:a4:1a:ff:
         10:2f:29:08:d8:42:7d:f7:9c:10:44:a2:73:dc:a8:db:e9:4b:
         c5:db:b5:07:d1:62:8c:a0:ef:3f:53:6f:e7:a0:6e:fc:b8:d4:
         cf:c5:c4:e7:3f:db:3c:83:e4:68:a2:3e:35:d2:45:60:e4:7d:
         3d:a1:9b:f6:b4:1d:a2:e1:78:44:66:71:a3:1d:3e:e0:c2:0d:
         36:65:21:40:85:e1:ab:0f:84:24:97:15:c3:92:b3:59:17:b0:
         5f:e9:a1:f3:3a:b0:f5:d9:f3:03:19:1b:a1:44:46:4e:24:2a:
         b7:18:ca:5e:b8:0d:28:82:eb:5e:50:d0:78:d4:2b:c7:9f:d1:
         61:08:ed:53:06:7f:46:ef:c4:40:2f:e7:47:f0:71:01:ac:e1:
         64:c5:a6:c1:fe:9d:81:06:16:83:34:af:bf:a1:63:81:a3:80:
         04:7b:42:c0:87:0b:c6:2d:4f:d0:3c:eb:b1:e8:32:ec:91:24:
         45:c8:c5:43:be:65:4b:c0:6a:67:a9:f7:c4:79:8b:94:38:10:
         35:a1:29:52
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgICDFwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTZCRUYxMTAvBgNVBAUTKDgxMURFMTFFN0VEQzFDMTA3NjA1NTlFRUIzOUJGRDY2
RDY5QUVBNDYwHhcNMjMwOTI4MTgzNjIzWhcNMjQxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NTE1YzdhNy02ZTM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnyBB9srgYU2Yd4/QIukPrFum9N2qflTOcdI7W9CvjB+uZRB8IQ3JGAbgIOfR
7sr2BnvDZH8QNsKHNkU35RikouF5Wf1PFRh7zJnS6/yF5G+8BBL8rHuRKd/8rRs4
r00jJ3CGfW5zVUVunu2lXRcXP0um3CzQPRXIc/OCOM9glWpR6R7dOLZEC3x22GD1
aJIWnPeg6iQJN1UtSKYfhXpOFutV56IFzpFcmKOPPyjOexScyJJL9TbzCAsRDT3a
RCp6XXyENOG0bbPu2pz8Fpd0/cwZfvxscXYeOfRRRo7N4To2CnW0x2rRVqP9OlyI
nu1hcyR1xHmWrv+OIDrq336cDQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFPExrB11
rbs2pz74beu7aPYM086KMB8GA1UdIwQYMBaAFIEd4R5+3BwQdgVZ7rOb/WbWmupG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkJFRi80RUE4NjZDNEM0
NDIxMUU5OTQ3N0UyMUZDNEY5QUUwMi9nUjNoSG43Y0hCQjJCVm51czV2OVp0YWE2
a1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2dSM2hIbjdjSEJCMkJWbnVzNXY5WnRhYTZrWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTZCRUYvNEVBODY2QzRDNDQyMTFFOTk0NzdFMjFGQzRGOUFFMDIvRkVCRDZDNjJD
NEI1MTFFOUI3RDUzQTdGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E
ITAfMAwEAgABMAYDBAFnjlAwDwQCAAIwCQMHACABDfE2gDANBgkqhkiG9w0BAQsF
AAOCAQEAA2MVjiSOzgY/tIn/80QPY8DbgNiQb40TqyGl9QLccajoYDNQ2UoSkuUG
0UxCOuljt1TIpBr/EC8pCNhCffecEESic9yo2+lLxdu1B9FijKDvP1Nv56Bu/LjU
z8XE5z/bPIPkaKI+NdJFYOR9PaGb9rQdouF4RGZxox0+4MINNmUhQIXhqw+EJJcV
w5KzWRewX+mh8zqw9dnzAxkboURGTiQqtxjKXrgNKILrXlDQeNQrx5/RYQjtUwZ/
Ru/EQC/nR/BxAazhZMWmwf6dgQYWgzSvv6FjgaOABHtCwIcLxi1P0Dzrsegy7JEk
RcjFQ75lS8BqZ6n3xHmLlDgQNaEpUg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 21:06:57 2024 by rpki-client on console-fra.rpki-client.org