Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E72DE/8DE4E4C03B6D11EDB2B3B34EC4F9AE02/DBA023303B6F11ED903B484FC4F9AE02.roa
File:                     DBA023303B6F11ED903B484FC4F9AE02.roa (raw, json)
Hash identifier:          9qtC3DBvi8CigvGf+srM4ysNldNlOTTMTMvaCZTFY5Y=
Subject key identifier:   0C:F9:35:6E:A2:C8:0C:36:52:B1:CB:BD:CB:9D:BE:D9:7B:82:44:6B
Certificate issuer:       /CN=A91E72DE/serialNumber=BED0125718545C1E508031D3FF5FB6E8286A7FD8
Certificate serial:       DF
Authority key identifier: BE:D0:12:57:18:54:5C:1E:50:80:31:D3:FF:5F:B6:E8:28:6A:7F:D8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vtASVxhUXB5QgDHT_1-26Chqf9g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E72DE/8DE4E4C03B6D11EDB2B3B34EC4F9AE02/DBA023303B6F11ED903B484FC4F9AE02.roa
Signing time:             Wed 01 Nov 2023 05:15:21 +0000
ROA not before:           Wed 01 Nov 2023 05:15:21 +0000
ROA not after:            Mon 30 Dec 2024 00:00:00 +0000
asID:                     141918
IP address blocks:        103.12.182.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E72DE/8DE4E4C03B6D11EDB2B3B34EC4F9AE02/vtASVxhUXB5QgDHT_1-26Chqf9g.crl
                          rsync://rpki.apnic.net/member_repository/A91E72DE/8DE4E4C03B6D11EDB2B3B34EC4F9AE02/vtASVxhUXB5QgDHT_1-26Chqf9g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vtASVxhUXB5QgDHT_1-26Chqf9g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 05:53:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 223 (0xdf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E72DE/serialNumber=BED0125718545C1E508031D3FF5FB6E8286A7FD8
        Validity
            Not Before: Nov  1 05:15:21 2023 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=6541dee9-5b34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:1a:76:fa:46:3d:aa:89:1f:7b:ae:d9:83:9c:
                    3b:e8:32:a6:bb:99:5b:18:2f:0e:5b:7a:db:97:9d:
                    a9:d4:b6:14:95:fb:22:65:c2:af:de:4a:f6:7c:63:
                    11:69:80:10:91:c8:21:80:56:4c:fd:25:28:64:36:
                    b8:f5:15:a4:01:77:a9:d4:30:97:76:26:0b:d8:ff:
                    7d:96:56:85:45:60:66:d2:e7:13:fa:54:55:8d:6a:
                    f2:5e:18:fe:b2:2e:37:46:bf:fa:3d:91:69:61:a1:
                    65:0a:aa:1f:af:f2:ee:5e:c9:94:12:29:bb:bd:2a:
                    37:6d:af:0d:f0:42:b6:f6:e2:55:85:e2:26:41:dc:
                    e8:75:b7:a1:e4:34:47:d4:7a:d7:7c:29:e9:67:ab:
                    c6:7d:16:95:09:ce:fb:6d:78:b3:74:c4:58:66:1b:
                    e7:e7:26:a9:f3:22:7b:6b:5f:a3:13:f1:cf:3d:13:
                    f2:58:32:15:8f:ef:d5:93:63:f5:f3:49:4a:45:92:
                    48:ee:fa:28:3e:13:1e:e4:81:39:6f:d4:ab:fa:e1:
                    e1:c6:c4:10:e1:e4:d8:93:4b:95:f0:4b:96:23:38:
                    7e:3c:56:53:b4:b2:b6:8a:86:59:20:4f:66:7d:34:
                    b4:41:c3:35:f1:58:76:f1:7f:fe:af:e6:77:73:33:
                    98:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:F9:35:6E:A2:C8:0C:36:52:B1:CB:BD:CB:9D:BE:D9:7B:82:44:6B
            X509v3 Authority Key Identifier:
                keyid:BE:D0:12:57:18:54:5C:1E:50:80:31:D3:FF:5F:B6:E8:28:6A:7F:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E72DE/8DE4E4C03B6D11EDB2B3B34EC4F9AE02/vtASVxhUXB5QgDHT_1-26Chqf9g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vtASVxhUXB5QgDHT_1-26Chqf9g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E72DE/8DE4E4C03B6D11EDB2B3B34EC4F9AE02/DBA023303B6F11ED903B484FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.12.182.0/23

    Signature Algorithm: sha256WithRSAEncryption
         94:27:73:3e:da:33:ac:19:cc:83:47:a1:91:f5:1e:43:60:60:
         86:a8:70:8c:b0:0e:5e:02:00:e5:76:d7:58:fc:2d:d9:bf:0e:
         13:07:04:7c:d0:4d:ef:81:c4:bd:ea:f5:47:08:8d:8b:ef:37:
         48:47:6b:8e:d7:29:1e:a1:2e:6c:ff:40:2c:24:8e:3e:be:b4:
         0c:3c:52:f2:df:25:38:fa:3f:c8:3c:53:a6:3b:2c:b9:23:ed:
         aa:7f:c3:39:71:e2:d1:49:5f:16:4b:73:93:7c:f3:70:ac:8a:
         51:e9:7f:9e:dc:1a:3f:66:25:98:40:8b:99:11:ce:1d:b8:c0:
         18:b1:1a:6a:ea:ef:b1:13:84:b6:64:2c:5e:c9:20:b0:6e:e6:
         fe:1d:33:ac:b0:90:ee:c1:dc:35:72:2d:56:b2:24:0f:9c:f0:
         38:8f:7e:de:e0:fe:4c:ec:8f:90:eb:28:8d:bb:e8:09:f1:e4:
         ed:41:bd:7f:60:f3:33:17:f2:25:95:b3:e1:d6:10:02:fc:ef:
         85:fa:95:37:6b:a6:7f:99:21:ab:29:1b:54:8f:e4:c2:9e:c9:
         0c:81:84:6f:1b:28:36:2e:e5:02:34:56:fb:0c:4a:25:b6:55:
         c1:8a:53:87:e6:0f:f4:49:f2:76:aa:11:8d:1c:ac:4b:e6:36:
         e9:c7:ed:63
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAN8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTcyREUxMTAvBgNVBAUTKEJFRDAxMjU3MTg1NDVDMUU1MDgwMzFEM0ZGNUZCNkU4
Mjg2QTdGRDgwHhcNMjMxMTAxMDUxNTIxWhcNMjQxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NTQxZGVlOS01YjM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsBp2+kY9qokfe67Zg5w76DKmu5lbGC8OW3rbl52p1LYUlfsiZcKv3kr2fGMR
aYAQkcghgFZM/SUoZDa49RWkAXep1DCXdiYL2P99llaFRWBm0ucT+lRVjWryXhj+
si43Rr/6PZFpYaFlCqofr/LuXsmUEim7vSo3ba8N8EK29uJVheImQdzodbeh5DRH
1HrXfCnpZ6vGfRaVCc77bXizdMRYZhvn5yap8yJ7a1+jE/HPPRPyWDIVj+/Vk2P1
80lKRZJI7vooPhMe5IE5b9Sr+uHhxsQQ4eTYk0uV8EuWIzh+PFZTtLK2ioZZIE9m
fTS0QcM18Vh28X/+r+Z3czOYaQIDAQABo4IClTCCApEwHQYDVR0OBBYEFAz5NW6i
yAw2UrHLvcudvtl7gkRrMB8GA1UdIwQYMBaAFL7QElcYVFweUIAx0/9ftugoan/Y
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzJERS84REU0RTRDMDNC
NkQxMUVEQjJCM0IzNEVDNEY5QUUwMi92dEFTVnhoVVhCNVFnREhUXzEtMjZDaHFm
OWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3Z0QVNWeGhVWEI1UWdESFRfMS0yNkNocWY5Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTcyREUvOERFNEU0QzAzQjZEMTFFREIyQjNCMzRFQzRGOUFFMDIvREJBMDIzMzAz
QjZGMTFFRDkwM0I0ODRGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnDLYwDQYJKoZIhvcNAQELBQADggEBAJQncz7aM6wZzINH
oZH1HkNgYIaocIywDl4CAOV211j8Ldm/DhMHBHzQTe+BxL3q9UcIjYvvN0hHa47X
KR6hLmz/QCwkjj6+tAw8UvLfJTj6P8g8U6Y7LLkj7ap/wzlx4tFJXxZLc5N883Cs
ilHpf57cGj9mJZhAi5kRzh24wBixGmrq77EThLZkLF7JILBu5v4dM6ywkO7B3DVy
LVayJA+c8DiPft7g/kzsj5DrKI276Anx5O1BvX9g8zMX8iWVs+HWEAL874X6lTdr
pn+ZIaspG1SP5MKeyQyBhG8bKDYu5QI0VvsMSiW2VcGKU4fmD/RJ8naqEY0crEvm
NunH7WM=
-----END CERTIFICATE-----
Generated at Sat Jun 1 07:08:29 2024 by rpki-client on console-ams.rpki-client.org