Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEEB8/8E0F2CB61DA111E2B906BC9308B02CD2/32DFCCDCEB8011EAAB806163C4F9AE02.roa
File:                     32DFCCDCEB8011EAAB806163C4F9AE02.roa (raw, json)
Hash identifier:          LuMXWjGVkOAFMr7y1JipZb37cvnj1AkgOmeR14XQOTc=
Subject key identifier:   F8:38:A9:78:24:8E:9D:64:73:72:65:DA:B5:7D:57:11:DB:82:10:2B
Certificate issuer:       /CN=A91EEEB8/serialNumber=E622C8114F3F24AA6A807C8141E3964B551BB930
Certificate serial:       3378
Authority key identifier: E6:22:C8:11:4F:3F:24:AA:6A:80:7C:81:41:E3:96:4B:55:1B:B9:30
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EEEB8/8E0F2CB61DA111E2B906BC9308B02CD2/32DFCCDCEB8011EAAB806163C4F9AE02.roa
Signing time:             Thu 28 Sep 2023 15:31:01 +0000
ROA not before:           Thu 28 Sep 2023 15:31:01 +0000
ROA not after:            Sun 01 Dec 2024 00:00:00 +0000
asID:                     133418
IP address blocks:        103.136.123.0/24 maxlen: 24
                          2404:8e80:4::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EEEB8/8E0F2CB61DA111E2B906BC9308B02CD2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.crl
                          rsync://rpki.apnic.net/member_repository/A91EEEB8/8E0F2CB61DA111E2B906BC9308B02CD2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 15:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13176 (0x3378)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EEEB8/serialNumber=E622C8114F3F24AA6A807C8141E3964B551BB930
        Validity
            Not Before: Sep 28 15:31:01 2023 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=65159c35-e748
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:9f:a3:35:15:23:90:62:b4:69:f4:33:9a:e8:
                    cb:8d:c3:ff:7f:29:c3:03:dc:d1:0c:38:99:d1:c9:
                    4c:65:f0:d8:0d:65:1b:70:61:7c:e9:b6:3a:be:99:
                    b8:b7:ab:b5:93:0a:db:3d:bc:54:6a:6d:26:7e:0b:
                    62:62:64:9a:58:ea:f0:45:aa:cd:96:7a:69:0d:2a:
                    49:c4:89:5c:5c:34:28:3e:f2:00:da:4a:e0:5c:c2:
                    82:8d:9c:4b:fb:1f:b1:41:17:9e:9c:33:b5:12:e6:
                    f4:d7:1c:2c:b2:0c:6d:89:2d:ee:45:64:d9:7b:78:
                    dd:b6:d4:29:21:4a:84:0b:fe:df:8d:ae:9e:79:51:
                    a1:cb:7d:c3:33:30:fe:41:9f:b4:65:bb:0c:64:4f:
                    8e:e5:a9:d5:aa:58:7d:81:f6:df:d9:4a:db:f4:58:
                    1e:f7:83:f4:2e:d6:fd:61:40:a1:7c:cb:61:bf:8a:
                    6b:35:6c:0f:6e:42:67:f6:fd:33:2a:4a:4a:b0:33:
                    ed:0f:73:b0:39:3d:5f:4b:5a:20:c2:df:9e:9a:e4:
                    d6:97:48:cb:50:93:b9:4d:f3:aa:76:26:80:c4:7f:
                    c2:b5:e3:8c:75:eb:35:f0:07:6c:bd:c6:fd:1c:e7:
                    a1:1a:08:14:10:1b:76:ab:ab:7b:7a:0f:7a:a9:28:
                    cb:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:38:A9:78:24:8E:9D:64:73:72:65:DA:B5:7D:57:11:DB:82:10:2B
            X509v3 Authority Key Identifier:
                keyid:E6:22:C8:11:4F:3F:24:AA:6A:80:7C:81:41:E3:96:4B:55:1B:B9:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EEEB8/8E0F2CB61DA111E2B906BC9308B02CD2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEEB8/8E0F2CB61DA111E2B906BC9308B02CD2/32DFCCDCEB8011EAAB806163C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.136.123.0/24
                IPv6:
                  2404:8e80:4::/48

    Signature Algorithm: sha256WithRSAEncryption
         bc:61:e8:1b:37:18:35:21:6e:bd:ee:8f:3f:d3:ae:0e:d1:9b:
         c1:0a:ff:cd:d0:da:4a:be:17:f2:1d:e9:d0:d4:02:ca:34:0a:
         c0:cd:24:69:3c:32:07:e2:89:c2:14:c1:2c:38:9d:92:92:b8:
         72:a7:98:96:a2:5a:df:1d:f9:64:5e:74:ea:be:72:a5:97:db:
         d6:6e:b5:f3:d6:bf:fc:73:f3:b0:bc:13:6c:08:c4:32:77:49:
         80:73:9d:bb:57:3e:d6:ef:92:63:41:be:c7:5f:44:5a:3d:84:
         7a:e8:ae:91:ed:13:16:90:13:63:59:12:14:f0:4e:13:70:c1:
         ab:ad:bc:f8:75:0a:b9:74:45:6e:38:fd:9a:6e:a2:51:2c:35:
         12:be:ad:23:c1:cf:11:16:37:14:d0:c8:49:c0:14:26:82:2f:
         0c:d0:13:f5:04:64:73:7e:77:04:c6:83:6a:fe:d6:2b:e0:73:
         6c:21:da:8b:3c:c8:a6:34:b1:52:78:8d:03:67:58:a3:fa:ac:
         24:ed:84:a2:c0:73:c4:19:2e:d1:d5:85:b4:bf:42:02:69:44:
         3b:91:43:ef:6e:82:11:6f:b2:ec:4c:1c:be:d4:6e:4e:3a:b6:
         2c:95:c4:1f:fe:51:b7:2f:af:22:8a:2c:13:2d:6e:6a:60:4b:
         3c:1d:e7:a0
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgICM3gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUVFQjgxMTAvBgNVBAUTKEU2MjJDODExNEYzRjI0QUE2QTgwN0M4MTQxRTM5NjRC
NTUxQkI5MzAwHhcNMjMwOTI4MTUzMTAxWhcNMjQxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NTE1OWMzNS1lNzQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA75+jNRUjkGK0afQzmujLjcP/fynDA9zRDDiZ0clMZfDYDWUbcGF86bY6vpm4
t6u1kwrbPbxUam0mfgtiYmSaWOrwRarNlnppDSpJxIlcXDQoPvIA2krgXMKCjZxL
+x+xQReenDO1Eub01xwssgxtiS3uRWTZe3jdttQpIUqEC/7fja6eeVGhy33DMzD+
QZ+0ZbsMZE+O5anVqlh9gfbf2Urb9Fge94P0Ltb9YUChfMthv4prNWwPbkJn9v0z
KkpKsDPtD3OwOT1fS1ogwt+emuTWl0jLUJO5TfOqdiaAxH/CteOMdes18Adsvcb9
HOehGggUEBt2q6t7eg96qSjLzwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFPg4qXgk
jp1kc3Jl2rV9VxHbghArMB8GA1UdIwQYMBaAFOYiyBFPPySqaoB8gUHjlktVG7kw
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRUVCOC84RTBGMkNCNjFE
QTExMUUyQjkwNkJDOTMwOEIwMkNEMi81aUxJRVU4X0pLcHFnSHlCUWVPV1MxVWJ1
VEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzVpTElFVThfSktwcWdIeUJRZU9XUzFVYnVUQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RUVFQjgvOEUwRjJDQjYxREExMTFFMkI5MDZCQzkzMDhCMDJDRDIvMzJERkNDRENF
QjgwMTFFQUFCODA2MTYzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E
ITAfMAwEAgABMAYDBABniHswDwQCAAIwCQMHACQEjoAABDANBgkqhkiG9w0BAQsF
AAOCAQEAvGHoGzcYNSFuve6PP9OuDtGbwQr/zdDaSr4X8h3p0NQCyjQKwM0kaTwy
B+KJwhTBLDidkpK4cqeYlqJa3x35ZF506r5ypZfb1m6189a//HPzsLwTbAjEMndJ
gHOdu1c+1u+SY0G+x19EWj2Eeuiuke0TFpATY1kSFPBOE3DBq628+HUKuXRFbjj9
mm6iUSw1Er6tI8HPERY3FNDIScAUJoIvDNAT9QRkc353BMaDav7WK+BzbCHaizzI
pjSxUniNA2dYo/qsJO2EosBzxBku0dWFtL9CAmlEO5FD726CEW+y7EwcvtRuTjq2
LJXEH/5Rty+vIoosEy1uamBLPB3noA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 21:11:38 2024 by rpki-client on console-ams.rpki-client.org