Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/7E0A4CF07DD511EA906A3E7AC4F9AE02.roa
File:                     7E0A4CF07DD511EA906A3E7AC4F9AE02.roa (raw, json)
Hash identifier:          +VVnVHYA2VkRw6VGO3s5O+E2pWmzBLxdaszGM6WXSZw=
Subject key identifier:   16:8E:28:F3:60:D0:69:0C:36:BF:53:3E:F2:CF:05:E2:A6:09:C3:36
Certificate issuer:       /CN=A91F4FE6/serialNumber=7237476CFDE4150AB95097ABBA0FEDED42ADB9AB
Certificate serial:       0878
Authority key identifier: 72:37:47:6C:FD:E4:15:0A:B9:50:97:AB:BA:0F:ED:ED:42:AD:B9:AB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cjdHbP3kFQq5UJerug_t7UKtuas.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/7E0A4CF07DD511EA906A3E7AC4F9AE02.roa
Signing time:             Wed 14 Jun 2023 21:22:59 +0000
ROA not before:           Wed 14 Jun 2023 21:22:59 +0000
ROA not after:            Tue 30 Jul 2024 00:00:00 +0000
asID:                     135895
IP address blocks:        103.54.111.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/cjdHbP3kFQq5UJerug_t7UKtuas.crl
                          rsync://rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/cjdHbP3kFQq5UJerug_t7UKtuas.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cjdHbP3kFQq5UJerug_t7UKtuas.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 21:54:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2168 (0x878)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F4FE6/serialNumber=7237476CFDE4150AB95097ABBA0FEDED42ADB9AB
        Validity
            Not Before: Jun 14 21:22:59 2023 GMT
            Not After : Jul 30 00:00:00 2024 GMT
        Subject: CN=648a2fb3-aff4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d5:44:29:b0:29:63:a1:d0:0f:1a:5a:20:35:
                    2d:30:b9:85:46:98:f6:20:8f:38:d1:59:0b:e2:b7:
                    dd:41:1c:1f:e0:6a:bb:48:9b:65:a6:1c:d3:d7:e3:
                    66:f0:44:87:4f:43:3d:84:93:36:00:d0:71:88:31:
                    6f:07:86:c9:ac:a2:8c:5b:45:de:8e:d7:18:83:e3:
                    14:d9:b0:dc:61:fd:33:e2:40:c2:cd:63:7a:d5:59:
                    7a:98:56:5c:f6:9a:0a:26:54:7a:ba:ee:17:37:0c:
                    52:c9:76:a5:26:90:49:0b:61:6e:9c:e0:10:a6:15:
                    a6:14:a6:b4:f8:97:97:8a:af:4d:aa:39:a1:77:03:
                    ea:6f:7f:59:c9:38:c7:6f:46:8f:19:9b:a7:7f:f2:
                    ab:7a:2d:4e:b5:07:48:8f:71:1b:7e:96:ef:9b:8a:
                    fb:61:4b:1f:46:89:36:5f:50:c8:da:15:37:1d:fa:
                    25:2f:72:e9:11:cc:d5:0e:cc:14:5a:21:79:2e:75:
                    d9:dd:8a:52:5f:91:78:7f:9e:36:8e:1e:8d:77:dd:
                    ab:7d:1a:f1:0e:84:bf:8e:5f:87:00:59:06:25:f6:
                    f5:58:7b:08:aa:4f:11:11:b1:ee:da:f1:69:9d:d4:
                    fe:ef:ae:cf:53:6f:22:6b:5f:a4:ac:51:2b:20:fd:
                    93:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:8E:28:F3:60:D0:69:0C:36:BF:53:3E:F2:CF:05:E2:A6:09:C3:36
            X509v3 Authority Key Identifier:
                keyid:72:37:47:6C:FD:E4:15:0A:B9:50:97:AB:BA:0F:ED:ED:42:AD:B9:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/cjdHbP3kFQq5UJerug_t7UKtuas.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cjdHbP3kFQq5UJerug_t7UKtuas.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/7E0A4CF07DD511EA906A3E7AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.54.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:2c:bb:a0:d4:90:3f:06:3c:5b:b9:01:f6:97:8d:1f:a6:0b:
         94:ea:37:67:16:52:41:64:bb:ce:7e:06:bf:7d:c9:6b:d1:40:
         e6:b8:3d:c4:47:65:4b:f9:c5:25:32:31:11:b1:1b:0e:9e:18:
         c3:89:60:72:ea:53:2c:3b:7b:41:f3:93:52:f3:ff:61:4e:29:
         e8:12:15:11:7c:e6:a1:f0:da:b1:61:8f:ff:0f:fb:c0:d4:c3:
         4f:25:ef:f9:f5:ac:50:a6:41:58:3f:c1:08:cf:1b:fb:77:03:
         de:17:d2:fc:7b:29:10:7a:a8:2e:83:d2:a5:68:18:cd:40:ad:
         a9:f9:cd:1d:56:d0:d2:7b:25:32:30:e3:31:06:f2:3b:b3:cb:
         37:0c:69:70:20:e6:66:fe:a0:86:19:79:4c:54:2b:b2:92:1c:
         3b:22:3c:6d:6b:98:53:72:f5:5a:ce:a7:20:eb:42:fc:6f:34:
         f5:df:5a:3b:62:da:23:5a:21:93:b1:aa:04:81:aa:92:9d:eb:
         05:36:23:5d:9f:97:f1:e5:ae:f2:7f:9f:93:d9:ba:fc:89:28:
         80:35:3b:e9:0f:19:40:01:1b:f2:cc:ff:ae:db:b7:ff:a9:61:
         c3:9f:3a:72:a7:ba:7d:c6:1b:c3:5c:f9:d1:99:dc:47:d5:73:
         9c:b9:73:e2
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICCHgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjRGRTYxMTAvBgNVBAUTKDcyMzc0NzZDRkRFNDE1MEFCOTUwOTdBQkJBMEZFREVE
NDJBREI5QUIwHhcNMjMwNjE0MjEyMjU5WhcNMjQwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NDhhMmZiMy1hZmY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAu9VEKbApY6HQDxpaIDUtMLmFRpj2II840VkL4rfdQRwf4Gq7SJtlphzT1+Nm
8ESHT0M9hJM2ANBxiDFvB4bJrKKMW0XejtcYg+MU2bDcYf0z4kDCzWN61Vl6mFZc
9poKJlR6uu4XNwxSyXalJpBJC2FunOAQphWmFKa0+JeXiq9NqjmhdwPqb39ZyTjH
b0aPGZunf/Krei1OtQdIj3Ebfpbvm4r7YUsfRok2X1DI2hU3HfolL3LpEczVDswU
WiF5LnXZ3YpSX5F4f542jh6Nd92rfRrxDoS/jl+HAFkGJfb1WHsIqk8REbHu2vFp
ndT+767PU28ia1+krFErIP2T5QIDAQABo4IClTCCApEwHQYDVR0OBBYEFBaOKPNg
0GkMNr9TPvLPBeKmCcM2MB8GA1UdIwQYMBaAFHI3R2z95BUKuVCXq7oP7e1Crbmr
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNEZFNi9CQjA5NTgyQzdE
RDQxMUVBOTRCRUFGNzlDNEY5QUUwMi9jamRIYlAza0ZRcTVVSmVydWdfdDdVS3R1
YXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2NqZEhiUDNrRlFxNVVKZXJ1Z190N1VLdHVhcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RjRGRTYvQkIwOTU4MkM3REQ0MTFFQTk0QkVBRjc5QzRGOUFFMDIvN0UwQTRDRjA3
REQ1MTFFQTkwNkEzRTdBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnNm8wDQYJKoZIhvcNAQELBQADggEBAAEsu6DUkD8GPFu5
AfaXjR+mC5TqN2cWUkFku85+Br99yWvRQOa4PcRHZUv5xSUyMRGxGw6eGMOJYHLq
Uyw7e0Hzk1Lz/2FOKegSFRF85qHw2rFhj/8P+8DUw08l7/n1rFCmQVg/wQjPG/t3
A94X0vx7KRB6qC6D0qVoGM1Aran5zR1W0NJ7JTIw4zEG8juzyzcMaXAg5mb+oIYZ
eUxUK7KSHDsiPG1rmFNy9VrOpyDrQvxvNPXfWjti2iNaIZOxqgSBqpKd6wU2I12f
l/HlrvJ/n5PZuvyJKIA1O+kPGUABG/LM/67bt/+pYcOfOnKnun3GG8Nc+dGZ3EfV
c5y5c+I=
-----END CERTIFICATE-----
Generated at Fri May 31 22:56:59 2024 by rpki-client on console-fra.rpki-client.org