Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F67F5/BD10B4DCB1C611EAA848296CC4F9AE02/E3829F3CB1CF11EAA8732709C4F9AE02.roa
File:                     E3829F3CB1CF11EAA8732709C4F9AE02.roa (raw, json)
Hash identifier:          jroL0ZvUDyTize3CkMVvGz2K6eDlEEl11xRsB3XJVSM=
Subject key identifier:   5F:A2:DA:ED:F8:44:87:68:E0:C3:FF:B2:79:63:A2:09:95:B4:EE:5C
Certificate issuer:       /CN=A91F67F5/serialNumber=ABF173DC0A2586959291769A067037319AFA8FD5
Certificate serial:       07D9
Authority key identifier: AB:F1:73:DC:0A:25:86:95:92:91:76:9A:06:70:37:31:9A:FA:8F:D5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q_Fz3AolhpWSkXaaBnA3MZr6j9U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F67F5/BD10B4DCB1C611EAA848296CC4F9AE02/E3829F3CB1CF11EAA8732709C4F9AE02.roa
Signing time:             Mon 08 Jan 2024 22:00:28 +0000
ROA not before:           Mon 08 Jan 2024 22:00:28 +0000
ROA not after:            Mon 31 Mar 2025 00:00:00 +0000
asID:                     7490
IP address blocks:        103.7.75.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F67F5/BD10B4DCB1C611EAA848296CC4F9AE02/q_Fz3AolhpWSkXaaBnA3MZr6j9U.crl
                          rsync://rpki.apnic.net/member_repository/A91F67F5/BD10B4DCB1C611EAA848296CC4F9AE02/q_Fz3AolhpWSkXaaBnA3MZr6j9U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q_Fz3AolhpWSkXaaBnA3MZr6j9U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:23:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2009 (0x7d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F67F5/serialNumber=ABF173DC0A2586959291769A067037319AFA8FD5
        Validity
            Not Before: Jan  8 22:00:28 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=659c707c-7504
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:38:57:f3:e7:dc:87:c4:79:41:62:05:b1:03:
                    8c:fc:2e:c3:f9:eb:80:0b:9a:44:7a:05:49:53:85:
                    c3:f3:74:d4:3c:5b:cf:84:3f:3d:07:d1:3f:75:c3:
                    1a:3e:4e:f0:e0:ea:53:b0:ef:eb:82:1e:63:00:25:
                    4a:cc:3a:77:0f:4d:f7:12:85:59:ac:55:66:45:3e:
                    12:38:ff:37:82:91:b6:68:d7:c8:8b:bb:21:f9:64:
                    6a:a9:a1:0b:13:05:56:18:42:8f:9c:90:f8:c1:6b:
                    41:92:c4:7a:d1:11:76:1f:27:4f:6b:04:6e:42:f3:
                    58:4d:c8:98:c3:62:65:4e:51:b2:34:4e:9c:4c:d0:
                    8f:2a:28:bb:45:a2:9c:c9:ad:32:b4:b9:bd:9d:21:
                    d2:f1:40:8e:06:b4:5a:4c:83:46:81:de:a2:dd:72:
                    db:9f:10:d7:50:88:6f:7f:6a:54:17:4a:2a:3c:47:
                    b5:d6:87:8a:89:e4:c9:fb:63:fe:23:43:6d:5b:af:
                    9e:05:dc:24:dd:56:ce:cd:9b:31:f0:60:8b:62:37:
                    af:5e:86:63:d0:52:fc:5f:eb:79:ea:46:ef:50:40:
                    99:a5:b2:80:bc:87:45:52:99:37:32:28:72:e1:c0:
                    21:78:85:5d:81:9f:87:33:53:bb:87:35:2c:b0:22:
                    ee:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:A2:DA:ED:F8:44:87:68:E0:C3:FF:B2:79:63:A2:09:95:B4:EE:5C
            X509v3 Authority Key Identifier:
                keyid:AB:F1:73:DC:0A:25:86:95:92:91:76:9A:06:70:37:31:9A:FA:8F:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F67F5/BD10B4DCB1C611EAA848296CC4F9AE02/q_Fz3AolhpWSkXaaBnA3MZr6j9U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q_Fz3AolhpWSkXaaBnA3MZr6j9U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F67F5/BD10B4DCB1C611EAA848296CC4F9AE02/E3829F3CB1CF11EAA8732709C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.7.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:0e:a8:91:96:57:af:d2:27:da:5a:16:49:45:8c:98:88:0c:
         81:e8:67:91:63:57:d7:f4:6a:a3:e9:e4:df:9f:33:01:2d:82:
         a7:08:74:2b:64:21:5e:4f:ca:f3:fc:2a:09:47:02:f8:bd:53:
         4d:5f:fd:1f:08:57:2e:3b:aa:e8:47:18:18:20:a1:5e:b6:f0:
         a1:f3:d2:f7:50:e7:d2:b8:68:ac:36:5b:1e:de:93:e9:82:7c:
         fe:81:75:d2:4d:fb:b8:05:66:ed:98:db:9a:fe:c2:ed:8e:b9:
         b2:4d:f0:9f:19:f0:76:a2:fe:96:4c:62:d4:6e:76:dd:bb:f9:
         b3:26:71:9c:81:5e:2a:ce:33:ec:b3:e8:42:88:38:a0:8f:fe:
         19:7f:e2:4f:5d:10:22:ef:88:78:90:d3:98:2e:c0:4d:c3:42:
         9b:95:41:3d:0e:11:90:6f:12:49:94:99:58:02:9c:99:23:cc:
         de:7c:a2:79:86:93:d2:42:47:29:42:6d:e2:74:95:b1:fe:2b:
         87:5b:ff:7c:02:c8:0c:3e:47:70:9e:20:bf:c7:f8:56:01:ce:
         c2:3e:cb:b3:18:d7:8b:1f:37:da:ee:f7:38:b9:76:28:34:da:
         f5:f5:88:9c:5b:c9:9e:ec:b5:7d:8a:f0:d1:21:44:a4:2f:0a:
         bd:ef:a0:df
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICB9kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjY3RjUxMTAvBgNVBAUTKEFCRjE3M0RDMEEyNTg2OTU5MjkxNzY5QTA2NzAzNzMx
OUFGQThGRDUwHhcNMjQwMTA4MjIwMDI4WhcNMjUwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NTljNzA3Yy03NTA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApDhX8+fch8R5QWIFsQOM/C7D+euAC5pEegVJU4XD83TUPFvPhD89B9E/dcMa
Pk7w4OpTsO/rgh5jACVKzDp3D033EoVZrFVmRT4SOP83gpG2aNfIi7sh+WRqqaEL
EwVWGEKPnJD4wWtBksR60RF2HydPawRuQvNYTciYw2JlTlGyNE6cTNCPKii7RaKc
ya0ytLm9nSHS8UCOBrRaTINGgd6i3XLbnxDXUIhvf2pUF0oqPEe11oeKieTJ+2P+
I0NtW6+eBdwk3VbOzZsx8GCLYjevXoZj0FL8X+t56kbvUECZpbKAvIdFUpk3Mihy
4cAheIVdgZ+HM1O7hzUssCLuYwIDAQABo4IClTCCApEwHQYDVR0OBBYEFF+i2u34
RIdo4MP/snljogmVtO5cMB8GA1UdIwQYMBaAFKvxc9wKJYaVkpF2mgZwNzGa+o/V
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjdGNS9CRDEwQjREQ0Ix
QzYxMUVBQTg0ODI5NkNDNEY5QUUwMi9xX0Z6M0FvbGhwV1NrWGFhQm5BM01acjZq
OVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3FfRnozQW9saHBXU2tYYWFCbkEzTVpyNmo5VS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RjY3RjUvQkQxMEI0RENCMUM2MTFFQUE4NDgyOTZDQzRGOUFFMDIvRTM4MjlGM0NC
MUNGMTFFQUE4NzMyNzA5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnB0swDQYJKoZIhvcNAQELBQADggEBAEoOqJGWV6/SJ9pa
FklFjJiIDIHoZ5FjV9f0aqPp5N+fMwEtgqcIdCtkIV5PyvP8KglHAvi9U01f/R8I
Vy47quhHGBggoV628KHz0vdQ59K4aKw2Wx7ek+mCfP6BddJN+7gFZu2Y25r+wu2O
ubJN8J8Z8Hai/pZMYtRudt27+bMmcZyBXirOM+yz6EKIOKCP/hl/4k9dECLviHiQ
05guwE3DQpuVQT0OEZBvEkmUmVgCnJkjzN58onmGk9JCRylCbeJ0lbH+K4db/3wC
yAw+R3CeIL/H+FYBzsI+y7MY14sfN9ru9zi5dig02vX1iJxbyZ7stX2K8NEhRKQv
Cr3voN8=
-----END CERTIFICATE-----
Generated at Fri Nov 22 22:14:50 2024 by rpki-client on console-ams.rpki-client.org