Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD1C3/FB71C56656CF11EEA8C50456C4F9AE02/5773966456D011EE9C8F8C56C4F9AE02.roa
File:                     5773966456D011EE9C8F8C56C4F9AE02.roa (raw, json)
Hash identifier:          9bnPnY7GPoRHrZqv2o6SKPj0iUfl3wk+uZFDvVb/iJQ=
Subject key identifier:   CD:AB:43:6F:28:3A:23:B2:BB:BD:B4:4C:79:E5:3C:EE:7D:00:05:C5
Certificate issuer:       /CN=A91FD1C3/serialNumber=187A2D35BAF9057C0F0B8D262D2E5D6226A32382
Certificate serial:       02
Authority key identifier: 18:7A:2D:35:BA:F9:05:7C:0F:0B:8D:26:2D:2E:5D:62:26:A3:23:82
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHotNbr5BXwPC40mLS5dYiajI4I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FD1C3/FB71C56656CF11EEA8C50456C4F9AE02/5773966456D011EE9C8F8C56C4F9AE02.roa
Signing time:             Tue 19 Sep 2023 09:38:52 +0000
ROA not before:           Tue 19 Sep 2023 09:38:52 +0000
ROA not after:            Mon 30 Dec 2024 00:00:00 +0000
asID:                     151799
IP address blocks:        103.77.180.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FD1C3/FB71C56656CF11EEA8C50456C4F9AE02/GHotNbr5BXwPC40mLS5dYiajI4I.crl
                          rsync://rpki.apnic.net/member_repository/A91FD1C3/FB71C56656CF11EEA8C50456C4F9AE02/GHotNbr5BXwPC40mLS5dYiajI4I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHotNbr5BXwPC40mLS5dYiajI4I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 08:32:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FD1C3/serialNumber=187A2D35BAF9057C0F0B8D262D2E5D6226A32382
        Validity
            Not Before: Sep 19 09:38:52 2023 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=65096c2b-b267
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:41:f2:14:3c:c8:09:79:36:94:e0:95:b3:8b:
                    ff:e1:f5:dd:eb:4a:26:93:dc:9f:14:5d:73:b1:d1:
                    8a:f5:5b:d0:bd:8f:c7:38:98:aa:5b:b9:4c:e4:0f:
                    1d:43:f3:ca:f2:a5:72:68:ab:14:3f:dd:d5:75:78:
                    c4:35:5c:b7:d1:7d:e1:39:34:40:52:02:aa:01:55:
                    61:78:f5:cd:60:ee:b1:43:1d:6b:47:d4:0e:41:93:
                    a7:86:0e:4e:6a:be:2f:90:ed:75:50:44:6d:8b:37:
                    14:b4:da:dd:f9:ed:3e:a9:3e:a2:6d:04:44:c8:6b:
                    c7:0d:2f:84:96:5b:f6:8a:2f:e6:b8:6f:b1:5f:d2:
                    0b:59:f0:e6:9d:37:57:59:40:ec:7a:1f:10:e2:c1:
                    3b:47:f6:16:13:e1:3f:a7:59:f4:bf:cd:9f:5d:57:
                    bf:aa:46:f8:c1:f7:8b:c1:fe:ae:a4:14:ca:2e:73:
                    14:04:87:e7:3d:49:a6:79:12:12:42:9b:69:d8:0a:
                    3d:35:2b:23:51:a7:a6:c8:2d:dc:e2:1e:53:64:20:
                    f7:62:91:80:8f:43:e9:cc:8a:05:6a:db:30:6b:c3:
                    ea:0e:e6:fa:81:c0:7a:b3:99:6e:77:b2:83:7d:b0:
                    07:af:fe:23:03:bc:c1:b2:d6:ee:2b:d3:c4:86:e8:
                    c7:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:AB:43:6F:28:3A:23:B2:BB:BD:B4:4C:79:E5:3C:EE:7D:00:05:C5
            X509v3 Authority Key Identifier:
                keyid:18:7A:2D:35:BA:F9:05:7C:0F:0B:8D:26:2D:2E:5D:62:26:A3:23:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FD1C3/FB71C56656CF11EEA8C50456C4F9AE02/GHotNbr5BXwPC40mLS5dYiajI4I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHotNbr5BXwPC40mLS5dYiajI4I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD1C3/FB71C56656CF11EEA8C50456C4F9AE02/5773966456D011EE9C8F8C56C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.77.180.0/23

    Signature Algorithm: sha256WithRSAEncryption
         74:d5:d6:ff:8d:1f:3b:05:0a:67:54:f7:c1:cc:ed:48:a4:50:
         be:dc:df:ee:75:4d:27:cc:73:3c:ae:3f:26:14:0c:0f:c9:79:
         e5:e1:b7:0b:e6:d2:63:4a:0a:d8:da:2f:98:73:51:4b:73:15:
         d8:3c:32:ef:8f:17:8c:1a:9e:a7:d5:4f:90:d9:3f:bd:64:eb:
         9a:6c:82:90:51:80:d4:4c:d2:59:44:23:a6:cd:8e:a4:85:bb:
         3d:bf:8c:b7:46:27:90:8b:6e:c3:5f:a8:ff:13:9f:8f:51:76:
         c8:ff:5d:85:17:28:a3:82:56:76:c3:35:af:21:8e:8a:9f:ab:
         70:b0:89:3e:7f:03:5e:78:5b:8c:5f:15:37:89:76:bf:3d:e6:
         83:50:f3:90:4d:c2:f5:bd:1c:2a:47:97:6b:27:b4:4d:34:70:
         db:76:cf:88:e3:bf:e1:e3:29:b5:3f:13:f3:c1:09:60:e8:ed:
         99:7a:c2:f2:72:cf:40:d9:99:42:39:c1:25:c0:50:f6:58:e7:
         6a:c0:85:bd:08:bf:92:d7:f8:94:6b:41:ca:8a:3d:98:6e:f5:
         81:5e:ba:67:be:3c:18:98:bd:c3:c4:0b:88:db:b9:5d:be:aa:
         34:58:3e:a1:a5:61:e2:3d:bc:fd:96:1b:e0:96:54:cc:5c:34:
         6e:2c:15:70
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG
RDFDMzExMC8GA1UEBRMoMTg3QTJEMzVCQUY5MDU3QzBGMEI4RDI2MkQyRTVENjIy
NkEzMjM4MjAeFw0yMzA5MTkwOTM4NTJaFw0yNDEyMzAwMDAwMDBaMBgxFjAUBgNV
BAMTDTY1MDk2YzJiLWIyNjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC2QfIUPMgJeTaU4JWzi//h9d3rSiaT3J8UXXOx0Yr1W9C9j8c4mKpbuUzkDx1D
88rypXJoqxQ/3dV1eMQ1XLfRfeE5NEBSAqoBVWF49c1g7rFDHWtH1A5Bk6eGDk5q
vi+Q7XVQRG2LNxS02t357T6pPqJtBETIa8cNL4SWW/aKL+a4b7Ff0gtZ8OadN1dZ
QOx6HxDiwTtH9hYT4T+nWfS/zZ9dV7+qRvjB94vB/q6kFMoucxQEh+c9SaZ5EhJC
m2nYCj01KyNRp6bILdziHlNkIPdikYCPQ+nMigVq2zBrw+oO5vqBwHqzmW53soN9
sAev/iMDvMGy1u4r08SG6MeZAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUzatDbyg6
I7K7vbRMeeU87n0ABcUwHwYDVR0jBBgwFoAUGHotNbr5BXwPC40mLS5dYiajI4Iw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZEMUMzL0ZCNzFDNTY2NTZD
RjExRUVBOEM1MDQ1NkM0RjlBRTAyL0dIb3ROYnI1Qlh3UEM0MG1MUzVkWWlhakk0
SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvR0hvdE5icjVCWHdQQzQwbUxTNWRZaWFqSTRJLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
RDFDMy9GQjcxQzU2NjU2Q0YxMUVFQThDNTA0NTZDNEY5QUUwMi81NzczOTY2NDU2
RDAxMUVFOUM4RjhDNTZDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAWdNtDANBgkqhkiG9w0BAQsFAAOCAQEAdNXW/40fOwUKZ1T3
wcztSKRQvtzf7nVNJ8xzPK4/JhQMD8l55eG3C+bSY0oK2NovmHNRS3MV2Dwy748X
jBqep9VPkNk/vWTrmmyCkFGA1EzSWUQjps2OpIW7Pb+Mt0YnkItuw1+o/xOfj1F2
yP9dhRcoo4JWdsM1ryGOip+rcLCJPn8DXnhbjF8VN4l2vz3mg1DzkE3C9b0cKkeX
aye0TTRw23bPiOO/4eMptT8T88EJYOjtmXrC8nLPQNmZQjnBJcBQ9ljnasCFvQi/
ktf4lGtByoo9mG71gV66Z748GJi9w8QLiNu5Xb6qNFg+oaVh4j28/ZYb4JZUzFw0
biwVcA==
-----END CERTIFICATE-----
Generated at Sat Jun 1 11:47:37 2024 by rpki-client on console-ams.rpki-client.org