Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91177A8/BA526138F11611EBB0E3C74DC4F9AE02/E11FA920F11A11EB9F005358C4F9AE02.roa
File:                     E11FA920F11A11EB9F005358C4F9AE02.roa (raw, json)
Hash identifier:          dJk86CBbg4pwdv1B5jZvyscSorM/Qz1nwmQMw37XARM=
Subject key identifier:   06:A1:83:F4:BC:B6:4C:80:CD:A2:DC:ED:F8:44:04:A5:DC:D7:DD:9A
Certificate issuer:       /CN=A91177A8/serialNumber=9E35E53EEA6B7BC3EC29AF3B3620E9A654C0B6AC
Certificate serial:       03F6
Authority key identifier: 9E:35:E5:3E:EA:6B:7B:C3:EC:29:AF:3B:36:20:E9:A6:54:C0:B6:AC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/njXlPupre8PsKa87NiDpplTAtqw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91177A8/BA526138F11611EBB0E3C74DC4F9AE02/E11FA920F11A11EB9F005358C4F9AE02.roa
Signing time:             Wed 09 Aug 2023 00:42:01 +0000
ROA not before:           Wed 09 Aug 2023 00:42:01 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     137398
IP address blocks:        103.167.80.0/24 maxlen: 24
                          103.169.208.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91177A8/BA526138F11611EBB0E3C74DC4F9AE02/njXlPupre8PsKa87NiDpplTAtqw.crl
                          rsync://rpki.apnic.net/member_repository/A91177A8/BA526138F11611EBB0E3C74DC4F9AE02/njXlPupre8PsKa87NiDpplTAtqw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/njXlPupre8PsKa87NiDpplTAtqw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Jun 2024 01:57:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1014 (0x3f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91177A8/serialNumber=9E35E53EEA6B7BC3EC29AF3B3620E9A654C0B6AC
        Validity
            Not Before: Aug  9 00:42:01 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=64d2e0d8-cb26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:94:05:a8:b2:9a:b6:3f:12:75:f5:8f:94:4e:
                    c5:4c:a9:11:57:42:2d:fd:df:d1:1f:b3:bd:d3:f2:
                    9e:86:64:a1:af:14:82:07:16:e5:6a:a1:4e:17:8b:
                    7f:82:a3:45:be:22:a8:67:00:59:47:cd:27:5b:d8:
                    c0:d3:6f:58:d7:12:fa:e4:ce:b4:e6:e2:56:3c:04:
                    82:b6:55:07:27:c0:9a:94:1d:1f:29:ef:ae:db:11:
                    94:4f:3e:d9:e7:07:10:6e:41:91:4e:87:c0:0f:4e:
                    15:19:3e:60:e1:eb:3c:11:9b:07:d2:fc:87:e3:a2:
                    03:52:4e:23:3e:52:b6:f2:70:35:b7:b2:93:4f:5c:
                    fc:12:06:77:c7:1a:ba:57:23:43:72:72:ad:d2:a2:
                    86:82:22:d9:45:03:6e:70:99:b9:c0:4e:ce:d4:98:
                    99:81:c5:00:a9:53:d1:ca:8d:d5:de:50:27:01:e0:
                    84:0f:de:5d:22:94:47:01:5f:5d:bc:32:4e:1d:5b:
                    ff:cd:32:25:41:1c:82:c6:92:49:d5:02:02:a4:a9:
                    b1:56:b3:4b:4d:2e:d3:bc:1a:b4:fa:37:98:53:fa:
                    1f:a2:0f:47:c7:b0:46:44:ce:02:e1:56:3c:6f:d0:
                    e2:2d:3a:cf:12:de:0f:18:9a:90:2d:30:98:ab:e7:
                    43:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:A1:83:F4:BC:B6:4C:80:CD:A2:DC:ED:F8:44:04:A5:DC:D7:DD:9A
            X509v3 Authority Key Identifier:
                keyid:9E:35:E5:3E:EA:6B:7B:C3:EC:29:AF:3B:36:20:E9:A6:54:C0:B6:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91177A8/BA526138F11611EBB0E3C74DC4F9AE02/njXlPupre8PsKa87NiDpplTAtqw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/njXlPupre8PsKa87NiDpplTAtqw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91177A8/BA526138F11611EBB0E3C74DC4F9AE02/E11FA920F11A11EB9F005358C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.167.80.0/24
                  103.169.208.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:11:4c:a4:06:6f:7d:f8:e9:0b:c1:e3:40:0e:56:5a:89:c7:
         7c:49:84:3a:04:95:1b:89:de:ae:a3:8f:59:26:3f:e3:10:d8:
         9b:11:35:65:e7:4a:4f:2f:73:14:8b:36:07:31:7a:77:0e:2c:
         a9:9b:63:09:96:e5:79:c6:61:81:eb:4d:7f:72:e6:70:a4:8f:
         88:c1:ed:d9:ce:70:2f:96:28:6d:ad:de:bd:88:6f:e0:bf:8f:
         72:9b:eb:d5:18:a3:2e:09:c3:f9:fd:fb:3c:30:62:98:92:e1:
         b7:89:d9:7a:a7:f5:39:cf:17:b2:dd:d3:7c:14:49:1b:f3:d4:
         e3:84:bf:44:9f:6c:f0:bd:7f:4f:d6:54:f9:4e:20:04:8a:dd:
         5a:f4:4c:95:f4:aa:92:41:0d:77:b0:3f:5b:21:d2:47:d4:5e:
         f1:59:da:00:d9:44:c9:5d:5d:ef:d2:1a:aa:25:93:f0:31:90:
         1c:6a:60:81:37:2c:03:2b:d5:13:3e:ba:8f:c8:95:fe:a0:68:
         19:11:2b:8e:3a:dc:da:ca:4b:a4:39:89:c9:3f:f0:24:c3:fc:
         b2:d4:ad:61:c3:b8:28:45:eb:86:b7:2e:55:c9:4a:48:3e:9e:
         6a:5e:6f:64:17:01:d9:ca:76:8d:9c:fe:9a:e3:e3:c1:db:fd:
         0e:c7:60:8b
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICA/YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTc3QTgxMTAvBgNVBAUTKDlFMzVFNTNFRUE2QjdCQzNFQzI5QUYzQjM2MjBFOUE2
NTRDMEI2QUMwHhcNMjMwODA5MDA0MjAxWhcNMjQwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NGQyZTBkOC1jYjI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAy5QFqLKatj8SdfWPlE7FTKkRV0It/d/RH7O90/KehmShrxSCBxblaqFOF4t/
gqNFviKoZwBZR80nW9jA029Y1xL65M605uJWPASCtlUHJ8CalB0fKe+u2xGUTz7Z
5wcQbkGRTofAD04VGT5g4es8EZsH0vyH46IDUk4jPlK28nA1t7KTT1z8EgZ3xxq6
VyNDcnKt0qKGgiLZRQNucJm5wE7O1JiZgcUAqVPRyo3V3lAnAeCED95dIpRHAV9d
vDJOHVv/zTIlQRyCxpJJ1QICpKmxVrNLTS7TvBq0+jeYU/ofog9Hx7BGRM4C4VY8
b9DiLTrPEt4PGJqQLTCYq+dDnQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFAahg/S8
tkyAzaLc7fhEBKXc192aMB8GA1UdIwQYMBaAFJ415T7qa3vD7CmvOzYg6aZUwLas
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzdBOC9CQTUyNjEzOEYx
MTYxMUVCQjBFM0M3NERDNEY5QUUwMi9ualhsUHVwcmU4UHNLYTg3TmlEcHBsVEF0
cXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL25qWGxQdXByZThQc0thODdOaURwcGxUQXRxdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MTc3QTgvQkE1MjYxMzhGMTE2MTFFQkIwRTNDNzREQzRGOUFFMDIvRTExRkE5MjBG
MTFBMTFFQjlGMDA1MzU4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBABnp1ADBABnqdAwDQYJKoZIhvcNAQELBQADggEBAIoRTKQG
b3346QvB40AOVlqJx3xJhDoElRuJ3q6jj1kmP+MQ2JsRNWXnSk8vcxSLNgcxencO
LKmbYwmW5XnGYYHrTX9y5nCkj4jB7dnOcC+WKG2t3r2Ib+C/j3Kb69UYoy4Jw/n9
+zwwYpiS4beJ2Xqn9TnPF7Ld03wUSRvz1OOEv0SfbPC9f0/WVPlOIASK3Vr0TJX0
qpJBDXewP1sh0kfUXvFZ2gDZRMldXe/SGqolk/AxkBxqYIE3LAMr1RM+uo/Ilf6g
aBkRK4463NrKS6Q5ick/8CTD/LLUrWHDuChF64a3LlXJSkg+nmpeb2QXAdnKdo2c
/prj48Hb/Q7HYIs=
-----END CERTIFICATE-----
Generated at Wed May 29 02:49:52 2024 by rpki-client on console-fra.rpki-client.org