Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91193C1/736E3B48059311EC8921ED85C4F9AE02/C8900982059611ECB2896C55C4F9AE02.roa
File:                     C8900982059611ECB2896C55C4F9AE02.roa (raw, json)
Hash identifier:          bIMYMjOpvGyj0B6cZVHQ4lY8ZhaqHOmnJbG7zwxui+E=
Subject key identifier:   4D:AE:25:39:06:25:DB:1C:B7:2B:A0:99:8A:D0:66:10:E6:22:FC:12
Certificate issuer:       /CN=A91193C1/serialNumber=14548E70949E505F8BA8A5391E466E1E99D3B727
Certificate serial:       03E4
Authority key identifier: 14:54:8E:70:94:9E:50:5F:8B:A8:A5:39:1E:46:6E:1E:99:D3:B7:27
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FFSOcJSeUF-LqKU5HkZuHpnTtyc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91193C1/736E3B48059311EC8921ED85C4F9AE02/C8900982059611ECB2896C55C4F9AE02.roa
Signing time:             Sat 23 Sep 2023 01:02:39 +0000
ROA not before:           Sat 23 Sep 2023 01:02:39 +0000
ROA not after:            Sun 01 Dec 2024 00:00:00 +0000
asID:                     146953
IP address blocks:        103.172.38.0/24 maxlen: 24
                          2407:cac0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91193C1/736E3B48059311EC8921ED85C4F9AE02/FFSOcJSeUF-LqKU5HkZuHpnTtyc.crl
                          rsync://rpki.apnic.net/member_repository/A91193C1/736E3B48059311EC8921ED85C4F9AE02/FFSOcJSeUF-LqKU5HkZuHpnTtyc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FFSOcJSeUF-LqKU5HkZuHpnTtyc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 May 2024 01:52:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 996 (0x3e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91193C1/serialNumber=14548E70949E505F8BA8A5391E466E1E99D3B727
        Validity
            Not Before: Sep 23 01:02:39 2023 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=650e392f-8d93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:5b:0d:17:f5:38:a4:a7:69:5e:c9:bd:9c:e5:
                    03:29:5c:12:3c:d4:c5:c8:17:cf:b3:73:de:eb:e8:
                    62:26:20:94:81:64:a5:91:e3:39:7f:a2:c7:38:57:
                    e0:62:91:00:8f:10:75:4b:c0:b6:fb:74:f7:da:53:
                    23:ee:8e:7f:e9:6b:c0:ce:95:c7:d6:d7:9e:50:25:
                    b5:fa:83:78:37:6a:4b:e9:1a:f6:f5:33:c9:eb:00:
                    38:16:b0:d3:69:4a:01:f3:cf:0d:7b:6d:0b:70:92:
                    05:fc:f1:d5:37:ab:d3:30:b8:01:ca:73:b7:62:30:
                    7a:60:c5:09:7d:c5:8c:51:c1:aa:4f:6c:2a:4d:89:
                    08:06:49:cb:eb:4d:81:4c:e8:48:64:23:39:06:81:
                    6f:71:1a:1b:d3:99:d5:ca:5c:d7:cf:c2:70:3d:2f:
                    c2:f0:bc:ec:ae:e7:94:aa:5f:20:c1:ed:9f:f8:85:
                    bd:26:8e:a7:6c:ed:bc:77:fc:cd:47:4c:13:72:c1:
                    7b:3e:ae:d1:88:b4:f1:93:22:75:b6:3e:9c:8d:b1:
                    88:c3:75:bb:f7:10:3c:a3:54:0b:71:db:b7:0c:a7:
                    bd:13:18:1b:34:b4:d4:a2:64:be:dd:31:09:9d:4f:
                    10:96:4e:90:b3:e2:dc:06:af:67:29:ae:50:b7:ae:
                    b4:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:AE:25:39:06:25:DB:1C:B7:2B:A0:99:8A:D0:66:10:E6:22:FC:12
            X509v3 Authority Key Identifier:
                keyid:14:54:8E:70:94:9E:50:5F:8B:A8:A5:39:1E:46:6E:1E:99:D3:B7:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91193C1/736E3B48059311EC8921ED85C4F9AE02/FFSOcJSeUF-LqKU5HkZuHpnTtyc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FFSOcJSeUF-LqKU5HkZuHpnTtyc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91193C1/736E3B48059311EC8921ED85C4F9AE02/C8900982059611ECB2896C55C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.172.38.0/24
                IPv6:
                  2407:cac0::/32

    Signature Algorithm: sha256WithRSAEncryption
         7f:18:52:5b:d0:4f:49:72:14:bb:f0:2e:c1:43:c3:6e:00:09:
         e4:e1:85:41:78:ed:63:c8:dd:8c:6b:f1:a7:a4:1c:9a:8f:ec:
         00:c2:98:87:16:00:fe:18:22:4c:db:f9:36:e6:9b:a0:de:8f:
         14:16:7d:75:50:42:32:9d:80:d5:58:b7:37:f4:a3:6b:30:e7:
         68:2b:af:83:4d:87:fd:80:de:08:6a:06:ee:52:3e:94:17:79:
         a9:87:27:8c:6f:92:b2:a7:08:93:82:b6:c1:df:80:47:46:ec:
         96:b9:ce:ee:95:c5:d6:3e:61:22:1a:a9:78:27:b1:6b:3a:6b:
         46:70:16:2c:07:93:5f:0d:f2:a4:f5:37:83:a2:09:04:dc:c2:
         98:c9:33:7a:20:2b:d7:b1:62:4a:5f:e4:1d:bd:d5:d3:d0:3f:
         3b:ed:b4:ee:8c:fb:b9:fd:60:18:c2:0b:e8:0c:ad:2d:a8:49:
         8f:e3:f7:9c:44:8f:92:f1:89:c0:ae:1b:5a:ce:1a:d3:5f:bb:
         c9:ac:65:02:57:49:b5:e9:18:41:cc:2f:05:63:a3:17:2d:b6:
         dc:6d:a9:f9:0a:92:66:c1:e6:f1:4d:de:89:bb:71:5a:2d:28:
         fc:58:7b:52:36:83:41:ed:40:2c:76:63:d6:a4:99:85:79:10:
         4b:04:00:ca
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICA+QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTkzQzExMTAvBgNVBAUTKDE0NTQ4RTcwOTQ5RTUwNUY4QkE4QTUzOTFFNDY2RTFF
OTlEM0I3MjcwHhcNMjMwOTIzMDEwMjM5WhcNMjQxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NTBlMzkyZi04ZDkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApFsNF/U4pKdpXsm9nOUDKVwSPNTFyBfPs3Pe6+hiJiCUgWSlkeM5f6LHOFfg
YpEAjxB1S8C2+3T32lMj7o5/6WvAzpXH1teeUCW1+oN4N2pL6Rr29TPJ6wA4FrDT
aUoB888Ne20LcJIF/PHVN6vTMLgBynO3YjB6YMUJfcWMUcGqT2wqTYkIBknL602B
TOhIZCM5BoFvcRob05nVylzXz8JwPS/C8LzsrueUql8gwe2f+IW9Jo6nbO28d/zN
R0wTcsF7Pq7RiLTxkyJ1tj6cjbGIw3W79xA8o1QLcdu3DKe9ExgbNLTUomS+3TEJ
nU8Qlk6Qs+LcBq9nKa5Qt660hQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFE2uJTkG
JdsctyugmYrQZhDmIvwSMB8GA1UdIwQYMBaAFBRUjnCUnlBfi6ilOR5Gbh6Z07cn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTNDMS83MzZFM0I0ODA1
OTMxMUVDODkyMUVEODVDNEY5QUUwMi9GRlNPY0pTZVVGLUxxS1U1SGtadUhwblR0
eWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZGU09jSlNlVUYtTHFLVTVIa1p1SHBuVHR5Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MTkzQzEvNzM2RTNCNDgwNTkzMTFFQzg5MjFFRDg1QzRGOUFFMDIvQzg5MDA5ODIw
NTk2MTFFQ0IyODk2QzU1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E
HzAdMAwEAgABMAYDBABnrCYwDQQCAAIwBwMFACQHysAwDQYJKoZIhvcNAQELBQAD
ggEBAH8YUlvQT0lyFLvwLsFDw24ACeThhUF47WPI3Yxr8aekHJqP7ADCmIcWAP4Y
Ikzb+Tbmm6DejxQWfXVQQjKdgNVYtzf0o2sw52grr4NNh/2A3ghqBu5SPpQXeamH
J4xvkrKnCJOCtsHfgEdG7Ja5zu6VxdY+YSIaqXgnsWs6a0ZwFiwHk18N8qT1N4Oi
CQTcwpjJM3ogK9exYkpf5B291dPQPzvttO6M+7n9YBjCC+gMrS2oSY/j95xEj5Lx
icCuG1rOGtNfu8msZQJXSbXpGEHMLwVjoxctttxtqfkKkmbB5vFN3om7cVotKPxY
e1I2g0HtQCx2Y9akmYV5EEsEAMo=
-----END CERTIFICATE-----
Generated at Tue May 7 03:12:17 2024 by rpki-client on console-fra.rpki-client.org