Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/1A40A6645DED11EE931C6684C4F9AE02.roa
File:                     1A40A6645DED11EE931C6684C4F9AE02.roa (raw, json)
Hash identifier:          9zTUmeWonacN4aNIcVpqM25WMamq3UP1yH/1NeK1lt8=
Subject key identifier:   9C:2B:D9:DB:56:A0:71:E8:4F:AB:4D:43:61:53:B1:9A:B8:EA:12:22
Certificate issuer:       /CN=A9127898/serialNumber=95655EE72E177A02096C0CB60676AA1E669AE7E0
Certificate serial:       09
Authority key identifier: 95:65:5E:E7:2E:17:7A:02:09:6C:0C:B6:06:76:AA:1E:66:9A:E7:E0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lWVe5y4XegIJbAy2BnaqHmaa5-A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/1A40A6645DED11EE931C6684C4F9AE02.roa
Signing time:             Thu 28 Sep 2023 10:53:26 +0000
ROA not before:           Thu 28 Sep 2023 10:53:26 +0000
ROA not after:            Sat 31 Aug 2024 00:00:00 +0000
asID:                     134734
IP address blocks:        103.171.142.0/23 maxlen: 23
                          103.171.142.0/24 maxlen: 24
                          103.171.143.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.crl
                          rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lWVe5y4XegIJbAy2BnaqHmaa5-A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 May 2024 01:19:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9 (0x9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9127898/serialNumber=95655EE72E177A02096C0CB60676AA1E669AE7E0
        Validity
            Not Before: Sep 28 10:53:26 2023 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=65155b25-2a76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:87:64:45:96:ec:9b:17:a5:3a:ee:a5:1c:8f:
                    24:0f:31:d7:48:f1:91:73:84:28:c3:aa:0c:0d:64:
                    37:a3:c4:8b:8a:c2:ea:ac:ea:6f:c5:f9:a8:c2:8e:
                    a2:0a:b0:ac:c8:68:07:30:09:3f:b4:09:0b:02:f3:
                    a9:e7:b0:1b:df:01:6a:a1:60:eb:5f:c5:ef:65:1d:
                    1e:56:f0:c1:ed:ed:2c:4a:fb:3b:b1:58:92:90:fb:
                    9d:1f:3d:b3:6e:24:bb:96:2c:42:f4:b9:4b:42:d3:
                    d3:64:78:5e:21:71:64:69:86:74:e3:31:b4:ff:81:
                    ea:8c:d8:4d:6e:68:11:22:80:90:1e:ef:03:c3:cd:
                    1b:ee:ab:02:d8:2e:b3:c8:11:00:8a:f0:66:b2:1e:
                    30:6a:5d:50:bd:47:73:d1:78:ea:57:af:33:96:60:
                    22:39:7d:1e:60:eb:fa:6b:af:64:f2:68:22:d1:98:
                    2f:24:c4:32:00:48:30:7c:05:ba:99:6a:5d:90:89:
                    77:57:7f:eb:45:18:fa:f7:3b:53:0d:b9:8a:7b:17:
                    ba:6a:62:d6:70:35:6c:8b:f7:2f:e8:16:73:28:98:
                    0a:29:89:0f:28:12:13:6c:1c:8f:ea:be:25:52:73:
                    6a:59:c2:90:09:ba:50:4d:7e:33:99:eb:63:d4:d2:
                    e3:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:2B:D9:DB:56:A0:71:E8:4F:AB:4D:43:61:53:B1:9A:B8:EA:12:22
            X509v3 Authority Key Identifier:
                keyid:95:65:5E:E7:2E:17:7A:02:09:6C:0C:B6:06:76:AA:1E:66:9A:E7:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lWVe5y4XegIJbAy2BnaqHmaa5-A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/1A40A6645DED11EE931C6684C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.171.142.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a0:82:3a:52:30:ea:f6:33:42:a0:85:68:07:cb:5c:d4:c8:66:
         1d:dd:6d:09:8a:65:2d:e6:bd:96:4f:37:95:44:9b:ce:0c:ee:
         a0:fe:e9:48:7e:93:67:3e:11:fe:ca:57:ed:49:f5:47:52:76:
         65:d6:6a:32:85:4a:cb:14:d1:13:ae:ad:4c:ee:51:6b:9f:26:
         9d:1f:36:35:db:9c:c9:18:20:77:34:37:6d:70:80:68:ed:8c:
         f5:4d:91:84:1c:08:2e:b3:e3:f2:90:6d:1e:4c:30:b4:5d:ef:
         a3:f1:35:31:19:6c:0b:e2:0a:93:ed:ab:fb:c4:c8:d2:0b:ef:
         45:07:b7:42:77:23:00:6b:d1:85:54:6a:57:a9:fe:2f:77:77:
         b9:66:f9:52:e2:3b:8c:2d:32:20:7f:1a:32:5b:98:6b:63:56:
         31:0b:c3:f5:23:3d:d4:e7:ea:32:03:dc:19:4d:7d:1d:35:d9:
         d2:5f:27:91:00:63:2e:28:4a:19:f0:cc:1c:da:68:8c:0b:72:
         cf:3c:92:88:8c:6f:10:74:43:79:71:69:91:49:8a:18:42:6f:
         f9:aa:ff:4b:f9:1c:14:35:6b:6d:12:00:23:f2:c3:4d:e1:dc:
         8b:e4:d7:c3:b8:e4:48:da:8b:62:81:a2:9b:a0:60:0d:4b:53:
         6f:fc:67:c5
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBCTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy
Nzg5ODExMC8GA1UEBRMoOTU2NTVFRTcyRTE3N0EwMjA5NkMwQ0I2MDY3NkFBMUU2
NjlBRTdFMDAeFw0yMzA5MjgxMDUzMjZaFw0yNDA4MzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY1MTU1YjI1LTJhNzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC/h2RFluybF6U67qUcjyQPMddI8ZFzhCjDqgwNZDejxIuKwuqs6m/F+ajCjqIK
sKzIaAcwCT+0CQsC86nnsBvfAWqhYOtfxe9lHR5W8MHt7SxK+zuxWJKQ+50fPbNu
JLuWLEL0uUtC09NkeF4hcWRphnTjMbT/geqM2E1uaBEigJAe7wPDzRvuqwLYLrPI
EQCK8GayHjBqXVC9R3PReOpXrzOWYCI5fR5g6/prr2TyaCLRmC8kxDIASDB8BbqZ
al2QiXdXf+tFGPr3O1MNuYp7F7pqYtZwNWyL9y/oFnMomAopiQ8oEhNsHI/qviVS
c2pZwpAJulBNfjOZ62PU0uPxAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUnCvZ21ag
cehPq01DYVOxmrjqEiIwHwYDVR0jBBgwFoAUlWVe5y4XegIJbAy2BnaqHmaa5+Aw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI3ODk4LzIwNjlGNUZDRkMw
RDExRUJBRTk1MTQ3QkM0RjlBRTAyL2xXVmU1eTRYZWdJSmJBeTJCbmFxSG1hYTUt
QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvbFdWZTV5NFhlZ0lKYkF5MkJuYXFIbWFhNS1BLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
Nzg5OC8yMDY5RjVGQ0ZDMEQxMUVCQUU5NTE0N0JDNEY5QUUwMi8xQTQwQTY2NDVE
RUQxMUVFOTMxQzY2ODRDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAWerjjANBgkqhkiG9w0BAQsFAAOCAQEAoII6UjDq9jNCoIVo
B8tc1MhmHd1tCYplLea9lk83lUSbzgzuoP7pSH6TZz4R/spX7Un1R1J2ZdZqMoVK
yxTRE66tTO5Ra58mnR82NducyRggdzQ3bXCAaO2M9U2RhBwILrPj8pBtHkwwtF3v
o/E1MRlsC+IKk+2r+8TI0gvvRQe3QncjAGvRhVRqV6n+L3d3uWb5UuI7jC0yIH8a
MluYa2NWMQvD9SM91OfqMgPcGU19HTXZ0l8nkQBjLihKGfDMHNpojAtyzzySiIxv
EHRDeXFpkUmKGEJv+ar/S/kcFDVrbRIAI/LDTeHci+TXw7jkSNqLYoGim6BgDUtT
b/xnxQ==
-----END CERTIFICATE-----
Generated at Sun May 19 02:59:04 2024 by rpki-client on console-ams.rpki-client.org