Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91279C4/8B89A42AD8C411EBBBD9AE7DC4F9AE02/859FFE90D9B111EBA2B24243C4F9AE02.roa
File:                     859FFE90D9B111EBA2B24243C4F9AE02.roa (raw, json)
Hash identifier:          otixXu8i9YahARC25LtB9KIuLdHbhqBEx9lF6Uow8C4=
Subject key identifier:   F1:9A:4C:0C:5E:6F:9E:37:C9:B5:CF:7C:CB:7A:28:75:1A:99:D6:78
Certificate issuer:       /CN=A91279C4/serialNumber=26EF6C79BB0FEB84DAFCEB740F396E573CFBF4DF
Certificate serial:       0428
Authority key identifier: 26:EF:6C:79:BB:0F:EB:84:DA:FC:EB:74:0F:39:6E:57:3C:FB:F4:DF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ju9sebsP64Ta_Ot0DzluVzz79N8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91279C4/8B89A42AD8C411EBBBD9AE7DC4F9AE02/859FFE90D9B111EBA2B24243C4F9AE02.roa
Signing time:             Fri 07 Jul 2023 00:20:53 +0000
ROA not before:           Fri 07 Jul 2023 00:20:53 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     131341
IP address blocks:        103.69.124.0/22 maxlen: 22
                          103.69.124.0/23 maxlen: 23
                          103.69.126.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91279C4/8B89A42AD8C411EBBBD9AE7DC4F9AE02/Ju9sebsP64Ta_Ot0DzluVzz79N8.crl
                          rsync://rpki.apnic.net/member_repository/A91279C4/8B89A42AD8C411EBBBD9AE7DC4F9AE02/Ju9sebsP64Ta_Ot0DzluVzz79N8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ju9sebsP64Ta_Ot0DzluVzz79N8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 May 2024 01:06:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1064 (0x428)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91279C4/serialNumber=26EF6C79BB0FEB84DAFCEB740F396E573CFBF4DF
        Validity
            Not Before: Jul  7 00:20:53 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=64a75a65-39bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:63:49:eb:c4:6c:e8:d8:c2:8a:4e:0a:8c:04:
                    62:e5:01:76:18:c5:af:11:4c:0b:f9:89:7c:fd:a2:
                    c0:0c:11:11:b8:a9:e3:6f:5c:a0:5b:dd:18:9b:8e:
                    c2:c9:79:31:cf:83:a2:f9:0a:ae:70:25:aa:1e:d3:
                    c8:58:0a:f4:7f:a8:ec:8b:a6:dc:87:22:a1:b3:5d:
                    71:a3:13:7e:1d:46:57:f1:81:58:07:87:4a:c0:56:
                    9f:d5:ea:48:45:09:43:36:59:86:16:54:e8:72:47:
                    06:dc:e6:1f:42:ef:1a:23:d9:e2:a1:2a:65:3b:5d:
                    04:77:34:98:b0:a1:8c:8d:5f:a8:52:af:da:b7:5b:
                    e8:30:6d:8e:02:0e:f4:af:49:8a:72:83:d9:06:17:
                    f5:c2:ed:dc:ec:f3:57:54:cc:ce:db:2b:d1:6a:3c:
                    19:c9:a3:3a:98:16:fa:63:d7:3b:5f:b7:1d:90:cf:
                    d9:55:65:24:9d:70:65:49:45:8c:96:a1:c8:a9:6c:
                    cf:dd:c1:ef:ac:e5:a8:fc:ea:5f:14:6a:0e:79:5a:
                    4f:a6:05:40:51:c5:d4:b3:05:ec:69:e5:8e:29:65:
                    c8:35:f0:0c:e2:7d:41:76:c2:0a:79:0b:d2:d9:37:
                    de:4d:72:a3:00:b3:0a:80:89:35:ce:e2:43:12:04:
                    ea:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:9A:4C:0C:5E:6F:9E:37:C9:B5:CF:7C:CB:7A:28:75:1A:99:D6:78
            X509v3 Authority Key Identifier:
                keyid:26:EF:6C:79:BB:0F:EB:84:DA:FC:EB:74:0F:39:6E:57:3C:FB:F4:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91279C4/8B89A42AD8C411EBBBD9AE7DC4F9AE02/Ju9sebsP64Ta_Ot0DzluVzz79N8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ju9sebsP64Ta_Ot0DzluVzz79N8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91279C4/8B89A42AD8C411EBBBD9AE7DC4F9AE02/859FFE90D9B111EBA2B24243C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.69.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         93:49:84:61:83:81:b3:52:cd:a3:fa:db:4d:af:06:30:ac:0d:
         76:85:47:39:56:20:de:d5:4d:cd:f8:f7:3c:2d:36:03:2c:43:
         5c:c2:5c:84:48:95:3e:8f:41:39:46:a6:2a:3d:7f:cf:fa:1e:
         49:ff:ab:4a:ce:cf:7d:8a:08:06:41:e5:81:25:06:3f:e4:04:
         83:18:f8:39:26:08:c3:86:51:9c:de:e9:1a:11:a1:cb:01:ff:
         e0:1e:72:2f:fc:77:c2:e5:c8:f6:1f:7f:1f:18:05:26:11:09:
         89:37:2e:1f:4a:14:1a:4c:e2:45:da:72:65:12:df:69:b4:27:
         79:1a:91:cd:8e:10:2d:4d:f0:98:71:c8:a1:83:fe:d6:aa:d6:
         a7:81:a2:a3:44:a8:96:73:59:49:89:00:7f:e0:cf:1e:20:0a:
         aa:72:d0:16:99:0e:75:0c:e1:33:52:42:b2:bd:4e:12:29:1a:
         f8:5e:37:84:9f:e1:b6:1c:22:29:f3:48:e2:2b:cf:b9:49:a9:
         39:96:2f:a4:c1:5b:d1:07:b3:89:b9:12:24:cd:cc:1c:b1:e4:
         4c:44:92:a5:f8:e5:d4:dc:c3:60:e8:9d:23:30:3c:8f:31:08:
         02:16:9f:39:99:4a:ab:af:62:a2:7e:16:55:b8:fd:95:01:ba:
         e5:7f:22:fe
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBCgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Mjc5QzQxMTAvBgNVBAUTKDI2RUY2Qzc5QkIwRkVCODREQUZDRUI3NDBGMzk2RTU3
M0NGQkY0REYwHhcNMjMwNzA3MDAyMDUzWhcNMjQwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NGE3NWE2NS0zOWJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvGNJ68Rs6NjCik4KjARi5QF2GMWvEUwL+Yl8/aLADBERuKnjb1ygW90Ym47C
yXkxz4Oi+QqucCWqHtPIWAr0f6jsi6bchyKhs11xoxN+HUZX8YFYB4dKwFaf1epI
RQlDNlmGFlTockcG3OYfQu8aI9nioSplO10EdzSYsKGMjV+oUq/at1voMG2OAg70
r0mKcoPZBhf1wu3c7PNXVMzO2yvRajwZyaM6mBb6Y9c7X7cdkM/ZVWUknXBlSUWM
lqHIqWzP3cHvrOWo/OpfFGoOeVpPpgVAUcXUswXsaeWOKWXINfAM4n1BdsIKeQvS
2TfeTXKjALMKgIk1zuJDEgTq/QIDAQABo4IClTCCApEwHQYDVR0OBBYEFPGaTAxe
b543ybXPfMt6KHUamdZ4MB8GA1UdIwQYMBaAFCbvbHm7D+uE2vzrdA85blc8+/Tf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzlDNC84Qjg5QTQyQUQ4
QzQxMUVCQkJEOUFFN0RDNEY5QUUwMi9KdTlzZWJzUDY0VGFfT3QwRHpsdVZ6ejc5
TjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0p1OXNlYnNQNjRUYV9PdDBEemx1Vnp6NzlOOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Mjc5QzQvOEI4OUE0MkFEOEM0MTFFQkJCRDlBRTdEQzRGOUFFMDIvODU5RkZFOTBE
OUIxMTFFQkEyQjI0MjQzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAJnRXwwDQYJKoZIhvcNAQELBQADggEBAJNJhGGDgbNSzaP6
202vBjCsDXaFRzlWIN7VTc349zwtNgMsQ1zCXIRIlT6PQTlGpio9f8/6Hkn/q0rO
z32KCAZB5YElBj/kBIMY+DkmCMOGUZze6RoRocsB/+Aeci/8d8LlyPYffx8YBSYR
CYk3Lh9KFBpM4kXacmUS32m0J3kakc2OEC1N8JhxyKGD/taq1qeBoqNEqJZzWUmJ
AH/gzx4gCqpy0BaZDnUM4TNSQrK9ThIpGvheN4Sf4bYcIinzSOIrz7lJqTmWL6TB
W9EHs4m5EiTNzByx5ExEkqX45dTcw2DonSMwPI8xCAIWnzmZSquvYqJ+FlW4/ZUB
uuV/Iv4=
-----END CERTIFICATE-----
Generated at Tue May 7 01:58:14 2024 by rpki-client on console-fra.rpki-client.org