Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912C1EC/C25318C41A2811ECBCCF5010C4F9AE02/92C0558C1A3B11EC91C03279C4F9AE02.roa
File:                     92C0558C1A3B11EC91C03279C4F9AE02.roa (raw, json)
Hash identifier:          DZNgn7+NfU3Db5mVE1NTaO3BHAIs1oK1qT4eLsO5kr8=
Subject key identifier:   16:84:C4:6B:BC:B9:71:8B:39:6D:33:BC:E3:79:D7:48:E7:89:17:82
Certificate issuer:       /CN=A912C1EC/serialNumber=74D303553E605C31511E9864C566599D4DB8A393
Certificate serial:       03BC
Authority key identifier: 74:D3:03:55:3E:60:5C:31:51:1E:98:64:C5:66:59:9D:4D:B8:A3:93
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dNMDVT5gXDFRHphkxWZZnU24o5M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912C1EC/C25318C41A2811ECBCCF5010C4F9AE02/92C0558C1A3B11EC91C03279C4F9AE02.roa
Signing time:             Tue 17 Oct 2023 01:33:19 +0000
ROA not before:           Tue 17 Oct 2023 01:33:19 +0000
ROA not after:            Mon 30 Dec 2024 00:00:00 +0000
asID:                     147039
IP address blocks:        103.173.79.0/24 maxlen: 24
                          2001:df7:9980::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912C1EC/C25318C41A2811ECBCCF5010C4F9AE02/dNMDVT5gXDFRHphkxWZZnU24o5M.crl
                          rsync://rpki.apnic.net/member_repository/A912C1EC/C25318C41A2811ECBCCF5010C4F9AE02/dNMDVT5gXDFRHphkxWZZnU24o5M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dNMDVT5gXDFRHphkxWZZnU24o5M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 May 2024 02:07:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 956 (0x3bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912C1EC/serialNumber=74D303553E605C31511E9864C566599D4DB8A393
        Validity
            Not Before: Oct 17 01:33:19 2023 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=652de45f-0e6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:74:a0:6d:e6:80:98:d8:66:ae:90:60:22:ec:
                    c6:20:3d:c8:5d:ed:24:c7:7d:d6:4e:65:7d:b6:14:
                    57:01:f6:89:bf:d0:02:10:03:43:27:7d:32:8b:77:
                    31:22:bc:0c:04:0a:30:5f:bb:fa:f5:98:40:d6:fa:
                    f7:77:2b:5d:6c:ea:08:55:84:08:43:a1:b2:9d:cf:
                    e8:14:f7:d5:89:66:d5:66:8e:fc:7c:bb:06:4d:5c:
                    63:07:5b:87:d0:a6:58:a4:40:ac:7d:07:9d:df:5f:
                    e4:5a:48:06:9e:8e:71:80:65:ea:ed:9e:2f:4a:ae:
                    d6:2a:e6:cc:5a:66:98:43:1a:25:33:5e:7f:e7:e1:
                    b4:f7:c7:a8:95:70:ef:42:e6:1b:ef:09:a2:37:88:
                    20:f5:27:e5:f4:7f:f3:9c:0a:e8:84:67:44:81:8b:
                    cc:9a:56:d3:e0:f4:15:bc:84:ec:66:58:b3:e8:50:
                    1a:1b:01:45:de:72:10:5f:e2:0d:a1:cd:b2:85:4d:
                    aa:0c:ac:00:40:8b:bc:7d:9f:c9:73:07:b2:81:0a:
                    89:71:b5:60:cd:3e:27:63:5e:1e:f7:25:bf:b8:87:
                    a6:0d:a0:d7:a4:99:0e:47:c7:81:67:35:a3:51:63:
                    7f:2b:b4:0e:3d:2a:09:f0:fc:55:ac:ee:9f:78:af:
                    f4:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:84:C4:6B:BC:B9:71:8B:39:6D:33:BC:E3:79:D7:48:E7:89:17:82
            X509v3 Authority Key Identifier:
                keyid:74:D3:03:55:3E:60:5C:31:51:1E:98:64:C5:66:59:9D:4D:B8:A3:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912C1EC/C25318C41A2811ECBCCF5010C4F9AE02/dNMDVT5gXDFRHphkxWZZnU24o5M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dNMDVT5gXDFRHphkxWZZnU24o5M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C1EC/C25318C41A2811ECBCCF5010C4F9AE02/92C0558C1A3B11EC91C03279C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.173.79.0/24
                IPv6:
                  2001:df7:9980::/48

    Signature Algorithm: sha256WithRSAEncryption
         0a:80:8e:20:2c:cf:a6:18:01:fd:83:dd:18:0b:51:17:fb:3d:
         68:fa:d7:0b:1c:b6:fe:51:b7:c3:80:8f:1e:c5:d8:22:3e:57:
         89:38:20:e8:50:9a:4a:83:76:3a:5c:3f:8b:b7:14:19:29:30:
         dd:bb:45:cf:82:72:b2:0a:e9:76:44:59:79:17:03:fd:a2:87:
         43:ce:d4:5b:6a:4c:bd:a9:6b:38:8e:0c:32:56:bd:01:c1:a4:
         7d:7b:d3:c2:aa:85:5a:99:5d:09:89:98:4e:aa:32:ea:d0:b8:
         da:bb:64:d0:49:be:30:6c:42:bb:8d:09:cf:8e:7d:c0:fc:69:
         e5:a9:9e:99:7f:66:f2:cd:2e:6a:96:81:4a:6c:06:1f:0d:74:
         a8:71:26:50:35:c8:69:f9:1b:33:47:30:76:f9:3c:bd:1d:10:
         db:3e:ac:51:0d:93:b2:d2:bb:ad:75:b2:71:f9:d5:d1:96:95:
         3a:ac:3e:21:42:2c:19:27:2c:07:94:7a:b3:0d:4b:c2:6c:5a:
         77:19:4b:dd:f2:f0:13:1a:b3:a8:fb:e1:2a:ca:0c:0d:d2:c3:
         04:1f:41:9a:6a:60:ee:e9:fb:54:05:d5:54:67:79:e4:e8:31:
         d5:26:90:00:03:a4:a3:33:08:ea:26:6a:c8:bc:30:b0:25:48:
         4d:5a:4e:ae
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgICA7wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkMxRUMxMTAvBgNVBAUTKDc0RDMwMzU1M0U2MDVDMzE1MTFFOTg2NEM1NjY1OTlE
NERCOEEzOTMwHhcNMjMxMDE3MDEzMzE5WhcNMjQxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NTJkZTQ1Zi0wZTZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApnSgbeaAmNhmrpBgIuzGID3IXe0kx33WTmV9thRXAfaJv9ACEANDJ30yi3cx
IrwMBAowX7v69ZhA1vr3dytdbOoIVYQIQ6Gync/oFPfViWbVZo78fLsGTVxjB1uH
0KZYpECsfQed31/kWkgGno5xgGXq7Z4vSq7WKubMWmaYQxolM15/5+G098eolXDv
QuYb7wmiN4gg9Sfl9H/znArohGdEgYvMmlbT4PQVvITsZliz6FAaGwFF3nIQX+IN
oc2yhU2qDKwAQIu8fZ/JcweygQqJcbVgzT4nY14e9yW/uIemDaDXpJkOR8eBZzWj
UWN/K7QOPSoJ8PxVrO6feK/0OwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFBaExGu8
uXGLOW0zvON510jniReCMB8GA1UdIwQYMBaAFHTTA1U+YFwxUR6YZMVmWZ1NuKOT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzFFQy9DMjUzMThDNDFB
MjgxMUVDQkNDRjUwMTBDNEY5QUUwMi9kTk1EVlQ1Z1hERlJIcGhreFdaWm5VMjRv
NU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2ROTURWVDVnWERGUkhwaGt4V1pablUyNG81TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MkMxRUMvQzI1MzE4QzQxQTI4MTFFQ0JDQ0Y1MDEwQzRGOUFFMDIvOTJDMDU1OEMx
QTNCMTFFQzkxQzAzMjc5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E
ITAfMAwEAgABMAYDBABnrU8wDwQCAAIwCQMHACABDfeZgDANBgkqhkiG9w0BAQsF
AAOCAQEACoCOICzPphgB/YPdGAtRF/s9aPrXCxy2/lG3w4CPHsXYIj5XiTgg6FCa
SoN2Olw/i7cUGSkw3btFz4JysgrpdkRZeRcD/aKHQ87UW2pMvalrOI4MMla9AcGk
fXvTwqqFWpldCYmYTqoy6tC42rtk0Em+MGxCu40Jz459wPxp5amemX9m8s0uapaB
SmwGHw10qHEmUDXIafkbM0cwdvk8vR0Q2z6sUQ2TstK7rXWycfnV0ZaVOqw+IUIs
GScsB5R6sw1LwmxadxlL3fLwExqzqPvhKsoMDdLDBB9Bmmpg7un7VAXVVGd55Ogx
1SaQAAOkozMI6iZqyLwwsCVITVpOrg==
-----END CERTIFICATE-----
Generated at Wed May 15 03:49:54 2024 by rpki-client on console-fra.rpki-client.org