Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9131612/E3B84C8CBE8611E99A6C011FC4F9AE02/923C51A8BE8811E998F37222C4F9AE02.roa
File:                     923C51A8BE8811E998F37222C4F9AE02.roa (raw, json)
Hash identifier:          qSVxFIsVr+S/G6SoyCOtDObNV5qE0GWQ+oHE5K9CkD4=
Subject key identifier:   4E:40:AE:5E:CA:2D:6D:0E:08:9D:E2:7B:9C:43:2B:05:81:DF:8C:A1
Certificate issuer:       /CN=A9131612/serialNumber=E4E101EEF443150C62110ACAFA881554C089FC53
Certificate serial:       0C61
Authority key identifier: E4:E1:01:EE:F4:43:15:0C:62:11:0A:CA:FA:88:15:54:C0:89:FC:53
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9131612/E3B84C8CBE8611E99A6C011FC4F9AE02/923C51A8BE8811E998F37222C4F9AE02.roa
Signing time:             Fri 04 Aug 2023 18:36:15 +0000
ROA not before:           Fri 04 Aug 2023 18:36:15 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     131332
IP address blocks:        103.24.134.0/24 maxlen: 24
                          103.163.4.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9131612/E3B84C8CBE8611E99A6C011FC4F9AE02/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.crl
                          rsync://rpki.apnic.net/member_repository/A9131612/E3B84C8CBE8611E99A6C011FC4F9AE02/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 May 2024 18:56:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3169 (0xc61)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9131612/serialNumber=E4E101EEF443150C62110ACAFA881554C089FC53
        Validity
            Not Before: Aug  4 18:36:15 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=64cd451f-344c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:96:63:69:2d:47:2b:3e:38:a6:5c:85:dd:74:
                    bd:c9:86:9a:57:af:26:a2:7b:b2:0e:57:eb:14:11:
                    16:46:42:d1:64:c7:9f:eb:94:8f:88:30:f8:aa:51:
                    52:3c:23:4b:66:01:a9:72:0f:f8:7f:66:55:da:fb:
                    84:31:f9:b6:24:11:ad:f7:a0:b8:a7:4f:ea:73:f7:
                    60:36:c3:89:e5:f6:8c:92:af:e2:89:3d:26:81:65:
                    8c:ad:ff:db:bd:2a:04:cb:86:08:77:3b:6f:d0:12:
                    bd:d5:13:50:1d:40:d9:53:d5:48:4d:d3:80:e4:d8:
                    d3:ce:c5:34:d3:d1:ef:51:2d:3a:94:46:d3:42:00:
                    19:8b:ed:9f:b2:53:5a:2f:83:e2:06:9c:03:9b:ed:
                    79:3e:92:0b:02:25:b2:7d:f4:17:03:08:7a:61:f4:
                    c5:6b:29:1d:5d:db:25:d8:f6:22:f9:37:27:b4:d8:
                    17:dc:d7:e6:b2:0e:b6:a6:e8:ad:40:46:4a:a7:e1:
                    2b:ba:b6:97:d3:5d:d3:75:5e:4b:18:ab:22:24:56:
                    04:68:b8:6a:66:7b:60:36:75:ea:e8:d3:2f:23:71:
                    10:6c:9d:60:0a:a6:ee:f9:a2:34:2e:b5:c8:ff:7b:
                    77:82:77:ab:88:cf:e6:6e:1a:9e:39:a8:b7:23:f8:
                    f7:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:40:AE:5E:CA:2D:6D:0E:08:9D:E2:7B:9C:43:2B:05:81:DF:8C:A1
            X509v3 Authority Key Identifier:
                keyid:E4:E1:01:EE:F4:43:15:0C:62:11:0A:CA:FA:88:15:54:C0:89:FC:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9131612/E3B84C8CBE8611E99A6C011FC4F9AE02/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131612/E3B84C8CBE8611E99A6C011FC4F9AE02/923C51A8BE8811E998F37222C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.24.134.0/24
                  103.163.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:ed:5b:11:20:2b:1a:e3:c8:9d:cc:dc:74:78:68:74:e4:f3:
         6f:64:0c:2c:fc:78:52:7d:16:d7:8c:0b:bf:5e:44:81:05:5f:
         5c:83:c6:30:39:19:c0:f8:36:83:37:97:e3:12:c3:5c:41:71:
         39:18:5a:fd:a0:c3:02:6b:25:cb:9e:4c:c8:22:08:34:fb:80:
         bb:5e:81:34:d8:06:53:d9:49:13:83:68:62:60:c2:19:f7:ac:
         74:81:17:04:06:6a:cc:b5:5f:24:2c:a9:4b:64:89:3b:aa:dd:
         00:bd:6f:1e:a4:84:22:42:17:2e:64:d1:ae:d5:2a:d0:f6:c2:
         15:5a:f5:07:d2:7d:3e:21:23:84:8e:c9:5e:45:e2:f4:ea:65:
         7d:ef:11:aa:ad:79:a8:db:0e:e8:af:65:5e:0f:c5:ed:ce:44:
         ed:a5:78:ac:2e:78:80:58:c8:30:28:ac:61:38:9c:81:ae:69:
         6c:bb:2d:1a:9d:d3:7b:38:ed:8a:5e:78:ed:51:03:36:8e:11:
         cb:63:0c:f8:e1:9b:bb:2f:e2:be:00:c4:05:8a:07:e8:54:15:
         5c:b5:cc:16:db:d9:bc:c1:f5:14:53:d5:5d:9c:ef:c4:e7:d4:
         b2:6d:a8:11:ac:9a:45:93:41:3b:57:7e:50:52:e1:6f:bc:f6:
         53:fb:5b:8d
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICDGEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzE2MTIxMTAvBgNVBAUTKEU0RTEwMUVFRjQ0MzE1MEM2MjExMEFDQUZBODgxNTU0
QzA4OUZDNTMwHhcNMjMwODA0MTgzNjE1WhcNMjQwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NGNkNDUxZi0zNDRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwZZjaS1HKz44plyF3XS9yYaaV68monuyDlfrFBEWRkLRZMef65SPiDD4qlFS
PCNLZgGpcg/4f2ZV2vuEMfm2JBGt96C4p0/qc/dgNsOJ5faMkq/iiT0mgWWMrf/b
vSoEy4YIdztv0BK91RNQHUDZU9VITdOA5NjTzsU009HvUS06lEbTQgAZi+2fslNa
L4PiBpwDm+15PpILAiWyffQXAwh6YfTFaykdXdsl2PYi+TcntNgX3Nfmsg62puit
QEZKp+EruraX013TdV5LGKsiJFYEaLhqZntgNnXq6NMvI3EQbJ1gCqbu+aI0LrXI
/3t3gneriM/mbhqeOai3I/j3dQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFE5Arl7K
LW0OCJ3ie5xDKwWB34yhMB8GA1UdIwQYMBaAFOThAe70QxUMYhEKyvqIFVTAifxT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTYxMi9FM0I4NEM4Q0JF
ODYxMUU5OUE2QzAxMUZDNEY5QUUwMi81T0VCN3ZSREZReGlFUXJLLW9nVlZNQ0pf
Rk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzVPRUI3dlJERlF4aUVRckstb2dWVk1DSl9GTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzE2MTIvRTNCODRDOENCRTg2MTFFOTlBNkMwMTFGQzRGOUFFMDIvOTIzQzUxQThC
RTg4MTFFOTk4RjM3MjIyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBABnGIYDBABnowQwDQYJKoZIhvcNAQELBQADggEBAG7tWxEg
KxrjyJ3M3HR4aHTk829kDCz8eFJ9FteMC79eRIEFX1yDxjA5GcD4NoM3l+MSw1xB
cTkYWv2gwwJrJcueTMgiCDT7gLtegTTYBlPZSRODaGJgwhn3rHSBFwQGasy1XyQs
qUtkiTuq3QC9bx6khCJCFy5k0a7VKtD2whVa9QfSfT4hI4SOyV5F4vTqZX3vEaqt
eajbDuivZV4Pxe3ORO2leKwueIBYyDAorGE4nIGuaWy7LRqd03s47YpeeO1RAzaO
EctjDPjhm7sv4r4AxAWKB+hUFVy1zBbb2bzB9RRT1V2c78Tn1LJtqBGsmkWTQTtX
flBS4W+89lP7W40=
-----END CERTIFICATE-----
Generated at Sat May 4 19:58:36 2024 by rpki-client on console-ams.rpki-client.org