Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91316B0/2337F2325E3E11ECA1FFEB4CC4F9AE02/C6EFDF5C0C3311EFB37BD03FC4F9AE02.roa
File:                     C6EFDF5C0C3311EFB37BD03FC4F9AE02.roa (raw, json)
Hash identifier:          XvBsOqEbgki0cQldu3Wf2EWpSQIyAYao5O4fwHHqsok=
Subject key identifier:   EA:CE:50:E6:72:D9:0E:E0:B9:2A:1B:BB:B9:F8:7C:B5:F3:17:BD:DD
Certificate issuer:       /CN=A91316B0/serialNumber=395AF5791376339AF9DEE56D6A1E13B47AB5C466
Certificate serial:       02
Authority key identifier: 39:5A:F5:79:13:76:33:9A:F9:DE:E5:6D:6A:1E:13:B4:7A:B5:C4:66
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OVr1eRN2M5r53uVtah4TtHq1xGY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91316B0/2337F2325E3E11ECA1FFEB4CC4F9AE02/C6EFDF5C0C3311EFB37BD03FC4F9AE02.roa
Signing time:             Tue 07 May 2024 05:36:39 +0000
ROA not before:           Tue 07 May 2024 05:36:39 +0000
ROA not after:            Sun 02 Mar 2025 00:00:00 +0000
asID:                     137967
IP address blocks:        103.178.31.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91316B0/2337F2325E3E11ECA1FFEB4CC4F9AE02/OVr1eRN2M5r53uVtah4TtHq1xGY.crl
                          rsync://rpki.apnic.net/member_repository/A91316B0/2337F2325E3E11ECA1FFEB4CC4F9AE02/OVr1eRN2M5r53uVtah4TtHq1xGY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OVr1eRN2M5r53uVtah4TtHq1xGY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Jun 2024 03:07:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91316B0/serialNumber=395AF5791376339AF9DEE56D6A1E13B47AB5C466
        Validity
            Not Before: May  7 05:36:39 2024 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=6639bde7-038f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:50:92:20:83:96:de:61:01:9e:08:34:c8:20:
                    fd:ef:81:ea:85:0a:51:d2:b5:91:62:bb:c1:56:b8:
                    a8:5c:99:44:66:9a:66:1b:23:58:63:05:dc:11:15:
                    1b:94:08:c7:9a:48:7b:5c:89:a2:49:ff:82:20:e2:
                    0c:9d:19:67:72:2d:a8:b7:63:13:50:73:ea:64:0b:
                    5b:b5:ee:a4:1f:27:e5:6f:62:72:f6:0d:84:0e:11:
                    56:fa:7d:65:21:ae:29:53:2b:4f:24:3a:c9:9c:a2:
                    86:e9:64:7b:c5:41:8f:77:3d:93:88:96:0d:90:8a:
                    57:5c:7d:ea:fb:13:43:67:40:4f:12:ef:33:65:51:
                    56:db:52:67:e4:66:8c:cd:c9:30:92:59:c2:2e:38:
                    ae:2c:90:de:aa:00:53:65:b1:aa:92:6b:81:a1:a1:
                    da:44:bc:df:fa:a8:78:77:4d:d5:0c:c4:07:88:12:
                    6e:bf:76:aa:a8:f0:3c:8b:23:4b:ba:c5:ac:3d:72:
                    8d:f3:12:d9:03:ed:73:90:50:16:e6:64:4b:1e:93:
                    fe:00:af:31:84:1d:66:de:52:68:3d:d0:3f:38:82:
                    61:a5:04:77:d3:59:09:f4:e7:49:1f:b2:7c:66:ea:
                    9c:8f:44:28:96:c8:f1:65:fe:97:8f:89:2d:80:43:
                    ca:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:CE:50:E6:72:D9:0E:E0:B9:2A:1B:BB:B9:F8:7C:B5:F3:17:BD:DD
            X509v3 Authority Key Identifier:
                keyid:39:5A:F5:79:13:76:33:9A:F9:DE:E5:6D:6A:1E:13:B4:7A:B5:C4:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91316B0/2337F2325E3E11ECA1FFEB4CC4F9AE02/OVr1eRN2M5r53uVtah4TtHq1xGY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OVr1eRN2M5r53uVtah4TtHq1xGY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91316B0/2337F2325E3E11ECA1FFEB4CC4F9AE02/C6EFDF5C0C3311EFB37BD03FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.178.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b2:f6:c7:92:0d:f3:d4:e5:47:e5:79:a2:39:86:26:31:f1:76:
         53:90:ef:7a:ad:36:fe:fa:87:1d:a4:bb:ce:fd:ef:75:fa:41:
         b5:b2:d7:0c:fd:86:91:12:28:af:46:e3:f6:42:8d:17:e1:f0:
         e6:d1:79:3a:6f:18:c6:0d:ee:95:08:f8:ff:8a:f3:da:33:d2:
         e5:7d:74:70:fb:09:39:28:4d:65:e0:42:57:99:86:bc:12:8f:
         9b:12:f3:45:f8:2a:f5:3b:6f:83:1a:2e:fe:f4:a9:0d:4d:9e:
         f0:1c:c8:e4:84:ca:f7:9a:6f:a9:10:0d:88:fd:b1:15:e4:17:
         a5:57:8f:28:50:53:17:8a:33:c2:e0:6f:61:f6:f7:45:b7:af:
         01:95:ae:f5:46:7e:a7:bd:a3:a2:21:8f:02:a3:cf:d0:88:92:
         74:15:1d:33:c4:55:af:7b:a6:4d:cb:26:b8:87:be:c7:3a:b3:
         65:78:04:3e:90:b7:db:6f:99:fb:91:f8:80:c3:6e:af:5c:1f:
         24:a3:e9:32:f8:11:5a:a7:84:b4:aa:40:4e:21:8a:77:b9:6d:
         96:61:30:83:cd:61:16:d2:f5:a6:60:2c:3b:9f:26:f4:6d:c3:
         a1:6e:f5:12:0f:9c:da:d8:e9:c6:2b:60:5b:8e:b1:d7:42:cc:
         02:51:06:44
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz
MTZCMDExMC8GA1UEBRMoMzk1QUY1NzkxMzc2MzM5QUY5REVFNTZENkExRTEzQjQ3
QUI1QzQ2NjAeFw0yNDA1MDcwNTM2MzlaFw0yNTAzMDIwMDAwMDBaMBgxFjAUBgNV
BAMTDTY2MzliZGU3LTAzOGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDCUJIgg5beYQGeCDTIIP3vgeqFClHStZFiu8FWuKhcmURmmmYbI1hjBdwRFRuU
CMeaSHtciaJJ/4Ig4gydGWdyLai3YxNQc+pkC1u17qQfJ+VvYnL2DYQOEVb6fWUh
rilTK08kOsmcoobpZHvFQY93PZOIlg2Qildcfer7E0NnQE8S7zNlUVbbUmfkZozN
yTCSWcIuOK4skN6qAFNlsaqSa4GhodpEvN/6qHh3TdUMxAeIEm6/dqqo8DyLI0u6
xaw9co3zEtkD7XOQUBbmZEsek/4ArzGEHWbeUmg90D84gmGlBHfTWQn050kfsnxm
6pyPRCiWyPFl/pePiS2AQ8rNAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQU6s5Q5nLZ
DuC5Khu7ufh8tfMXvd0wHwYDVR0jBBgwFoAUOVr1eRN2M5r53uVtah4TtHq1xGYw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMxNkIwLzIzMzdGMjMyNUUz
RTExRUNBMUZGRUI0Q0M0RjlBRTAyL09WcjFlUk4yTTVyNTN1VnRhaDRUdEhxMXhH
WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvT1ZyMWVSTjJNNXI1M3VWdGFoNFR0SHExeEdZLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
MTZCMC8yMzM3RjIzMjVFM0UxMUVDQTFGRkVCNENDNEY5QUUwMi9DNkVGREY1QzBD
MzMxMUVGQjM3QkQwM0ZDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAGeyHzANBgkqhkiG9w0BAQsFAAOCAQEAsvbHkg3z1OVH5Xmi
OYYmMfF2U5Dveq02/vqHHaS7zv3vdfpBtbLXDP2GkRIor0bj9kKNF+Hw5tF5Om8Y
xg3ulQj4/4rz2jPS5X10cPsJOShNZeBCV5mGvBKPmxLzRfgq9Ttvgxou/vSpDU2e
8BzI5ITK95pvqRANiP2xFeQXpVePKFBTF4ozwuBvYfb3RbevAZWu9UZ+p72joiGP
AqPP0IiSdBUdM8RVr3umTcsmuIe+xzqzZXgEPpC322+Z+5H4gMNur1wfJKPpMvgR
WqeEtKpATiGKd7ltlmEwg81hFtL1pmAsO58m9G3DoW71Eg+c2tjpxitgW46x10LM
AlEGRA==
-----END CERTIFICATE-----
Generated at Wed May 29 06:12:07 2024 by rpki-client on console-ams.rpki-client.org