Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91316B0/2337F2325E3E11ECA1FFEB4CC4F9AE02/C783ECEC0C3311EFB37BD03FC4F9AE02.roa
File:                     C783ECEC0C3311EFB37BD03FC4F9AE02.roa (raw, json)
Hash identifier:          2VLLXTnr4zEsaXlmqi9WeuMPWIyaR5j7LPYpI5gTEuo=
Subject key identifier:   AE:EC:24:21:1C:2C:12:AE:94:EA:42:20:C3:4F:3F:8E:F6:8B:F7:28
Certificate issuer:       /CN=A91316B0/serialNumber=395AF5791376339AF9DEE56D6A1E13B47AB5C466
Certificate serial:       03
Authority key identifier: 39:5A:F5:79:13:76:33:9A:F9:DE:E5:6D:6A:1E:13:B4:7A:B5:C4:66
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OVr1eRN2M5r53uVtah4TtHq1xGY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91316B0/2337F2325E3E11ECA1FFEB4CC4F9AE02/C783ECEC0C3311EFB37BD03FC4F9AE02.roa
Signing time:             Tue 07 May 2024 05:36:40 +0000
ROA not before:           Tue 07 May 2024 05:36:40 +0000
ROA not after:            Sun 02 Mar 2025 00:00:00 +0000
asID:                     139461
IP address blocks:        103.178.30.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91316B0/2337F2325E3E11ECA1FFEB4CC4F9AE02/OVr1eRN2M5r53uVtah4TtHq1xGY.crl
                          rsync://rpki.apnic.net/member_repository/A91316B0/2337F2325E3E11ECA1FFEB4CC4F9AE02/OVr1eRN2M5r53uVtah4TtHq1xGY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OVr1eRN2M5r53uVtah4TtHq1xGY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Aug 2024 11:52:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91316B0/serialNumber=395AF5791376339AF9DEE56D6A1E13B47AB5C466
        Validity
            Not Before: May  7 05:36:40 2024 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=6639bde8-8832
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:4f:fa:a3:5d:51:e3:9f:f3:80:fe:1b:61:db:
                    ea:36:56:39:7b:12:94:25:a4:9d:4c:e2:f8:60:ad:
                    1d:3e:bf:4f:be:0e:f5:33:b5:d5:3c:e0:7b:f5:a3:
                    07:e1:cc:41:0b:6c:77:a7:f2:a7:04:90:7a:20:a3:
                    2d:3c:f0:43:d0:ef:e6:18:f7:47:cb:e9:02:9b:2c:
                    1b:e8:e1:11:d6:ea:44:0a:07:6f:dd:10:13:b9:1c:
                    f0:15:51:79:c5:79:86:0e:5a:6c:d8:2a:70:f4:3a:
                    bf:88:66:8c:70:3d:13:9b:71:2b:ab:8f:70:18:f1:
                    12:dc:ad:19:d0:1b:df:07:32:d9:65:e2:8c:bc:16:
                    35:0f:5b:e6:5d:78:84:99:8c:a0:51:68:23:98:af:
                    d0:e0:4e:0f:d8:8b:48:fb:55:2b:39:a0:6b:8e:06:
                    7d:b4:23:93:77:50:12:e2:99:ca:d2:99:98:93:ed:
                    f3:dc:f8:9f:b8:35:cd:44:ca:74:dd:c4:18:2c:73:
                    ac:74:7c:0c:59:1b:60:d1:c1:ae:46:68:64:88:bf:
                    54:e8:01:26:8a:7a:36:1c:e6:82:16:1b:6e:6c:12:
                    3a:f7:db:8f:09:62:d6:49:4b:83:b5:57:6f:5d:57:
                    06:0d:9d:9f:a7:08:97:7d:52:c7:95:f5:ca:f2:e8:
                    60:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:EC:24:21:1C:2C:12:AE:94:EA:42:20:C3:4F:3F:8E:F6:8B:F7:28
            X509v3 Authority Key Identifier:
                keyid:39:5A:F5:79:13:76:33:9A:F9:DE:E5:6D:6A:1E:13:B4:7A:B5:C4:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91316B0/2337F2325E3E11ECA1FFEB4CC4F9AE02/OVr1eRN2M5r53uVtah4TtHq1xGY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OVr1eRN2M5r53uVtah4TtHq1xGY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91316B0/2337F2325E3E11ECA1FFEB4CC4F9AE02/C783ECEC0C3311EFB37BD03FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.178.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:e2:b1:c6:4e:b5:ba:84:f8:e8:0e:b9:56:1c:25:6c:1b:88:
         05:58:27:0e:11:45:38:8a:66:f8:82:01:b6:50:94:62:9d:b1:
         d1:6a:82:df:9b:6c:80:34:6d:32:f1:ca:1d:27:d3:c5:9f:5c:
         d1:e1:b1:43:ff:76:21:dd:72:90:8e:ed:b6:a1:2b:28:b3:18:
         53:be:33:61:54:ea:4d:41:49:6d:af:65:99:c2:97:fb:49:dd:
         87:e2:06:da:1f:14:72:99:0c:1c:cb:b5:17:86:02:83:6d:6e:
         7e:ac:1a:a9:76:cf:81:80:7f:ae:80:f4:88:0a:9d:7e:73:65:
         29:7a:db:d7:3c:34:04:52:6c:63:37:a2:7a:8a:55:78:28:8a:
         4b:64:e8:4a:48:15:9f:27:e1:57:93:08:59:8f:c5:dc:cf:04:
         e5:10:32:d3:e0:48:4f:55:a8:e0:2a:d4:3b:cf:87:58:dc:1e:
         93:b3:46:ea:40:51:6a:3d:7c:27:87:ca:38:c7:19:3c:a4:06:
         4c:63:1a:9c:92:f4:97:66:13:33:0e:aa:83:54:bf:3f:dd:ce:
         ea:18:88:ab:4b:57:0d:6a:a5:9b:c3:76:1e:7e:0b:9c:6c:5c:
         df:ad:ea:ba:b6:1d:97:f5:90:3e:03:ef:e1:01:24:5c:fe:53:
         f6:9b:e0:58
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBAzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz
MTZCMDExMC8GA1UEBRMoMzk1QUY1NzkxMzc2MzM5QUY5REVFNTZENkExRTEzQjQ3
QUI1QzQ2NjAeFw0yNDA1MDcwNTM2NDBaFw0yNTAzMDIwMDAwMDBaMBgxFjAUBgNV
BAMTDTY2MzliZGU4LTg4MzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCRT/qjXVHjn/OA/hth2+o2Vjl7EpQlpJ1M4vhgrR0+v0++DvUztdU84Hv1owfh
zEELbHen8qcEkHogoy088EPQ7+YY90fL6QKbLBvo4RHW6kQKB2/dEBO5HPAVUXnF
eYYOWmzYKnD0Or+IZoxwPRObcSurj3AY8RLcrRnQG98HMtll4oy8FjUPW+ZdeISZ
jKBRaCOYr9DgTg/Yi0j7VSs5oGuOBn20I5N3UBLimcrSmZiT7fPc+J+4Nc1EynTd
xBgsc6x0fAxZG2DRwa5GaGSIv1ToASaKejYc5oIWG25sEjr3248JYtZJS4O1V29d
VwYNnZ+nCJd9UseV9cry6GBBAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUruwkIRws
Eq6U6kIgw08/jvaL9ygwHwYDVR0jBBgwFoAUOVr1eRN2M5r53uVtah4TtHq1xGYw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMxNkIwLzIzMzdGMjMyNUUz
RTExRUNBMUZGRUI0Q0M0RjlBRTAyL09WcjFlUk4yTTVyNTN1VnRhaDRUdEhxMXhH
WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvT1ZyMWVSTjJNNXI1M3VWdGFoNFR0SHExeEdZLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
MTZCMC8yMzM3RjIzMjVFM0UxMUVDQTFGRkVCNENDNEY5QUUwMi9DNzgzRUNFQzBD
MzMxMUVGQjM3QkQwM0ZDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAGeyHjANBgkqhkiG9w0BAQsFAAOCAQEAAOKxxk61uoT46A65
VhwlbBuIBVgnDhFFOIpm+IIBtlCUYp2x0WqC35tsgDRtMvHKHSfTxZ9c0eGxQ/92
Id1ykI7ttqErKLMYU74zYVTqTUFJba9lmcKX+0ndh+IG2h8UcpkMHMu1F4YCg21u
fqwaqXbPgYB/roD0iAqdfnNlKXrb1zw0BFJsYzeieopVeCiKS2ToSkgVnyfhV5MI
WY/F3M8E5RAy0+BIT1Wo4CrUO8+HWNwek7NG6kBRaj18J4fKOMcZPKQGTGManJL0
l2YTMw6qg1S/P93O6hiIq0tXDWqlm8N2Hn4LnGxc363qurYdl/WQPgPv4QEkXP5T
9pvgWA==
-----END CERTIFICATE-----
Generated at Sun Aug 18 14:30:57 2024 by rpki-client on console-ams.rpki-client.org