Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91367E0/E4189910459C11EEB69D6831C4F9AE02/57F3935045A011EEA9A5215EC4F9AE02.roa
File:                     57F3935045A011EEA9A5215EC4F9AE02.roa (raw, json)
Hash identifier:          uVCsPTEKvx7XpzG0ppDtvL1K8RxPyB9GI7QJ+Zk5c9Y=
Subject key identifier:   64:99:EE:4C:95:F4:80:EF:D7:81:70:B3:43:5B:B3:98:AA:6A:E6:7A
Certificate issuer:       /CN=A91367E0/serialNumber=E61BEC1392863283DC99E2FF931575A3181C2818
Certificate serial:       87
Authority key identifier: E6:1B:EC:13:92:86:32:83:DC:99:E2:FF:93:15:75:A3:18:1C:28:18
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5hvsE5KGMoPcmeL_kxV1oxgcKBg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91367E0/E4189910459C11EEB69D6831C4F9AE02/57F3935045A011EEA9A5215EC4F9AE02.roa
Signing time:             Fri 03 May 2024 07:19:58 +0000
ROA not before:           Fri 03 May 2024 07:19:58 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     138589
IP address blocks:        103.247.188.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91367E0/E4189910459C11EEB69D6831C4F9AE02/5hvsE5KGMoPcmeL_kxV1oxgcKBg.crl
                          rsync://rpki.apnic.net/member_repository/A91367E0/E4189910459C11EEB69D6831C4F9AE02/5hvsE5KGMoPcmeL_kxV1oxgcKBg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5hvsE5KGMoPcmeL_kxV1oxgcKBg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Jun 2024 06:54:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 135 (0x87)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91367E0/serialNumber=E61BEC1392863283DC99E2FF931575A3181C2818
        Validity
            Not Before: May  3 07:19:58 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=6634901e-2b9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:90:db:b4:1b:1e:bd:72:9d:40:96:59:62:18:
                    4c:bd:bf:7a:85:de:cf:e8:aa:a9:25:1e:91:97:2b:
                    5b:35:e0:f4:8c:bd:0f:c8:c4:c5:f9:8b:e0:0f:28:
                    78:3f:a1:37:b7:c6:50:9f:52:c8:ec:dd:5f:97:18:
                    38:77:5b:09:f8:9a:e1:5c:4b:2e:8d:d2:e1:30:fd:
                    6d:61:84:69:1f:03:3a:4c:70:14:3b:22:14:98:b4:
                    ee:42:2b:de:86:16:5e:58:3d:e7:80:c4:f7:f8:35:
                    df:02:18:8b:9c:e8:6d:bc:24:f5:0a:55:8a:7c:b2:
                    3c:0c:49:df:ef:a8:83:fb:d0:fe:6f:04:78:02:90:
                    fd:01:4e:7d:47:95:0a:6e:82:d1:e2:36:8f:04:a7:
                    be:49:68:f7:c4:d8:32:8e:e2:85:64:f0:e9:b1:ce:
                    dc:2f:96:94:78:58:4c:e6:21:c4:57:75:6a:cf:a2:
                    75:27:ef:73:fc:e5:a3:ff:5d:d4:81:d3:79:e5:0f:
                    8f:a6:ea:d0:25:98:bf:d5:74:0f:41:7f:db:ff:dd:
                    e1:72:80:98:61:47:a7:6f:f6:00:cc:7c:cb:d6:35:
                    77:1e:13:cc:78:a7:1a:df:71:64:58:36:88:02:14:
                    25:89:9a:ab:e3:0b:29:bd:57:a6:a8:af:52:f2:ac:
                    dc:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:99:EE:4C:95:F4:80:EF:D7:81:70:B3:43:5B:B3:98:AA:6A:E6:7A
            X509v3 Authority Key Identifier:
                keyid:E6:1B:EC:13:92:86:32:83:DC:99:E2:FF:93:15:75:A3:18:1C:28:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91367E0/E4189910459C11EEB69D6831C4F9AE02/5hvsE5KGMoPcmeL_kxV1oxgcKBg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5hvsE5KGMoPcmeL_kxV1oxgcKBg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91367E0/E4189910459C11EEB69D6831C4F9AE02/57F3935045A011EEA9A5215EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.247.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:5c:9e:21:7f:20:59:f7:67:7d:db:b5:5b:eb:c4:6e:86:57:
         c8:0b:92:02:b1:0a:30:31:68:bb:7e:66:54:da:7d:c6:a2:7d:
         30:70:7a:c7:b9:cb:e7:fd:7b:10:60:8d:ba:b3:6f:0f:aa:a7:
         90:44:4c:6a:71:30:42:b2:fd:f3:40:e5:7a:76:ee:34:02:6a:
         05:32:5e:89:a5:6f:4f:c2:98:21:a7:68:bc:9d:ff:09:c9:98:
         e3:5b:b3:88:e4:c7:3c:4e:9a:9d:e8:b6:2f:fc:57:ab:aa:71:
         1a:ab:d2:d2:d0:b0:e8:11:74:32:0f:5a:9c:69:4f:7d:90:ab:
         01:a2:b1:67:1a:a2:6e:0c:ac:df:38:a2:a2:6f:e2:a9:c9:06:
         58:4e:bc:33:2a:83:1d:b9:a3:98:05:55:52:83:92:32:9f:c8:
         28:48:e5:26:48:c2:3d:fb:1e:a9:ce:c3:64:e5:e7:78:dd:fa:
         bf:da:e5:be:79:07:5f:00:02:99:71:af:14:99:51:14:f4:f6:
         5f:e3:02:b9:c5:6b:39:98:35:b4:e5:c3:62:8b:f3:7f:b2:19:
         67:4f:bd:fd:5b:1f:d3:f4:f2:22:e0:00:b4:14:c5:10:f4:a7:
         a6:cd:bf:8c:56:05:0e:9c:74:c7:29:28:4d:22:e4:3b:65:05:
         47:8b:3c:8d
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAIcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzY3RTAxMTAvBgNVBAUTKEU2MUJFQzEzOTI4NjMyODNEQzk5RTJGRjkzMTU3NUEz
MTgxQzI4MTgwHhcNMjQwNTAzMDcxOTU4WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NjM0OTAxZS0yYjljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1pDbtBsevXKdQJZZYhhMvb96hd7P6KqpJR6RlytbNeD0jL0PyMTF+YvgDyh4
P6E3t8ZQn1LI7N1flxg4d1sJ+JrhXEsujdLhMP1tYYRpHwM6THAUOyIUmLTuQive
hhZeWD3ngMT3+DXfAhiLnOhtvCT1ClWKfLI8DEnf76iD+9D+bwR4ApD9AU59R5UK
boLR4jaPBKe+SWj3xNgyjuKFZPDpsc7cL5aUeFhM5iHEV3Vqz6J1J+9z/OWj/13U
gdN55Q+PpurQJZi/1XQPQX/b/93hcoCYYUenb/YAzHzL1jV3HhPMeKca33FkWDaI
AhQliZqr4wspvVemqK9S8qzcRwIDAQABo4IClTCCApEwHQYDVR0OBBYEFGSZ7kyV
9IDv14Fws0Nbs5iqauZ6MB8GA1UdIwQYMBaAFOYb7BOShjKD3Jni/5MVdaMYHCgY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNjdFMC9FNDE4OTkxMDQ1
OUMxMUVFQjY5RDY4MzFDNEY5QUUwMi81aHZzRTVLR01vUGNtZUxfa3hWMW94Z2NL
QmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzVodnNFNUtHTW9QY21lTF9reFYxb3hnY0tCZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzY3RTAvRTQxODk5MTA0NTlDMTFFRUI2OUQ2ODMxQzRGOUFFMDIvNTdGMzkzNTA0
NUEwMTFFRUE5QTUyMTVFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABn97wwDQYJKoZIhvcNAQELBQADggEBAC9cniF/IFn3Z33b
tVvrxG6GV8gLkgKxCjAxaLt+ZlTafcaifTBwese5y+f9exBgjbqzbw+qp5BETGpx
MEKy/fNA5Xp27jQCagUyXomlb0/CmCGnaLyd/wnJmONbs4jkxzxOmp3oti/8V6uq
cRqr0tLQsOgRdDIPWpxpT32QqwGisWcaom4MrN84oqJv4qnJBlhOvDMqgx25o5gF
VVKDkjKfyChI5SZIwj37HqnOw2Tl53jd+r/a5b55B18AAplxrxSZURT09l/jArnF
azmYNbTlw2KL83+yGWdPvf1bH9P08iLgALQUxRD0p6bNv4xWBQ6cdMcpKE0i5Dtl
BUeLPI0=
-----END CERTIFICATE-----
Generated at Wed May 29 09:16:17 2024 by rpki-client on console-fra.rpki-client.org