Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91452AC/A48D5966BB3E11EAA29EE321C4F9AE02/A58B9338AD4A11EBA6B48687C4F9AE02.roa
File:                     A58B9338AD4A11EBA6B48687C4F9AE02.roa (raw, json)
Hash identifier:          ltlfrlUHISmA7QAU+zbb0n7XbL6k8oTar+kPBLTi47o=
Subject key identifier:   6C:33:B2:62:05:71:54:52:4A:A2:03:D2:29:4B:3D:C4:CB:92:5E:99
Certificate issuer:       /CN=A91452AC/serialNumber=36D77E9243ABBA2FD5496A291830B7D38B0BCBC4
Certificate serial:       079E
Authority key identifier: 36:D7:7E:92:43:AB:BA:2F:D5:49:6A:29:18:30:B7:D3:8B:0B:CB:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ntd-kkOrui_VSWopGDC304sLy8Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91452AC/A48D5966BB3E11EAA29EE321C4F9AE02/A58B9338AD4A11EBA6B48687C4F9AE02.roa
Signing time:             Thu 02 Nov 2023 22:09:30 +0000
ROA not before:           Thu 02 Nov 2023 22:09:30 +0000
ROA not after:            Fri 31 Jan 2025 00:00:00 +0000
asID:                     133744
IP address blocks:        103.43.162.0/24 maxlen: 24
                          202.43.239.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91452AC/A48D5966BB3E11EAA29EE321C4F9AE02/Ntd-kkOrui_VSWopGDC304sLy8Q.crl
                          rsync://rpki.apnic.net/member_repository/A91452AC/A48D5966BB3E11EAA29EE321C4F9AE02/Ntd-kkOrui_VSWopGDC304sLy8Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ntd-kkOrui_VSWopGDC304sLy8Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Jun 2024 21:17:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1950 (0x79e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91452AC/serialNumber=36D77E9243ABBA2FD5496A291830B7D38B0BCBC4
        Validity
            Not Before: Nov  2 22:09:30 2023 GMT
            Not After : Jan 31 00:00:00 2025 GMT
        Subject: CN=65441e1a-e495
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:af:dc:8a:a0:50:e8:56:3d:f0:73:73:3f:d2:
                    82:95:c5:bb:1a:c2:d4:96:2e:26:cb:03:c4:ba:25:
                    9d:8d:15:25:00:f1:cf:5e:35:13:57:b2:f4:ae:72:
                    2c:34:39:fb:fb:c2:d0:6a:e0:c5:ba:cf:24:c3:57:
                    88:e3:d4:ec:70:d0:fe:e8:54:7e:39:3d:45:44:dc:
                    78:de:47:73:e5:40:e7:ce:5c:64:97:74:44:a0:1d:
                    71:f7:45:7f:35:8a:ab:5f:0a:fa:0d:5e:ae:c8:a3:
                    56:c7:4d:c1:c9:d2:3e:c3:72:c2:f1:52:47:47:46:
                    2a:b1:00:f1:c9:6a:63:bf:04:13:e7:19:05:0b:bb:
                    bc:3c:ca:52:90:7e:58:8a:10:27:49:3c:c3:58:8e:
                    c4:36:15:ed:ab:de:bf:aa:18:9c:bc:1c:2e:26:36:
                    3e:15:77:9b:48:af:9a:1f:ff:04:cb:1a:7b:34:fc:
                    c1:26:78:1d:95:86:c7:c8:ad:27:03:cd:71:3f:ea:
                    9d:f6:51:18:db:61:27:ca:08:50:09:c8:7c:ed:d0:
                    9e:9c:2b:f7:67:3f:a3:6e:e4:24:d2:73:40:e6:4c:
                    53:a6:3d:e9:e3:dc:93:62:d8:c3:2e:fb:e5:b6:b9:
                    34:01:31:5f:09:5f:ee:e6:e8:57:81:78:60:b4:6d:
                    0a:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:33:B2:62:05:71:54:52:4A:A2:03:D2:29:4B:3D:C4:CB:92:5E:99
            X509v3 Authority Key Identifier:
                keyid:36:D7:7E:92:43:AB:BA:2F:D5:49:6A:29:18:30:B7:D3:8B:0B:CB:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91452AC/A48D5966BB3E11EAA29EE321C4F9AE02/Ntd-kkOrui_VSWopGDC304sLy8Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ntd-kkOrui_VSWopGDC304sLy8Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91452AC/A48D5966BB3E11EAA29EE321C4F9AE02/A58B9338AD4A11EBA6B48687C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.43.162.0/24
                  202.43.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:5b:a7:0f:a6:8b:95:9c:ca:95:ae:4e:b3:82:1a:f0:32:82:
         58:09:ef:3a:db:c9:f0:0e:00:6e:17:0e:9d:d8:26:91:66:20:
         7f:b8:99:53:7c:30:4d:cc:f3:14:44:cb:e7:57:e1:5f:89:be:
         f7:42:4e:69:4c:d2:4c:ca:7f:5b:fb:39:af:e6:56:3a:69:f9:
         f6:84:98:cd:e5:58:13:91:0f:94:a3:e3:99:f8:06:cf:d6:aa:
         7e:28:13:0a:c7:6c:bc:71:e1:fc:fd:52:dc:fd:d0:23:a9:fe:
         8b:a1:ad:07:e2:0a:56:da:06:11:96:7b:d3:2d:84:43:a7:77:
         5c:dc:62:81:75:36:44:03:d5:75:5e:14:37:d4:d0:67:c8:1f:
         49:85:9b:d5:4a:8e:66:d2:9a:38:c3:18:3a:d1:ad:5c:87:39:
         1b:3a:58:03:61:8d:1a:1a:f2:b9:e2:a0:1f:36:9a:84:07:ac:
         81:e7:5d:e6:32:7c:e4:9c:bd:65:2f:29:ca:01:31:0d:52:b0:
         92:3b:1d:e0:29:c5:f4:c3:c8:50:eb:4d:76:5b:49:30:34:e1:
         bb:78:92:35:70:67:6d:b6:99:a4:05:d7:34:a5:67:3d:06:2f:
         92:cd:05:ce:e3:96:7c:49:a0:10:10:1c:79:5b:e9:f2:f1:e0:
         44:08:45:9d
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICB54wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDUyQUMxMTAvBgNVBAUTKDM2RDc3RTkyNDNBQkJBMkZENTQ5NkEyOTE4MzBCN0Qz
OEIwQkNCQzQwHhcNMjMxMTAyMjIwOTMwWhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NTQ0MWUxYS1lNDk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnq/ciqBQ6FY98HNzP9KClcW7GsLUli4mywPEuiWdjRUlAPHPXjUTV7L0rnIs
NDn7+8LQauDFus8kw1eI49TscND+6FR+OT1FRNx43kdz5UDnzlxkl3REoB1x90V/
NYqrXwr6DV6uyKNWx03BydI+w3LC8VJHR0YqsQDxyWpjvwQT5xkFC7u8PMpSkH5Y
ihAnSTzDWI7ENhXtq96/qhicvBwuJjY+FXebSK+aH/8Eyxp7NPzBJngdlYbHyK0n
A81xP+qd9lEY22EnyghQCch87dCenCv3Zz+jbuQk0nNA5kxTpj3p49yTYtjDLvvl
trk0ATFfCV/u5uhXgXhgtG0K9QIDAQABo4ICmzCCApcwHQYDVR0OBBYEFGwzsmIF
cVRSSqID0ilLPcTLkl6ZMB8GA1UdIwQYMBaAFDbXfpJDq7ov1UlqKRgwt9OLC8vE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTJBQy9BNDhENTk2NkJC
M0UxMUVBQTI5RUUzMjFDNEY5QUUwMi9OdGQta2tPcnVpX1ZTV29wR0RDMzA0c0x5
OFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL050ZC1ra09ydWlfVlNXb3BHREMzMDRzTHk4US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDUyQUMvQTQ4RDU5NjZCQjNFMTFFQUEyOUVFMzIxQzRGOUFFMDIvQTU4QjkzMzhB
RDRBMTFFQkE2QjQ4Njg3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBABnK6IDBADKK+8wDQYJKoZIhvcNAQELBQADggEBAE1bpw+m
i5WcypWuTrOCGvAyglgJ7zrbyfAOAG4XDp3YJpFmIH+4mVN8ME3M8xREy+dX4V+J
vvdCTmlM0kzKf1v7Oa/mVjpp+faEmM3lWBORD5Sj45n4Bs/Wqn4oEwrHbLxx4fz9
Utz90COp/ouhrQfiClbaBhGWe9MthEOnd1zcYoF1NkQD1XVeFDfU0GfIH0mFm9VK
jmbSmjjDGDrRrVyHORs6WANhjRoa8rnioB82moQHrIHnXeYyfOScvWUvKcoBMQ1S
sJI7HeApxfTDyFDrTXZbSTA04bt4kjVwZ222maQF1zSlZz0GL5LNBc7jlnxJoBAQ
HHlb6fLx4EQIRZ0=
-----END CERTIFICATE-----
Generated at Sun May 26 23:05:27 2024 by rpki-client on console-ams.rpki-client.org