Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91529FC/D69F74B877E811EBB7F99A40C4F9AE02/B440BFA6324C11ED94FD883AC4F9AE02.roa
File:                     B440BFA6324C11ED94FD883AC4F9AE02.roa (raw, json)
Hash identifier:          pBWw3Du0ZJ9qas8p9obSktMbafnwOPhfMhoC6nP8+jo=
Subject key identifier:   72:88:19:5C:65:1F:ED:D2:E2:26:79:37:59:D3:A8:10:8E:9C:B2:2D
Certificate issuer:       /CN=A91529FC/serialNumber=E458EA304009873C8884AF89AA931D48BA859CD0
Certificate serial:       05BF
Authority key identifier: E4:58:EA:30:40:09:87:3C:88:84:AF:89:AA:93:1D:48:BA:85:9C:D0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5FjqMEAJhzyIhK-JqpMdSLqFnNA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91529FC/D69F74B877E811EBB7F99A40C4F9AE02/B440BFA6324C11ED94FD883AC4F9AE02.roa
Signing time:             Tue 09 Apr 2024 00:32:57 +0000
ROA not before:           Tue 09 Apr 2024 00:32:57 +0000
ROA not after:            Wed 28 May 2025 00:00:00 +0000
asID:                     139038
IP address blocks:        103.162.142.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91529FC/D69F74B877E811EBB7F99A40C4F9AE02/5FjqMEAJhzyIhK-JqpMdSLqFnNA.crl
                          rsync://rpki.apnic.net/member_repository/A91529FC/D69F74B877E811EBB7F99A40C4F9AE02/5FjqMEAJhzyIhK-JqpMdSLqFnNA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5FjqMEAJhzyIhK-JqpMdSLqFnNA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 20:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1471 (0x5bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91529FC/serialNumber=E458EA304009873C8884AF89AA931D48BA859CD0
        Validity
            Not Before: Apr  9 00:32:57 2024 GMT
            Not After : May 28 00:00:00 2025 GMT
        Subject: CN=66148cb8-7e61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:6c:28:ee:af:8c:4f:05:65:70:ec:6b:c1:78:
                    80:54:15:27:66:0c:44:f3:d1:34:13:cf:ba:02:a6:
                    51:47:84:ba:16:86:02:7f:2d:12:de:3f:30:7c:98:
                    4e:06:fc:30:02:9c:94:ec:9e:2e:35:2d:48:f8:a1:
                    b5:b9:1e:a4:50:59:b2:55:51:f2:10:36:54:93:7d:
                    9c:0b:00:31:36:87:73:77:31:4e:9c:7c:5b:4d:63:
                    8c:1c:c7:0d:e4:84:b2:d7:76:e5:91:80:92:24:61:
                    e5:aa:25:a9:03:db:3c:93:2f:38:08:f5:d5:d2:69:
                    ac:e1:1f:71:19:dd:a9:65:bb:5e:fc:21:d7:9a:a7:
                    ed:ca:c4:58:63:2a:eb:b7:1e:c2:65:c5:59:64:41:
                    e2:74:fe:c9:79:27:74:0c:b1:7f:d2:60:46:39:b1:
                    23:05:ef:7d:e5:09:b5:5e:c3:c8:e2:2a:7e:47:a9:
                    13:b0:82:51:07:1f:59:fc:6a:cb:a3:a0:8e:9d:b6:
                    47:13:a3:e9:d6:d6:84:ad:88:c4:ca:8a:54:0e:7b:
                    51:8c:d2:f9:3d:98:26:48:aa:ca:0c:0c:5a:38:5d:
                    2a:fc:3a:60:24:69:a6:1b:77:b0:cd:23:4f:bb:12:
                    44:49:10:da:5e:21:9c:bf:9d:18:07:0b:d4:86:ac:
                    81:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:88:19:5C:65:1F:ED:D2:E2:26:79:37:59:D3:A8:10:8E:9C:B2:2D
            X509v3 Authority Key Identifier:
                keyid:E4:58:EA:30:40:09:87:3C:88:84:AF:89:AA:93:1D:48:BA:85:9C:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91529FC/D69F74B877E811EBB7F99A40C4F9AE02/5FjqMEAJhzyIhK-JqpMdSLqFnNA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5FjqMEAJhzyIhK-JqpMdSLqFnNA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91529FC/D69F74B877E811EBB7F99A40C4F9AE02/B440BFA6324C11ED94FD883AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.162.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:14:c4:4c:39:7a:7c:db:0c:fc:78:02:35:f9:9f:d5:af:09:
         3f:d5:3b:1b:93:5a:e8:a9:9b:5a:6b:26:3c:68:30:bd:55:d7:
         16:0a:32:6b:4f:96:fe:23:81:a6:3f:27:a4:25:b9:c6:80:33:
         1a:2f:db:c3:c1:d3:d3:86:3c:30:1f:6f:09:87:81:7d:6d:06:
         92:49:b6:d9:bf:1a:32:e9:61:50:47:13:52:47:c3:3b:74:3e:
         f3:ca:5f:0b:e7:64:35:99:7b:76:8b:3b:e2:14:41:30:96:27:
         3e:d9:f9:b8:a0:fb:0a:db:d5:cd:90:d2:e0:62:a0:21:c0:74:
         d8:4d:f2:44:50:26:58:45:41:9c:bf:ce:9e:dd:54:e9:b9:77:
         c5:87:e5:b5:da:3d:f3:11:2f:59:54:f6:a0:33:81:00:c4:35:
         e7:51:e6:12:6d:96:c4:77:a3:1b:e6:d4:e0:d7:11:66:52:07:
         8f:4e:ea:8f:77:a7:05:93:38:7b:2b:c5:52:54:45:cc:74:94:
         a1:d3:cc:ad:87:82:55:f1:71:b7:74:96:4a:eb:9c:38:b7:20:
         c6:78:9e:49:ac:0e:d0:27:da:74:dd:bf:e0:f0:3d:36:9d:62:
         ee:7c:6f:fa:ee:73:0a:b7:90:06:f8:57:ef:ec:cd:fe:92:25:
         aa:c3:9e:61
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBb8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTI5RkMxMTAvBgNVBAUTKEU0NThFQTMwNDAwOTg3M0M4ODg0QUY4OUFBOTMxRDQ4
QkE4NTlDRDAwHhcNMjQwNDA5MDAzMjU3WhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02NjE0OGNiOC03ZTYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAo2wo7q+MTwVlcOxrwXiAVBUnZgxE89E0E8+6AqZRR4S6FoYCfy0S3j8wfJhO
BvwwApyU7J4uNS1I+KG1uR6kUFmyVVHyEDZUk32cCwAxNodzdzFOnHxbTWOMHMcN
5ISy13blkYCSJGHlqiWpA9s8ky84CPXV0mms4R9xGd2pZbte/CHXmqftysRYYyrr
tx7CZcVZZEHidP7JeSd0DLF/0mBGObEjBe995Qm1XsPI4ip+R6kTsIJRBx9Z/GrL
o6COnbZHE6Pp1taErYjEyopUDntRjNL5PZgmSKrKDAxaOF0q/DpgJGmmG3ewzSNP
uxJESRDaXiGcv50YBwvUhqyBmQIDAQABo4IClTCCApEwHQYDVR0OBBYEFHKIGVxl
H+3S4iZ5N1nTqBCOnLItMB8GA1UdIwQYMBaAFORY6jBACYc8iISviaqTHUi6hZzQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MjlGQy9ENjlGNzRCODc3
RTgxMUVCQjdGOTlBNDBDNEY5QUUwMi81RmpxTUVBSmh6eUloSy1KcXBNZFNMcUZu
TkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzVGanFNRUFKaHp5SWhLLUpxcE1kU0xxRm5OQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTI5RkMvRDY5Rjc0Qjg3N0U4MTFFQkI3Rjk5QTQwQzRGOUFFMDIvQjQ0MEJGQTYz
MjRDMTFFRDk0RkQ4ODNBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnoo4wDQYJKoZIhvcNAQELBQADggEBALEUxEw5enzbDPx4
AjX5n9WvCT/VOxuTWuipm1prJjxoML1V1xYKMmtPlv4jgaY/J6QlucaAMxov28PB
09OGPDAfbwmHgX1tBpJJttm/GjLpYVBHE1JHwzt0PvPKXwvnZDWZe3aLO+IUQTCW
Jz7Z+big+wrb1c2Q0uBioCHAdNhN8kRQJlhFQZy/zp7dVOm5d8WH5bXaPfMRL1lU
9qAzgQDENedR5hJtlsR3oxvm1ODXEWZSB49O6o93pwWTOHsrxVJURcx0lKHTzK2H
glXxcbd0lkrrnDi3IMZ4nkmsDtAn2nTdv+DwPTadYu58b/rucwq3kAb4V+/szf6S
JarDnmE=
-----END CERTIFICATE-----
Generated at Wed Nov 20 23:11:44 2024 by rpki-client on console-fra.rpki-client.org