Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91670F6/185DAFD61CEF11EC9EDD8011C4F9AE02/29935FC21CF311ECA077821AC4F9AE02.roa
File:                     29935FC21CF311ECA077821AC4F9AE02.roa (raw, json)
Hash identifier:          3sAmqjqcJRudXUBAAwQGsfamFM9nnftJhBisGsK6jW0=
Subject key identifier:   B4:03:53:61:CC:9F:7F:77:CD:9C:81:72:AB:39:E4:4D:B9:45:74:B1
Certificate issuer:       /CN=A91670F6/serialNumber=132CCAEAC104E2A3445B633761054DC8D7107A13
Certificate serial:       03AD
Authority key identifier: 13:2C:CA:EA:C1:04:E2:A3:44:5B:63:37:61:05:4D:C8:D7:10:7A:13
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EyzK6sEE4qNEW2M3YQVNyNcQehM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91670F6/185DAFD61CEF11EC9EDD8011C4F9AE02/29935FC21CF311ECA077821AC4F9AE02.roa
Signing time:             Tue 17 Oct 2023 01:33:26 +0000
ROA not before:           Tue 17 Oct 2023 01:33:26 +0000
ROA not after:            Mon 30 Dec 2024 00:00:00 +0000
asID:                     147053
IP address blocks:        103.173.172.0/23 maxlen: 24
                          2001:df7:a180::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91670F6/185DAFD61CEF11EC9EDD8011C4F9AE02/EyzK6sEE4qNEW2M3YQVNyNcQehM.crl
                          rsync://rpki.apnic.net/member_repository/A91670F6/185DAFD61CEF11EC9EDD8011C4F9AE02/EyzK6sEE4qNEW2M3YQVNyNcQehM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EyzK6sEE4qNEW2M3YQVNyNcQehM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 May 2024 01:19:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 941 (0x3ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91670F6/serialNumber=132CCAEAC104E2A3445B633761054DC8D7107A13
        Validity
            Not Before: Oct 17 01:33:26 2023 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=652de466-795a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:82:73:3f:1d:00:40:73:02:d7:d6:0b:8d:8d:
                    57:bf:15:ca:1a:75:81:fe:84:fc:45:d7:45:5b:d8:
                    b9:8b:e9:83:65:98:fe:d8:da:3f:d2:f5:3c:03:c9:
                    e1:e1:06:16:51:05:0c:8d:9b:e2:5c:14:bb:68:67:
                    00:c9:c5:5d:dc:0c:d5:30:a5:c9:68:84:6c:cd:76:
                    7a:98:80:1d:59:ae:49:41:33:85:dd:f5:e6:ae:fb:
                    dc:11:a7:38:5d:6f:8b:04:48:f3:2b:c2:48:c4:e9:
                    f5:8e:dc:18:b6:d6:39:44:4f:24:07:17:59:7f:fe:
                    61:85:14:67:e7:96:35:d0:42:a9:c2:a6:7a:f8:9b:
                    4c:bf:bb:d2:43:77:69:a2:9d:a7:82:39:3f:f8:fc:
                    36:ab:59:d8:0f:c0:65:3d:3b:19:00:38:73:53:2c:
                    80:37:bc:96:d6:dc:8d:4a:32:21:71:53:9d:7d:d5:
                    73:d6:34:ec:ea:74:39:06:10:0a:fb:96:9c:d4:76:
                    dd:9f:ef:52:6b:52:17:2c:72:95:c8:88:63:30:ef:
                    f6:87:95:ab:d1:5f:86:c1:16:8f:6b:d4:e5:27:d1:
                    df:7d:9b:da:15:9d:2e:f1:08:a4:bd:60:2b:ed:d4:
                    16:7e:ac:bf:97:d7:e1:c1:9e:28:11:7c:29:c5:bb:
                    3c:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:03:53:61:CC:9F:7F:77:CD:9C:81:72:AB:39:E4:4D:B9:45:74:B1
            X509v3 Authority Key Identifier:
                keyid:13:2C:CA:EA:C1:04:E2:A3:44:5B:63:37:61:05:4D:C8:D7:10:7A:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91670F6/185DAFD61CEF11EC9EDD8011C4F9AE02/EyzK6sEE4qNEW2M3YQVNyNcQehM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EyzK6sEE4qNEW2M3YQVNyNcQehM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91670F6/185DAFD61CEF11EC9EDD8011C4F9AE02/29935FC21CF311ECA077821AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.173.172.0/23
                IPv6:
                  2001:df7:a180::/48

    Signature Algorithm: sha256WithRSAEncryption
         4b:21:7a:58:b4:f7:0b:7e:fa:00:2d:6f:31:51:fc:8a:02:b1:
         09:5e:99:81:89:f1:49:78:d1:eb:78:e1:68:a0:52:53:bb:80:
         00:89:97:a4:83:d5:b3:ef:89:17:14:a7:65:5e:50:33:9e:e9:
         4e:0d:0a:82:b5:c9:bf:ae:ba:ed:42:60:b0:b1:f3:13:f9:ca:
         33:93:e2:26:bb:f1:14:96:a0:ef:b4:d2:7e:3f:3c:f4:3c:99:
         7e:8f:e0:7f:be:ad:ba:d8:0e:08:0e:3b:15:3d:de:77:03:96:
         b0:99:70:b7:a5:00:e7:9b:26:f7:0a:08:9b:2f:63:f5:ca:bc:
         ce:4f:51:7c:1d:7f:3a:21:29:fb:fb:1c:5d:41:fd:bb:7c:cc:
         c7:7e:66:a9:2e:57:32:94:62:a0:68:63:95:2d:c2:92:91:ff:
         97:94:31:72:6e:a0:54:6a:31:cb:80:a4:82:0e:13:a0:e5:a6:
         6a:5e:92:93:3b:bf:70:25:26:cf:ca:63:22:0d:61:48:cb:2c:
         72:26:bd:4b:6f:58:5e:ac:96:23:14:9a:20:dd:17:0f:4d:0d:
         10:84:00:fe:3e:0f:68:cd:80:a0:55:9e:70:31:96:a1:17:16:
         78:7a:04:58:e4:dc:a9:98:5f:94:93:0a:93:b0:1d:06:d1:32:
         e4:cc:7a:35
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgICA60wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjcwRjYxMTAvBgNVBAUTKDEzMkNDQUVBQzEwNEUyQTM0NDVCNjMzNzYxMDU0REM4
RDcxMDdBMTMwHhcNMjMxMDE3MDEzMzI2WhcNMjQxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NTJkZTQ2Ni03OTVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA54JzPx0AQHMC19YLjY1XvxXKGnWB/oT8RddFW9i5i+mDZZj+2No/0vU8A8nh
4QYWUQUMjZviXBS7aGcAycVd3AzVMKXJaIRszXZ6mIAdWa5JQTOF3fXmrvvcEac4
XW+LBEjzK8JIxOn1jtwYttY5RE8kBxdZf/5hhRRn55Y10EKpwqZ6+JtMv7vSQ3dp
op2ngjk/+Pw2q1nYD8BlPTsZADhzUyyAN7yW1tyNSjIhcVOdfdVz1jTs6nQ5BhAK
+5ac1Hbdn+9Sa1IXLHKVyIhjMO/2h5Wr0V+GwRaPa9TlJ9HffZvaFZ0u8QikvWAr
7dQWfqy/l9fhwZ4oEXwpxbs8wwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFLQDU2HM
n393zZyBcqs55E25RXSxMB8GA1UdIwQYMBaAFBMsyurBBOKjRFtjN2EFTcjXEHoT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NzBGNi8xODVEQUZENjFD
RUYxMUVDOUVERDgwMTFDNEY5QUUwMi9FeXpLNnNFRTRxTkVXMk0zWVFWTnlOY1Fl
aE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0V5eks2c0VFNHFORVcyTTNZUVZOeU5jUWVoTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NjcwRjYvMTg1REFGRDYxQ0VGMTFFQzlFREQ4MDExQzRGOUFFMDIvMjk5MzVGQzIx
Q0YzMTFFQ0EwNzc4MjFBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E
ITAfMAwEAgABMAYDBAFnrawwDwQCAAIwCQMHACABDfehgDANBgkqhkiG9w0BAQsF
AAOCAQEASyF6WLT3C376AC1vMVH8igKxCV6ZgYnxSXjR63jhaKBSU7uAAImXpIPV
s++JFxSnZV5QM57pTg0KgrXJv6667UJgsLHzE/nKM5PiJrvxFJag77TSfj889DyZ
fo/gf76tutgOCA47FT3edwOWsJlwt6UA55sm9woImy9j9cq8zk9RfB1/OiEp+/sc
XUH9u3zMx35mqS5XMpRioGhjlS3CkpH/l5Qxcm6gVGoxy4Ckgg4ToOWmal6Skzu/
cCUmz8pjIg1hSMsscia9S29YXqyWIxSaIN0XD00NEIQA/j4PaM2AoFWecDGWoRcW
eHoEWOTcqZhflJMKk7AdBtEy5Mx6NQ==
-----END CERTIFICATE-----
Generated at Sun May 19 02:59:08 2024 by rpki-client on console-ams.rpki-client.org