Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916A0AA/6A4FFC7A0F1011EAA969FE43C4F9AE02/5AD6AAFE0F1111EA932F3E45C4F9AE02.roa
File:                     5AD6AAFE0F1111EA932F3E45C4F9AE02.roa (raw, json)
Hash identifier:          +nBaQ+ic2ZSPFayaPDgoHYdKuoR8Op4WTYi22UZYGXM=
Subject key identifier:   39:CA:8B:23:5E:0E:9C:12:4F:46:44:C1:47:66:FB:66:37:3B:82:DA
Certificate issuer:       /CN=A916A0AA/serialNumber=BB741056B71C755D03FB9CF214A4124CA4F3760C
Certificate serial:       0AFC
Authority key identifier: BB:74:10:56:B7:1C:75:5D:03:FB:9C:F2:14:A4:12:4C:A4:F3:76:0C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u3QQVrccdV0D-5zyFKQSTKTzdgw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916A0AA/6A4FFC7A0F1011EAA969FE43C4F9AE02/5AD6AAFE0F1111EA932F3E45C4F9AE02.roa
Signing time:             Thu 30 Nov 2023 20:07:31 +0000
ROA not before:           Thu 30 Nov 2023 20:07:31 +0000
ROA not after:            Fri 31 Jan 2025 00:00:00 +0000
asID:                     139777
IP address blocks:        103.145.24.0/24 maxlen: 24
                          103.145.25.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916A0AA/6A4FFC7A0F1011EAA969FE43C4F9AE02/u3QQVrccdV0D-5zyFKQSTKTzdgw.crl
                          rsync://rpki.apnic.net/member_repository/A916A0AA/6A4FFC7A0F1011EAA969FE43C4F9AE02/u3QQVrccdV0D-5zyFKQSTKTzdgw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u3QQVrccdV0D-5zyFKQSTKTzdgw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 May 2024 19:43:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2812 (0xafc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916A0AA/serialNumber=BB741056B71C755D03FB9CF214A4124CA4F3760C
        Validity
            Not Before: Nov 30 20:07:31 2023 GMT
            Not After : Jan 31 00:00:00 2025 GMT
        Subject: CN=6568eb83-1171
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:78:10:07:30:ed:22:8d:eb:42:cd:d8:cb:b6:
                    df:ce:51:20:46:72:0a:86:75:22:e2:4d:6d:26:74:
                    ae:ab:27:88:2d:11:74:4d:58:f3:84:6f:75:cc:73:
                    fc:33:5e:ed:b1:3a:a6:7c:ca:c5:47:b9:0b:cc:e6:
                    11:5e:a5:06:54:99:45:30:5a:16:0b:13:3c:6c:7e:
                    17:ac:d9:99:0e:a3:58:8e:e2:e0:05:36:a5:2d:9d:
                    af:10:fe:9a:2c:b5:c3:73:05:44:e7:82:dc:85:c5:
                    3c:8e:7b:57:92:db:e9:d0:5d:3a:25:16:d3:62:50:
                    7b:0b:65:a6:6d:86:17:2a:b9:45:7f:7a:ae:23:28:
                    82:50:15:6f:87:ac:97:33:48:d1:b1:b2:53:04:08:
                    63:69:e1:77:5f:b0:fc:c1:62:62:5e:06:c1:9f:c3:
                    c7:da:8f:ca:d5:a9:24:6b:bc:31:a6:7b:35:62:45:
                    0f:91:08:3c:7d:69:cb:ea:ce:0d:85:6e:c3:9c:15:
                    0f:a2:9c:5c:4e:b3:1e:51:ec:eb:80:ef:12:7e:99:
                    96:42:ad:be:2f:0a:4e:57:a2:18:8f:fd:94:ad:e9:
                    08:f5:63:1b:e6:a3:9c:de:b8:36:95:1f:6c:15:4b:
                    b7:29:aa:9e:4c:19:89:8e:7a:a1:8b:e9:b2:b2:06:
                    72:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:CA:8B:23:5E:0E:9C:12:4F:46:44:C1:47:66:FB:66:37:3B:82:DA
            X509v3 Authority Key Identifier:
                keyid:BB:74:10:56:B7:1C:75:5D:03:FB:9C:F2:14:A4:12:4C:A4:F3:76:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916A0AA/6A4FFC7A0F1011EAA969FE43C4F9AE02/u3QQVrccdV0D-5zyFKQSTKTzdgw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u3QQVrccdV0D-5zyFKQSTKTzdgw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A0AA/6A4FFC7A0F1011EAA969FE43C4F9AE02/5AD6AAFE0F1111EA932F3E45C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.145.24.0/23

    Signature Algorithm: sha256WithRSAEncryption
         90:bb:1f:17:1f:ff:3a:f9:2b:23:62:c5:b2:d5:d3:fc:15:9d:
         2d:0a:06:8a:88:eb:62:ef:44:ef:00:08:11:14:4f:04:dc:fb:
         28:fe:47:9f:7b:d7:6a:17:9a:8c:d7:b9:96:39:d0:83:9f:e9:
         c8:13:dd:03:c5:47:2d:7e:ac:c5:83:dc:32:5f:06:65:28:18:
         18:2d:bb:da:25:11:52:89:78:b9:a0:3f:ed:e3:bb:ab:cb:27:
         82:4c:c5:ad:4f:3f:fd:2a:02:96:d0:24:39:7a:f0:c0:bc:0e:
         6b:1a:aa:e1:b1:54:6f:2f:fd:f1:1a:92:8a:ee:36:90:0a:de:
         4d:a2:cf:70:27:d0:8c:74:0b:43:18:0a:4b:ba:7c:ae:d7:b3:
         54:05:14:03:60:71:8f:c0:c8:2d:e8:2e:ed:53:cd:75:8c:fc:
         d8:b9:37:8e:ab:5f:2c:c9:c2:8c:31:bd:41:da:8c:8f:f9:f1:
         fb:9c:8c:ec:c9:23:5e:3b:1e:ed:6d:f2:6c:9f:ed:2b:9d:02:
         fe:da:41:72:3e:80:7d:40:0b:26:41:86:aa:8d:e6:f1:d7:29:
         96:0c:1f:fa:91:38:02:05:f9:c2:9c:4c:4e:f8:21:7d:53:cf:
         49:62:3c:68:04:15:a6:c5:4f:c5:37:f0:f7:4e:de:8b:7f:8e:
         91:f9:d0:ab
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICCvwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkEwQUExMTAvBgNVBAUTKEJCNzQxMDU2QjcxQzc1NUQwM0ZCOUNGMjE0QTQxMjRD
QTRGMzc2MEMwHhcNMjMxMTMwMjAwNzMxWhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NTY4ZWI4My0xMTcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAp3gQBzDtIo3rQs3Yy7bfzlEgRnIKhnUi4k1tJnSuqyeILRF0TVjzhG91zHP8
M17tsTqmfMrFR7kLzOYRXqUGVJlFMFoWCxM8bH4XrNmZDqNYjuLgBTalLZ2vEP6a
LLXDcwVE54LchcU8jntXktvp0F06JRbTYlB7C2WmbYYXKrlFf3quIyiCUBVvh6yX
M0jRsbJTBAhjaeF3X7D8wWJiXgbBn8PH2o/K1akka7wxpns1YkUPkQg8fWnL6s4N
hW7DnBUPopxcTrMeUezrgO8SfpmWQq2+LwpOV6IYj/2UrekI9WMb5qOc3rg2lR9s
FUu3KaqeTBmJjnqhi+mysgZyWwIDAQABo4IClTCCApEwHQYDVR0OBBYEFDnKiyNe
DpwST0ZEwUdm+2Y3O4LaMB8GA1UdIwQYMBaAFLt0EFa3HHVdA/uc8hSkEkyk83YM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTBBQS82QTRGRkM3QTBG
MTAxMUVBQTk2OUZFNDNDNEY5QUUwMi91M1FRVnJjY2RWMEQtNXp5RktRU1RLVHpk
Z3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3UzUVFWcmNjZFYwRC01enlGS1FTVEtUemRndy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NkEwQUEvNkE0RkZDN0EwRjEwMTFFQUE5NjlGRTQzQzRGOUFFMDIvNUFENkFBRkUw
RjExMTFFQTkzMkYzRTQ1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnkRgwDQYJKoZIhvcNAQELBQADggEBAJC7Hxcf/zr5KyNi
xbLV0/wVnS0KBoqI62LvRO8ACBEUTwTc+yj+R59712oXmozXuZY50IOf6cgT3QPF
Ry1+rMWD3DJfBmUoGBgtu9olEVKJeLmgP+3ju6vLJ4JMxa1PP/0qApbQJDl68MC8
DmsaquGxVG8v/fEakoruNpAK3k2iz3An0Ix0C0MYCku6fK7Xs1QFFANgcY/AyC3o
Lu1TzXWM/Ni5N46rXyzJwowxvUHajI/58fucjOzJI147Hu1t8myf7SudAv7aQXI+
gH1ACyZBhqqN5vHXKZYMH/qROAIF+cKcTE74IX1Tz0liPGgEFabFT8U38PdO3ot/
jpH50Ks=
-----END CERTIFICATE-----
Generated at Mon May 20 21:17:37 2024 by rpki-client on console-ams.rpki-client.org