Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/E2EB4C72D85A11EDA96B1D11C4F9AE02.roa
File:                     E2EB4C72D85A11EDA96B1D11C4F9AE02.roa (raw, json)
Hash identifier:          2oKhfzZJX1bMpFhHSdvZyq1vJEYqTdqIY/bPIqbUw8s=
Subject key identifier:   71:D6:A0:63:6A:DD:6B:9C:BA:D1:EB:EA:F1:9D:46:73:31:FC:C4:19
Certificate issuer:       /CN=A916D0D2/serialNumber=D5E53AF115997C7FA3B86552F95F5114AF3405E9
Certificate serial:       0603
Authority key identifier: D5:E5:3A:F1:15:99:7C:7F:A3:B8:65:52:F9:5F:51:14:AF:34:05:E9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1eU68RWZfH-juGVS-V9RFK80Bek.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/E2EB4C72D85A11EDA96B1D11C4F9AE02.roa
Signing time:             Wed 31 May 2023 00:57:21 +0000
ROA not before:           Wed 31 May 2023 00:57:21 +0000
ROA not after:            Tue 30 Jul 2024 00:00:00 +0000
asID:                     61317
IP address blocks:        45.114.190.0/24 maxlen: 24
                          103.54.154.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.crl
                          rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1eU68RWZfH-juGVS-V9RFK80Bek.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 21 Apr 2024 20:47:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1539 (0x603)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916D0D2/serialNumber=D5E53AF115997C7FA3B86552F95F5114AF3405E9
        Validity
            Not Before: May 31 00:57:21 2023 GMT
            Not After : Jul 30 00:00:00 2024 GMT
        Subject: CN=64769b71-fe3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a1:3d:c7:99:87:eb:be:8e:8f:0c:be:2e:43:
                    60:00:41:4f:2f:64:c3:34:86:6c:f1:bc:bc:d6:fb:
                    2a:f8:0f:2e:7c:cd:87:e0:87:ea:d0:70:13:99:f2:
                    32:d7:60:55:9a:90:16:29:a9:b9:61:8c:1d:e0:66:
                    8f:04:93:0d:a6:c7:60:c6:0a:4d:80:b7:39:3f:0d:
                    75:f8:a7:71:11:a5:c6:36:8d:f4:88:6b:ef:06:9b:
                    d1:8f:d5:77:cf:15:24:d9:ab:e8:d8:ff:fc:45:c5:
                    35:a3:a2:69:fd:92:2f:3b:8a:60:44:de:1b:5c:76:
                    a5:fa:7d:6e:99:c1:bc:0d:c9:e7:27:04:51:38:53:
                    a6:e9:29:7d:2e:05:08:ff:f4:38:6e:28:43:96:3a:
                    e2:8e:32:c6:36:d2:b8:04:00:75:6e:b9:59:bc:42:
                    87:c8:fe:c8:0a:4e:82:07:9e:f5:88:ed:31:02:9f:
                    ed:8c:f3:61:5f:46:e6:60:87:52:f8:22:8c:5f:b7:
                    2f:75:77:b8:78:1c:af:b0:fa:fd:d4:f8:64:34:84:
                    b8:9d:b1:06:ee:da:33:27:45:53:af:67:04:04:af:
                    f7:57:0a:8c:e8:b6:3d:23:8e:f6:20:89:1b:3f:2c:
                    c7:8a:c4:b0:10:1e:75:a7:48:4f:fa:52:39:58:66:
                    33:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:D6:A0:63:6A:DD:6B:9C:BA:D1:EB:EA:F1:9D:46:73:31:FC:C4:19
            X509v3 Authority Key Identifier:
                keyid:D5:E5:3A:F1:15:99:7C:7F:A3:B8:65:52:F9:5F:51:14:AF:34:05:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1eU68RWZfH-juGVS-V9RFK80Bek.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/E2EB4C72D85A11EDA96B1D11C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.114.190.0/24
                  103.54.154.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:4c:73:0b:f2:91:0d:de:7e:e2:1f:e6:cf:b7:25:61:0c:5a:
         03:86:04:79:de:28:44:a1:25:ff:34:59:fb:90:03:8e:13:c7:
         41:a5:fb:f2:54:10:26:0c:63:4c:8d:45:17:d7:38:5b:df:93:
         20:99:b7:fa:3b:a4:24:95:a8:6f:a7:61:54:c5:4f:fd:7c:36:
         01:40:4d:03:1d:ed:a2:cc:2e:6b:a3:42:16:97:fc:09:d6:04:
         56:65:57:85:c2:9f:ec:6e:db:2a:7c:ef:46:c9:04:bb:c7:ba:
         51:0a:78:51:1b:ed:ee:9f:77:4a:a5:1a:76:b3:1e:fa:8e:82:
         ec:19:ad:49:1b:99:58:7f:4b:d2:d1:5f:98:e7:14:7b:9c:d8:
         96:7a:7b:35:bd:ff:7a:d7:06:c4:a1:a6:23:f8:4e:38:de:6e:
         15:70:4f:d0:e5:75:a1:eb:c2:a0:f8:ed:e4:5b:a0:39:6d:d1:
         ad:a1:52:83:bd:6a:3e:ae:47:ce:46:c1:5f:30:4c:2e:75:53:
         60:16:f6:13:16:3b:ad:d5:3b:92:88:5c:68:11:5e:6d:0e:d1:
         2b:0a:ad:a4:79:c1:73:ff:67:d7:a9:f1:16:e3:cf:30:30:35:
         53:59:be:cc:79:30:0e:15:eb:8d:88:3c:17:8a:7e:99:2c:ed:
         a4:fd:a7:4a
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICBgMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkQwRDIxMTAvBgNVBAUTKEQ1RTUzQUYxMTU5OTdDN0ZBM0I4NjU1MkY5NUY1MTE0
QUYzNDA1RTkwHhcNMjMwNTMxMDA1NzIxWhcNMjQwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NDc2OWI3MS1mZTNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAo6E9x5mH676Ojwy+LkNgAEFPL2TDNIZs8by81vsq+A8ufM2H4Ifq0HATmfIy
12BVmpAWKam5YYwd4GaPBJMNpsdgxgpNgLc5Pw11+KdxEaXGNo30iGvvBpvRj9V3
zxUk2avo2P/8RcU1o6Jp/ZIvO4pgRN4bXHal+n1umcG8DcnnJwRROFOm6Sl9LgUI
//Q4bihDljrijjLGNtK4BAB1brlZvEKHyP7ICk6CB571iO0xAp/tjPNhX0bmYIdS
+CKMX7cvdXe4eByvsPr91PhkNIS4nbEG7tozJ0VTr2cEBK/3VwqM6LY9I472IIkb
PyzHisSwEB51p0hP+lI5WGYzYQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFHHWoGNq
3WucutHr6vGdRnMx/MQZMB8GA1UdIwQYMBaAFNXlOvEVmXx/o7hlUvlfURSvNAXp
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDBEMi81OTM3RDQzRTM1
QUQxMUVCODFFRUFEMTJDNEY5QUUwMi8xZVU2OFJXWmZILWp1R1ZTLVY5UkZLODBC
ZWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzFlVTY4UldaZkgtanVHVlMtVjlSRks4MEJlay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NkQwRDIvNTkzN0Q0M0UzNUFEMTFFQjgxRUVBRDEyQzRGOUFFMDIvRTJFQjRDNzJE
ODVBMTFFREE5NkIxRDExQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBAAtcr4DBABnNpowDQYJKoZIhvcNAQELBQADggEBAJNMcwvy
kQ3efuIf5s+3JWEMWgOGBHneKEShJf80WfuQA44Tx0Gl+/JUECYMY0yNRRfXOFvf
kyCZt/o7pCSVqG+nYVTFT/18NgFATQMd7aLMLmujQhaX/AnWBFZlV4XCn+xu2yp8
70bJBLvHulEKeFEb7e6fd0qlGnazHvqOguwZrUkbmVh/S9LRX5jnFHuc2JZ6ezW9
/3rXBsShpiP4TjjebhVwT9DldaHrwqD47eRboDlt0a2hUoO9aj6uR85GwV8wTC51
U2AW9hMWO63VO5KIXGgRXm0O0SsKraR5wXP/Z9ep8RbjzzAwNVNZvsx5MA4V642I
PBeKfpks7aT9p0o=
-----END CERTIFICATE-----
Generated at Mon Apr 15 00:17:51 2024 by rpki-client on console-ams.rpki-client.org