Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91747E1/CE3472DE4CC811EAA058EC14C4F9AE02/D9C33050560B11EDA1636E52C4F9AE02.roa
File:                     D9C33050560B11EDA1636E52C4F9AE02.roa (raw, json)
Hash identifier:          5uItF1PWro7l/4uqHKd7fDysBHF7zA/EdD/kv2SXBuQ=
Subject key identifier:   A2:F2:ED:8F:AA:68:AC:42:D4:A8:FE:4F:88:72:73:F6:82:24:38:AF
Certificate issuer:       /CN=A91747E1/serialNumber=7AC6EFFB04C2B580F5A56B6A746CDFE053AF6A9E
Certificate serial:       09DC
Authority key identifier: 7A:C6:EF:FB:04:C2:B5:80:F5:A5:6B:6A:74:6C:DF:E0:53:AF:6A:9E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/esbv-wTCtYD1pWtqdGzf4FOvap4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91747E1/CE3472DE4CC811EAA058EC14C4F9AE02/D9C33050560B11EDA1636E52C4F9AE02.roa
Signing time:             Mon 04 Dec 2023 20:28:10 +0000
ROA not before:           Mon 04 Dec 2023 20:28:10 +0000
ROA not after:            Fri 31 Jan 2025 00:00:00 +0000
asID:                     138362
IP address blocks:        103.131.144.0/22 maxlen: 24
                          2403:cc40::/32 maxlen: 36
                          2403:cc40::/40 maxlen: 40
                          2403:cc40:1::/48 maxlen: 48
                          2403:cc40:2::/48 maxlen: 48
                          2403:cc40:3::/48 maxlen: 48
                          2403:cc40:22::/48 maxlen: 48
                          2403:cc40:100::/40 maxlen: 40
                          2403:cc40:200::/40 maxlen: 40
                          2403:cc40:300::/40 maxlen: 40
                          2403:cc40:400::/40 maxlen: 40
                          2403:cc40:1000::/40 maxlen: 40
                          2403:cc40:1100::/40 maxlen: 40
                          2403:cc40:1200::/40 maxlen: 40
                          2403:cc40:1300::/40 maxlen: 40
                          2403:cc40:1400::/40 maxlen: 40
                          2403:cc40:1500::/40 maxlen: 40
                          2403:cc40:ff00::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91747E1/CE3472DE4CC811EAA058EC14C4F9AE02/esbv-wTCtYD1pWtqdGzf4FOvap4.crl
                          rsync://rpki.apnic.net/member_repository/A91747E1/CE3472DE4CC811EAA058EC14C4F9AE02/esbv-wTCtYD1pWtqdGzf4FOvap4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/esbv-wTCtYD1pWtqdGzf4FOvap4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 19:23:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2524 (0x9dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91747E1/serialNumber=7AC6EFFB04C2B580F5A56B6A746CDFE053AF6A9E
        Validity
            Not Before: Dec  4 20:28:10 2023 GMT
            Not After : Jan 31 00:00:00 2025 GMT
        Subject: CN=656e365a-eddd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:54:7b:6a:4c:7d:5c:3d:22:a4:2b:10:75:01:
                    14:b5:19:7e:d6:a8:3f:1d:ef:21:90:d9:ae:e2:64:
                    56:fd:fb:2a:a4:58:4b:26:13:15:09:3e:2f:d8:35:
                    58:43:19:9c:9d:78:03:70:41:d2:03:89:4d:b9:01:
                    21:73:d6:b1:48:2c:66:7e:9d:8d:70:75:c1:92:85:
                    78:40:b9:0b:ce:24:14:3f:7c:af:f2:db:45:4d:36:
                    56:e4:0d:d9:86:36:4d:02:7e:7b:2b:02:3c:60:86:
                    14:0c:39:75:85:0f:78:7a:8d:2f:c4:a3:f6:66:8f:
                    76:e9:3b:5e:63:bf:ce:41:56:2b:da:2f:b7:3f:3b:
                    cc:c5:ea:be:6c:83:65:5f:4e:eb:54:56:eb:47:8a:
                    ce:80:38:8c:ed:7b:5e:91:9d:82:64:54:f3:a7:3d:
                    ab:b1:f8:29:2d:ff:b5:fd:a9:78:77:96:c3:ab:16:
                    79:4c:10:ec:f5:63:91:a8:39:cb:d5:b1:20:0e:18:
                    e1:43:a7:ad:b5:75:fe:60:30:dd:42:ad:78:0c:88:
                    83:a5:ba:1f:63:a9:71:81:96:c5:55:7d:0b:2e:73:
                    31:5d:73:72:41:aa:60:06:d0:29:c3:23:52:eb:d8:
                    db:e2:e8:30:02:c8:53:26:3f:74:87:1e:3c:a8:22:
                    35:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:F2:ED:8F:AA:68:AC:42:D4:A8:FE:4F:88:72:73:F6:82:24:38:AF
            X509v3 Authority Key Identifier:
                keyid:7A:C6:EF:FB:04:C2:B5:80:F5:A5:6B:6A:74:6C:DF:E0:53:AF:6A:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91747E1/CE3472DE4CC811EAA058EC14C4F9AE02/esbv-wTCtYD1pWtqdGzf4FOvap4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/esbv-wTCtYD1pWtqdGzf4FOvap4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91747E1/CE3472DE4CC811EAA058EC14C4F9AE02/D9C33050560B11EDA1636E52C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.131.144.0/22
                IPv6:
                  2403:cc40::/32

    Signature Algorithm: sha256WithRSAEncryption
         53:69:07:86:c7:bf:a1:52:4d:09:1b:f6:93:d5:6f:78:2c:36:
         9b:00:22:fa:8a:dd:ea:a8:26:84:b0:bb:a6:8b:1a:31:aa:8e:
         6d:c2:f3:a3:ca:18:dd:33:13:ea:9c:b3:f4:a0:88:d7:06:6e:
         9d:b7:17:d8:7a:fb:81:4f:6b:98:e4:42:c9:f6:eb:8c:a3:33:
         97:99:fd:6c:67:1f:8d:6a:cb:cc:d3:60:15:12:69:dc:bb:ba:
         8d:10:2c:3a:52:bf:0b:90:0c:ce:90:f1:f3:0f:84:59:d8:f4:
         7e:e3:86:4f:1e:46:6b:6a:2f:0d:90:b2:91:48:bb:21:12:b1:
         a5:07:d9:31:97:16:ce:4c:b6:a3:64:bc:a1:df:e3:4c:14:e5:
         9c:68:e8:f5:4a:e2:49:c6:5a:45:d1:e6:8b:12:47:da:4d:fc:
         81:73:28:ac:64:82:d6:81:1a:40:ea:61:de:37:b9:e6:a3:40:
         86:0b:2b:0f:d1:f3:fd:a8:83:7b:5f:2b:30:61:95:33:74:2d:
         b0:32:8e:05:0d:d3:71:a7:9a:bb:b6:9a:35:e0:2b:6d:01:81:
         58:51:68:b4:c1:7a:e7:3f:db:11:61:b7:50:e0:ea:c3:97:ba:
         d2:fa:b6:7e:3c:c1:58:eb:c1:e6:79:59:2e:bd:03:13:c9:7b:
         60:17:79:6f
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICCdwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzQ3RTExMTAvBgNVBAUTKDdBQzZFRkZCMDRDMkI1ODBGNUE1NkI2QTc0NkNERkUw
NTNBRjZBOUUwHhcNMjMxMjA0MjAyODEwWhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NTZlMzY1YS1lZGRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1FR7akx9XD0ipCsQdQEUtRl+1qg/He8hkNmu4mRW/fsqpFhLJhMVCT4v2DVY
QxmcnXgDcEHSA4lNuQEhc9axSCxmfp2NcHXBkoV4QLkLziQUP3yv8ttFTTZW5A3Z
hjZNAn57KwI8YIYUDDl1hQ94eo0vxKP2Zo926TteY7/OQVYr2i+3PzvMxeq+bINl
X07rVFbrR4rOgDiM7XtekZ2CZFTzpz2rsfgpLf+1/al4d5bDqxZ5TBDs9WORqDnL
1bEgDhjhQ6ettXX+YDDdQq14DIiDpbofY6lxgZbFVX0LLnMxXXNyQapgBtApwyNS
69jb4ugwAshTJj90hx48qCI14QIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFKLy7Y+q
aKxC1Kj+T4hyc/aCJDivMB8GA1UdIwQYMBaAFHrG7/sEwrWA9aVranRs3+BTr2qe
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDdFMS9DRTM0NzJERTRD
QzgxMUVBQTA1OEVDMTRDNEY5QUUwMi9lc2J2LXdUQ3RZRDFwV3RxZEd6ZjRGT3Zh
cDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2VzYnYtd1RDdFlEMXBXdHFkR3pmNEZPdmFwNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NzQ3RTEvQ0UzNDcyREU0Q0M4MTFFQUEwNThFQzE0QzRGOUFFMDIvRDlDMzMwNTA1
NjBCMTFFREExNjM2RTUyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E
HzAdMAwEAgABMAYDBAJng5AwDQQCAAIwBwMFACQDzEAwDQYJKoZIhvcNAQELBQAD
ggEBAFNpB4bHv6FSTQkb9pPVb3gsNpsAIvqK3eqoJoSwu6aLGjGqjm3C86PKGN0z
E+qcs/SgiNcGbp23F9h6+4FPa5jkQsn264yjM5eZ/WxnH41qy8zTYBUSady7uo0Q
LDpSvwuQDM6Q8fMPhFnY9H7jhk8eRmtqLw2QspFIuyESsaUH2TGXFs5MtqNkvKHf
40wU5Zxo6PVK4knGWkXR5osSR9pN/IFzKKxkgtaBGkDqYd43ueajQIYLKw/R8/2o
g3tfKzBhlTN0LbAyjgUN03Gnmru2mjXgK20BgVhRaLTBeuc/2xFht1Dg6sOXutL6
tn48wVjrweZ5WS69AxPJe2AXeW8=
-----END CERTIFICATE-----
Generated at Fri Nov 22 21:05:29 2024 by rpki-client on console-fra.rpki-client.org