Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9183BA5/28620CC4705E11EDBC07F158C4F9AE02/C386C06A706211EDA9CCDB76C4F9AE02.roa
File:                     C386C06A706211EDA9CCDB76C4F9AE02.roa (raw, json)
Hash identifier:          y/IwpYsi2Z5dT1V+QwVkRLz8/ghSFTIgN1Zav/eXCj0=
Subject key identifier:   B0:7A:BC:0C:8F:A0:30:1F:C8:2E:42:22:26:92:FB:1B:9D:D7:C9:DE
Certificate issuer:       /CN=A9183BA5/serialNumber=6018B985C399CB0731C1634CFE4B47912F2AF5D1
Certificate serial:       7B
Authority key identifier: 60:18:B9:85:C3:99:CB:07:31:C1:63:4C:FE:4B:47:91:2F:2A:F5:D1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YBi5hcOZywcxwWNM_ktHkS8q9dE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9183BA5/28620CC4705E11EDBC07F158C4F9AE02/C386C06A706211EDA9CCDB76C4F9AE02.roa
Signing time:             Wed 19 Jul 2023 04:03:42 +0000
ROA not before:           Wed 19 Jul 2023 04:03:42 +0000
ROA not after:            Sat 31 Aug 2024 00:00:00 +0000
asID:                     139076
IP address blocks:        103.139.110.0/24 maxlen: 24
                          103.139.111.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9183BA5/28620CC4705E11EDBC07F158C4F9AE02/YBi5hcOZywcxwWNM_ktHkS8q9dE.crl
                          rsync://rpki.apnic.net/member_repository/A9183BA5/28620CC4705E11EDBC07F158C4F9AE02/YBi5hcOZywcxwWNM_ktHkS8q9dE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YBi5hcOZywcxwWNM_ktHkS8q9dE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 May 2024 04:58:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123 (0x7b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9183BA5/serialNumber=6018B985C399CB0731C1634CFE4B47912F2AF5D1
        Validity
            Not Before: Jul 19 04:03:42 2023 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=64b7609e-92e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:b3:c1:cb:0e:06:c3:c7:9e:c3:96:61:5e:bf:
                    fd:03:d8:e4:83:5b:65:5c:7d:cc:a3:0f:56:92:60:
                    9a:ef:30:82:ad:07:3f:0b:37:61:38:0b:d5:95:5a:
                    21:89:aa:15:b9:5d:69:63:45:d6:8e:75:7b:09:4c:
                    87:64:ee:30:74:f6:8f:76:64:ba:7f:2d:d9:86:e2:
                    42:ed:a9:8d:3a:19:90:b8:c6:70:4e:fa:cf:2c:a6:
                    11:e4:b0:ef:81:fc:9f:96:19:9d:af:4c:65:58:e7:
                    b8:0c:94:66:a9:a3:09:b7:71:f7:2d:7b:5a:2b:b0:
                    98:60:0c:b4:5c:95:ae:67:9e:98:15:8b:9e:9d:cc:
                    77:52:83:4a:0a:bb:bd:f6:ad:f6:58:65:4e:93:eb:
                    64:92:94:5c:d2:2a:b0:1c:88:c2:cf:d6:ad:6b:51:
                    b9:3d:10:39:cb:1d:a3:a2:bb:ed:02:61:cc:f3:aa:
                    8f:c7:c9:5b:99:8b:8b:cf:db:fd:74:42:d8:ef:f3:
                    b4:cb:be:5a:d5:2b:2c:c0:7f:2b:9a:0c:1c:58:54:
                    16:5d:27:5b:ac:af:6d:31:6d:8d:0d:51:19:0d:90:
                    78:6e:8e:3b:f1:11:37:4b:64:d6:b3:bd:b6:9e:55:
                    db:96:49:93:53:1c:6c:c3:8e:82:a6:27:54:7c:c9:
                    45:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:7A:BC:0C:8F:A0:30:1F:C8:2E:42:22:26:92:FB:1B:9D:D7:C9:DE
            X509v3 Authority Key Identifier:
                keyid:60:18:B9:85:C3:99:CB:07:31:C1:63:4C:FE:4B:47:91:2F:2A:F5:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9183BA5/28620CC4705E11EDBC07F158C4F9AE02/YBi5hcOZywcxwWNM_ktHkS8q9dE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YBi5hcOZywcxwWNM_ktHkS8q9dE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183BA5/28620CC4705E11EDBC07F158C4F9AE02/C386C06A706211EDA9CCDB76C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.139.110.0/23

    Signature Algorithm: sha256WithRSAEncryption
         66:b1:42:96:cf:1d:0f:da:82:64:3d:8e:b9:ae:8c:7b:12:87:
         13:33:ee:46:46:bc:86:c1:bd:c8:58:81:66:62:a7:d5:2d:77:
         6d:e6:e7:98:10:67:96:2b:81:96:13:6c:41:0b:a5:4c:ab:da:
         72:21:0f:4b:2a:dc:43:2e:8d:fa:c4:a6:0b:21:ef:73:75:d4:
         16:9f:f5:56:f8:d3:28:40:10:28:a2:dd:29:be:27:ce:dc:f2:
         c5:53:8b:d6:fd:69:4b:0c:92:13:b5:b9:ce:85:b8:26:fa:e9:
         9b:b4:64:1d:e7:b2:04:48:43:0b:1b:be:e6:10:46:36:e8:20:
         70:51:96:65:fc:fe:f0:54:ca:48:70:a2:4d:5d:c6:60:13:6f:
         9c:8d:56:4b:cd:18:56:3a:0a:2e:54:e1:37:ce:e6:e2:b9:31:
         26:03:65:32:cb:7f:5b:d9:37:97:eb:1a:c4:86:c6:dd:66:89:
         3a:f0:2b:d9:b4:1f:39:2b:d8:52:a9:6a:ed:74:03:73:78:cc:
         e1:44:65:e3:b1:e8:60:31:65:70:e6:ef:2c:5a:8b:fd:6c:4a:
         2b:23:33:56:46:35:07:08:db:dc:98:c9:d0:b8:f9:63:b9:42:
         af:f2:84:90:dd:a9:5d:19:91:49:f4:d5:a8:4a:af:e5:2d:68:
         c7:f9:db:97
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBezANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4
M0JBNTExMC8GA1UEBRMoNjAxOEI5ODVDMzk5Q0IwNzMxQzE2MzRDRkU0QjQ3OTEy
RjJBRjVEMTAeFw0yMzA3MTkwNDAzNDJaFw0yNDA4MzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY0Yjc2MDllLTkyZTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDQs8HLDgbDx57DlmFev/0D2OSDW2VcfcyjD1aSYJrvMIKtBz8LN2E4C9WVWiGJ
qhW5XWljRdaOdXsJTIdk7jB09o92ZLp/LdmG4kLtqY06GZC4xnBO+s8sphHksO+B
/J+WGZ2vTGVY57gMlGapowm3cfcte1orsJhgDLRcla5nnpgVi56dzHdSg0oKu732
rfZYZU6T62SSlFzSKrAciMLP1q1rUbk9EDnLHaOiu+0CYczzqo/HyVuZi4vP2/10
Qtjv87TLvlrVKyzAfyuaDBxYVBZdJ1usr20xbY0NURkNkHhujjvxETdLZNazvbae
VduWSZNTHGzDjoKmJ1R8yUX7AgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUsHq8DI+g
MB/ILkIiJpL7G53Xyd4wHwYDVR0jBBgwFoAUYBi5hcOZywcxwWNM/ktHkS8q9dEw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgzQkE1LzI4NjIwQ0M0NzA1
RTExRURCQzA3RjE1OEM0RjlBRTAyL1lCaTVoY09aeXdjeHdXTk1fa3RIa1M4cTlk
RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvWUJpNWhjT1p5d2N4d1dOTV9rdEhrUzhxOWRFLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
M0JBNS8yODYyMENDNDcwNUUxMUVEQkMwN0YxNThDNEY5QUUwMi9DMzg2QzA2QTcw
NjIxMUVEQTlDQ0RCNzZDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAWeLbjANBgkqhkiG9w0BAQsFAAOCAQEAZrFCls8dD9qCZD2O
ua6MexKHEzPuRka8hsG9yFiBZmKn1S13bebnmBBnliuBlhNsQQulTKvaciEPSyrc
Qy6N+sSmCyHvc3XUFp/1VvjTKEAQKKLdKb4nztzyxVOL1v1pSwySE7W5zoW4Jvrp
m7RkHeeyBEhDCxu+5hBGNuggcFGWZfz+8FTKSHCiTV3GYBNvnI1WS80YVjoKLlTh
N87m4rkxJgNlMst/W9k3l+saxIbG3WaJOvAr2bQfOSvYUqlq7XQDc3jM4URl47Ho
YDFlcObvLFqL/WxKKyMzVkY1Bwjb3JjJ0Lj5Y7lCr/KEkN2pXRmRSfTVqEqv5S1o
x/nblw==
-----END CERTIFICATE-----
Generated at Wed May 15 05:59:54 2024 by rpki-client on console-fra.rpki-client.org