Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9187E23/BE97B0A67D6711EEB06A4312C4F9AE02/3863960C7E0311EE8BCA7D33C4F9AE02.roa
File:                     3863960C7E0311EE8BCA7D33C4F9AE02.roa (raw, json)
Hash identifier:          KLVSwJ7SZxtidXSFtuAYDe/fMNZg+4aJlJuDECdA1Pg=
Subject key identifier:   6B:FC:F6:9B:45:10:A1:5A:39:05:CB:50:64:FF:C6:F7:B5:38:99:AF
Certificate issuer:       /CN=A9187E23/serialNumber=C94A4ABA331589339B4651C05B92FFE01BCB34C9
Certificate serial:       03
Authority key identifier: C9:4A:4A:BA:33:15:89:33:9B:46:51:C0:5B:92:FF:E0:1B:CB:34:C9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUpKujMViTObRlHAW5L_4BvLNMk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9187E23/BE97B0A67D6711EEB06A4312C4F9AE02/3863960C7E0311EE8BCA7D33C4F9AE02.roa
Signing time:             Wed 08 Nov 2023 06:51:19 +0000
ROA not before:           Wed 08 Nov 2023 06:51:19 +0000
ROA not after:            Sun 01 Dec 2024 00:00:00 +0000
asID:                     132254
IP address blocks:        103.72.90.0/24 maxlen: 24
                          103.72.91.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9187E23/BE97B0A67D6711EEB06A4312C4F9AE02/yUpKujMViTObRlHAW5L_4BvLNMk.crl
                          rsync://rpki.apnic.net/member_repository/A9187E23/BE97B0A67D6711EEB06A4312C4F9AE02/yUpKujMViTObRlHAW5L_4BvLNMk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUpKujMViTObRlHAW5L_4BvLNMk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 14 Jun 2024 07:17:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9187E23/serialNumber=C94A4ABA331589339B4651C05B92FFE01BCB34C9
        Validity
            Not Before: Nov  8 06:51:19 2023 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=654b2fe7-b20e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a4:61:d4:bc:85:11:ba:6f:5c:aa:7f:4a:f7:
                    bb:52:9d:85:77:5d:ac:f2:6f:b6:ae:f8:da:00:0b:
                    18:34:e2:c4:7a:7b:45:0c:26:50:ea:69:50:2d:02:
                    f9:a4:97:2c:e5:28:5e:8a:eb:6b:b5:f6:28:ab:c6:
                    53:41:a0:d6:e3:3e:fd:f8:c2:11:b1:eb:e7:d1:c3:
                    0d:e2:05:87:70:2c:c9:05:77:b3:59:2e:21:22:07:
                    37:73:f8:f0:c9:d7:9d:7c:a8:19:ff:ae:bd:35:14:
                    68:88:ca:78:66:24:49:cd:c3:06:76:8e:e6:14:34:
                    6d:6e:fd:d8:c7:7b:e4:c3:ee:16:0d:6a:40:9f:a2:
                    bb:7d:e1:47:76:72:2a:33:d8:e8:2a:ed:23:32:0a:
                    ef:85:a4:3b:b0:e4:2b:16:a7:78:ae:01:4e:bd:c8:
                    1c:d8:91:e0:e6:bb:ae:7b:2e:39:4f:ac:e1:4d:77:
                    b6:5a:2d:f1:23:5e:ab:5e:47:b1:72:98:f8:22:b7:
                    87:c0:d2:3f:c5:4c:1f:55:1f:f9:13:a6:2d:ff:cf:
                    2b:c8:be:50:c0:1a:d1:e0:37:93:92:f0:78:d8:5c:
                    22:a2:8b:92:35:10:c5:c1:94:d9:bd:b2:87:d0:d3:
                    cf:9d:1c:1b:3c:61:58:05:d1:30:a0:73:75:e2:a1:
                    2c:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:FC:F6:9B:45:10:A1:5A:39:05:CB:50:64:FF:C6:F7:B5:38:99:AF
            X509v3 Authority Key Identifier:
                keyid:C9:4A:4A:BA:33:15:89:33:9B:46:51:C0:5B:92:FF:E0:1B:CB:34:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9187E23/BE97B0A67D6711EEB06A4312C4F9AE02/yUpKujMViTObRlHAW5L_4BvLNMk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUpKujMViTObRlHAW5L_4BvLNMk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187E23/BE97B0A67D6711EEB06A4312C4F9AE02/3863960C7E0311EE8BCA7D33C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.72.90.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4b:d3:02:ba:04:9b:11:99:a2:5f:92:fc:38:1a:64:2b:f4:23:
         57:90:cb:e7:dc:b3:7c:06:2f:50:39:2f:20:10:34:d9:7d:1d:
         81:cb:a4:c0:67:82:d2:32:7d:75:63:83:b4:ef:bc:82:91:4e:
         e5:91:77:67:c6:35:c1:e7:ff:fa:84:d1:7b:83:45:26:d5:2e:
         43:0b:16:c4:96:50:56:71:1d:a6:0b:c4:97:7d:31:54:71:d9:
         ad:09:93:f6:e0:da:83:36:8d:83:df:a5:a0:5a:02:28:7a:1a:
         e0:bb:82:05:5e:5e:51:42:3c:1e:9e:6e:b4:c1:6c:b5:bb:2a:
         bd:00:3f:a4:3f:70:36:8c:43:92:24:d9:cb:e3:5f:df:87:7e:
         da:9d:3f:b0:12:6d:bb:61:d3:fe:8e:23:11:50:7c:d3:5c:72:
         90:07:68:77:b6:c1:6b:8a:68:b5:35:30:85:bc:5f:53:30:f2:
         a6:e5:3f:3e:cb:dd:10:c1:0f:d8:85:bf:90:e0:06:16:ef:12:
         71:2d:16:37:7c:42:f0:c8:50:00:64:ad:d9:0e:f8:7f:f6:04:
         1c:f2:4a:4d:0f:ee:e1:c2:b4:dc:68:80:20:39:0a:77:09:a0:
         2e:c4:4a:5e:dd:b0:80:ed:4d:e2:39:85:0e:e0:14:f0:c6:28:
         d5:c4:0b:7b
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBAzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4
N0UyMzExMC8GA1UEBRMoQzk0QTRBQkEzMzE1ODkzMzlCNDY1MUMwNUI5MkZGRTAx
QkNCMzRDOTAeFw0yMzExMDgwNjUxMTlaFw0yNDEyMDEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY1NGIyZmU3LWIyMGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDHpGHUvIURum9cqn9K97tSnYV3Xazyb7au+NoACxg04sR6e0UMJlDqaVAtAvmk
lyzlKF6K62u19iirxlNBoNbjPv34whGx6+fRww3iBYdwLMkFd7NZLiEiBzdz+PDJ
1518qBn/rr01FGiIynhmJEnNwwZ2juYUNG1u/djHe+TD7hYNakCfort94Ud2cioz
2Ogq7SMyCu+FpDuw5CsWp3iuAU69yBzYkeDmu657LjlPrOFNd7ZaLfEjXqteR7Fy
mPgit4fA0j/FTB9VH/kTpi3/zyvIvlDAGtHgN5OS8HjYXCKii5I1EMXBlNm9sofQ
08+dHBs8YVgF0TCgc3XioSyrAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUa/z2m0UQ
oVo5BctQZP/G97U4ma8wHwYDVR0jBBgwFoAUyUpKujMViTObRlHAW5L/4BvLNMkw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg3RTIzL0JFOTdCMEE2N0Q2
NzExRUVCMDZBNDMxMkM0RjlBRTAyL3lVcEt1ak1WaVRPYlJsSEFXNUxfNEJ2TE5N
ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIveVVwS3VqTVZpVE9iUmxIQVc1TF80QnZMTk1rLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
N0UyMy9CRTk3QjBBNjdENjcxMUVFQjA2QTQzMTJDNEY5QUUwMi8zODYzOTYwQzdF
MDMxMUVFOEJDQTdEMzNDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAWdIWjANBgkqhkiG9w0BAQsFAAOCAQEAS9MCugSbEZmiX5L8
OBpkK/QjV5DL59yzfAYvUDkvIBA02X0dgcukwGeC0jJ9dWODtO+8gpFO5ZF3Z8Y1
wef/+oTRe4NFJtUuQwsWxJZQVnEdpgvEl30xVHHZrQmT9uDagzaNg9+loFoCKHoa
4LuCBV5eUUI8Hp5utMFstbsqvQA/pD9wNoxDkiTZy+Nf34d+2p0/sBJtu2HT/o4j
EVB801xykAdod7bBa4potTUwhbxfUzDypuU/PsvdEMEP2IW/kOAGFu8ScS0WN3xC
8MhQAGSt2Q74f/YEHPJKTQ/u4cK03GiAIDkKdwmgLsRKXt2wgO1N4jmFDuAU8MYo
1cQLew==
-----END CERTIFICATE-----
Generated at Fri Jun 7 09:40:22 2024 by rpki-client on console-ams.rpki-client.org