Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9192491/D0626D92AD2F11E98FF8D77FC4F9AE02/54AE11C6AD3211E9B3BC7385C4F9AE02.roa
File:                     54AE11C6AD3211E9B3BC7385C4F9AE02.roa (raw, json)
Hash identifier:          miGuhiT0OZ8rEI35PhHu1qM/jamBZUB6IlL+zW8/kp4=
Subject key identifier:   A1:B2:AD:A0:20:9C:9A:47:D5:05:6F:5F:68:9A:16:6E:91:D2:E4:DF
Certificate issuer:       /CN=A9192491/serialNumber=34C38D6649B90D68D3CE6C09F1EB94D3E579FC9D
Certificate serial:       0CDA
Authority key identifier: 34:C3:8D:66:49:B9:0D:68:D3:CE:6C:09:F1:EB:94:D3:E5:79:FC:9D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NMONZkm5DWjTzmwJ8euU0-V5_J0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9192491/D0626D92AD2F11E98FF8D77FC4F9AE02/54AE11C6AD3211E9B3BC7385C4F9AE02.roa
Signing time:             Thu 26 Oct 2023 18:26:16 +0000
ROA not before:           Thu 26 Oct 2023 18:26:16 +0000
ROA not after:            Sun 01 Dec 2024 00:00:00 +0000
asID:                     133742
IP address blocks:        103.76.2.0/24 maxlen: 24
                          2001:df5:6a00::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9192491/D0626D92AD2F11E98FF8D77FC4F9AE02/NMONZkm5DWjTzmwJ8euU0-V5_J0.crl
                          rsync://rpki.apnic.net/member_repository/A9192491/D0626D92AD2F11E98FF8D77FC4F9AE02/NMONZkm5DWjTzmwJ8euU0-V5_J0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NMONZkm5DWjTzmwJ8euU0-V5_J0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 May 2024 18:47:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3290 (0xcda)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192491/serialNumber=34C38D6649B90D68D3CE6C09F1EB94D3E579FC9D
        Validity
            Not Before: Oct 26 18:26:16 2023 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=653aaf48-1ceb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:15:4c:7b:f8:3f:92:a0:6f:9c:3e:63:13:d5:
                    55:37:6d:cc:3f:b3:ef:7b:90:67:4d:3e:eb:0b:31:
                    31:25:49:26:03:ff:84:7b:52:ee:87:40:dd:07:f2:
                    23:e9:98:87:d0:d7:77:23:61:ec:19:8f:74:8b:87:
                    9d:ab:1c:6d:5d:77:8f:4a:f6:e5:b4:dd:72:5e:db:
                    08:c2:6b:7d:bc:83:14:a2:c1:4f:34:4b:b9:b9:9d:
                    44:53:49:30:c1:b2:fe:9e:c6:a7:22:f0:43:6d:df:
                    e0:24:7b:81:90:bc:7c:e3:1d:2e:ef:5a:0a:77:e4:
                    44:f5:d4:f7:46:ff:af:df:58:15:77:5e:7c:cc:f8:
                    c6:55:9a:0c:19:52:bf:8e:e7:8f:49:8d:56:04:63:
                    f5:20:77:82:c1:a9:87:7d:4d:5f:97:56:80:bb:36:
                    87:81:93:2e:1a:c8:ff:f2:6e:54:ae:ae:ed:50:f4:
                    b6:2d:bb:b4:58:1c:7f:20:61:02:6e:ed:6f:21:74:
                    6f:17:cc:db:16:22:57:57:d0:3c:4c:b8:a2:5f:5c:
                    93:82:c9:a8:d7:33:ea:1f:a1:c3:53:9c:71:0d:fa:
                    78:bc:54:7b:2d:94:bd:24:85:2d:d4:e7:48:d4:70:
                    03:3a:cd:df:30:9e:d6:8e:22:e7:dd:59:d2:bd:31:
                    f1:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:B2:AD:A0:20:9C:9A:47:D5:05:6F:5F:68:9A:16:6E:91:D2:E4:DF
            X509v3 Authority Key Identifier:
                keyid:34:C3:8D:66:49:B9:0D:68:D3:CE:6C:09:F1:EB:94:D3:E5:79:FC:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9192491/D0626D92AD2F11E98FF8D77FC4F9AE02/NMONZkm5DWjTzmwJ8euU0-V5_J0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NMONZkm5DWjTzmwJ8euU0-V5_J0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192491/D0626D92AD2F11E98FF8D77FC4F9AE02/54AE11C6AD3211E9B3BC7385C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.76.2.0/24
                IPv6:
                  2001:df5:6a00::/48

    Signature Algorithm: sha256WithRSAEncryption
         5e:0c:c1:a1:8a:9b:73:a8:33:21:f1:80:2d:e6:85:3f:47:11:
         0a:67:a8:63:72:a6:b4:20:d6:0a:55:cb:a2:eb:d6:1a:69:a9:
         b1:21:9c:27:a6:9d:20:bb:4f:06:98:d9:57:c5:43:24:c2:03:
         f6:82:5e:cd:38:7c:83:a4:92:e0:c5:e3:15:1f:3f:8b:47:1b:
         dc:f6:b3:11:e2:f9:2e:8b:ef:55:26:4b:ab:ac:6a:8c:dc:0d:
         db:78:fe:12:29:2a:2f:5b:ee:54:52:03:06:f1:78:f1:15:41:
         cb:4d:91:cb:1b:1a:e5:00:b4:7d:ac:a1:56:6e:48:47:02:77:
         3c:f4:a3:c2:b4:f8:1b:98:90:64:60:ef:6f:e2:89:7c:e0:5f:
         e0:86:23:4a:67:4a:2b:3d:9f:52:6a:bb:69:f9:0c:6c:c9:6b:
         41:15:e2:bf:61:7b:af:ad:26:ba:b1:93:fb:b5:68:a4:a7:a7:
         cb:03:a7:c2:24:b8:a6:dc:a3:97:09:94:a4:c2:3e:d9:e8:cc:
         47:8e:a3:b3:55:0c:f4:56:a1:96:7d:3c:52:42:c8:5d:55:5c:
         b4:32:a7:b1:6f:ec:75:9b:9f:9f:35:95:e2:08:93:4a:7e:af:
         94:43:55:4b:c9:a1:49:62:b6:8a:70:46:be:9c:27:92:eb:96:
         a5:75:cb:0a
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgICDNowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTI0OTExMTAvBgNVBAUTKDM0QzM4RDY2NDlCOTBENjhEM0NFNkMwOUYxRUI5NEQz
RTU3OUZDOUQwHhcNMjMxMDI2MTgyNjE2WhcNMjQxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NTNhYWY0OC0xY2ViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyBVMe/g/kqBvnD5jE9VVN23MP7Pve5BnTT7rCzExJUkmA/+Ee1Luh0DdB/Ij
6ZiH0Nd3I2HsGY90i4edqxxtXXePSvbltN1yXtsIwmt9vIMUosFPNEu5uZ1EU0kw
wbL+nsanIvBDbd/gJHuBkLx84x0u71oKd+RE9dT3Rv+v31gVd158zPjGVZoMGVK/
juePSY1WBGP1IHeCwamHfU1fl1aAuzaHgZMuGsj/8m5Urq7tUPS2Lbu0WBx/IGEC
bu1vIXRvF8zbFiJXV9A8TLiiX1yTgsmo1zPqH6HDU5xxDfp4vFR7LZS9JIUt1OdI
1HADOs3fMJ7WjiLn3VnSvTHxwwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFKGyraAg
nJpH1QVvX2iaFm6R0uTfMB8GA1UdIwQYMBaAFDTDjWZJuQ1o085sCfHrlNPlefyd
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MjQ5MS9EMDYyNkQ5MkFE
MkYxMUU5OEZGOEQ3N0ZDNEY5QUUwMi9OTU9OWmttNURXalR6bXdKOGV1VTAtVjVf
SjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL05NT05aa201RFdqVHptd0o4ZXVVMC1WNV9KMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTI0OTEvRDA2MjZEOTJBRDJGMTFFOThGRjhENzdGQzRGOUFFMDIvNTRBRTExQzZB
RDMyMTFFOUIzQkM3Mzg1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E
ITAfMAwEAgABMAYDBABnTAIwDwQCAAIwCQMHACABDfVqADANBgkqhkiG9w0BAQsF
AAOCAQEAXgzBoYqbc6gzIfGALeaFP0cRCmeoY3KmtCDWClXLouvWGmmpsSGcJ6ad
ILtPBpjZV8VDJMID9oJezTh8g6SS4MXjFR8/i0cb3PazEeL5LovvVSZLq6xqjNwN
23j+EikqL1vuVFIDBvF48RVBy02Ryxsa5QC0fayhVm5IRwJ3PPSjwrT4G5iQZGDv
b+KJfOBf4IYjSmdKKz2fUmq7afkMbMlrQRXiv2F7r60murGT+7VopKenywOnwiS4
ptyjlwmUpMI+2ejMR46js1UM9Fahln08UkLIXVVctDKnsW/sdZufnzWV4giTSn6v
lENVS8mhSWK2inBGvpwnkuuWpXXLCg==
-----END CERTIFICATE-----
Generated at Thu May 16 19:49:59 2024 by rpki-client on console-fra.rpki-client.org