Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91983E5/7038386CF4AF11E9A51CF05AC4F9AE02/430E6130F4B011E99BB3425CC4F9AE02.roa
File:                     430E6130F4B011E99BB3425CC4F9AE02.roa (raw, json)
Hash identifier:          khKFj4HAGdLRYDfHw5jX325dFizeKy4xtsPTMmI3K0M=
Subject key identifier:   78:11:56:7C:9C:80:12:67:66:75:0C:22:D9:D1:FB:59:53:70:C8:3C
Certificate issuer:       /CN=A91983E5/serialNumber=7053FF81FECF059A3E8BD70F85D64943D114E536
Certificate serial:       0B74
Authority key identifier: 70:53:FF:81:FE:CF:05:9A:3E:8B:D7:0F:85:D6:49:43:D1:14:E5:36
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91983E5/7038386CF4AF11E9A51CF05AC4F9AE02/430E6130F4B011E99BB3425CC4F9AE02.roa
Signing time:             Mon 06 Nov 2023 19:07:19 +0000
ROA not before:           Mon 06 Nov 2023 19:07:19 +0000
ROA not after:            Mon 30 Dec 2024 00:00:00 +0000
asID:                     139670
IP address blocks:        103.143.118.0/23 maxlen: 23
                          103.143.118.0/24 maxlen: 24
                          103.143.119.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91983E5/7038386CF4AF11E9A51CF05AC4F9AE02/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.crl
                          rsync://rpki.apnic.net/member_repository/A91983E5/7038386CF4AF11E9A51CF05AC4F9AE02/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 May 2024 02:42:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2932 (0xb74)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91983E5/serialNumber=7053FF81FECF059A3E8BD70F85D64943D114E536
        Validity
            Not Before: Nov  6 19:07:19 2023 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=65493967-4888
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:b8:4d:1e:cf:a7:bc:7d:64:71:55:04:ce:b6:
                    eb:a2:d9:c6:f4:92:1e:9d:a4:ee:63:3f:a0:92:df:
                    29:97:da:45:d1:43:5e:50:71:a2:d3:e0:77:43:a7:
                    ba:b2:06:c1:7a:a3:d5:d5:23:45:e6:2d:cb:31:ee:
                    df:bd:14:03:fb:ce:d0:e9:03:76:5d:59:6f:f2:3b:
                    ad:04:69:60:5e:53:4c:c5:8d:7c:9b:40:22:b2:13:
                    08:3e:4d:55:9f:7a:5b:46:80:42:2b:24:97:38:c7:
                    40:65:ba:2d:81:f1:0e:4c:e9:f9:bc:96:58:0d:ba:
                    8f:e4:62:2b:2b:e6:d4:81:7c:e0:95:43:21:18:b2:
                    4b:3c:41:de:9e:0a:4c:e9:d6:26:3a:a3:d2:f3:b8:
                    89:d6:d3:82:27:51:5f:6d:02:ad:69:e4:d3:a4:cc:
                    58:a3:7e:56:d7:ba:2d:24:f3:2a:f1:3c:06:7f:7f:
                    82:a3:94:5b:9a:d0:8a:0e:57:ab:4b:40:7c:96:79:
                    97:60:55:fa:f7:85:e7:b8:ac:64:65:fc:77:0c:2e:
                    dd:f5:83:61:a4:37:f0:c1:48:1a:c0:ac:8a:68:38:
                    49:63:2b:06:51:94:bc:6f:b7:a5:73:34:00:5e:61:
                    73:a0:f3:ae:c2:4c:84:96:69:ee:f8:53:f2:54:69:
                    11:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:11:56:7C:9C:80:12:67:66:75:0C:22:D9:D1:FB:59:53:70:C8:3C
            X509v3 Authority Key Identifier:
                keyid:70:53:FF:81:FE:CF:05:9A:3E:8B:D7:0F:85:D6:49:43:D1:14:E5:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91983E5/7038386CF4AF11E9A51CF05AC4F9AE02/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91983E5/7038386CF4AF11E9A51CF05AC4F9AE02/430E6130F4B011E99BB3425CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.143.118.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6d:56:69:f3:dd:6e:85:e9:f0:96:8c:9b:51:eb:39:8e:94:12:
         10:60:cd:12:0e:f2:7f:50:2e:2e:01:72:57:f0:f7:f5:ae:27:
         fa:06:a0:52:8a:d7:92:a0:d0:11:d8:74:4f:a0:bb:6f:c8:33:
         6f:0f:96:8c:ee:21:85:5e:7a:5c:2e:e8:ff:76:d7:59:a6:05:
         cc:a1:6f:72:c6:a3:19:dd:e9:8f:7a:b1:a4:dc:0b:fc:86:47:
         36:3a:c6:c1:66:06:a5:8a:a6:4a:8a:8c:c5:27:40:39:0b:29:
         ef:7e:4e:70:3c:ca:41:6d:89:88:5e:c3:a4:e4:ae:77:25:aa:
         e7:4f:37:d2:d1:f7:c4:93:f2:a6:b4:fa:59:8f:13:9c:97:bd:
         22:68:34:3b:a0:0a:6f:3f:48:3c:17:50:a4:2f:cc:af:45:7c:
         27:bd:4d:87:c5:9a:3b:ff:5f:59:31:d7:5d:8e:57:bd:19:d8:
         11:bd:34:93:8c:41:6a:1c:b1:62:32:27:14:c1:8f:c4:05:63:
         0b:1a:9a:ee:8b:92:c7:c1:f6:89:0e:d4:a1:e2:d5:10:3f:c8:
         eb:8c:f6:40:61:98:94:fb:09:63:bc:36:25:60:2f:c4:b8:a6:
         f2:2c:87:45:d7:74:6c:de:f4:43:13:2e:29:3c:9c:e9:d8:83:
         84:3b:9a:50
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICC3QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTgzRTUxMTAvBgNVBAUTKDcwNTNGRjgxRkVDRjA1OUEzRThCRDcwRjg1RDY0OTQz
RDExNEU1MzYwHhcNMjMxMTA2MTkwNzE5WhcNMjQxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NTQ5Mzk2Ny00ODg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA17hNHs+nvH1kcVUEzrbrotnG9JIenaTuYz+gkt8pl9pF0UNeUHGi0+B3Q6e6
sgbBeqPV1SNF5i3LMe7fvRQD+87Q6QN2XVlv8jutBGlgXlNMxY18m0AishMIPk1V
n3pbRoBCKySXOMdAZbotgfEOTOn5vJZYDbqP5GIrK+bUgXzglUMhGLJLPEHengpM
6dYmOqPS87iJ1tOCJ1FfbQKtaeTTpMxYo35W17otJPMq8TwGf3+Co5RbmtCKDler
S0B8lnmXYFX694XnuKxkZfx3DC7d9YNhpDfwwUgawKyKaDhJYysGUZS8b7elczQA
XmFzoPOuwkyElmnu+FPyVGkRswIDAQABo4IClTCCApEwHQYDVR0OBBYEFHgRVnyc
gBJnZnUMItnR+1lTcMg8MB8GA1UdIwQYMBaAFHBT/4H+zwWaPovXD4XWSUPRFOU2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODNFNS83MDM4Mzg2Q0Y0
QUYxMUU5QTUxQ0YwNUFDNEY5QUUwMi9jRlBfZ2Y3UEJaby1pOWNQaGRaSlE5RVU1
VFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2NGUF9nZjdQQlpvLWk5Y1BoZFpKUTlFVTVUWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTgzRTUvNzAzODM4NkNGNEFGMTFFOUE1MUNGMDVBQzRGOUFFMDIvNDMwRTYxMzBG
NEIwMTFFOTlCQjM0MjVDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnj3YwDQYJKoZIhvcNAQELBQADggEBAG1WafPdboXp8JaM
m1HrOY6UEhBgzRIO8n9QLi4Bclfw9/WuJ/oGoFKK15Kg0BHYdE+gu2/IM28Plozu
IYVeelwu6P9211mmBcyhb3LGoxnd6Y96saTcC/yGRzY6xsFmBqWKpkqKjMUnQDkL
Ke9+TnA8ykFtiYhew6TkrnclqudPN9LR98ST8qa0+lmPE5yXvSJoNDugCm8/SDwX
UKQvzK9FfCe9TYfFmjv/X1kx112OV70Z2BG9NJOMQWocsWIyJxTBj8QFYwsamu6L
ksfB9okO1KHi1RA/yOuM9kBhmJT7CWO8NiVgL8S4pvIsh0XXdGze9EMTLik8nOnY
g4Q7mlA=
-----END CERTIFICATE-----
Generated at Fri May 10 20:45:24 2024 by rpki-client on console-ams.rpki-client.org