Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1D4A/819698FC05D511EE93F91C15C4F9AE02/5261CE84068511EE9F71F964C4F9AE02.roa
File:                     5261CE84068511EE9F71F964C4F9AE02.roa (raw, json)
Hash identifier:          oKFmwwLpZxVkCU6tuyI//PQIMNaIzPVyeWJBtz21zxg=
Subject key identifier:   23:AB:F6:56:3B:C8:A6:D1:99:10:B6:E3:6F:E7:CC:FA:8B:DE:7F:95
Certificate issuer:       /CN=A91A1D4A/serialNumber=C9E8090060F8AE6370A01B7E1EC1D6E26E4FC01A
Certificate serial:       07
Authority key identifier: C9:E8:09:00:60:F8:AE:63:70:A0:1B:7E:1E:C1:D6:E2:6E:4F:C0:1A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yegJAGD4rmNwoBt-HsHW4m5PwBo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A1D4A/819698FC05D511EE93F91C15C4F9AE02/5261CE84068511EE9F71F964C4F9AE02.roa
Signing time:             Fri 09 Jun 2023 06:00:53 +0000
ROA not before:           Fri 09 Jun 2023 06:00:53 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     132829
IP address blocks:        103.215.180.0/23 maxlen: 23
                          103.215.180.0/24 maxlen: 24
                          103.215.181.0/24 maxlen: 24
                          2401:8e0::/32 maxlen: 32
                          2401:8e0::/48 maxlen: 48
                          2401:8e0:1::/48 maxlen: 48
                          2401:8e0:2::/48 maxlen: 48
                          2401:8e0:3::/48 maxlen: 48
                          2401:8e0:4::/48 maxlen: 48
                          2401:8e0:5::/48 maxlen: 48
                          2401:8e0:6::/48 maxlen: 48
                          2401:8e0:7::/48 maxlen: 48
                          2401:8e0:8::/48 maxlen: 48
                          2401:8e0:9::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A1D4A/819698FC05D511EE93F91C15C4F9AE02/yegJAGD4rmNwoBt-HsHW4m5PwBo.crl
                          rsync://rpki.apnic.net/member_repository/A91A1D4A/819698FC05D511EE93F91C15C4F9AE02/yegJAGD4rmNwoBt-HsHW4m5PwBo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yegJAGD4rmNwoBt-HsHW4m5PwBo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 14 Jun 2024 07:17:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7 (0x7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A1D4A/serialNumber=C9E8090060F8AE6370A01B7E1EC1D6E26E4FC01A
        Validity
            Not Before: Jun  9 06:00:53 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=6482c015-e926
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ac:92:4f:05:ab:df:ff:99:58:ed:7d:54:e5:
                    8a:43:24:2f:62:ef:ce:db:27:0a:6b:dd:bb:ed:e0:
                    78:7e:08:ff:b9:63:f4:1d:30:4c:be:31:77:3c:6f:
                    19:2e:75:9b:6d:18:c4:73:cb:3e:3f:c6:f8:7b:62:
                    3b:a7:f5:c2:8a:be:23:d9:09:1d:b4:13:b4:40:5a:
                    0e:cd:d0:25:80:82:87:63:a6:f7:63:1b:59:df:e5:
                    60:20:87:99:77:31:72:a4:ca:92:bc:93:6c:b4:94:
                    5b:d1:87:6a:d5:0c:a8:1d:8b:73:b2:ef:cb:f0:93:
                    bb:6d:91:d3:fb:84:36:a8:2a:fa:51:2c:65:ad:5a:
                    f0:02:12:4c:31:00:3d:cc:78:8b:7c:d7:b6:bd:4d:
                    44:e5:1a:1d:60:5c:41:5c:dd:86:9d:e1:fc:9d:6f:
                    93:7b:a9:ec:de:c5:2c:0b:de:4b:f5:0b:d9:0c:a1:
                    0f:e6:df:4e:48:07:63:cc:cb:2c:44:1d:b5:b9:f3:
                    0b:29:1f:9b:1b:6b:9e:5d:1e:51:bf:15:40:ac:c6:
                    80:39:d7:d7:c7:e3:f4:55:b1:ee:55:ea:b7:58:a2:
                    be:55:3e:8e:08:a5:ac:99:9a:41:5b:46:7c:b7:b8:
                    fd:cf:d1:30:b3:16:4f:35:00:ef:35:08:a7:24:d5:
                    10:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:AB:F6:56:3B:C8:A6:D1:99:10:B6:E3:6F:E7:CC:FA:8B:DE:7F:95
            X509v3 Authority Key Identifier:
                keyid:C9:E8:09:00:60:F8:AE:63:70:A0:1B:7E:1E:C1:D6:E2:6E:4F:C0:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A1D4A/819698FC05D511EE93F91C15C4F9AE02/yegJAGD4rmNwoBt-HsHW4m5PwBo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yegJAGD4rmNwoBt-HsHW4m5PwBo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1D4A/819698FC05D511EE93F91C15C4F9AE02/5261CE84068511EE9F71F964C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.215.180.0/23
                IPv6:
                  2401:8e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         2a:b8:f7:7e:7c:41:a9:a8:96:1b:d4:98:ba:95:07:ee:82:b9:
         5b:fd:ce:96:95:6f:5c:8d:8e:80:53:60:90:74:f7:a6:bb:54:
         0b:f2:7d:91:70:42:61:d6:06:d6:b5:27:ac:f2:14:d7:16:6a:
         42:89:b4:64:4b:66:c7:53:97:94:40:6a:d0:52:96:f0:ef:99:
         86:d7:68:ec:50:41:8a:48:73:b2:02:19:96:39:5c:d7:58:e2:
         3a:86:83:73:ed:2c:e6:5c:de:05:6b:c7:6f:08:cc:cd:a3:c2:
         77:0d:52:f9:da:bf:b2:a4:a1:48:de:cc:0b:d5:2c:19:58:f6:
         03:f8:22:33:f9:80:cf:66:be:a4:3c:71:93:33:da:18:a9:70:
         f0:55:1e:e4:78:70:ff:56:cc:81:0e:94:fe:37:e8:1d:c1:5c:
         b5:8e:02:cd:5e:73:eb:3a:85:70:ea:06:df:be:d6:98:db:32:
         45:34:b3:2f:f3:a0:68:a4:e8:01:67:54:96:6f:9e:4d:aa:71:
         8c:b4:61:eb:75:4c:c9:f8:f5:a9:5f:02:67:03:06:c7:05:bd:
         eb:5b:86:b2:4e:57:2d:03:01:2a:57:7f:cf:40:cf:c6:7a:bd:
         89:5d:3c:40:dc:d3:68:bd:57:a8:45:15:d2:f5:7c:24:8c:29:
         e2:f1:10:fe
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIBBzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB
MUQ0QTExMC8GA1UEBRMoQzlFODA5MDA2MEY4QUU2MzcwQTAxQjdFMUVDMUQ2RTI2
RTRGQzAxQTAeFw0yMzA2MDkwNjAwNTNaFw0yNDA5MzAwMDAwMDBaMBgxFjAUBgNV
BAMTDTY0ODJjMDE1LWU5MjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDQrJJPBavf/5lY7X1U5YpDJC9i787bJwpr3bvt4Hh+CP+5Y/QdMEy+MXc8bxku
dZttGMRzyz4/xvh7Yjun9cKKviPZCR20E7RAWg7N0CWAgodjpvdjG1nf5WAgh5l3
MXKkypK8k2y0lFvRh2rVDKgdi3Oy78vwk7ttkdP7hDaoKvpRLGWtWvACEkwxAD3M
eIt817a9TUTlGh1gXEFc3Yad4fydb5N7qezexSwL3kv1C9kMoQ/m305IB2PMyyxE
HbW58wspH5sba55dHlG/FUCsxoA519fH4/RVse5V6rdYor5VPo4IpayZmkFbRny3
uP3P0TCzFk81AO81CKck1RBdAgMBAAGjggKkMIICoDAdBgNVHQ4EFgQUI6v2VjvI
ptGZELbjb+fM+ovef5UwHwYDVR0jBBgwFoAUyegJAGD4rmNwoBt+HsHW4m5PwBow
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUExRDRBLzgxOTY5OEZDMDVE
NTExRUU5M0Y5MUMxNUM0RjlBRTAyL3llZ0pBR0Q0cm1Od29CdC1Ic0hXNG01UHdC
by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIveWVnSkFHRDRybU53b0J0LUhzSFc0bTVQd0JvLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
MUQ0QS84MTk2OThGQzA1RDUxMUVFOTNGOTFDMTVDNEY5QUUwMi81MjYxQ0U4NDA2
ODUxMUVFOUY3MUY5NjRDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAWfXtDANBAIAAjAHAwUAJAEI4DANBgkqhkiG9w0BAQsFAAOC
AQEAKrj3fnxBqaiWG9SYupUH7oK5W/3OlpVvXI2OgFNgkHT3prtUC/J9kXBCYdYG
1rUnrPIU1xZqQom0ZEtmx1OXlEBq0FKW8O+Zhtdo7FBBikhzsgIZljlc11jiOoaD
c+0s5lzeBWvHbwjMzaPCdw1S+dq/sqShSN7MC9UsGVj2A/giM/mAz2a+pDxxkzPa
GKlw8FUe5Hhw/1bMgQ6U/jfoHcFctY4CzV5z6zqFcOoG377WmNsyRTSzL/OgaKTo
AWdUlm+eTapxjLRh63VMyfj1qV8CZwMGxwW961uGsk5XLQMBKld/z0DPxnq9iV08
QNzTaL1XqEUV0vV8JIwp4vEQ/g==
-----END CERTIFICATE-----
Generated at Fri Jun 7 09:41:03 2024 by rpki-client on console-ams.rpki-client.org