Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4179/43E4AF26B95111EBAA60CD3CC4F9AE02/61A51A9AF77711ECB847DF59C4F9AE02.roa
File:                     61A51A9AF77711ECB847DF59C4F9AE02.roa (raw, json)
Hash identifier:          ssybRiadnYqLalLmVRbd0/DP5QPkMyzKDDU4+VtlEtg=
Subject key identifier:   42:BE:43:2C:4B:EE:87:55:94:E0:85:D7:75:3F:FC:DF:66:41:F6:C2
Certificate issuer:       /CN=A91A4179/serialNumber=1641D13FAD8A20AB0A94F625AEDA106BE2A66E17
Certificate serial:       0498
Authority key identifier: 16:41:D1:3F:AD:8A:20:AB:0A:94:F6:25:AE:DA:10:6B:E2:A6:6E:17
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FkHRP62KIKsKlPYlrtoQa-Kmbhc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4179/43E4AF26B95111EBAA60CD3CC4F9AE02/61A51A9AF77711ECB847DF59C4F9AE02.roa
Signing time:             Wed 09 Aug 2023 00:21:34 +0000
ROA not before:           Wed 09 Aug 2023 00:21:34 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     138630
IP address blocks:        103.153.5.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4179/43E4AF26B95111EBAA60CD3CC4F9AE02/FkHRP62KIKsKlPYlrtoQa-Kmbhc.crl
                          rsync://rpki.apnic.net/member_repository/A91A4179/43E4AF26B95111EBAA60CD3CC4F9AE02/FkHRP62KIKsKlPYlrtoQa-Kmbhc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FkHRP62KIKsKlPYlrtoQa-Kmbhc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 May 2024 00:53:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1176 (0x498)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4179/serialNumber=1641D13FAD8A20AB0A94F625AEDA106BE2A66E17
        Validity
            Not Before: Aug  9 00:21:34 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=64d2dc0e-8b30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:02:7e:09:4c:dd:e4:eb:09:0f:0b:44:8d:df:
                    02:7d:9e:e4:5d:c1:40:dc:fc:98:33:75:be:23:82:
                    61:86:42:de:eb:44:3d:3c:ff:b2:98:3b:21:7f:1a:
                    ae:e0:19:c3:45:69:e9:7c:84:13:b5:9f:8f:2e:b2:
                    60:5d:91:ae:19:d6:09:7c:30:ab:2e:36:b2:f5:18:
                    7a:40:43:ca:e0:32:0b:31:e6:15:68:5c:87:ec:86:
                    4e:5a:4f:46:3d:a3:ea:a3:22:f0:dd:d5:55:21:16:
                    bc:cd:82:e5:8a:ff:e8:81:2d:9b:f9:ec:5f:97:0c:
                    cd:c7:88:22:83:2a:2c:f8:51:dc:d5:b5:d7:d7:c0:
                    92:92:42:2a:28:80:cd:79:ec:d6:92:9a:f6:48:8f:
                    57:46:9b:95:98:39:e0:3e:b8:45:84:b2:20:09:8a:
                    6f:18:b1:c6:f5:af:ee:59:72:a6:04:1d:a8:73:97:
                    8c:8f:2b:d0:a6:62:b7:7a:f0:d5:94:2d:e6:ae:c1:
                    4a:31:1a:6c:ef:a8:2c:db:a1:bd:f3:8d:6a:17:a0:
                    97:9e:15:89:e2:db:8a:7b:1c:a8:c7:f4:d4:49:64:
                    6c:42:45:9d:70:bf:a5:c5:76:fd:8b:d6:ed:ab:0b:
                    69:eb:b9:4e:42:c6:3b:f4:71:fb:6c:24:5a:01:57:
                    35:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:BE:43:2C:4B:EE:87:55:94:E0:85:D7:75:3F:FC:DF:66:41:F6:C2
            X509v3 Authority Key Identifier:
                keyid:16:41:D1:3F:AD:8A:20:AB:0A:94:F6:25:AE:DA:10:6B:E2:A6:6E:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4179/43E4AF26B95111EBAA60CD3CC4F9AE02/FkHRP62KIKsKlPYlrtoQa-Kmbhc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FkHRP62KIKsKlPYlrtoQa-Kmbhc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4179/43E4AF26B95111EBAA60CD3CC4F9AE02/61A51A9AF77711ECB847DF59C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.153.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:ea:46:64:f4:fd:40:48:34:e1:c5:87:9a:05:c9:ca:7c:13:
         d8:64:f1:8a:93:de:7c:9b:99:f6:5d:94:6f:e9:ce:a6:c1:d4:
         a4:13:a1:fb:e6:08:27:b3:88:2b:da:54:e9:c8:dd:53:fb:fa:
         cd:12:63:58:c7:42:a1:8e:18:5d:f4:36:a7:c6:16:b2:70:ea:
         8e:07:d7:4c:93:eb:b7:7b:17:6c:88:92:84:70:ef:c7:65:54:
         5b:48:d5:27:cd:8c:f3:af:7a:33:d0:e9:d2:ce:ad:f5:d7:37:
         95:56:76:5b:50:6c:98:dc:82:c1:6d:a4:c1:ae:63:ea:13:af:
         17:db:72:c7:89:32:81:3d:1e:87:44:34:d0:90:f1:50:81:e1:
         ec:c8:a0:d7:06:da:33:a9:f6:dd:c3:1b:63:e6:3f:72:ab:9a:
         08:fd:4e:ce:9e:a3:c1:8c:b7:22:d1:a3:fb:f9:61:d8:8b:e4:
         a7:7e:8a:f9:af:ac:0b:7a:4e:e5:c9:c8:b4:b3:b2:93:1a:7a:
         ce:1d:d0:fb:6e:c7:3c:33:66:8b:b2:cd:4f:bf:ff:21:82:0f:
         b4:90:74:87:6d:b2:9b:60:76:19:ae:1a:15:4d:82:71:a3:0e:
         96:34:df:5d:b5:42:17:a5:9c:8d:1e:7f:e3:93:82:5c:46:ab:
         66:5b:d7:dc
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBJgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTQxNzkxMTAvBgNVBAUTKDE2NDFEMTNGQUQ4QTIwQUIwQTk0RjYyNUFFREExMDZC
RTJBNjZFMTcwHhcNMjMwODA5MDAyMTM0WhcNMjQwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NGQyZGMwZS04YjMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1AJ+CUzd5OsJDwtEjd8CfZ7kXcFA3PyYM3W+I4JhhkLe60Q9PP+ymDshfxqu
4BnDRWnpfIQTtZ+PLrJgXZGuGdYJfDCrLjay9Rh6QEPK4DILMeYVaFyH7IZOWk9G
PaPqoyLw3dVVIRa8zYLliv/ogS2b+exflwzNx4gigyos+FHc1bXX18CSkkIqKIDN
eezWkpr2SI9XRpuVmDngPrhFhLIgCYpvGLHG9a/uWXKmBB2oc5eMjyvQpmK3evDV
lC3mrsFKMRps76gs26G9841qF6CXnhWJ4tuKexyox/TUSWRsQkWdcL+lxXb9i9bt
qwtp67lOQsY79HH7bCRaAVc19QIDAQABo4IClTCCApEwHQYDVR0OBBYEFEK+QyxL
7odVlOCF13U//N9mQfbCMB8GA1UdIwQYMBaAFBZB0T+tiiCrCpT2Ja7aEGvipm4X
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDE3OS80M0U0QUYyNkI5
NTExMUVCQUE2MENEM0NDNEY5QUUwMi9Ga0hSUDYyS0lLc0tsUFlscnRvUWEtS21i
aGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZrSFJQNjJLSUtzS2xQWWxydG9RYS1LbWJoYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTQxNzkvNDNFNEFGMjZCOTUxMTFFQkFBNjBDRDNDQzRGOUFFMDIvNjFBNTFBOUFG
Nzc3MTFFQ0I4NDdERjU5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnmQUwDQYJKoZIhvcNAQELBQADggEBAJLqRmT0/UBINOHF
h5oFycp8E9hk8YqT3nybmfZdlG/pzqbB1KQTofvmCCeziCvaVOnI3VP7+s0SY1jH
QqGOGF30NqfGFrJw6o4H10yT67d7F2yIkoRw78dlVFtI1SfNjPOvejPQ6dLOrfXX
N5VWdltQbJjcgsFtpMGuY+oTrxfbcseJMoE9HodENNCQ8VCB4ezIoNcG2jOp9t3D
G2PmP3Krmgj9Ts6eo8GMtyLRo/v5YdiL5Kd+ivmvrAt6TuXJyLSzspMaes4d0Ptu
xzwzZouyzU+//yGCD7SQdIdtsptgdhmuGhVNgnGjDpY03121QhelnI0ef+OTglxG
q2Zb19w=
-----END CERTIFICATE-----
Generated at Tue May 21 01:47:03 2024 by rpki-client on console-fra.rpki-client.org