Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/12F0D72E7BC111EA8503D815C4F9AE02.roa
File:                     12F0D72E7BC111EA8503D815C4F9AE02.roa (download)
Hash identifier:          1aGT6MYy4z/yd8/t6FxJ4C4fWz1OJswr4L6eYk5Sd0A=
Subject key identifier:   93:54:36:5F:26:3D:A8:92:84:85:87:41:41:5B:BA:2B:F7:D2:CE:21
Certificate issuer:       /CN=A91A4C60/serialNumber=9EF9E4376E36653275C7963598D6B45B70AF8099
Certificate serial:       0BD1
Authority key identifier: 9E:F9:E4:37:6E:36:65:32:75:C7:96:35:98:D6:B4:5B:70:AF:80:99
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/12F0D72E7BC111EA8503D815C4F9AE02.roa
ROA valid until:          Dec 01 00:00:00 2023 GMT
asID:                     2914
IP address blocks:
    1: 103.142.140.0/23 maxlen: 23
    2: 103.142.141.0/24 maxlen: 24

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3025 (0xbd1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4C60/serialNumber=9EF9E4376E36653275C7963598D6B45B70AF8099
        Validity
            Not Before: Sep  7 07:36:38 2022 GMT
            Not After : Dec  1 00:00:00 2023 GMT
        Subject: CN=63184a06-35af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:ba:50:25:a9:8c:75:50:6f:fc:8e:34:d6:71:
                    30:6c:6d:0a:65:bb:51:a5:09:f8:cc:c8:2f:3c:c6:
                    45:eb:5f:58:0d:63:9f:04:8f:e3:0f:e1:83:7e:e7:
                    c1:ef:00:96:2d:18:59:69:c5:7a:78:9c:a6:99:fb:
                    57:2b:f0:45:6d:ba:f1:14:e5:78:6e:1f:1a:79:27:
                    30:0e:af:12:7c:78:35:d7:0c:04:a6:34:ff:0b:01:
                    ed:ad:2d:36:f2:cf:d8:a3:6c:b2:18:58:98:eb:b1:
                    2c:6b:9b:5c:5b:91:40:ab:42:fd:dd:6c:9c:47:16:
                    43:24:4b:3a:b2:30:5d:e8:59:fc:45:82:d1:1d:44:
                    c9:47:c0:86:77:b5:da:43:8c:9a:5e:34:26:30:49:
                    bc:05:53:3e:95:a6:5f:72:59:14:bb:1e:25:af:bd:
                    a4:50:34:41:cd:c5:d8:52:4d:51:d8:8d:38:a6:a7:
                    e3:4a:23:d3:e6:d6:f7:f3:ef:37:01:32:27:41:44:
                    3f:bf:10:3a:11:a6:6d:3d:8d:ac:72:1f:11:ec:26:
                    8d:35:14:61:75:8c:00:f5:0d:f4:5a:a9:30:bd:f4:
                    e9:99:35:8c:14:87:16:63:f5:8f:07:af:b4:32:60:
                    a8:ee:67:da:ab:29:a5:bf:6b:ec:c6:e9:3d:d2:b5:
                    1d:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                93:54:36:5F:26:3D:A8:92:84:85:87:41:41:5B:BA:2B:F7:D2:CE:21
            X509v3 Authority Key Identifier: 
                keyid:9E:F9:E4:37:6E:36:65:32:75:C7:96:35:98:D6:B4:5B:70:AF:80:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/12F0D72E7BC111EA8503D815C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.142.140.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6f:c4:bd:c6:8f:a9:57:14:62:fd:45:e5:8e:41:e5:55:78:ca:
         99:1c:fe:5d:61:0d:2a:ed:6e:4d:8e:54:3a:73:ad:0f:dd:0f:
         3c:a9:92:e2:32:fb:c9:d0:61:f2:c7:4c:7c:bb:19:55:4e:ff:
         5c:c0:19:aa:20:7a:04:ff:eb:7d:cb:e4:ed:8c:37:17:ae:38:
         18:4c:d4:84:18:68:93:4f:56:52:4d:6d:61:e2:86:10:09:db:
         56:84:c3:8a:20:9e:30:17:fe:d8:b0:fd:d1:65:a6:24:b4:de:
         45:65:df:c4:eb:91:d9:aa:c1:08:90:84:c3:cb:6d:da:e4:4d:
         4f:ed:6b:20:6a:db:92:61:6b:96:51:45:84:de:0b:04:f6:90:
         c2:bb:ea:be:70:16:6e:84:59:68:3d:ca:b0:e4:f8:70:f8:18:
         ca:83:7f:cd:f6:0f:c9:9a:76:ec:df:f3:fd:de:a5:6e:b1:f4:
         78:70:45:8a:37:66:a9:1b:22:37:4c:b7:20:f5:b4:a2:20:34:
         26:96:cf:e8:09:cc:49:03:f8:4b:05:9c:33:a3:a3:53:ba:7b:
         44:02:5f:91:64:1a:71:cc:57:b3:b2:cd:b0:6b:b4:90:df:4d:
         a2:b0:7d:a3:ea:0e:c6:31:fe:cb:1e:59:50:79:2a:c7:8c:9f:
         bb:71:91:a2
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICC9EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTRDNjAxMTAvBgNVBAUTKDlFRjlFNDM3NkUzNjY1MzI3NUM3OTYzNTk4RDZCNDVC
NzBBRjgwOTkwHhcNMjIwOTA3MDczNjM4WhcNMjMxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02MzE4NGEwNi0zNWFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3rpQJamMdVBv/I401nEwbG0KZbtRpQn4zMgvPMZF619YDWOfBI/jD+GDfufB
7wCWLRhZacV6eJymmftXK/BFbbrxFOV4bh8aeScwDq8SfHg11wwEpjT/CwHtrS02
8s/Yo2yyGFiY67Esa5tcW5FAq0L93WycRxZDJEs6sjBd6Fn8RYLRHUTJR8CGd7Xa
Q4yaXjQmMEm8BVM+laZfclkUux4lr72kUDRBzcXYUk1R2I04pqfjSiPT5tb38+83
ATInQUQ/vxA6EaZtPY2sch8R7CaNNRRhdYwA9Q30WqkwvfTpmTWMFIcWY/WPB6+0
MmCo7mfaqymlv2vsxuk90rUdbwIDAQABo4IClTCCApEwHQYDVR0OBBYEFJNUNl8m
PaiShIWHQUFbuiv30s4hMB8GA1UdIwQYMBaAFJ755DduNmUydceWNZjWtFtwr4CZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNEM2MC9CNTI2RkY3NEQ4
NDExMUU5QTQ1MjE0MTNDNEY5QUUwMi9udm5rTjI0MlpUSjF4NVkxbU5hMFczQ3Zn
SmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL252bmtOMjQyWlRKMXg1WTFtTmEwVzNDdmdKay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTRDNjAvQjUyNkZGNzREODQxMTFFOUE0NTIxNDEzQzRGOUFFMDIvMTJGMEQ3MkU3
QkMxMTFFQTg1MDNEODE1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnjowwDQYJKoZIhvcNAQELBQADggEBAG/EvcaPqVcUYv1F
5Y5B5VV4ypkc/l1hDSrtbk2OVDpzrQ/dDzypkuIy+8nQYfLHTHy7GVVO/1zAGaog
egT/633L5O2MNxeuOBhM1IQYaJNPVlJNbWHihhAJ21aEw4ognjAX/tiw/dFlpiS0
3kVl38TrkdmqwQiQhMPLbdrkTU/tayBq25Jha5ZRRYTeCwT2kMK76r5wFm6EWWg9
yrDk+HD4GMqDf832D8maduzf8/3epW6x9HhwRYo3ZqkbIjdMtyD1tKIgNCaWz+gJ
zEkD+EsFnDOjo1O6e0QCX5FkGnHMV7OyzbBrtJDfTaKwfaPqDsYx/sseWVB5KseM
n7txkaI=
-----END CERTIFICATE-----
Generated at Thu Dec 8 19:18:25 2022 by rpki-client.