Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A92D6/0DD9FDCAFDF911EDA69AC37EC4F9AE02/6065A88AFE0011ED89B23949C4F9AE02.roa
File:                     6065A88AFE0011ED89B23949C4F9AE02.roa (raw, json)
Hash identifier:          uv6jy/uFEL5jZ1Gl51pVfAHaXeAfetzhiQtTXI43g2c=
Subject key identifier:   CD:3B:61:97:81:E5:F4:D7:4E:3D:11:1E:85:48:97:00:47:CA:74:C5
Certificate issuer:       /CN=A91A92D6/serialNumber=C07D699447DE8AB4DD74EC330E6977AB03192662
Certificate serial:       36
Authority key identifier: C0:7D:69:94:47:DE:8A:B4:DD:74:EC:33:0E:69:77:AB:03:19:26:62
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wH1plEfeirTddOwzDml3qwMZJmI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A92D6/0DD9FDCAFDF911EDA69AC37EC4F9AE02/6065A88AFE0011ED89B23949C4F9AE02.roa
Signing time:             Tue 05 Sep 2023 05:15:11 +0000
ROA not before:           Tue 05 Sep 2023 05:15:11 +0000
ROA not after:            Thu 31 Oct 2024 00:00:00 +0000
asID:                     147040
IP address blocks:        103.194.214.0/24 maxlen: 24
                          103.194.215.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A92D6/0DD9FDCAFDF911EDA69AC37EC4F9AE02/wH1plEfeirTddOwzDml3qwMZJmI.crl
                          rsync://rpki.apnic.net/member_repository/A91A92D6/0DD9FDCAFDF911EDA69AC37EC4F9AE02/wH1plEfeirTddOwzDml3qwMZJmI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wH1plEfeirTddOwzDml3qwMZJmI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 May 2024 06:35:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 54 (0x36)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A92D6/serialNumber=C07D699447DE8AB4DD74EC330E6977AB03192662
        Validity
            Not Before: Sep  5 05:15:11 2023 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=64f6b95e-1b2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:94:5e:2d:de:98:c6:60:47:73:46:ca:56:47:
                    7c:ab:b8:36:0e:47:9c:b1:f7:93:e5:7e:b8:00:1e:
                    38:46:38:39:91:ee:0b:6e:40:36:0f:f1:f8:59:76:
                    4c:80:5b:e1:a5:fa:35:fa:f6:f3:78:c3:1a:d6:8b:
                    a6:01:1d:bf:22:ed:c1:78:89:2e:e8:e1:ab:24:82:
                    d3:d1:83:e8:ed:87:b0:19:72:c0:2b:0e:36:d2:f2:
                    c9:e7:87:61:8b:a3:77:03:71:48:76:44:df:a7:ad:
                    25:3c:46:37:16:40:22:4d:29:d4:24:8b:9f:c1:46:
                    65:30:5c:35:cb:0b:df:cf:7d:d6:11:6d:5c:aa:0d:
                    88:be:79:fb:0a:85:a2:07:40:c3:f2:ca:d3:a9:10:
                    c2:91:10:40:85:d1:d4:96:e2:1d:6a:3e:a5:7d:9d:
                    5b:2d:7a:1d:13:a2:9d:3a:39:8a:b5:c8:f6:91:bf:
                    cd:9f:22:1b:fa:57:09:f1:f4:55:e2:8b:13:e4:c0:
                    62:21:7c:67:94:c9:d4:90:2f:f1:81:a9:45:c5:10:
                    e7:8d:8b:1b:7c:7c:73:de:61:dd:e5:55:6a:84:53:
                    a8:62:b1:4b:a0:3e:dd:38:68:fd:f3:7d:61:2a:a1:
                    f9:8d:51:87:24:64:e1:a0:eb:c6:24:5d:e9:83:c8:
                    ad:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:3B:61:97:81:E5:F4:D7:4E:3D:11:1E:85:48:97:00:47:CA:74:C5
            X509v3 Authority Key Identifier:
                keyid:C0:7D:69:94:47:DE:8A:B4:DD:74:EC:33:0E:69:77:AB:03:19:26:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A92D6/0DD9FDCAFDF911EDA69AC37EC4F9AE02/wH1plEfeirTddOwzDml3qwMZJmI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wH1plEfeirTddOwzDml3qwMZJmI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A92D6/0DD9FDCAFDF911EDA69AC37EC4F9AE02/6065A88AFE0011ED89B23949C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.194.214.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c3:83:9d:6d:15:49:43:f1:86:81:03:93:26:00:12:fa:1a:2e:
         f2:7f:88:5b:c9:02:66:4c:b5:dc:20:1e:38:8c:38:3f:83:5c:
         03:67:bb:27:b2:3f:a4:51:88:96:ab:d4:44:22:67:16:ac:f1:
         e5:c1:c1:c8:fe:a3:fa:9c:1e:76:ca:02:53:a2:d0:e0:75:9f:
         b5:f4:2c:b9:bc:fb:97:e2:86:2c:9c:00:51:f3:4f:9d:b3:99:
         09:3a:18:a6:ac:4d:55:65:a9:78:10:f9:7e:dd:8b:61:9e:b9:
         87:06:3b:c3:b5:46:bc:d7:02:55:be:f6:6e:2d:78:e8:da:f2:
         c8:d9:5e:18:3a:d1:b2:c2:e8:ea:dd:ac:2f:b6:c0:ee:26:fa:
         8d:1b:07:a1:45:e5:b4:9d:3e:6b:f5:ad:27:3a:7b:9b:b6:f8:
         c5:0e:16:80:f2:04:e8:55:04:4f:1b:eb:86:06:cc:4d:72:e5:
         3d:ed:1d:17:27:60:31:fd:b8:75:83:e5:53:e6:d4:2d:4c:6a:
         89:20:9b:50:c8:fb:8e:ad:e8:65:8a:51:a9:aa:94:b0:80:26:
         98:90:c2:99:c7:c2:38:0a:42:e2:dd:63:fd:3f:d5:ba:0f:0d:
         43:a0:59:96:5f:74:6a:ac:84:b7:b9:9c:93:24:dd:3b:66:50:
         93:80:c3:07
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBNjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB
OTJENjExMC8GA1UEBRMoQzA3RDY5OTQ0N0RFOEFCNERENzRFQzMzMEU2OTc3QUIw
MzE5MjY2MjAeFw0yMzA5MDUwNTE1MTFaFw0yNDEwMzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY0ZjZiOTVlLTFiMmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCylF4t3pjGYEdzRspWR3yruDYOR5yx95PlfrgAHjhGODmR7gtuQDYP8fhZdkyA
W+Gl+jX69vN4wxrWi6YBHb8i7cF4iS7o4askgtPRg+jth7AZcsArDjbS8snnh2GL
o3cDcUh2RN+nrSU8RjcWQCJNKdQki5/BRmUwXDXLC9/PfdYRbVyqDYi+efsKhaIH
QMPyytOpEMKREECF0dSW4h1qPqV9nVsteh0Top06OYq1yPaRv82fIhv6Vwnx9FXi
ixPkwGIhfGeUydSQL/GBqUXFEOeNixt8fHPeYd3lVWqEU6hisUugPt04aP3zfWEq
ofmNUYckZOGg68YkXemDyK1bAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUzTthl4Hl
9NdOPREehUiXAEfKdMUwHwYDVR0jBBgwFoAUwH1plEfeirTddOwzDml3qwMZJmIw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE5MkQ2LzBERDlGRENBRkRG
OTExRURBNjlBQzM3RUM0RjlBRTAyL3dIMXBsRWZlaXJUZGRPd3pEbWwzcXdNWkpt
SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvd0gxcGxFZmVpclRkZE93ekRtbDNxd01aSm1JLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
OTJENi8wREQ5RkRDQUZERjkxMUVEQTY5QUMzN0VDNEY5QUUwMi82MDY1QTg4QUZF
MDAxMUVEODlCMjM5NDlDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAWfC1jANBgkqhkiG9w0BAQsFAAOCAQEAw4OdbRVJQ/GGgQOT
JgAS+hou8n+IW8kCZky13CAeOIw4P4NcA2e7J7I/pFGIlqvURCJnFqzx5cHByP6j
+pwedsoCU6LQ4HWftfQsubz7l+KGLJwAUfNPnbOZCToYpqxNVWWpeBD5ft2LYZ65
hwY7w7VGvNcCVb72bi146NryyNleGDrRssLo6t2sL7bA7ib6jRsHoUXltJ0+a/Wt
Jzp7m7b4xQ4WgPIE6FUETxvrhgbMTXLlPe0dFydgMf24dYPlU+bULUxqiSCbUMj7
jq3oZYpRqaqUsIAmmJDCmcfCOApC4t1j/T/Vug8NQ6BZll90aqyEt7mckyTdO2ZQ
k4DDBw==
-----END CERTIFICATE-----
Generated at Wed May 15 09:04:42 2024 by rpki-client on console-ams.rpki-client.org