Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE6B9/526E16A4044E11EA8442D40FC4F9AE02/D91746DE044F11EA8C37D012C4F9AE02.roa
File:                     D91746DE044F11EA8C37D012C4F9AE02.roa (raw, json)
Hash identifier:          DsvVVTAja1HxBFFoPVI14G+L8aNSXctmjV2ADcNrbXw=
Subject key identifier:   AA:C6:18:38:2E:07:AE:DA:78:C8:B9:A7:6D:E2:CD:36:10:C6:79:02
Certificate issuer:       /CN=A91AE6B9/serialNumber=DEA2D0260C17095167E1E3BCD65989FE7647CB6A
Certificate serial:       0B1A
Authority key identifier: DE:A2:D0:26:0C:17:09:51:67:E1:E3:BC:D6:59:89:FE:76:47:CB:6A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3qLQJgwXCVFn4eO81lmJ_nZHy2o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AE6B9/526E16A4044E11EA8442D40FC4F9AE02/D91746DE044F11EA8C37D012C4F9AE02.roa
Signing time:             Wed 18 Oct 2023 19:07:19 +0000
ROA not before:           Wed 18 Oct 2023 19:07:19 +0000
ROA not after:            Mon 30 Dec 2024 00:00:00 +0000
asID:                     139722
IP address blocks:        103.144.42.0/23 maxlen: 23
                          103.144.42.0/24 maxlen: 24
                          103.144.43.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AE6B9/526E16A4044E11EA8442D40FC4F9AE02/3qLQJgwXCVFn4eO81lmJ_nZHy2o.crl
                          rsync://rpki.apnic.net/member_repository/A91AE6B9/526E16A4044E11EA8442D40FC4F9AE02/3qLQJgwXCVFn4eO81lmJ_nZHy2o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3qLQJgwXCVFn4eO81lmJ_nZHy2o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 May 2024 19:28:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2842 (0xb1a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AE6B9/serialNumber=DEA2D0260C17095167E1E3BCD65989FE7647CB6A
        Validity
            Not Before: Oct 18 19:07:19 2023 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=65302ce7-92de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ac:e9:e3:9a:51:1e:19:28:42:a1:e1:65:64:
                    45:b0:21:1c:41:8c:ab:b1:3a:ed:50:7e:e1:76:65:
                    a8:4e:6e:bd:c0:31:fe:df:20:5a:84:24:36:09:ec:
                    da:80:5d:cc:91:49:72:fb:3e:57:ed:9d:3e:cd:bb:
                    77:ca:b0:34:5a:6b:cf:98:77:60:e2:41:ff:e1:fd:
                    cf:61:70:86:8f:93:de:7d:a0:78:bd:27:6e:bd:ae:
                    41:45:51:35:0e:c7:d2:6d:c5:11:bc:2a:c0:71:b8:
                    e8:90:f7:8b:5e:3d:05:c1:38:43:71:20:65:2d:d0:
                    c0:da:8a:29:9a:fe:f9:5f:46:b6:98:4d:6d:38:5e:
                    1e:0c:67:87:25:bb:9b:21:fc:59:5a:17:e2:6e:6e:
                    b0:29:56:e3:6c:65:3d:19:2d:41:de:63:cf:67:af:
                    9e:da:1b:0c:df:b5:e8:45:92:70:13:54:2a:d2:48:
                    dd:af:21:65:cc:ef:fd:47:96:a3:66:a6:37:ce:e2:
                    3c:ce:be:02:65:e2:3f:95:61:bf:8f:1e:69:60:62:
                    93:2f:7f:9b:d9:98:9f:00:61:72:b6:48:9c:ea:dd:
                    b1:60:40:79:5c:63:15:be:28:bb:6a:c6:49:5f:d8:
                    bf:46:e6:c8:c8:55:12:39:94:52:9b:34:f3:9f:e3:
                    88:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:C6:18:38:2E:07:AE:DA:78:C8:B9:A7:6D:E2:CD:36:10:C6:79:02
            X509v3 Authority Key Identifier:
                keyid:DE:A2:D0:26:0C:17:09:51:67:E1:E3:BC:D6:59:89:FE:76:47:CB:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AE6B9/526E16A4044E11EA8442D40FC4F9AE02/3qLQJgwXCVFn4eO81lmJ_nZHy2o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3qLQJgwXCVFn4eO81lmJ_nZHy2o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE6B9/526E16A4044E11EA8442D40FC4F9AE02/D91746DE044F11EA8C37D012C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.144.42.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2f:ef:23:cb:f6:22:cc:47:39:86:92:61:0e:ee:6a:87:5f:aa:
         d5:74:89:a1:7a:fa:12:1c:bd:a7:2a:7f:0a:40:ca:c1:27:0c:
         c9:99:be:ff:f9:c4:42:57:73:ca:a6:29:02:33:0d:68:d4:84:
         91:57:6a:e1:88:09:86:c4:62:58:0e:24:45:f2:83:30:93:43:
         58:d6:51:d4:c6:a0:fe:90:53:aa:54:39:e4:e2:67:f2:d1:66:
         ef:15:ad:c7:b6:d4:8b:fa:29:f8:c1:13:34:7f:c0:b3:2b:38:
         bd:7a:b2:f9:ec:fc:ae:5a:18:3a:d1:95:a7:88:5c:86:5a:2d:
         c3:73:50:dd:ed:cd:c3:ea:e9:2a:67:78:4f:5c:73:1b:57:e3:
         89:9d:0d:da:3f:56:f4:38:29:d4:8f:38:61:6f:e7:a8:53:67:
         b6:77:52:59:4e:15:7c:25:64:86:17:91:21:cd:2d:e3:da:7e:
         7d:03:cf:fb:3e:ac:10:98:c7:a9:f3:69:b5:29:7c:2d:3e:89:
         59:85:fe:dd:52:2d:7b:b7:fd:26:d6:b9:92:79:b9:1a:b8:75:
         4e:b4:f0:50:38:ef:03:0d:c4:2c:9f:bb:c6:ee:89:1c:53:3b:
         eb:6d:18:5c:7a:3b:98:0e:79:f0:15:3c:9a:62:f9:c9:0a:c9:
         48:8b:7f:e4
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICCxowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUU2QjkxMTAvBgNVBAUTKERFQTJEMDI2MEMxNzA5NTE2N0UxRTNCQ0Q2NTk4OUZF
NzY0N0NCNkEwHhcNMjMxMDE4MTkwNzE5WhcNMjQxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NTMwMmNlNy05MmRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyKzp45pRHhkoQqHhZWRFsCEcQYyrsTrtUH7hdmWoTm69wDH+3yBahCQ2Ceza
gF3MkUly+z5X7Z0+zbt3yrA0WmvPmHdg4kH/4f3PYXCGj5PefaB4vSduva5BRVE1
DsfSbcURvCrAcbjokPeLXj0FwThDcSBlLdDA2oopmv75X0a2mE1tOF4eDGeHJbub
IfxZWhfibm6wKVbjbGU9GS1B3mPPZ6+e2hsM37XoRZJwE1Qq0kjdryFlzO/9R5aj
ZqY3zuI8zr4CZeI/lWG/jx5pYGKTL3+b2ZifAGFytkic6t2xYEB5XGMVvii7asZJ
X9i/RubIyFUSOZRSmzTzn+OIgwIDAQABo4IClTCCApEwHQYDVR0OBBYEFKrGGDgu
B67aeMi5p23izTYQxnkCMB8GA1UdIwQYMBaAFN6i0CYMFwlRZ+HjvNZZif52R8tq
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTZCOS81MjZFMTZBNDA0
NEUxMUVBODQ0MkQ0MEZDNEY5QUUwMi8zcUxRSmd3WENWRm40ZU84MWxtSl9uWkh5
Mm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzNxTFFKZ3dYQ1ZGbjRlTzgxbG1KX25aSHkyby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QUU2QjkvNTI2RTE2QTQwNDRFMTFFQTg0NDJENDBGQzRGOUFFMDIvRDkxNzQ2REUw
NDRGMTFFQThDMzdEMDEyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnkCowDQYJKoZIhvcNAQELBQADggEBAC/vI8v2IsxHOYaS
YQ7uaodfqtV0iaF6+hIcvacqfwpAysEnDMmZvv/5xEJXc8qmKQIzDWjUhJFXauGI
CYbEYlgOJEXygzCTQ1jWUdTGoP6QU6pUOeTiZ/LRZu8Vrce21Iv6KfjBEzR/wLMr
OL16svns/K5aGDrRlaeIXIZaLcNzUN3tzcPq6SpneE9ccxtX44mdDdo/VvQ4KdSP
OGFv56hTZ7Z3UllOFXwlZIYXkSHNLePafn0Dz/s+rBCYx6nzabUpfC0+iVmF/t1S
LXu3/SbWuZJ5uRq4dU608FA47wMNxCyfu8buiRxTO+ttGFx6O5gOefAVPJpi+ckK
yUiLf+Q=
-----END CERTIFICATE-----
Generated at Thu May 16 21:45:30 2024 by rpki-client on console-fra.rpki-client.org