Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B59E5/DD9F1F7C3C0111EE91CBE157C4F9AE02/E4F793820D0F11EFA952D612C4F9AE02.roa
File:                     E4F793820D0F11EFA952D612C4F9AE02.roa (raw, json)
Hash identifier:          OqzM42QXXFH2NckefeYA/OPzFySgAqDxSFM4hp52Nbc=
Subject key identifier:   99:CF:78:1E:AE:F2:A7:0E:F8:7B:46:1E:E8:AF:4C:5C:04:6F:8B:E2
Certificate issuer:       /CN=A91B59E5/serialNumber=E47BF70254532697D20D0D3110F625370D65FA83
Certificate serial:       C7
Authority key identifier: E4:7B:F7:02:54:53:26:97:D2:0D:0D:31:10:F6:25:37:0D:65:FA:83
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B59E5/DD9F1F7C3C0111EE91CBE157C4F9AE02/E4F793820D0F11EFA952D612C4F9AE02.roa
Signing time:             Wed 08 May 2024 07:52:19 +0000
ROA not before:           Wed 08 May 2024 07:52:19 +0000
ROA not after:            Sun 01 Dec 2024 00:00:00 +0000
asID:                     134475
IP address blocks:        103.237.112.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B59E5/DD9F1F7C3C0111EE91CBE157C4F9AE02/5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.crl
                          rsync://rpki.apnic.net/member_repository/A91B59E5/DD9F1F7C3C0111EE91CBE157C4F9AE02/5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 07:43:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 199 (0xc7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B59E5/serialNumber=E47BF70254532697D20D0D3110F625370D65FA83
        Validity
            Not Before: May  8 07:52:19 2024 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=663b2f33-306a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:4e:94:42:58:70:6c:9d:e4:29:00:3a:01:d2:
                    56:7d:b7:b8:a6:dd:3b:40:f3:18:41:32:a6:cc:39:
                    78:b2:62:25:09:3f:40:ec:45:50:ec:9e:2a:1e:94:
                    25:b6:59:cc:c7:c4:7e:c4:78:9d:4c:e2:ac:47:b1:
                    76:db:e6:b4:a4:a5:5c:73:1f:23:5f:d4:ef:8f:23:
                    89:29:3d:8f:bc:dd:15:90:49:39:95:c7:d9:24:d2:
                    9d:ba:b7:27:df:70:cb:0a:2c:0b:ab:74:65:4b:ed:
                    09:fa:4f:14:51:68:4b:25:80:b3:8c:03:f5:7d:89:
                    5c:af:ca:a6:ba:05:53:69:20:eb:8a:0b:8d:32:f6:
                    13:2c:54:63:ad:a8:1c:b8:4e:86:2a:34:15:26:db:
                    bd:14:14:c3:f1:2e:da:3d:c0:24:3b:e5:78:87:83:
                    d9:2c:8a:1e:37:f8:38:9e:00:2d:38:55:54:7a:06:
                    dc:29:b7:36:d3:15:7d:c3:56:ad:dc:25:e1:fa:19:
                    be:71:d4:6a:a8:37:82:7b:86:15:ab:35:bf:93:0f:
                    42:e9:0d:01:fc:0b:69:5c:0b:87:05:5d:f5:64:b7:
                    5a:9e:cd:38:9e:94:be:37:82:1b:37:15:38:c9:5a:
                    b0:e3:60:fc:9a:79:ab:b7:66:41:09:8b:29:e3:f0:
                    79:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:CF:78:1E:AE:F2:A7:0E:F8:7B:46:1E:E8:AF:4C:5C:04:6F:8B:E2
            X509v3 Authority Key Identifier:
                keyid:E4:7B:F7:02:54:53:26:97:D2:0D:0D:31:10:F6:25:37:0D:65:FA:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B59E5/DD9F1F7C3C0111EE91CBE157C4F9AE02/5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B59E5/DD9F1F7C3C0111EE91CBE157C4F9AE02/E4F793820D0F11EFA952D612C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.237.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:82:a8:d5:04:97:ef:0f:cc:0b:c2:07:06:d0:28:e8:08:23:
         4b:87:f5:c8:92:58:59:2f:87:a4:5c:2d:45:1c:54:44:65:72:
         74:6d:24:cf:6d:dc:a7:37:dc:62:4d:70:68:fe:77:5f:11:78:
         40:e3:78:31:6b:2e:54:a9:74:f8:d1:25:13:6e:03:a2:ba:09:
         32:7d:76:dc:35:32:b1:3e:14:01:e3:dd:84:b6:f2:a1:8c:9b:
         ce:26:6e:f4:95:3e:4d:65:fc:76:52:95:37:04:99:3d:2c:d5:
         bb:91:79:12:e6:c5:b0:3b:71:a9:98:4b:e6:53:55:90:13:3a:
         07:9f:62:f7:34:f7:5a:c8:d6:2d:26:7a:9c:86:39:d0:05:02:
         33:96:d5:9f:4d:57:67:a1:9f:bb:b5:77:57:a5:06:75:c8:2a:
         ec:e0:b4:d6:11:65:3f:30:38:86:61:24:23:db:ca:4c:2a:70:
         02:d6:d1:6d:27:1f:c1:8f:30:19:33:90:2d:d7:d9:26:56:53:
         e6:ab:90:0d:1c:b1:23:a8:b0:54:47:63:0b:19:3f:1c:62:df:
         b5:87:bd:c5:99:ba:06:06:34:d7:03:c5:6a:36:ce:1d:80:c6:
         45:a3:2e:6d:cf:1c:72:c9:29:ec:74:88:34:65:9f:f6:81:62:
         79:75:56:81
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAMcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjU5RTUxMTAvBgNVBAUTKEU0N0JGNzAyNTQ1MzI2OTdEMjBEMEQzMTEwRjYyNTM3
MEQ2NUZBODMwHhcNMjQwNTA4MDc1MjE5WhcNMjQxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NjNiMmYzMy0zMDZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6k6UQlhwbJ3kKQA6AdJWfbe4pt07QPMYQTKmzDl4smIlCT9A7EVQ7J4qHpQl
tlnMx8R+xHidTOKsR7F22+a0pKVccx8jX9TvjyOJKT2PvN0VkEk5lcfZJNKdurcn
33DLCiwLq3RlS+0J+k8UUWhLJYCzjAP1fYlcr8qmugVTaSDriguNMvYTLFRjragc
uE6GKjQVJtu9FBTD8S7aPcAkO+V4h4PZLIoeN/g4ngAtOFVUegbcKbc20xV9w1at
3CXh+hm+cdRqqDeCe4YVqzW/kw9C6Q0B/AtpXAuHBV31ZLdans04npS+N4IbNxU4
yVqw42D8mnmrt2ZBCYsp4/B5UQIDAQABo4IClTCCApEwHQYDVR0OBBYEFJnPeB6u
8qcO+HtGHuivTFwEb4viMB8GA1UdIwQYMBaAFOR79wJUUyaX0g0NMRD2JTcNZfqD
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTlFNS9ERDlGMUY3QzND
MDExMUVFOTFDQkUxNTdDNEY5QUUwMi81SHYzQWxSVEpwZlNEUTB4RVBZbE53MWwt
b00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzVIdjNBbFJUSnBmU0RRMHhFUFlsTncxbC1vTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QjU5RTUvREQ5RjFGN0MzQzAxMTFFRTkxQ0JFMTU3QzRGOUFFMDIvRTRGNzkzODIw
RDBGMTFFRkE5NTJENjEyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABn7XAwDQYJKoZIhvcNAQELBQADggEBABaCqNUEl+8PzAvC
BwbQKOgII0uH9ciSWFkvh6RcLUUcVERlcnRtJM9t3Kc33GJNcGj+d18ReEDjeDFr
LlSpdPjRJRNuA6K6CTJ9dtw1MrE+FAHj3YS28qGMm84mbvSVPk1l/HZSlTcEmT0s
1buReRLmxbA7camYS+ZTVZATOgefYvc091rI1i0mepyGOdAFAjOW1Z9NV2ehn7u1
d1elBnXIKuzgtNYRZT8wOIZhJCPbykwqcALW0W0nH8GPMBkzkC3X2SZWU+arkA0c
sSOosFRHYwsZPxxi37WHvcWZugYGNNcDxWo2zh2AxkWjLm3PHHLJKex0iDRln/aB
Ynl1VoE=
-----END CERTIFICATE-----
Generated at Sat Jun 1 09:10:37 2024 by rpki-client on console-fra.rpki-client.org