Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B65E6/87D1ED067A8711EB908EBD63C4F9AE02/75B4176E7A8911EBADBE8982C4F9AE02.roa
File:                     75B4176E7A8911EBADBE8982C4F9AE02.roa (raw, json)
Hash identifier:          iB3Fjk+C6wiccfFbjHV2/10/LVT/E+oQHbHUDtraWAc=
Subject key identifier:   7F:F1:B3:74:7D:C0:75:9B:6A:2A:9B:6B:4D:BF:99:01:D7:77:68:AD
Certificate issuer:       /CN=A91B65E6/serialNumber=88782F831F369E96F979A2585CF273C916C7B4FD
Certificate serial:       055D
Authority key identifier: 88:78:2F:83:1F:36:9E:96:F9:79:A2:58:5C:F2:73:C9:16:C7:B4:FD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iHgvgx82npb5eaJYXPJzyRbHtP0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B65E6/87D1ED067A8711EB908EBD63C4F9AE02/75B4176E7A8911EBADBE8982C4F9AE02.roa
Signing time:             Fri 03 Nov 2023 00:12:09 +0000
ROA not before:           Fri 03 Nov 2023 00:12:09 +0000
ROA not after:            Mon 30 Dec 2024 00:00:00 +0000
asID:                     133448
IP address blocks:        103.101.188.0/24 maxlen: 24
                          103.101.191.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B65E6/87D1ED067A8711EB908EBD63C4F9AE02/iHgvgx82npb5eaJYXPJzyRbHtP0.crl
                          rsync://rpki.apnic.net/member_repository/A91B65E6/87D1ED067A8711EB908EBD63C4F9AE02/iHgvgx82npb5eaJYXPJzyRbHtP0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iHgvgx82npb5eaJYXPJzyRbHtP0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 10 May 2024 00:21:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1373 (0x55d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B65E6/serialNumber=88782F831F369E96F979A2585CF273C916C7B4FD
        Validity
            Not Before: Nov  3 00:12:09 2023 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=65443ad9-6b3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:12:29:55:1c:a4:9d:99:c5:1d:5a:95:c0:c7:
                    57:8d:26:09:13:63:2c:6c:f5:4a:6e:db:11:23:dc:
                    11:03:fa:49:fb:86:44:e3:26:e3:18:d0:e3:44:0a:
                    26:fe:dd:8a:46:6b:db:c9:e0:bc:11:25:fd:51:3a:
                    7b:db:8e:ee:5e:a5:78:39:04:0c:e0:02:a5:8a:b6:
                    31:50:51:c2:2d:2e:4c:f3:1f:08:cf:08:41:5e:82:
                    eb:f2:ab:c4:c0:4a:b2:93:cd:c9:d8:71:25:66:2e:
                    92:a5:d1:a6:92:ae:65:21:37:f6:66:54:36:87:2f:
                    7a:23:61:51:9f:4b:4f:28:dd:d2:a8:52:48:02:da:
                    0d:9f:60:05:90:77:43:7f:e1:b0:a9:08:80:c5:83:
                    71:47:cc:89:7a:e9:48:80:76:4b:12:16:95:43:66:
                    05:32:f5:72:bf:f8:a3:72:d3:64:ec:7a:4b:54:9a:
                    0a:15:55:8f:7d:f9:dd:2c:8c:82:fd:cc:a5:ef:82:
                    84:ba:a7:2a:52:fd:97:7d:4a:a5:f6:9c:f0:87:73:
                    b5:b8:db:71:2e:4a:a5:77:d3:19:20:6a:f8:99:03:
                    7c:ff:10:3b:41:a3:68:13:d0:3b:cc:24:d3:2c:6b:
                    07:ff:40:f9:af:d1:43:98:ee:ef:58:d3:2f:3b:ed:
                    a1:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:F1:B3:74:7D:C0:75:9B:6A:2A:9B:6B:4D:BF:99:01:D7:77:68:AD
            X509v3 Authority Key Identifier:
                keyid:88:78:2F:83:1F:36:9E:96:F9:79:A2:58:5C:F2:73:C9:16:C7:B4:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B65E6/87D1ED067A8711EB908EBD63C4F9AE02/iHgvgx82npb5eaJYXPJzyRbHtP0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iHgvgx82npb5eaJYXPJzyRbHtP0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B65E6/87D1ED067A8711EB908EBD63C4F9AE02/75B4176E7A8911EBADBE8982C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.101.188.0/24
                  103.101.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:56:9c:e0:9b:6b:3b:09:d1:89:11:34:21:a1:00:03:cd:43:
         17:6f:37:94:b1:8a:24:fd:63:08:7d:02:7e:49:a7:34:20:75:
         79:eb:39:fd:93:2f:5f:82:14:e8:df:c0:6b:c1:21:8d:82:bb:
         2d:ef:6f:78:38:4f:35:1b:c1:db:6a:3a:0f:f3:1e:5e:7f:38:
         3c:02:50:a1:72:a1:62:5a:54:8a:a5:bd:43:13:e6:11:b4:f3:
         1c:e2:97:4f:db:c4:14:7d:8f:b5:83:7c:6c:94:72:8c:3c:0c:
         21:3b:d1:cc:91:15:56:3f:52:5f:11:df:e4:d4:eb:38:e4:68:
         a2:01:32:b5:56:c9:42:f4:7a:22:3c:6c:fb:5e:99:6e:af:4c:
         67:9c:51:44:ea:d2:48:31:52:80:aa:35:54:47:fa:50:63:82:
         1c:86:50:01:1f:06:17:7e:39:3c:6e:dd:d1:63:b6:b1:97:23:
         8b:ef:a6:5a:d3:82:67:6d:91:ec:5a:ef:71:68:be:d5:79:75:
         fa:e3:d8:5d:7d:76:f6:d2:98:5e:d5:e1:1c:d4:f5:45:7f:f4:
         e1:05:02:2a:5d:d6:39:26:8a:46:7b:23:a5:7c:f6:49:43:a2:
         38:8f:df:76:60:ab:48:73:90:21:07:51:2a:30:88:08:0c:4a:
         a6:97:c4:08
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICBV0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjY1RTYxMTAvBgNVBAUTKDg4NzgyRjgzMUYzNjlFOTZGOTc5QTI1ODVDRjI3M0M5
MTZDN0I0RkQwHhcNMjMxMTAzMDAxMjA5WhcNMjQxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NTQ0M2FkOS02YjNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1hIpVRyknZnFHVqVwMdXjSYJE2MsbPVKbtsRI9wRA/pJ+4ZE4ybjGNDjRAom
/t2KRmvbyeC8ESX9UTp7247uXqV4OQQM4AKlirYxUFHCLS5M8x8IzwhBXoLr8qvE
wEqyk83J2HElZi6SpdGmkq5lITf2ZlQ2hy96I2FRn0tPKN3SqFJIAtoNn2AFkHdD
f+GwqQiAxYNxR8yJeulIgHZLEhaVQ2YFMvVyv/ijctNk7HpLVJoKFVWPffndLIyC
/cyl74KEuqcqUv2XfUql9pzwh3O1uNtxLkqld9MZIGr4mQN8/xA7QaNoE9A7zCTT
LGsH/0D5r9FDmO7vWNMvO+2hIQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFH/xs3R9
wHWbaiqba02/mQHXd2itMB8GA1UdIwQYMBaAFIh4L4MfNp6W+XmiWFzyc8kWx7T9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjVFNi84N0QxRUQwNjdB
ODcxMUVCOTA4RUJENjNDNEY5QUUwMi9pSGd2Z3g4Mm5wYjVlYUpZWFBKenlSYkh0
UDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2lIZ3ZneDgybnBiNWVhSllYUEp6eVJiSHRQMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QjY1RTYvODdEMUVEMDY3QTg3MTFFQjkwOEVCRDYzQzRGOUFFMDIvNzVCNDE3NkU3
QTg5MTFFQkFEQkU4OTgyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBABnZbwDBABnZb8wDQYJKoZIhvcNAQELBQADggEBAF9WnOCb
azsJ0YkRNCGhAAPNQxdvN5SxiiT9Ywh9An5JpzQgdXnrOf2TL1+CFOjfwGvBIY2C
uy3vb3g4TzUbwdtqOg/zHl5/ODwCUKFyoWJaVIqlvUMT5hG08xzil0/bxBR9j7WD
fGyUcow8DCE70cyRFVY/Ul8R3+TU6zjkaKIBMrVWyUL0eiI8bPtemW6vTGecUUTq
0kgxUoCqNVRH+lBjghyGUAEfBhd+OTxu3dFjtrGXI4vvplrTgmdtkexa73FovtV5
dfrj2F19dvbSmF7V4RzU9UV/9OEFAipd1jkmikZ7I6V89klDojiP33Zgq0hzkCEH
USowiAgMSqaXxAg=
-----END CERTIFICATE-----
Generated at Fri May 3 01:30:27 2024 by rpki-client on console-fra.rpki-client.org