Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA447/5F4C6CF2426211EA94C5C466C4F9AE02/07F14B9C426411EABA91B569C4F9AE02.roa
File:                     07F14B9C426411EABA91B569C4F9AE02.roa (raw, json)
Hash identifier:          nseKpzm/ZWWtW2UIWjTt9RcmdCE4ujuM4SPShmqFf3Y=
Subject key identifier:   21:46:C9:E1:D5:2B:30:8E:A1:51:12:7F:30:81:C6:DA:04:1C:8B:35
Certificate issuer:       /CN=A91BA447/serialNumber=DC98B544B16C49A98DD0585CF967242641552EA4
Certificate serial:       0A2C
Authority key identifier: DC:98:B5:44:B1:6C:49:A9:8D:D0:58:5C:F9:67:24:26:41:55:2E:A4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Ji1RLFsSamN0Fhc-WckJkFVLqQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BA447/5F4C6CF2426211EA94C5C466C4F9AE02/07F14B9C426411EABA91B569C4F9AE02.roa
Signing time:             Sun 10 Mar 2024 20:28:55 +0000
ROA not before:           Sun 10 Mar 2024 20:28:55 +0000
ROA not after:            Thu 01 May 2025 00:00:00 +0000
asID:                     140063
IP address blocks:        103.148.10.0/23 maxlen: 23
                          103.148.10.0/24 maxlen: 24
                          103.148.11.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BA447/5F4C6CF2426211EA94C5C466C4F9AE02/3Ji1RLFsSamN0Fhc-WckJkFVLqQ.crl
                          rsync://rpki.apnic.net/member_repository/A91BA447/5F4C6CF2426211EA94C5C466C4F9AE02/3Ji1RLFsSamN0Fhc-WckJkFVLqQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Ji1RLFsSamN0Fhc-WckJkFVLqQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 May 2024 20:05:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2604 (0xa2c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BA447/serialNumber=DC98B544B16C49A98DD0585CF967242641552EA4
        Validity
            Not Before: Mar 10 20:28:55 2024 GMT
            Not After : May  1 00:00:00 2025 GMT
        Subject: CN=65ee1806-c142
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:76:8f:a6:ee:47:b0:99:3d:d9:24:95:24:ec:
                    f8:6b:8b:77:af:31:0b:0c:b4:b6:96:ed:b0:9a:d8:
                    54:70:b5:c4:a4:0e:4f:fc:87:5b:7d:a5:86:22:4e:
                    c8:5f:b6:82:44:bb:76:f3:65:71:cc:eb:17:27:8f:
                    27:21:b7:96:8c:19:0d:e6:04:67:84:9b:8e:b8:d9:
                    31:63:7c:ed:4a:46:cc:80:f8:fd:31:f3:92:af:8d:
                    97:dd:91:b4:8e:b0:84:53:25:6d:57:48:81:b0:1f:
                    e6:ff:9d:05:d6:a3:bf:76:83:18:27:04:40:9b:85:
                    8d:a3:2d:60:68:0a:c0:94:98:49:5a:53:8c:c6:9a:
                    02:a9:0c:98:08:0e:33:2e:95:58:b5:cc:01:49:7e:
                    09:07:98:1c:26:65:d3:ba:42:19:e5:7a:f5:83:f0:
                    8b:4f:77:48:52:1e:17:11:3a:55:4a:cd:7d:4e:e0:
                    c2:44:bd:09:ed:24:43:ee:70:5d:25:0c:e5:64:97:
                    6b:44:ec:f8:cd:18:d4:96:76:32:4d:2b:5b:96:5f:
                    21:37:3e:70:38:e5:13:97:dd:2f:a3:6d:d7:5c:eb:
                    9f:53:6a:94:46:08:26:5f:c9:32:c8:43:dc:ea:fd:
                    e4:2a:72:c8:56:86:26:65:9a:ca:72:2a:44:2f:21:
                    73:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:46:C9:E1:D5:2B:30:8E:A1:51:12:7F:30:81:C6:DA:04:1C:8B:35
            X509v3 Authority Key Identifier:
                keyid:DC:98:B5:44:B1:6C:49:A9:8D:D0:58:5C:F9:67:24:26:41:55:2E:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BA447/5F4C6CF2426211EA94C5C466C4F9AE02/3Ji1RLFsSamN0Fhc-WckJkFVLqQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Ji1RLFsSamN0Fhc-WckJkFVLqQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA447/5F4C6CF2426211EA94C5C466C4F9AE02/07F14B9C426411EABA91B569C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.148.10.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2d:58:12:ba:39:4b:fb:63:f4:83:ef:cc:fe:78:98:fc:a4:60:
         93:19:69:51:14:53:85:34:df:fc:4d:e5:af:de:11:ee:5f:bc:
         05:1d:06:ba:36:5c:08:c8:e4:a2:5f:e5:82:1d:fc:fc:85:14:
         98:58:15:fd:8f:12:d8:41:76:ea:34:be:bc:6f:9a:c9:f1:4e:
         7d:29:22:4c:ca:fe:99:c7:67:d2:6e:32:f8:b6:6d:22:5e:fc:
         49:3c:e2:5d:1f:06:69:d7:8e:08:bc:fa:72:bc:d1:e7:44:11:
         c3:e0:46:22:15:b5:92:e9:41:3c:48:f6:85:f2:e1:33:3a:0d:
         dc:b8:a8:6a:03:83:0c:e0:55:d3:ca:46:29:36:43:c8:54:70:
         7b:94:84:ca:11:fa:89:27:10:08:d9:6f:f9:e0:e1:f8:70:ae:
         bd:d8:45:32:1f:82:36:19:b6:7b:73:08:fb:42:6e:69:87:1e:
         d0:27:b6:a6:4f:28:85:16:cc:1a:b9:74:d7:65:d0:59:eb:cd:
         15:cf:48:0e:51:38:9d:b3:a6:c6:07:ca:7c:52:3e:e8:9f:e0:
         62:08:42:78:87:74:25:85:dd:c4:f5:cf:fd:54:0f:f5:e4:2c:
         99:93:ed:24:32:67:f1:87:1a:bb:c3:a4:ab:74:fc:93:4c:8c:
         c8:a3:bf:07
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICCiwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkE0NDcxMTAvBgNVBAUTKERDOThCNTQ0QjE2QzQ5QTk4REQwNTg1Q0Y5NjcyNDI2
NDE1NTJFQTQwHhcNMjQwMzEwMjAyODU1WhcNMjUwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NWVlMTgwNi1jMTQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA13aPpu5HsJk92SSVJOz4a4t3rzELDLS2lu2wmthUcLXEpA5P/IdbfaWGIk7I
X7aCRLt282VxzOsXJ48nIbeWjBkN5gRnhJuOuNkxY3ztSkbMgPj9MfOSr42X3ZG0
jrCEUyVtV0iBsB/m/50F1qO/doMYJwRAm4WNoy1gaArAlJhJWlOMxpoCqQyYCA4z
LpVYtcwBSX4JB5gcJmXTukIZ5Xr1g/CLT3dIUh4XETpVSs19TuDCRL0J7SRD7nBd
JQzlZJdrROz4zRjUlnYyTStbll8hNz5wOOUTl90vo23XXOufU2qURggmX8kyyEPc
6v3kKnLIVoYmZZrKcipELyFzFwIDAQABo4IClTCCApEwHQYDVR0OBBYEFCFGyeHV
KzCOoVESfzCBxtoEHIs1MB8GA1UdIwQYMBaAFNyYtUSxbEmpjdBYXPlnJCZBVS6k
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTQ0Ny81RjRDNkNGMjQy
NjIxMUVBOTRDNUM0NjZDNEY5QUUwMi8zSmkxUkxGc1NhbU4wRmhjLVdja0prRlZM
cVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzNKaTFSTEZzU2FtTjBGaGMtV2NrSmtGVkxxUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QkE0NDcvNUY0QzZDRjI0MjYyMTFFQTk0QzVDNDY2QzRGOUFFMDIvMDdGMTRCOUM0
MjY0MTFFQUJBOTFCNTY5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnlAowDQYJKoZIhvcNAQELBQADggEBAC1YEro5S/tj9IPv
zP54mPykYJMZaVEUU4U03/xN5a/eEe5fvAUdBro2XAjI5KJf5YId/PyFFJhYFf2P
EthBduo0vrxvmsnxTn0pIkzK/pnHZ9JuMvi2bSJe/Ek84l0fBmnXjgi8+nK80edE
EcPgRiIVtZLpQTxI9oXy4TM6Ddy4qGoDgwzgVdPKRik2Q8hUcHuUhMoR+oknEAjZ
b/ng4fhwrr3YRTIfgjYZtntzCPtCbmmHHtAntqZPKIUWzBq5dNdl0FnrzRXPSA5R
OJ2zpsYHynxSPuif4GIIQniHdCWF3cT1z/1UD/XkLJmT7SQyZ/GHGrvDpKt0/JNM
jMijvwc=
-----END CERTIFICATE-----
Generated at Thu May 16 21:45:30 2024 by rpki-client on console-fra.rpki-client.org