Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/827329BE232B11EBB2348B23C4F9AE02.roa
File:                     827329BE232B11EBB2348B23C4F9AE02.roa (raw, json)
Hash identifier:          f39v6ygeXRAjdPY64BJbuZ+UIBj1N1Eycl4ErcVzWRs=
Subject key identifier:   20:02:94:BC:96:6B:21:AE:6B:CC:FE:71:71:CB:4E:F0:18:AE:F2:E9
Certificate issuer:       /CN=A91BB94D/serialNumber=747C86C3CC14A77973805315408CDCA10A2147B2
Certificate serial:       062E
Authority key identifier: 74:7C:86:C3:CC:14:A7:79:73:80:53:15:40:8C:DC:A1:0A:21:47:B2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dHyGw8wUp3lzgFMVQIzcoQohR7I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/827329BE232B11EBB2348B23C4F9AE02.roa
Signing time:             Wed 20 Sep 2023 22:40:45 +0000
ROA not before:           Wed 20 Sep 2023 22:40:45 +0000
ROA not after:            Thu 31 Oct 2024 00:00:00 +0000
asID:                     137969
IP address blocks:        103.153.100.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.crl
                          rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dHyGw8wUp3lzgFMVQIzcoQohR7I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 May 2024 23:21:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1582 (0x62e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BB94D/serialNumber=747C86C3CC14A77973805315408CDCA10A2147B2
        Validity
            Not Before: Sep 20 22:40:45 2023 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=650b74ed-45a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:cd:46:ab:aa:e2:01:fd:3b:44:01:87:1f:b4:
                    49:5e:0a:36:d4:d4:37:be:f1:e3:5b:79:d8:0b:f0:
                    5a:41:7f:51:ba:aa:1f:52:2a:36:51:3a:62:b9:9c:
                    23:f5:99:94:e1:fc:ed:36:31:e3:72:48:af:23:7b:
                    04:7f:08:32:6d:88:b0:82:36:19:1e:6b:eb:49:88:
                    49:f7:78:66:6a:7e:54:ad:37:f2:bf:19:14:ad:72:
                    13:c5:73:8d:31:5a:3b:6b:be:cb:0d:d4:12:9f:92:
                    ed:16:5e:a0:38:49:c8:08:ec:6b:46:be:9f:fe:8c:
                    4a:7d:e6:c7:0c:06:1b:d0:0d:23:3a:fc:19:f2:4d:
                    b6:dc:4c:79:ec:cb:b7:de:6d:c6:a9:e8:66:b7:90:
                    ef:b0:ad:2d:82:8f:bd:2d:b6:9b:e8:61:f2:f1:0f:
                    99:98:52:a4:b3:cf:9d:73:0b:67:5e:65:57:95:e9:
                    e8:a1:d9:5b:38:cd:cf:cb:f3:4f:27:ba:67:90:5a:
                    c0:27:1e:9a:ca:d4:1a:99:c9:62:db:89:08:c8:3a:
                    8d:0d:cf:fc:00:e9:7a:9c:5e:dc:1b:17:f8:42:5d:
                    74:2a:1b:d2:6c:95:0e:98:68:62:5d:3b:db:ee:69:
                    1f:61:bb:3f:dc:c8:c0:ad:d8:ef:8b:4a:e5:1c:4f:
                    ce:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:02:94:BC:96:6B:21:AE:6B:CC:FE:71:71:CB:4E:F0:18:AE:F2:E9
            X509v3 Authority Key Identifier:
                keyid:74:7C:86:C3:CC:14:A7:79:73:80:53:15:40:8C:DC:A1:0A:21:47:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dHyGw8wUp3lzgFMVQIzcoQohR7I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/827329BE232B11EBB2348B23C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.153.100.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ae:5f:a2:20:5c:9c:27:57:4c:43:8e:fb:c3:19:91:05:dc:71:
         61:ef:82:7d:26:74:d1:a3:ae:d6:0e:9a:96:da:26:13:4b:24:
         e1:0a:17:0a:01:c1:50:b8:02:93:fa:61:05:6f:a7:88:f8:d2:
         72:80:c9:ec:a1:44:f7:ee:01:6d:0e:e3:31:48:a9:09:3a:98:
         46:28:07:ae:58:a5:4b:65:92:df:89:78:f6:d2:1b:58:78:5d:
         c2:92:2c:2e:83:ae:51:9f:67:dd:2a:e4:a9:c2:1a:05:b3:5e:
         46:90:fc:d0:e2:14:a2:29:2f:7a:70:ba:c5:2a:d5:66:85:b1:
         b0:7e:29:ac:5d:57:41:ba:5e:76:21:9c:f0:8d:12:50:ca:a2:
         2e:80:9e:71:34:d3:66:a6:13:ef:ca:1d:25:79:6b:df:83:b7:
         53:57:33:6c:67:51:bc:1c:64:15:24:d4:c6:94:ed:ee:4f:f1:
         bf:f3:5e:bd:f4:20:68:38:fd:2e:20:20:b6:03:2a:a0:ca:b8:
         a0:17:d2:da:19:92:70:45:2a:32:20:39:3a:99:f6:95:bc:5a:
         2c:15:1b:a7:ef:57:18:80:ed:c5:1b:ca:88:dd:66:64:fe:4b:
         51:68:61:2a:2b:7d:1e:bd:17:19:5e:0c:fd:6f:01:99:dc:8e:
         d6:e9:b7:1b
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBi4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkI5NEQxMTAvBgNVBAUTKDc0N0M4NkMzQ0MxNEE3Nzk3MzgwNTMxNTQwOENEQ0Ex
MEEyMTQ3QjIwHhcNMjMwOTIwMjI0MDQ1WhcNMjQxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NTBiNzRlZC00NWE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA381Gq6riAf07RAGHH7RJXgo21NQ3vvHjW3nYC/BaQX9RuqofUio2UTpiuZwj
9ZmU4fztNjHjckivI3sEfwgybYiwgjYZHmvrSYhJ93hman5UrTfyvxkUrXITxXON
MVo7a77LDdQSn5LtFl6gOEnICOxrRr6f/oxKfebHDAYb0A0jOvwZ8k223Ex57Mu3
3m3Gqehmt5DvsK0tgo+9Lbab6GHy8Q+ZmFKks8+dcwtnXmVXlenoodlbOM3Py/NP
J7pnkFrAJx6aytQamcli24kIyDqNDc/8AOl6nF7cGxf4Ql10KhvSbJUOmGhiXTvb
7mkfYbs/3MjArdjvi0rlHE/ODwIDAQABo4IClTCCApEwHQYDVR0OBBYEFCAClLyW
ayGua8z+cXHLTvAYrvLpMB8GA1UdIwQYMBaAFHR8hsPMFKd5c4BTFUCM3KEKIUey
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjk0RC8yQzcxNjJDQzIz
MjgxMUVCOUZGNkU5MUFDNEY5QUUwMi9kSHlHdzh3VXAzbHpnRk1WUUl6Y29Rb2hS
N0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2RIeUd3OHdVcDNsemdGTVZRSXpjb1FvaFI3SS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QkI5NEQvMkM3MTYyQ0MyMzI4MTFFQjlGRjZFOTFBQzRGOUFFMDIvODI3MzI5QkUy
MzJCMTFFQkIyMzQ4QjIzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnmWQwDQYJKoZIhvcNAQELBQADggEBAK5foiBcnCdXTEOO
+8MZkQXccWHvgn0mdNGjrtYOmpbaJhNLJOEKFwoBwVC4ApP6YQVvp4j40nKAyeyh
RPfuAW0O4zFIqQk6mEYoB65YpUtlkt+JePbSG1h4XcKSLC6DrlGfZ90q5KnCGgWz
XkaQ/NDiFKIpL3pwusUq1WaFsbB+KaxdV0G6XnYhnPCNElDKoi6AnnE002amE+/K
HSV5a9+Dt1NXM2xnUbwcZBUk1MaU7e5P8b/zXr30IGg4/S4gILYDKqDKuKAX0toZ
knBFKjIgOTqZ9pW8WiwVG6fvVxiA7cUbyojdZmT+S1FoYSorfR69FxleDP1vAZnc
jtbptxs=
-----END CERTIFICATE-----
Generated at Thu Apr 25 02:01:31 2024 by rpki-client on console-ams.rpki-client.org