Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE6D3/EF93835A379211EC9C6C9B69C4F9AE02/FB782FD2721311EE8754E20FC4F9AE02.roa
File:                     FB782FD2721311EE8754E20FC4F9AE02.roa (raw, json)
Hash identifier:          I/EUtcnIOgWuSMRX1/ctogprNtew+jz+1ODHN5r7tpo=
Subject key identifier:   F0:DC:BD:6F:F1:AD:01:0D:0A:74:8E:6B:B9:2F:BF:0E:54:58:9C:B7
Certificate issuer:       /CN=A91BE6D3/serialNumber=989F89D68C86834AF82D9D27D16E55C09A6EF7BC
Certificate serial:       0371
Authority key identifier: 98:9F:89:D6:8C:86:83:4A:F8:2D:9D:27:D1:6E:55:C0:9A:6E:F7:BC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ-J1oyGg0r4LZ0n0W5VwJpu97w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BE6D3/EF93835A379211EC9C6C9B69C4F9AE02/FB782FD2721311EE8754E20FC4F9AE02.roa
Signing time:             Tue 24 Oct 2023 02:21:05 +0000
ROA not before:           Tue 24 Oct 2023 02:21:05 +0000
ROA not after:            Sat 31 Aug 2024 00:00:00 +0000
asID:                     8220
IP address blocks:        103.248.76.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BE6D3/EF93835A379211EC9C6C9B69C4F9AE02/mJ-J1oyGg0r4LZ0n0W5VwJpu97w.crl
                          rsync://rpki.apnic.net/member_repository/A91BE6D3/EF93835A379211EC9C6C9B69C4F9AE02/mJ-J1oyGg0r4LZ0n0W5VwJpu97w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ-J1oyGg0r4LZ0n0W5VwJpu97w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 May 2024 02:28:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 881 (0x371)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BE6D3/serialNumber=989F89D68C86834AF82D9D27D16E55C09A6EF7BC
        Validity
            Not Before: Oct 24 02:21:05 2023 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=65372a10-7260
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:77:34:8a:b6:ec:42:03:ef:a6:f2:5d:b7:fc:
                    af:fa:e5:58:29:24:13:be:67:06:a0:df:6f:c4:5f:
                    8a:77:a5:c8:4e:b4:80:f9:c3:35:df:ce:e0:ee:95:
                    a8:35:19:30:1a:2a:18:b1:4c:c3:85:5b:4d:dc:b2:
                    73:94:af:fe:1f:77:44:ad:2f:51:6a:c7:6c:20:b7:
                    8b:eb:ec:0d:53:d3:83:80:4d:ee:68:da:7c:00:ef:
                    37:53:ec:9d:b0:34:cb:1a:2b:a8:5c:dd:92:03:ec:
                    c4:5b:83:fd:39:98:79:19:4b:fa:31:9f:3b:1e:65:
                    14:ba:d7:32:c1:1c:a1:12:16:33:df:55:8a:47:cf:
                    17:20:dc:13:72:b6:69:ab:90:76:27:1c:20:13:36:
                    0f:07:b0:df:12:c4:e1:57:39:d9:5d:50:89:03:fe:
                    ae:81:29:4d:7e:1c:ff:85:f0:a3:0f:da:2d:bc:5d:
                    8a:a0:15:01:c2:8c:c3:98:03:ef:75:9d:7e:bb:9a:
                    1f:01:04:7c:69:57:f3:99:96:fe:20:a2:31:62:f7:
                    98:76:3b:a6:3a:9c:b8:67:fa:c6:ae:7e:ca:c6:7c:
                    9d:84:48:f8:47:6c:d3:5b:c7:4f:a3:4e:5b:a4:ef:
                    1a:1d:9e:f8:be:51:11:56:5a:10:60:c8:7b:a7:49:
                    e5:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:DC:BD:6F:F1:AD:01:0D:0A:74:8E:6B:B9:2F:BF:0E:54:58:9C:B7
            X509v3 Authority Key Identifier:
                keyid:98:9F:89:D6:8C:86:83:4A:F8:2D:9D:27:D1:6E:55:C0:9A:6E:F7:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BE6D3/EF93835A379211EC9C6C9B69C4F9AE02/mJ-J1oyGg0r4LZ0n0W5VwJpu97w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ-J1oyGg0r4LZ0n0W5VwJpu97w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE6D3/EF93835A379211EC9C6C9B69C4F9AE02/FB782FD2721311EE8754E20FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.248.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:5b:2b:7d:65:13:ec:35:ab:e2:8e:12:30:53:12:b2:ef:84:
         b4:6f:85:46:e7:83:a0:7f:f5:8a:a7:28:cd:af:af:3f:e3:16:
         a5:40:fd:ba:46:92:7b:62:80:e3:04:02:e9:c9:62:f6:7c:35:
         18:c1:ce:c2:c6:f8:5e:92:0a:aa:cf:f9:55:58:e5:5f:dd:0a:
         3b:dc:d0:28:61:c1:08:48:0f:a6:13:38:7c:14:f4:f9:0c:1d:
         50:a0:68:3c:c6:c9:d6:76:4b:b1:5a:73:0c:eb:02:14:45:51:
         b5:64:ea:ef:f4:e7:52:2a:00:93:a1:ed:41:49:7e:0b:a7:db:
         d4:a5:87:56:17:cf:91:b4:b7:4b:21:41:37:61:db:99:69:3e:
         0f:c8:58:92:23:51:26:f6:9e:57:44:e3:ca:01:60:0b:cb:37:
         97:70:70:d6:c4:7f:51:a8:09:e3:7a:a1:c5:66:69:8f:04:b7:
         69:ef:59:7e:84:2a:3a:82:97:38:b9:2f:14:b9:0c:7d:19:56:
         34:7b:4e:6c:80:5d:af:85:f4:0a:f3:b6:f3:63:27:10:8b:bd:
         e9:6b:75:1d:75:1b:e3:d6:74:8a:57:08:9e:98:13:77:9d:9e:
         10:2f:f5:d0:da:c8:64:10:d9:ae:7c:1f:8d:67:83:c0:17:37:
         4c:50:9e:fc
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICA3EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkU2RDMxMTAvBgNVBAUTKDk4OUY4OUQ2OEM4NjgzNEFGODJEOUQyN0QxNkU1NUMw
OUE2RUY3QkMwHhcNMjMxMDI0MDIyMTA1WhcNMjQwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NTM3MmExMC03MjYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtXc0irbsQgPvpvJdt/yv+uVYKSQTvmcGoN9vxF+Kd6XITrSA+cM1387g7pWo
NRkwGioYsUzDhVtN3LJzlK/+H3dErS9RasdsILeL6+wNU9ODgE3uaNp8AO83U+yd
sDTLGiuoXN2SA+zEW4P9OZh5GUv6MZ87HmUUutcywRyhEhYz31WKR88XINwTcrZp
q5B2JxwgEzYPB7DfEsThVznZXVCJA/6ugSlNfhz/hfCjD9otvF2KoBUBwozDmAPv
dZ1+u5ofAQR8aVfzmZb+IKIxYveYdjumOpy4Z/rGrn7KxnydhEj4R2zTW8dPo05b
pO8aHZ74vlERVloQYMh7p0nlqQIDAQABo4IClTCCApEwHQYDVR0OBBYEFPDcvW/x
rQENCnSOa7kvvw5UWJy3MB8GA1UdIwQYMBaAFJifidaMhoNK+C2dJ9FuVcCabve8
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRTZEMy9FRjkzODM1QTM3
OTIxMUVDOUM2QzlCNjlDNEY5QUUwMi9tSi1KMW95R2cwcjRMWjBuMFc1VndKcHU5
N3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL21KLUoxb3lHZzByNExaMG4wVzVWd0pwdTk3dy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QkU2RDMvRUY5MzgzNUEzNzkyMTFFQzlDNkM5QjY5QzRGOUFFMDIvRkI3ODJGRDI3
MjEzMTFFRTg3NTRFMjBGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABn+EwwDQYJKoZIhvcNAQELBQADggEBAIpbK31lE+w1q+KO
EjBTErLvhLRvhUbng6B/9YqnKM2vrz/jFqVA/bpGkntigOMEAunJYvZ8NRjBzsLG
+F6SCqrP+VVY5V/dCjvc0ChhwQhID6YTOHwU9PkMHVCgaDzGydZ2S7FacwzrAhRF
UbVk6u/051IqAJOh7UFJfgun29Slh1YXz5G0t0shQTdh25lpPg/IWJIjUSb2nldE
48oBYAvLN5dwcNbEf1GoCeN6ocVmaY8Et2nvWX6EKjqClzi5LxS5DH0ZVjR7TmyA
Xa+F9ArztvNjJxCLvelrdR11G+PWdIpXCJ6YE3ednhAv9dDayGQQ2a58H41ng8AX
N0xQnvw=
-----END CERTIFICATE-----
Generated at Fri May 17 03:17:00 2024 by rpki-client on console-fra.rpki-client.org