Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF312/AA92B9780C2911EB9540DD61C4F9AE02/245DB0FE0C2B11EBAD607865C4F9AE02.roa
File:                     245DB0FE0C2B11EBAD607865C4F9AE02.roa (raw, json)
Hash identifier:          jAm4wuZHNeAUDsvNxj3rPM2xCjY6H/P6C55YUabgiyk=
Subject key identifier:   6A:8E:76:2F:25:CD:1A:03:95:62:D8:8A:99:DF:06:DA:93:BD:5B:22
Certificate issuer:       /CN=A91BF312/serialNumber=F0297D0E4531A1D62A95AF5D2F22EF2408DAD29C
Certificate serial:       060E
Authority key identifier: F0:29:7D:0E:45:31:A1:D6:2A:95:AF:5D:2F:22:EF:24:08:DA:D2:9C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Cl9DkUxodYqla9dLyLvJAja0pw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BF312/AA92B9780C2911EB9540DD61C4F9AE02/245DB0FE0C2B11EBAD607865C4F9AE02.roa
Signing time:             Thu 27 Apr 2023 00:00:50 +0000
ROA not before:           Thu 27 Apr 2023 00:00:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     55720
IP address blocks:        103.212.68.0/24 maxlen: 24
                          103.212.69.0/24 maxlen: 24
                          103.212.70.0/24 maxlen: 24
                          103.212.71.0/24 maxlen: 24
                          139.5.177.0/24 maxlen: 24
                          139.5.178.0/24 maxlen: 24
                          139.5.179.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BF312/AA92B9780C2911EB9540DD61C4F9AE02/8Cl9DkUxodYqla9dLyLvJAja0pw.crl
                          rsync://rpki.apnic.net/member_repository/A91BF312/AA92B9780C2911EB9540DD61C4F9AE02/8Cl9DkUxodYqla9dLyLvJAja0pw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Cl9DkUxodYqla9dLyLvJAja0pw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 04 Apr 2024 22:54:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1550 (0x60e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BF312/serialNumber=F0297D0E4531A1D62A95AF5D2F22EF2408DAD29C
        Validity
            Not Before: Apr 27 00:00:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=6449bb31-cb57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:6e:ba:67:91:6f:23:ac:f6:57:86:94:6a:61:
                    7e:7e:40:8e:7c:b0:ff:2a:31:1d:c0:4e:74:89:e8:
                    b2:18:21:ba:b2:f1:76:95:46:fa:bb:e7:06:a7:4b:
                    95:4c:1d:de:28:7b:01:90:dd:fa:77:43:07:1a:86:
                    ae:48:2a:e6:9b:c3:ab:45:2b:a8:cf:60:df:bd:d4:
                    68:14:33:97:47:0c:d2:70:ee:12:87:80:4a:df:af:
                    cd:86:d6:ae:de:d6:26:5d:dc:ac:05:22:9d:9f:fc:
                    f0:b1:05:f9:88:57:6a:ba:42:32:e6:c4:84:a3:49:
                    a7:b2:05:ae:d2:1e:df:7a:34:cd:c9:db:e1:68:8a:
                    42:34:b7:3e:c0:e9:7b:8d:04:3f:a2:0d:be:47:c8:
                    5e:45:58:62:6f:25:1f:ef:4c:7c:5b:37:1b:09:2b:
                    08:62:29:1c:9d:4c:3c:98:88:29:d1:4e:ed:c7:bc:
                    b2:96:d5:1a:45:2a:a1:a8:60:35:dd:68:dc:33:ef:
                    7c:cd:d9:86:d3:2e:b6:7b:1c:ff:56:af:46:23:a7:
                    22:65:6f:dc:74:4e:b6:79:82:0b:c6:d0:26:b2:37:
                    b0:ac:e9:f3:2a:33:e0:da:68:91:80:a7:b6:b1:5e:
                    76:b6:68:70:37:84:b9:b9:46:86:3d:11:8f:9c:dd:
                    14:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:8E:76:2F:25:CD:1A:03:95:62:D8:8A:99:DF:06:DA:93:BD:5B:22
            X509v3 Authority Key Identifier:
                keyid:F0:29:7D:0E:45:31:A1:D6:2A:95:AF:5D:2F:22:EF:24:08:DA:D2:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BF312/AA92B9780C2911EB9540DD61C4F9AE02/8Cl9DkUxodYqla9dLyLvJAja0pw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Cl9DkUxodYqla9dLyLvJAja0pw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF312/AA92B9780C2911EB9540DD61C4F9AE02/245DB0FE0C2B11EBAD607865C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.212.68.0/22
                  139.5.177.0-139.5.179.255

    Signature Algorithm: sha256WithRSAEncryption
         23:71:22:8d:c4:b6:86:b4:94:6f:77:8a:5b:a2:58:15:fe:9f:
         a6:fc:19:7f:cd:5f:db:0e:e3:f2:38:8b:00:65:71:91:4f:44:
         ea:14:c1:58:a5:ff:8d:34:50:f9:97:ce:89:7a:3d:f0:4a:1b:
         8e:73:18:a1:b7:1b:97:e7:9a:a7:eb:95:24:56:4c:93:df:ce:
         11:2a:51:17:97:5a:72:34:da:4c:f8:22:c8:89:3f:99:6b:74:
         e3:fa:7a:11:12:c1:06:6c:46:97:0e:47:97:b1:c1:21:52:5c:
         1d:96:5a:4b:71:a2:32:9c:0f:75:9f:6d:7d:05:03:bb:e1:f5:
         6e:45:4d:46:b8:43:a4:e5:5f:50:d0:3b:6f:e4:51:14:a7:01:
         e9:84:c1:ef:e2:ea:72:d7:47:c3:8f:46:83:d8:de:fa:87:2b:
         f6:40:8a:4f:30:24:8a:33:db:8f:ff:56:df:a8:9f:72:8d:b7:
         f6:8a:37:40:c4:67:a7:79:a1:ef:de:67:99:5e:3f:40:15:1e:
         7a:45:16:8d:e1:2c:06:1e:85:1a:4f:5c:f6:3a:bb:a0:cb:4d:
         35:93:6a:8c:f0:c0:2d:a6:bc:55:16:6e:d6:37:57:af:63:87:
         a2:1a:8b:8f:1a:4e:b5:43:26:7f:73:b8:cb:52:1c:13:82:ec:
         75:32:2c:c4
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgICBg4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkYzMTIxMTAvBgNVBAUTKEYwMjk3RDBFNDUzMUExRDYyQTk1QUY1RDJGMjJFRjI0
MDhEQUQyOUMwHhcNMjMwNDI3MDAwMDUwWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NDQ5YmIzMS1jYjU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvW66Z5FvI6z2V4aUamF+fkCOfLD/KjEdwE50ieiyGCG6svF2lUb6u+cGp0uV
TB3eKHsBkN36d0MHGoauSCrmm8OrRSuoz2DfvdRoFDOXRwzScO4Sh4BK36/Nhtau
3tYmXdysBSKdn/zwsQX5iFdqukIy5sSEo0mnsgWu0h7fejTNydvhaIpCNLc+wOl7
jQQ/og2+R8heRVhibyUf70x8WzcbCSsIYikcnUw8mIgp0U7tx7yyltUaRSqhqGA1
3WjcM+98zdmG0y62exz/Vq9GI6ciZW/cdE62eYILxtAmsjewrOnzKjPg2miRgKe2
sV52tmhwN4S5uUaGPRGPnN0UpwIDAQABo4ICozCCAp8wHQYDVR0OBBYEFGqOdi8l
zRoDlWLYipnfBtqTvVsiMB8GA1UdIwQYMBaAFPApfQ5FMaHWKpWvXS8i7yQI2tKc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjMxMi9BQTkyQjk3ODBD
MjkxMUVCOTU0MERENjFDNEY5QUUwMi84Q2w5RGtVeG9kWXFsYTlkTHlMdkpBamEw
cHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzhDbDlEa1V4b2RZcWxhOWRMeUx2SkFqYTBwdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QkYzMTIvQUE5MkI5NzgwQzI5MTFFQjk1NDBERDYxQzRGOUFFMDIvMjQ1REIwRkUw
QzJCMTFFQkFENjA3ODY1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLQYIKwYBBQUHAQcBAf8E
HjAcMBoEAgABMBQDBAJn1EQwDAMEAIsFsQMEAosFsDANBgkqhkiG9w0BAQsFAAOC
AQEAI3EijcS2hrSUb3eKW6JYFf6fpvwZf81f2w7j8jiLAGVxkU9E6hTBWKX/jTRQ
+ZfOiXo98EobjnMYobcbl+eap+uVJFZMk9/OESpRF5dacjTaTPgiyIk/mWt04/p6
ERLBBmxGlw5Hl7HBIVJcHZZaS3GiMpwPdZ9tfQUDu+H1bkVNRrhDpOVfUNA7b+RR
FKcB6YTB7+LqctdHw49Gg9je+ocr9kCKTzAkijPbj/9W36ifco239oo3QMRnp3mh
795nmV4/QBUeekUWjeEsBh6FGk9c9jq7oMtNNZNqjPDALaa8VRZu1jdXr2OHohqL
jxpOtUMmf3O4y1IcE4LsdTIsxA==
-----END CERTIFICATE-----
Generated at Thu Mar 28 23:50:00 2024 by rpki-client on console-ams.rpki-client.org