Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0741/77C9168EBD1211E990F4BF2CC4F9AE02/C65A7B2E2DA511EDABDD0D5AC4F9AE02.roa
File:                     C65A7B2E2DA511EDABDD0D5AC4F9AE02.roa (raw, json)
Hash identifier:          woJGchr3sms/3TKBOYfaJA98zIiFsx9zoHLLjklrxg4=
Subject key identifier:   16:99:9F:ED:6C:0B:65:27:09:C1:96:36:5D:87:D5:EF:D2:44:85:92
Certificate issuer:       /CN=A91C0741/serialNumber=37EAEDA4242D50962B87B4A207AC4C344B33060C
Certificate serial:       0D1F
Authority key identifier: 37:EA:ED:A4:24:2D:50:96:2B:87:B4:A2:07:AC:4C:34:4B:33:06:0C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-rtpCQtUJYrh7SiB6xMNEszBgw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C0741/77C9168EBD1211E990F4BF2CC4F9AE02/C65A7B2E2DA511EDABDD0D5AC4F9AE02.roa
Signing time:             Mon 04 Mar 2024 18:56:50 +0000
ROA not before:           Mon 04 Mar 2024 18:56:50 +0000
ROA not after:            Thu 01 May 2025 00:00:00 +0000
asID:                     393960
IP address blocks:        103.83.194.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C0741/77C9168EBD1211E990F4BF2CC4F9AE02/N-rtpCQtUJYrh7SiB6xMNEszBgw.crl
                          rsync://rpki.apnic.net/member_repository/A91C0741/77C9168EBD1211E990F4BF2CC4F9AE02/N-rtpCQtUJYrh7SiB6xMNEszBgw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-rtpCQtUJYrh7SiB6xMNEszBgw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Dec 2024 17:11:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3359 (0xd1f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C0741/serialNumber=37EAEDA4242D50962B87B4A207AC4C344B33060C
        Validity
            Not Before: Mar  4 18:56:50 2024 GMT
            Not After : May  1 00:00:00 2025 GMT
        Subject: CN=65e61972-0dd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:19:4c:40:0d:0a:a8:11:99:05:7c:b9:fa:13:
                    e1:0b:86:65:55:0d:47:ff:e8:ee:50:4e:aa:1e:51:
                    a8:d6:87:cc:3f:77:ca:7e:70:30:02:48:e3:39:1a:
                    a9:08:0a:95:e8:ee:57:b4:0a:a3:34:e4:bc:bf:5e:
                    5c:c3:6e:44:9f:ea:00:bb:5b:62:70:b1:aa:e1:47:
                    a7:94:ab:83:02:3e:f3:29:0a:25:b1:17:3c:2c:7a:
                    71:d1:d7:26:2f:15:cc:19:7a:7b:68:0b:68:de:08:
                    c7:c4:2f:8a:a3:7b:aa:20:e2:2c:af:3e:bd:e9:81:
                    5d:f5:37:7a:87:d1:06:e2:f6:b1:47:e8:54:43:65:
                    ea:3c:eb:ff:e4:6d:44:cf:a0:62:b7:1e:60:0a:8d:
                    fd:d9:28:5e:c0:48:ac:a5:b7:a8:16:54:15:e9:0d:
                    69:20:dd:bd:bb:6e:0d:22:3e:8b:62:7d:9f:37:10:
                    09:26:fb:5c:0e:7b:3a:6a:1e:1c:ba:b3:4f:e7:c0:
                    b9:dd:f1:ca:18:e0:d5:58:9d:52:22:5a:aa:bd:31:
                    0a:91:7b:a1:20:3e:aa:7e:e6:d7:60:3e:83:34:6c:
                    3d:48:c8:0f:82:38:49:bd:cf:7b:a1:0b:0f:b4:dc:
                    38:31:65:59:cf:86:29:72:58:30:de:92:be:07:27:
                    a1:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:99:9F:ED:6C:0B:65:27:09:C1:96:36:5D:87:D5:EF:D2:44:85:92
            X509v3 Authority Key Identifier:
                keyid:37:EA:ED:A4:24:2D:50:96:2B:87:B4:A2:07:AC:4C:34:4B:33:06:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C0741/77C9168EBD1211E990F4BF2CC4F9AE02/N-rtpCQtUJYrh7SiB6xMNEszBgw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-rtpCQtUJYrh7SiB6xMNEszBgw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0741/77C9168EBD1211E990F4BF2CC4F9AE02/C65A7B2E2DA511EDABDD0D5AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.83.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:d3:1f:70:34:7a:90:76:fc:b0:db:e5:47:be:df:80:7e:e1:
         f7:bc:89:24:70:bd:ea:b3:2c:58:fc:a9:ce:d4:08:e4:c7:16:
         9c:34:bb:b7:ae:bf:ad:04:14:3b:da:29:71:a8:ee:0f:69:2e:
         bb:68:4d:70:83:1e:53:4f:18:17:99:b5:f1:32:b5:29:96:79:
         7a:dc:fc:79:44:a7:61:34:c3:c2:2a:d7:d7:94:b0:11:bb:6a:
         b7:9c:96:a3:97:33:6d:d7:24:9a:bf:ce:df:03:a1:ce:53:b8:
         16:67:bf:22:e6:d8:52:80:31:17:a5:23:41:45:a2:8a:17:16:
         c4:96:f4:a1:60:bd:ce:09:9b:4b:cc:2d:fa:7c:e9:b0:47:5c:
         79:f0:c4:f8:e5:21:2e:7f:bc:88:0d:b5:96:29:3d:91:2f:0b:
         f5:e7:5e:c5:81:50:e8:90:e9:16:24:7f:42:ed:a0:5d:a5:de:
         a5:c2:8c:f4:59:de:cb:c9:8e:8a:2d:56:a5:cc:a1:54:54:e4:
         b6:69:42:18:b1:48:38:93:0e:ae:9b:e0:b7:78:f8:9c:20:b3:
         37:37:a9:9f:d2:43:cd:16:30:37:b9:c5:41:34:e7:36:d9:e8:
         f0:dc:a0:41:cc:e7:67:2a:13:2b:dc:8e:61:d9:b3:1d:80:dc:
         4e:d8:a9:91
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICDR8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzA3NDExMTAvBgNVBAUTKDM3RUFFREE0MjQyRDUwOTYyQjg3QjRBMjA3QUM0QzM0
NEIzMzA2MEMwHhcNMjQwMzA0MTg1NjUwWhcNMjUwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NWU2MTk3Mi0wZGQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyBlMQA0KqBGZBXy5+hPhC4ZlVQ1H/+juUE6qHlGo1ofMP3fKfnAwAkjjORqp
CAqV6O5XtAqjNOS8v15cw25En+oAu1ticLGq4UenlKuDAj7zKQolsRc8LHpx0dcm
LxXMGXp7aAto3gjHxC+Ko3uqIOIsrz696YFd9Td6h9EG4vaxR+hUQ2XqPOv/5G1E
z6Bitx5gCo392ShewEispbeoFlQV6Q1pIN29u24NIj6LYn2fNxAJJvtcDns6ah4c
urNP58C53fHKGODVWJ1SIlqqvTEKkXuhID6qfubXYD6DNGw9SMgPgjhJvc97oQsP
tNw4MWVZz4Ypclgw3pK+ByehGQIDAQABo4IClTCCApEwHQYDVR0OBBYEFBaZn+1s
C2UnCcGWNl2H1e/SRIWSMB8GA1UdIwQYMBaAFDfq7aQkLVCWK4e0ogesTDRLMwYM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMDc0MS83N0M5MTY4RUJE
MTIxMUU5OTBGNEJGMkNDNEY5QUUwMi9OLXJ0cENRdFVKWXJoN1NpQjZ4TU5Fc3pC
Z3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL04tcnRwQ1F0VUpZcmg3U2lCNnhNTkVzekJndy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QzA3NDEvNzdDOTE2OEVCRDEyMTFFOTkwRjRCRjJDQzRGOUFFMDIvQzY1QTdCMkUy
REE1MTFFREFCREQwRDVBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnU8IwDQYJKoZIhvcNAQELBQADggEBAFfTH3A0epB2/LDb
5Ue+34B+4fe8iSRwveqzLFj8qc7UCOTHFpw0u7euv60EFDvaKXGo7g9pLrtoTXCD
HlNPGBeZtfEytSmWeXrc/HlEp2E0w8Iq19eUsBG7areclqOXM23XJJq/zt8Doc5T
uBZnvyLm2FKAMRelI0FFoooXFsSW9KFgvc4Jm0vMLfp86bBHXHnwxPjlIS5/vIgN
tZYpPZEvC/XnXsWBUOiQ6RYkf0LtoF2l3qXCjPRZ3svJjootVqXMoVRU5LZpQhix
SDiTDq6b4Ld4+Jwgszc3qZ/SQ80WMDe5xUE05zbZ6PDcoEHM52cqEyvcjmHZsx2A
3E7YqZE=
-----END CERTIFICATE-----
Generated at Sun Nov 24 18:36:24 2024 by rpki-client on console-fra.rpki-client.org