Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5153/954281C2904811EBA48E9630C4F9AE02/5B194E5EDFF311EBBC814169C4F9AE02.roa
File:                     5B194E5EDFF311EBBC814169C4F9AE02.roa (raw, json)
Hash identifier:          KhL2UpD4+JEk2XkKaHze+InIObaOwuuu6V/1R5qYpXw=
Subject key identifier:   6E:7B:30:22:CA:BA:05:3D:4F:CD:E2:4D:A1:DD:8E:15:81:4E:EE:CA
Certificate issuer:       /CN=A91C5153/serialNumber=872A667276AD44708A447FDBE881F162E790DD63
Certificate serial:       058E
Authority key identifier: 87:2A:66:72:76:AD:44:70:8A:44:7F:DB:E8:81:F1:62:E7:90:DD:63
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hypmcnatRHCKRH_b6IHxYueQ3WM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C5153/954281C2904811EBA48E9630C4F9AE02/5B194E5EDFF311EBBC814169C4F9AE02.roa
Signing time:             Wed 29 May 2024 01:06:38 +0000
ROA not before:           Wed 29 May 2024 01:06:38 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     24496
IP address blocks:        103.165.46.0/24 maxlen: 24
                          103.176.154.0/24 maxlen: 24
                          2001:df6:5a80::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C5153/954281C2904811EBA48E9630C4F9AE02/hypmcnatRHCKRH_b6IHxYueQ3WM.crl
                          rsync://rpki.apnic.net/member_repository/A91C5153/954281C2904811EBA48E9630C4F9AE02/hypmcnatRHCKRH_b6IHxYueQ3WM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hypmcnatRHCKRH_b6IHxYueQ3WM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1422 (0x58e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C5153/serialNumber=872A667276AD44708A447FDBE881F162E790DD63
        Validity
            Not Before: May 29 01:06:38 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=66567f9e-8163
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:1c:74:58:c6:a5:25:48:50:69:d6:16:a3:eb:
                    95:6f:15:e5:35:67:af:f0:97:b4:0b:c9:e4:f9:e2:
                    d3:37:96:95:dd:c4:55:43:4e:35:8a:97:34:27:f8:
                    da:a3:df:44:e1:e1:5b:78:c3:77:16:a5:63:1a:ba:
                    f5:4e:c0:0c:f5:5d:dd:04:96:df:f3:9d:44:06:33:
                    d2:7c:85:46:b8:1d:50:5c:a4:64:f9:59:6b:71:c2:
                    69:e1:52:f5:4b:c8:7a:ad:26:31:24:1f:04:bb:89:
                    8b:f5:a9:ee:66:32:45:8e:97:dd:8e:fd:1e:c7:96:
                    98:15:54:72:e2:c5:ad:4c:5d:9a:a1:44:84:84:23:
                    c8:3a:c8:eb:50:e0:8d:b3:3d:f2:74:97:13:2c:c8:
                    f5:e6:e5:88:9d:67:e4:29:52:1a:11:1e:3c:1a:24:
                    82:37:5e:58:fc:4b:5d:5a:62:e7:42:18:c3:9b:2c:
                    b9:ca:04:f6:ce:cf:be:88:47:dd:8a:0c:01:0d:31:
                    7c:f9:4e:74:6e:4c:4a:78:bb:76:bd:34:e7:47:51:
                    77:8a:e8:4b:03:89:78:e6:2b:9c:9a:47:62:39:02:
                    ce:ba:47:47:37:91:a4:b4:30:73:ea:29:b3:36:de:
                    32:1d:6e:cd:82:59:62:38:7d:1b:9d:5f:4f:a3:54:
                    8b:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:7B:30:22:CA:BA:05:3D:4F:CD:E2:4D:A1:DD:8E:15:81:4E:EE:CA
            X509v3 Authority Key Identifier:
                keyid:87:2A:66:72:76:AD:44:70:8A:44:7F:DB:E8:81:F1:62:E7:90:DD:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C5153/954281C2904811EBA48E9630C4F9AE02/hypmcnatRHCKRH_b6IHxYueQ3WM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hypmcnatRHCKRH_b6IHxYueQ3WM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5153/954281C2904811EBA48E9630C4F9AE02/5B194E5EDFF311EBBC814169C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.165.46.0/24
                  103.176.154.0/24
                IPv6:
                  2001:df6:5a80::/48

    Signature Algorithm: sha256WithRSAEncryption
         27:7c:03:c5:e2:ec:80:92:4a:51:70:d6:26:60:d2:51:80:0f:
         aa:16:dc:96:fb:5d:40:76:4b:eb:6d:49:ed:4f:df:d5:ef:e9:
         ac:7c:82:a1:90:a3:80:1a:fc:64:f1:90:3a:06:37:20:6b:4e:
         11:14:12:fc:e3:60:95:db:d8:31:49:d0:af:e4:31:df:38:22:
         d3:e9:a4:a1:0f:91:82:29:71:62:a5:f5:01:13:de:e9:a7:c5:
         ad:71:48:6d:5a:d7:f5:1b:72:ea:1b:dc:b6:bf:c7:f1:e6:44:
         76:d6:b5:ee:0c:8b:49:01:77:b9:38:aa:8c:33:2f:52:da:7b:
         9e:3b:5a:ee:39:d3:a1:91:b3:39:5f:1e:1b:3f:ce:71:99:02:
         2b:10:11:ac:31:99:d0:20:ad:e6:a5:90:db:49:13:8a:a5:be:
         66:6b:24:3c:98:e0:d6:9e:e3:fe:fb:3b:57:0c:a6:b0:88:1b:
         2c:ce:5d:92:36:46:21:a8:19:41:49:c9:64:44:25:22:51:e6:
         82:92:27:1b:bb:28:6e:79:25:b2:6d:45:48:f0:83:7e:32:b9:
         49:98:3e:1a:99:e3:02:55:66:54:de:80:6c:4b:88:f3:5f:d9:
         ca:f6:cc:62:ca:bf:76:10:2f:6c:9e:68:ba:60:a4:55:07:b4:
         a9:a7:5f:aa
-----BEGIN CERTIFICATE-----
MIIFiDCCBHCgAwIBAgICBY4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzUxNTMxMTAvBgNVBAUTKDg3MkE2NjcyNzZBRDQ0NzA4QTQ0N0ZEQkU4ODFGMTYy
RTc5MERENjMwHhcNMjQwNTI5MDEwNjM4WhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NjU2N2Y5ZS04MTYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3hx0WMalJUhQadYWo+uVbxXlNWev8Je0C8nk+eLTN5aV3cRVQ041ipc0J/ja
o99E4eFbeMN3FqVjGrr1TsAM9V3dBJbf851EBjPSfIVGuB1QXKRk+VlrccJp4VL1
S8h6rSYxJB8Eu4mL9anuZjJFjpfdjv0ex5aYFVRy4sWtTF2aoUSEhCPIOsjrUOCN
sz3ydJcTLMj15uWInWfkKVIaER48GiSCN15Y/EtdWmLnQhjDmyy5ygT2zs++iEfd
igwBDTF8+U50bkxKeLt2vTTnR1F3iuhLA4l45iucmkdiOQLOukdHN5GktDBz6imz
Nt4yHW7NglliOH0bnV9Po1SLFwIDAQABo4ICrDCCAqgwHQYDVR0OBBYEFG57MCLK
ugU9T83iTaHdjhWBTu7KMB8GA1UdIwQYMBaAFIcqZnJ2rURwikR/2+iB8WLnkN1j
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNTE1My85NTQyODFDMjkw
NDgxMUVCQTQ4RTk2MzBDNEY5QUUwMi9oeXBtY25hdFJIQ0tSSF9iNklIeFl1ZVEz
V00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2h5cG1jbmF0UkhDS1JIX2I2SUh4WXVlUTNXTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QzUxNTMvOTU0MjgxQzI5MDQ4MTFFQkE0OEU5NjMwQzRGOUFFMDIvNUIxOTRFNUVE
RkYzMTFFQkJDODE0MTY5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNgYIKwYBBQUHAQcBAf8E
JzAlMBIEAgABMAwDBABnpS4DBABnsJowDwQCAAIwCQMHACABDfZagDANBgkqhkiG
9w0BAQsFAAOCAQEAJ3wDxeLsgJJKUXDWJmDSUYAPqhbclvtdQHZL621J7U/f1e/p
rHyCoZCjgBr8ZPGQOgY3IGtOERQS/ONgldvYMUnQr+Qx3zgi0+mkoQ+RgilxYqX1
ARPe6afFrXFIbVrX9Rty6hvctr/H8eZEdta17gyLSQF3uTiqjDMvUtp7njta7jnT
oZGzOV8eGz/OcZkCKxARrDGZ0CCt5qWQ20kTiqW+ZmskPJjg1p7j/vs7VwymsIgb
LM5dkjZGIagZQUnJZEQlIlHmgpInG7sobnklsm1FSPCDfjK5SZg+GpnjAlVmVN6A
bEuI81/ZyvbMYsq/dhAvbJ5oumCkVQe0qadfqg==
-----END CERTIFICATE-----
Generated at Sat Nov 23 00:08:49 2024 by rpki-client on console-ams.rpki-client.org