Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6064/52FEF73A297011EB91E9DE54C4F9AE02/E9D321CEF2F611EE95E10935C4F9AE02.roa
File:                     E9D321CEF2F611EE95E10935C4F9AE02.roa (raw, json)
Hash identifier:          0MDsliqtqRrojbtZYNkkZiieXi7syQdv9RVqPyRdcns=
Subject key identifier:   7F:C9:03:AE:96:FC:CB:65:63:5C:35:7B:67:D6:2F:BA:09:CD:98:2B
Certificate issuer:       /CN=A91C6064/serialNumber=3453245AF9E76905F69A90F1CECD85EA883FEA16
Certificate serial:       06D3
Authority key identifier: 34:53:24:5A:F9:E7:69:05:F6:9A:90:F1:CE:CD:85:EA:88:3F:EA:16
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NFMkWvnnaQX2mpDxzs2F6og_6hY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C6064/52FEF73A297011EB91E9DE54C4F9AE02/E9D321CEF2F611EE95E10935C4F9AE02.roa
Signing time:             Tue 08 Oct 2024 22:01:11 +0000
ROA not before:           Tue 08 Oct 2024 22:01:11 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     135273
IP address blocks:        103.156.76.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C6064/52FEF73A297011EB91E9DE54C4F9AE02/NFMkWvnnaQX2mpDxzs2F6og_6hY.crl
                          rsync://rpki.apnic.net/member_repository/A91C6064/52FEF73A297011EB91E9DE54C4F9AE02/NFMkWvnnaQX2mpDxzs2F6og_6hY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NFMkWvnnaQX2mpDxzs2F6og_6hY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1747 (0x6d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C6064/serialNumber=3453245AF9E76905F69A90F1CECD85EA883FEA16
        Validity
            Not Before: Oct  8 22:01:11 2024 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=6705aba7-d609
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:2f:ca:a1:f4:9a:34:b4:68:e0:01:e6:ca:e1:
                    d1:b9:17:08:f2:77:1d:8f:39:43:91:f0:c0:71:43:
                    36:64:44:6b:a0:bf:1f:39:d2:e8:9e:32:15:3b:f0:
                    94:61:b5:6b:30:d5:dc:22:aa:30:67:b8:0c:a3:d5:
                    28:ed:c1:61:39:09:d0:64:d0:b2:a3:a4:bd:d0:81:
                    a0:05:05:58:df:0a:a3:f0:0f:52:22:a2:0c:24:4d:
                    bd:72:c9:fe:e1:66:79:04:c3:95:14:3c:5c:73:b4:
                    ba:d0:83:77:28:60:68:2c:b6:35:7b:28:aa:b0:d8:
                    8d:60:78:ee:ba:43:dd:cd:51:c6:c2:31:c8:77:96:
                    b4:5c:0b:7c:47:a5:bb:1b:de:b0:64:47:f5:a1:cc:
                    76:7d:b6:6e:12:14:7a:07:58:87:b3:e3:a0:7e:1b:
                    63:08:40:a5:97:96:78:95:ec:fa:f1:16:90:94:4c:
                    84:7a:7d:f2:8d:0d:dc:26:a5:d7:4b:89:c8:8e:97:
                    2e:f6:20:4a:6e:fa:ed:73:1c:94:da:74:dd:13:2c:
                    42:4b:cc:b1:af:16:51:10:30:7c:29:cf:1c:3f:c3:
                    53:10:5d:c8:4b:d1:34:20:46:58:7c:71:14:17:e3:
                    ff:f5:8a:86:ce:58:5d:47:ea:0e:e3:3e:46:3b:74:
                    fd:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:C9:03:AE:96:FC:CB:65:63:5C:35:7B:67:D6:2F:BA:09:CD:98:2B
            X509v3 Authority Key Identifier:
                keyid:34:53:24:5A:F9:E7:69:05:F6:9A:90:F1:CE:CD:85:EA:88:3F:EA:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C6064/52FEF73A297011EB91E9DE54C4F9AE02/NFMkWvnnaQX2mpDxzs2F6og_6hY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NFMkWvnnaQX2mpDxzs2F6og_6hY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6064/52FEF73A297011EB91E9DE54C4F9AE02/E9D321CEF2F611EE95E10935C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.156.76.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b2:5f:40:d3:f2:2d:82:81:7e:49:84:98:73:ac:cf:ec:f2:9f:
         6e:4e:62:ba:5b:12:71:e2:66:bc:49:a0:50:90:00:37:0e:e2:
         cf:7c:51:9b:79:3f:67:89:71:0f:b7:70:c6:ce:57:f2:2e:b5:
         f0:fa:87:bf:e4:46:ce:a7:65:ba:a0:da:b3:26:23:09:48:f0:
         81:97:5a:de:d1:4e:98:1b:5a:c9:fa:ee:b3:ac:ae:6b:84:25:
         1c:dd:3d:02:7b:54:90:3e:10:17:2f:4f:d1:04:04:9a:b6:69:
         95:6e:c7:ec:a3:8d:ca:fe:42:ff:6d:1b:a0:90:f1:78:37:56:
         ce:1f:e7:61:4b:28:51:cf:1d:a6:dc:2b:da:40:34:d0:ae:64:
         6b:05:77:56:2a:e3:81:b8:65:9d:94:8b:87:2f:63:8a:24:97:
         9d:d2:53:9a:95:13:ad:91:97:99:ae:94:51:e9:1e:19:9b:ac:
         a2:9b:67:e5:28:30:89:85:8a:a3:5a:68:3f:69:a9:69:96:6e:
         f1:64:97:53:41:f5:8e:c7:cc:d5:9e:6a:bf:68:f0:65:d3:d6:
         9f:88:fd:9d:7f:f4:15:7b:4d:99:21:4a:ab:30:97:d3:53:f9:
         7e:fe:ab:b9:0e:b7:77:a7:81:27:73:42:f5:80:15:07:f9:01:
         72:a8:63:28
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBtMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzYwNjQxMTAvBgNVBAUTKDM0NTMyNDVBRjlFNzY5MDVGNjlBOTBGMUNFQ0Q4NUVB
ODgzRkVBMTYwHhcNMjQxMDA4MjIwMTExWhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzA1YWJhNy1kNjA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAty/KofSaNLRo4AHmyuHRuRcI8ncdjzlDkfDAcUM2ZERroL8fOdLonjIVO/CU
YbVrMNXcIqowZ7gMo9Uo7cFhOQnQZNCyo6S90IGgBQVY3wqj8A9SIqIMJE29csn+
4WZ5BMOVFDxcc7S60IN3KGBoLLY1eyiqsNiNYHjuukPdzVHGwjHId5a0XAt8R6W7
G96wZEf1ocx2fbZuEhR6B1iHs+OgfhtjCECll5Z4lez68RaQlEyEen3yjQ3cJqXX
S4nIjpcu9iBKbvrtcxyU2nTdEyxCS8yxrxZREDB8Kc8cP8NTEF3IS9E0IEZYfHEU
F+P/9YqGzlhdR+oO4z5GO3T9EQIDAQABo4IClTCCApEwHQYDVR0OBBYEFH/JA66W
/MtlY1w1e2fWL7oJzZgrMB8GA1UdIwQYMBaAFDRTJFr552kF9pqQ8c7NheqIP+oW
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjA2NC81MkZFRjczQTI5
NzAxMUVCOTFFOURFNTRDNEY5QUUwMi9ORk1rV3ZubmFRWDJtcER4enMyRjZvZ182
aFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL05GTWtXdm5uYVFYMm1wRHh6czJGNm9nXzZoWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QzYwNjQvNTJGRUY3M0EyOTcwMTFFQjkxRTlERTU0QzRGOUFFMDIvRTlEMzIxQ0VG
MkY2MTFFRTk1RTEwOTM1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnnEwwDQYJKoZIhvcNAQELBQADggEBALJfQNPyLYKBfkmE
mHOsz+zyn25OYrpbEnHiZrxJoFCQADcO4s98UZt5P2eJcQ+3cMbOV/IutfD6h7/k
Rs6nZbqg2rMmIwlI8IGXWt7RTpgbWsn67rOsrmuEJRzdPQJ7VJA+EBcvT9EEBJq2
aZVux+yjjcr+Qv9tG6CQ8Xg3Vs4f52FLKFHPHabcK9pANNCuZGsFd1Yq44G4ZZ2U
i4cvY4okl53SU5qVE62Rl5mulFHpHhmbrKKbZ+UoMImFiqNaaD9pqWmWbvFkl1NB
9Y7HzNWear9o8GXT1p+I/Z1/9BV7TZkhSqswl9NT+X7+q7kOt3engSdzQvWAFQf5
AXKoYyg=
-----END CERTIFICATE-----
Generated at Fri Nov 22 22:24:12 2024 by rpki-client on console-fra.rpki-client.org