Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/329274C4D31611EEA7F0475FC4F9AE02.roa
File:                     329274C4D31611EEA7F0475FC4F9AE02.roa (raw, json)
Hash identifier:          HiUI4r/SFIegFaFFoXRBRf157uEBpMM7bqdYETmrC8o=
Subject key identifier:   9D:72:8B:42:4D:E6:F9:41:D3:96:94:C5:52:A9:D1:CD:B4:92:09:B9
Certificate issuer:       /CN=A91C6BF0/serialNumber=7D23E75C10DF6571BEAC17F3555E1B9983814225
Certificate serial:       BE
Authority key identifier: 7D:23:E7:5C:10:DF:65:71:BE:AC:17:F3:55:5E:1B:99:83:81:42:25
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSPnXBDfZXG-rBfzVV4bmYOBQiU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/329274C4D31611EEA7F0475FC4F9AE02.roa
Signing time:             Thu 28 Mar 2024 18:57:19 +0000
ROA not before:           Thu 28 Mar 2024 18:57:19 +0000
ROA not after:            Thu 01 May 2025 00:00:00 +0000
asID:                     137967
IP address blocks:        103.134.26.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/fSPnXBDfZXG-rBfzVV4bmYOBQiU.crl
                          rsync://rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/fSPnXBDfZXG-rBfzVV4bmYOBQiU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSPnXBDfZXG-rBfzVV4bmYOBQiU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 14:50:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 190 (0xbe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C6BF0/serialNumber=7D23E75C10DF6571BEAC17F3555E1B9983814225
        Validity
            Not Before: Mar 28 18:57:19 2024 GMT
            Not After : May  1 00:00:00 2025 GMT
        Subject: CN=6605bd8e-6bf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:c2:d9:1b:7f:c9:4b:e8:8a:03:f3:c0:c7:b2:
                    5e:9e:dc:19:01:ee:48:a8:7d:db:9c:fc:59:68:cf:
                    f0:74:af:03:1b:e8:b0:5a:9b:8a:9f:e0:14:bc:b5:
                    b8:92:a4:50:3b:36:4a:88:dc:f8:26:67:bb:fe:a1:
                    db:24:1b:4a:d1:32:c0:ec:2a:a8:1b:df:0b:04:a2:
                    7d:b6:79:9a:a4:59:1a:d5:61:bf:bc:bd:a9:f2:d3:
                    10:50:dc:0a:8b:81:5c:0f:47:96:c4:9f:9f:a1:30:
                    da:84:bf:bf:ee:19:5b:76:f8:c6:09:a0:51:36:ee:
                    52:ec:0b:c0:e2:26:7f:dc:ab:45:81:44:19:6d:79:
                    e8:bb:84:ba:88:d6:37:de:e9:09:9b:7d:32:1f:44:
                    2d:01:c8:15:16:20:4b:8e:07:e3:a5:4a:d8:72:9c:
                    2f:41:c6:30:70:eb:5b:2f:db:60:a0:28:3c:cb:0b:
                    38:8c:1c:9a:a4:e2:2e:2d:95:2d:fc:70:b8:14:f7:
                    d2:5b:5f:77:62:d9:6b:d6:ff:64:f4:f7:d5:ec:8e:
                    97:ff:74:ad:a6:3f:52:b4:5e:a7:cc:7f:35:ee:ae:
                    18:97:23:07:02:bd:7e:27:57:ed:85:f7:39:c5:66:
                    15:6a:b8:fe:38:02:53:05:f0:77:9d:dd:7d:25:a1:
                    c8:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:72:8B:42:4D:E6:F9:41:D3:96:94:C5:52:A9:D1:CD:B4:92:09:B9
            X509v3 Authority Key Identifier:
                keyid:7D:23:E7:5C:10:DF:65:71:BE:AC:17:F3:55:5E:1B:99:83:81:42:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/fSPnXBDfZXG-rBfzVV4bmYOBQiU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSPnXBDfZXG-rBfzVV4bmYOBQiU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/329274C4D31611EEA7F0475FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.134.26.0/23

    Signature Algorithm: sha256WithRSAEncryption
         05:f4:49:de:fe:ec:20:7f:f5:8b:2e:6a:58:8a:d9:fc:dc:69:
         b0:59:eb:66:e5:8e:56:a3:ea:e6:1f:76:8e:9a:c5:a7:c4:6c:
         93:a4:2a:28:58:da:99:a7:2a:8f:92:c8:47:aa:ec:73:0b:41:
         1f:3a:dd:a1:23:cc:c1:78:06:e3:a8:aa:7a:f2:1f:53:75:52:
         5c:56:1a:12:b1:b4:2b:7c:ab:7f:c5:f0:05:97:39:84:f5:1d:
         ab:01:4f:09:4b:83:e7:b9:aa:9d:b7:1a:bb:74:0a:b6:dd:05:
         47:c7:db:21:cf:5f:4f:23:7e:64:9a:f3:09:4f:17:c8:2a:03:
         28:fa:5e:ec:10:99:77:b6:d4:fa:55:73:21:9f:07:e8:06:9c:
         1e:d6:ec:9c:38:12:53:f2:d9:49:16:69:e9:5a:c4:10:67:4b:
         38:51:ad:78:4d:01:a5:49:fb:81:13:40:ef:75:21:1f:17:d3:
         a6:2c:2c:b1:76:35:f5:73:b6:9f:1e:21:99:71:c5:1d:11:18:
         81:59:d3:9d:5b:11:ff:c2:6f:1d:24:9b:8d:e1:6f:bb:d6:af:
         8a:ec:11:a2:a9:54:13:06:b7:c9:fa:ac:e5:30:d9:f4:7a:8d:
         93:be:bd:35:d2:3d:da:e9:ec:ef:b8:34:51:82:66:68:85:2a:
         b3:78:8a:66
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAL4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzZCRjAxMTAvBgNVBAUTKDdEMjNFNzVDMTBERjY1NzFCRUFDMTdGMzU1NUUxQjk5
ODM4MTQyMjUwHhcNMjQwMzI4MTg1NzE5WhcNMjUwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NjA1YmQ4ZS02YmYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA08LZG3/JS+iKA/PAx7JentwZAe5IqH3bnPxZaM/wdK8DG+iwWpuKn+AUvLW4
kqRQOzZKiNz4Jme7/qHbJBtK0TLA7CqoG98LBKJ9tnmapFka1WG/vL2p8tMQUNwK
i4FcD0eWxJ+foTDahL+/7hlbdvjGCaBRNu5S7AvA4iZ/3KtFgUQZbXnou4S6iNY3
3ukJm30yH0QtAcgVFiBLjgfjpUrYcpwvQcYwcOtbL9tgoCg8yws4jByapOIuLZUt
/HC4FPfSW193Ytlr1v9k9PfV7I6X/3Stpj9StF6nzH817q4YlyMHAr1+J1fthfc5
xWYVarj+OAJTBfB3nd19JaHIPwIDAQABo4IClTCCApEwHQYDVR0OBBYEFJ1yi0JN
5vlB05aUxVKp0c20kgm5MB8GA1UdIwQYMBaAFH0j51wQ32VxvqwX81VeG5mDgUIl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNkJGMC8xNDkxOTc0QUFF
QkIxMUU5OEEzOTBCNTlDNEY5QUUwMi9mU1BuWEJEZlpYRy1yQmZ6VlY0Ym1ZT0JR
aVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2ZTUG5YQkRmWlhHLXJCZnpWVjRibVlPQlFpVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QzZCRjAvMTQ5MTk3NEFBRUJCMTFFOThBMzkwQjU5QzRGOUFFMDIvMzI5Mjc0QzRE
MzE2MTFFRUE3RjA0NzVGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnhhowDQYJKoZIhvcNAQELBQADggEBAAX0Sd7+7CB/9Ysu
aliK2fzcabBZ62bljlaj6uYfdo6axafEbJOkKihY2pmnKo+SyEeq7HMLQR863aEj
zMF4BuOoqnryH1N1UlxWGhKxtCt8q3/F8AWXOYT1HasBTwlLg+e5qp23Grt0Crbd
BUfH2yHPX08jfmSa8wlPF8gqAyj6XuwQmXe21PpVcyGfB+gGnB7W7Jw4ElPy2UkW
aelaxBBnSzhRrXhNAaVJ+4ETQO91IR8X06YsLLF2NfVztp8eIZlxxR0RGIFZ051b
Ef/Cbx0km43hb7vWr4rsEaKpVBMGt8n6rOUw2fR6jZO+vTXSPdrp7O+4NFGCZmiF
KrN4imY=
-----END CERTIFICATE-----
Generated at Sat May 18 19:21:05 2024 by rpki-client on console-fra.rpki-client.org