Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C72B1/2A45F980DEC911E9AAA7EC33C4F9AE02/6714424C3C9111EA9416CA78C4F9AE02.roa
File:                     6714424C3C9111EA9416CA78C4F9AE02.roa (raw, json)
Hash identifier:          mY4rF8hK1zZU5SgCuKB7ywQBLhRSO9nn0rrF7lxwDOk=
Subject key identifier:   81:88:EC:AC:C7:88:76:9A:FC:02:80:F6:D9:2F:1F:59:5B:01:CA:8C
Certificate issuer:       /CN=A91C72B1/serialNumber=EB8B0AD2C076620852CBC37890E64AD406B489E8
Certificate serial:       0BEF
Authority key identifier: EB:8B:0A:D2:C0:76:62:08:52:CB:C3:78:90:E6:4A:D4:06:B4:89:E8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/64sK0sB2YghSy8N4kOZK1Aa0ieg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C72B1/2A45F980DEC911E9AAA7EC33C4F9AE02/6714424C3C9111EA9416CA78C4F9AE02.roa
Signing time:             Wed 08 Nov 2023 19:07:08 +0000
ROA not before:           Wed 08 Nov 2023 19:07:08 +0000
ROA not after:            Mon 30 Dec 2024 00:00:00 +0000
asID:                     139675
IP address blocks:        103.143.126.0/23 maxlen: 23
                          103.143.126.0/24 maxlen: 24
                          103.143.127.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C72B1/2A45F980DEC911E9AAA7EC33C4F9AE02/64sK0sB2YghSy8N4kOZK1Aa0ieg.crl
                          rsync://rpki.apnic.net/member_repository/A91C72B1/2A45F980DEC911E9AAA7EC33C4F9AE02/64sK0sB2YghSy8N4kOZK1Aa0ieg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/64sK0sB2YghSy8N4kOZK1Aa0ieg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 May 2024 19:03:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3055 (0xbef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C72B1/serialNumber=EB8B0AD2C076620852CBC37890E64AD406B489E8
        Validity
            Not Before: Nov  8 19:07:08 2023 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=654bdc5c-550c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ce:f0:56:28:c1:b9:32:3c:7c:ad:51:93:84:
                    59:58:d3:6e:9f:75:36:42:85:d2:d2:74:f1:0c:39:
                    78:82:92:74:00:7f:62:3a:22:fa:49:73:26:ae:da:
                    1a:28:90:37:ca:16:7e:ea:81:4c:ae:b6:15:8f:16:
                    5b:ec:b7:96:de:9f:59:e1:2a:41:74:c7:0b:5c:b1:
                    72:63:78:80:b3:c2:3f:da:53:b7:3f:06:dd:19:cb:
                    0c:05:02:c5:66:68:57:b1:25:9d:83:d9:97:81:b2:
                    7c:4d:78:42:70:e7:68:94:73:c8:c7:ba:1f:d2:d2:
                    88:b7:06:e8:10:2b:70:7f:1a:06:22:2c:3f:16:45:
                    44:75:8a:ee:5c:06:6f:3f:b4:f7:25:59:49:32:4d:
                    a5:39:ca:f2:65:0b:cf:ba:22:d5:09:bf:d7:57:a7:
                    42:c5:ae:7d:dd:79:57:c3:e8:f2:c9:3a:a9:99:fc:
                    fd:3f:f2:c9:b3:aa:4d:7d:26:eb:eb:a3:9f:2d:d9:
                    f2:23:76:e5:d5:4a:1e:9a:e6:6d:49:67:b8:fa:6f:
                    d6:66:b1:33:5d:c8:9d:cd:68:83:6f:c2:60:7f:93:
                    de:cb:3a:39:63:b9:b2:48:11:28:85:96:62:4c:1b:
                    8e:7d:8b:73:4c:5e:aa:52:2a:ef:9d:19:d8:23:01:
                    6a:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:88:EC:AC:C7:88:76:9A:FC:02:80:F6:D9:2F:1F:59:5B:01:CA:8C
            X509v3 Authority Key Identifier:
                keyid:EB:8B:0A:D2:C0:76:62:08:52:CB:C3:78:90:E6:4A:D4:06:B4:89:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C72B1/2A45F980DEC911E9AAA7EC33C4F9AE02/64sK0sB2YghSy8N4kOZK1Aa0ieg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/64sK0sB2YghSy8N4kOZK1Aa0ieg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C72B1/2A45F980DEC911E9AAA7EC33C4F9AE02/6714424C3C9111EA9416CA78C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.143.126.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2e:2e:10:18:01:0e:5e:c5:a6:35:5f:31:7b:4d:e3:30:2a:69:
         1c:72:06:35:0f:8f:c2:b0:a8:47:ae:36:fa:40:f0:f9:23:3e:
         f3:d3:7a:e4:4f:c9:13:41:02:d4:ec:ac:2d:ea:f7:df:e4:59:
         6b:17:96:5a:34:cc:dc:8e:3a:b4:5d:d6:6e:0c:9f:a7:70:94:
         b2:28:71:04:ee:38:96:a3:fa:94:6d:5f:32:b9:de:fc:ad:f9:
         4b:6a:71:b8:0d:2d:03:5c:6e:2e:44:b7:0e:36:ff:66:dd:92:
         2f:f0:cd:68:d6:24:7e:4d:53:66:1a:3d:ec:3c:2c:22:09:5f:
         ec:d2:08:b7:92:13:85:c1:68:a8:12:e3:b4:33:be:84:3b:d6:
         99:99:2a:31:ff:97:bb:bc:fd:6b:1e:45:4a:c2:86:56:04:ca:
         69:46:bd:0a:17:82:ef:b0:75:18:44:36:86:24:7d:74:35:3d:
         a9:c0:91:ba:3d:78:b6:74:0e:5f:64:23:36:82:41:25:9d:ce:
         f6:61:e4:16:fe:9b:e3:2c:1a:f7:c9:4b:7b:8d:b1:51:f4:2c:
         27:cd:f1:74:cf:71:b5:75:9f:d9:65:68:ed:76:e5:4d:a7:fb:
         c6:15:76:25:b4:58:3e:a8:64:d2:a5:cb:97:c2:a8:fb:e5:20:
         d8:61:06:2c
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICC+8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzcyQjExMTAvBgNVBAUTKEVCOEIwQUQyQzA3NjYyMDg1MkNCQzM3ODkwRTY0QUQ0
MDZCNDg5RTgwHhcNMjMxMTA4MTkwNzA4WhcNMjQxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NTRiZGM1Yy01NTBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyc7wVijBuTI8fK1Rk4RZWNNun3U2QoXS0nTxDDl4gpJ0AH9iOiL6SXMmrtoa
KJA3yhZ+6oFMrrYVjxZb7LeW3p9Z4SpBdMcLXLFyY3iAs8I/2lO3PwbdGcsMBQLF
ZmhXsSWdg9mXgbJ8TXhCcOdolHPIx7of0tKItwboECtwfxoGIiw/FkVEdYruXAZv
P7T3JVlJMk2lOcryZQvPuiLVCb/XV6dCxa593XlXw+jyyTqpmfz9P/LJs6pNfSbr
66OfLdnyI3bl1UoemuZtSWe4+m/WZrEzXcidzWiDb8Jgf5Peyzo5Y7mySBEohZZi
TBuOfYtzTF6qUirvnRnYIwFqOwIDAQABo4IClTCCApEwHQYDVR0OBBYEFIGI7KzH
iHaa/AKA9tkvH1lbAcqMMB8GA1UdIwQYMBaAFOuLCtLAdmIIUsvDeJDmStQGtIno
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzJCMS8yQTQ1Rjk4MERF
QzkxMUU5QUFBN0VDMzNDNEY5QUUwMi82NHNLMHNCMllnaFN5OE40a09aSzFBYTBp
ZWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzY0c0swc0IyWWdoU3k4TjRrT1pLMUFhMGllZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QzcyQjEvMkE0NUY5ODBERUM5MTFFOUFBQTdFQzMzQzRGOUFFMDIvNjcxNDQyNEMz
QzkxMTFFQTk0MTZDQTc4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnj34wDQYJKoZIhvcNAQELBQADggEBAC4uEBgBDl7FpjVf
MXtN4zAqaRxyBjUPj8KwqEeuNvpA8PkjPvPTeuRPyRNBAtTsrC3q99/kWWsXllo0
zNyOOrRd1m4Mn6dwlLIocQTuOJaj+pRtXzK53vyt+UtqcbgNLQNcbi5Etw42/2bd
ki/wzWjWJH5NU2YaPew8LCIJX+zSCLeSE4XBaKgS47QzvoQ71pmZKjH/l7u8/Wse
RUrChlYEymlGvQoXgu+wdRhENoYkfXQ1PanAkbo9eLZ0Dl9kIzaCQSWdzvZh5Bb+
m+MsGvfJS3uNsVH0LCfN8XTPcbV1n9llaO125U2n+8YVdiW0WD6oZNKly5fCqPvl
INhhBiw=
-----END CERTIFICATE-----
Generated at Thu May 16 19:50:00 2024 by rpki-client on console-fra.rpki-client.org