Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/0A93D802C98211EE90C9B71DC4F9AE02.roa
File:                     0A93D802C98211EE90C9B71DC4F9AE02.roa (raw, json)
Hash identifier:          vReq03Gn7h1BCKP22IwkaPi8aNfwelZqYb8YX29b0Fo=
Subject key identifier:   3B:3A:11:D4:71:78:21:74:B5:A3:71:D4:59:07:88:4C:AC:8F:7B:1D
Certificate issuer:       /CN=A91C7672/serialNumber=51569B48C03891454E469853A67DB909BEC2CAD6
Certificate serial:       1B19
Authority key identifier: 51:56:9B:48:C0:38:91:45:4E:46:98:53:A6:7D:B9:09:BE:C2:CA:D6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UVabSMA4kUVORphTpn25Cb7CytY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/0A93D802C98211EE90C9B71DC4F9AE02.roa
Signing time:             Mon 12 Feb 2024 16:43:53 +0000
ROA not before:           Mon 12 Feb 2024 16:43:53 +0000
ROA not after:            Sun 02 Mar 2025 00:00:00 +0000
asID:                     139029
IP address blocks:        103.78.255.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/UVabSMA4kUVORphTpn25Cb7CytY.crl
                          rsync://rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/UVabSMA4kUVORphTpn25Cb7CytY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UVabSMA4kUVORphTpn25Cb7CytY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 May 2024 16:47:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6937 (0x1b19)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C7672/serialNumber=51569B48C03891454E469853A67DB909BEC2CAD6
        Validity
            Not Before: Feb 12 16:43:53 2024 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=65ca4ac9-11aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:b0:e4:d1:9b:9a:26:5a:ac:7c:8d:3c:16:3d:
                    30:f1:e2:32:3f:fa:cd:c5:48:8e:82:5d:1f:5e:b9:
                    b6:6c:bd:eb:a7:14:7f:2c:01:83:b8:a9:04:9f:c7:
                    2e:3e:4f:ae:9a:42:e1:8c:12:be:e3:cf:11:fa:15:
                    55:13:8d:5a:74:95:fe:b0:06:e9:08:ef:b4:00:ff:
                    b4:f3:ee:e1:d6:73:c4:e2:1c:33:9b:66:07:69:84:
                    e3:bb:5c:4e:b7:3c:c0:53:2b:ef:85:d3:9f:4e:34:
                    92:18:e4:ef:66:00:b9:1b:45:10:b1:b1:96:e6:54:
                    99:ee:58:1c:55:2d:76:c1:bf:66:06:59:e9:62:d0:
                    f2:1d:6f:75:cf:20:67:18:77:c3:59:6b:ed:19:76:
                    34:77:6a:05:5f:c3:0a:56:58:7e:b3:55:85:dc:a9:
                    b0:48:2b:a5:90:fa:2c:6f:b4:39:09:87:3c:8b:91:
                    fa:bd:99:ce:2c:70:df:9e:19:e2:03:31:57:9d:fc:
                    03:45:b5:f4:ca:5d:9c:d7:fb:d4:61:61:fd:8c:97:
                    2a:e1:46:0f:cb:2e:ee:76:18:c1:21:e7:fe:4b:ae:
                    c4:64:5d:a5:fe:74:1c:01:81:6d:3f:12:85:42:07:
                    fe:65:02:bf:1a:a8:a1:0c:a9:34:cd:ef:90:63:e4:
                    f5:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:3A:11:D4:71:78:21:74:B5:A3:71:D4:59:07:88:4C:AC:8F:7B:1D
            X509v3 Authority Key Identifier:
                keyid:51:56:9B:48:C0:38:91:45:4E:46:98:53:A6:7D:B9:09:BE:C2:CA:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/UVabSMA4kUVORphTpn25Cb7CytY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UVabSMA4kUVORphTpn25Cb7CytY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/0A93D802C98211EE90C9B71DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.78.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:1e:86:4b:99:02:e0:c8:06:28:c4:d6:26:53:9e:e2:c7:e1:
         2a:90:02:c2:42:98:b4:e5:64:22:24:be:bd:36:98:23:3e:cd:
         2d:5d:dd:a1:41:1f:50:06:5f:55:9d:6d:44:c8:e7:11:ea:46:
         2d:5c:91:91:fa:b1:6b:af:fa:d2:f1:cb:cc:5d:14:af:eb:8f:
         3d:43:85:bb:bd:10:32:fa:af:84:79:56:e3:5f:bd:f4:73:be:
         72:ef:2a:0c:7a:d3:38:66:e6:a6:dd:1e:69:ab:cd:76:1e:22:
         70:7e:a1:c0:52:00:c9:34:45:87:23:d7:3e:c9:43:a2:96:81:
         dc:84:41:38:69:6c:5b:4d:ee:cb:91:98:c0:1b:49:5b:cf:af:
         1b:84:29:44:22:02:e6:ff:84:6e:ac:9b:b5:13:fc:b4:8e:cf:
         08:e8:be:92:97:89:68:d2:d2:39:ee:9d:58:c8:02:51:57:14:
         fe:f6:80:be:22:68:8d:df:31:d9:32:60:ab:3e:50:ea:d6:d7:
         57:31:c6:57:e5:42:74:ad:44:e9:2b:49:f4:73:18:57:b0:80:
         2e:71:18:b1:4b:a7:6e:91:9a:8e:b2:95:e8:fe:f2:d7:49:fe:
         c2:fb:54:3c:6c:ae:b7:68:10:f4:4a:3e:c4:7a:03:a9:a2:68:
         3c:71:39:d6
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICGxkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Qzc2NzIxMTAvBgNVBAUTKDUxNTY5QjQ4QzAzODkxNDU0RTQ2OTg1M0E2N0RCOTA5
QkVDMkNBRDYwHhcNMjQwMjEyMTY0MzUzWhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02NWNhNGFjOS0xMWFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3bDk0ZuaJlqsfI08Fj0w8eIyP/rNxUiOgl0fXrm2bL3rpxR/LAGDuKkEn8cu
Pk+umkLhjBK+488R+hVVE41adJX+sAbpCO+0AP+08+7h1nPE4hwzm2YHaYTju1xO
tzzAUyvvhdOfTjSSGOTvZgC5G0UQsbGW5lSZ7lgcVS12wb9mBlnpYtDyHW91zyBn
GHfDWWvtGXY0d2oFX8MKVlh+s1WF3KmwSCulkPosb7Q5CYc8i5H6vZnOLHDfnhni
AzFXnfwDRbX0yl2c1/vUYWH9jJcq4UYPyy7udhjBIef+S67EZF2l/nQcAYFtPxKF
Qgf+ZQK/GqihDKk0ze+QY+T1CQIDAQABo4IClTCCApEwHQYDVR0OBBYEFDs6EdRx
eCF0taNx1FkHiEysj3sdMB8GA1UdIwQYMBaAFFFWm0jAOJFFTkaYU6Z9uQm+wsrW
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzY3Mi80Mzc2NEJFQ0Y3
MjQxMUU2QUJGMDJCM0NDNEY5QUUwMi9VVmFiU01BNGtVVk9ScGhUcG4yNUNiN0N5
dFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1VWYWJTTUE0a1VWT1JwaFRwbjI1Q2I3Q3l0WS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Qzc2NzIvNDM3NjRCRUNGNzI0MTFFNkFCRjAyQjNDQzRGOUFFMDIvMEE5M0Q4MDJD
OTgyMTFFRTkwQzlCNzFEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnTv8wDQYJKoZIhvcNAQELBQADggEBAEYehkuZAuDIBijE
1iZTnuLH4SqQAsJCmLTlZCIkvr02mCM+zS1d3aFBH1AGX1WdbUTI5xHqRi1ckZH6
sWuv+tLxy8xdFK/rjz1Dhbu9EDL6r4R5VuNfvfRzvnLvKgx60zhm5qbdHmmrzXYe
InB+ocBSAMk0RYcj1z7JQ6KWgdyEQThpbFtN7suRmMAbSVvPrxuEKUQiAub/hG6s
m7UT/LSOzwjovpKXiWjS0jnunVjIAlFXFP72gL4iaI3fMdkyYKs+UOrW11cxxlfl
QnStROkrSfRzGFewgC5xGLFLp26Rmo6ylej+8tdJ/sL7VDxsrrdoEPRKPsR6A6mi
aDxxOdY=
-----END CERTIFICATE-----
Generated at Thu May 16 18:26:09 2024 by rpki-client on console-fra.rpki-client.org