Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/73E21BB0FB3D11EEB154B874C4F9AE02.roa
File:                     73E21BB0FB3D11EEB154B874C4F9AE02.roa (raw, json)
Hash identifier:          L2lFX/TKaoo1uEZIGBl9DhdWD1gxmTpZRKuATSCNm/M=
Subject key identifier:   E8:4E:C9:B2:E8:83:6C:CB:87:98:92:C7:1D:35:BC:2D:1A:9E:37:F6
Certificate issuer:       /CN=A91CB09E/serialNumber=1760FF71E16BCFEEE7B8D6710D63606799AEF767
Certificate serial:       04EB
Authority key identifier: 17:60:FF:71:E1:6B:CF:EE:E7:B8:D6:71:0D:63:60:67:99:AE:F7:67
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F2D_ceFrz-7nuNZxDWNgZ5mu92c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/73E21BB0FB3D11EEB154B874C4F9AE02.roa
Signing time:             Wed 15 May 2024 01:36:06 +0000
ROA not before:           Wed 15 May 2024 01:36:06 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     152700
IP address blocks:        103.136.151.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/F2D_ceFrz-7nuNZxDWNgZ5mu92c.crl
                          rsync://rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/F2D_ceFrz-7nuNZxDWNgZ5mu92c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F2D_ceFrz-7nuNZxDWNgZ5mu92c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 May 2024 00:51:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1259 (0x4eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CB09E/serialNumber=1760FF71E16BCFEEE7B8D6710D63606799AEF767
        Validity
            Not Before: May 15 01:36:06 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=66441186-b800
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:69:af:5c:e0:18:b4:ae:c1:c0:a7:c3:30:a8:
                    4b:09:da:02:66:44:46:cf:58:19:cd:0b:7c:25:1e:
                    3e:26:d1:39:88:be:e2:ff:49:fe:d6:4d:5e:08:d2:
                    0b:16:0d:5f:0d:ae:42:78:dd:33:f9:e4:cb:b0:ca:
                    05:b0:fd:53:ac:a9:b1:3d:75:bc:44:f2:db:a1:9b:
                    8e:bd:0c:5a:63:1d:84:be:8d:10:02:70:a5:42:25:
                    3f:9f:34:9c:9e:1f:0c:c9:0a:8c:d8:f9:a4:dc:78:
                    eb:c0:7e:b8:1f:3f:42:53:37:2c:e9:bb:c0:a1:fb:
                    d0:36:4c:53:01:a2:b7:92:32:e4:03:75:d8:2b:66:
                    0f:54:4f:89:31:cd:4a:88:c3:e9:ab:aa:f2:f5:b6:
                    69:2c:a7:a5:ec:b5:7d:7e:af:7b:ed:25:aa:31:3b:
                    eb:de:d0:8c:5d:2f:8b:0a:ac:8b:e0:42:67:f5:e2:
                    ed:c4:27:6a:88:80:24:3c:9b:72:43:91:85:8f:10:
                    8e:3d:f1:d1:48:ee:c2:6d:13:80:fb:f5:97:ba:7c:
                    41:da:14:2b:67:41:92:d5:13:cc:8c:ce:fa:8f:61:
                    f9:53:ee:a2:db:fd:d6:12:b8:28:a4:e6:46:f3:b5:
                    d7:3d:f4:02:d5:bf:55:04:b1:34:0b:1d:88:05:ae:
                    b3:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:4E:C9:B2:E8:83:6C:CB:87:98:92:C7:1D:35:BC:2D:1A:9E:37:F6
            X509v3 Authority Key Identifier:
                keyid:17:60:FF:71:E1:6B:CF:EE:E7:B8:D6:71:0D:63:60:67:99:AE:F7:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/F2D_ceFrz-7nuNZxDWNgZ5mu92c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F2D_ceFrz-7nuNZxDWNgZ5mu92c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/73E21BB0FB3D11EEB154B874C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.136.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:6a:45:08:af:64:9f:cc:91:a3:94:9e:a1:e8:2d:60:ad:5d:
         f0:e1:5f:9d:b7:1d:92:85:90:02:b1:6a:70:3e:97:e2:a1:b8:
         d4:60:68:7a:a4:67:fa:95:e4:c5:9c:7b:9c:e1:a7:79:3d:13:
         cf:cd:3b:97:7b:ba:c5:f7:52:15:58:4d:d6:56:a9:5d:03:ac:
         10:38:88:27:ce:0d:7d:b1:ab:9b:9d:4a:7a:8d:21:5c:67:dc:
         d4:64:b5:75:aa:c5:1f:06:54:4e:0f:68:51:2e:9a:51:df:4b:
         e5:e6:a3:49:5a:f3:cc:51:fe:34:19:b9:db:c1:e6:9f:6f:e8:
         13:02:0a:aa:cc:dd:65:ad:76:11:2b:02:8e:fd:b2:4f:40:dd:
         f6:e4:88:61:65:2e:e6:92:63:1c:17:27:8a:83:00:00:fe:eb:
         98:49:c8:9e:a6:d1:f5:d0:88:d7:43:36:75:cb:0a:25:6b:c2:
         30:33:a3:f1:ee:17:34:79:d6:80:3f:2a:6d:ca:11:f6:e5:3a:
         a1:a5:f7:dc:21:ec:66:b9:76:b5:f3:bb:64:81:c4:57:88:dd:
         b7:4a:d7:ca:c9:0e:24:d3:f0:dd:24:95:5c:02:a9:ed:55:07:
         ba:81:9f:12:90:ca:10:62:c9:6f:5a:de:15:23:7c:59:2b:70:
         7c:a2:bf:d0
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBOswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0IwOUUxMTAvBgNVBAUTKDE3NjBGRjcxRTE2QkNGRUVFN0I4RDY3MTBENjM2MDY3
OTlBRUY3NjcwHhcNMjQwNTE1MDEzNjA2WhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NjQ0MTE4Ni1iODAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzWmvXOAYtK7BwKfDMKhLCdoCZkRGz1gZzQt8JR4+JtE5iL7i/0n+1k1eCNIL
Fg1fDa5CeN0z+eTLsMoFsP1TrKmxPXW8RPLboZuOvQxaYx2Evo0QAnClQiU/nzSc
nh8MyQqM2Pmk3HjrwH64Hz9CUzcs6bvAofvQNkxTAaK3kjLkA3XYK2YPVE+JMc1K
iMPpq6ry9bZpLKel7LV9fq977SWqMTvr3tCMXS+LCqyL4EJn9eLtxCdqiIAkPJty
Q5GFjxCOPfHRSO7CbROA+/WXunxB2hQrZ0GS1RPMjM76j2H5U+6i2/3WErgopOZG
87XXPfQC1b9VBLE0Cx2IBa6zHQIDAQABo4IClTCCApEwHQYDVR0OBBYEFOhOybLo
g2zLh5iSxx01vC0anjf2MB8GA1UdIwQYMBaAFBdg/3Hha8/u57jWcQ1jYGeZrvdn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjA5RS80NzExOUQwMEQw
MEIxMUVCQjU4OTBFN0JDNEY5QUUwMi9GMkRfY2VGcnotN251Tlp4RFdOZ1o1bXU5
MmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0YyRF9jZUZyei03bnVOWnhEV05nWjVtdTkyYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Q0IwOUUvNDcxMTlEMDBEMDBCMTFFQkI1ODkwRTdCQzRGOUFFMDIvNzNFMjFCQjBG
QjNEMTFFRUIxNTRCODc0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABniJcwDQYJKoZIhvcNAQELBQADggEBAJJqRQivZJ/MkaOU
nqHoLWCtXfDhX523HZKFkAKxanA+l+KhuNRgaHqkZ/qV5MWce5zhp3k9E8/NO5d7
usX3UhVYTdZWqV0DrBA4iCfODX2xq5udSnqNIVxn3NRktXWqxR8GVE4PaFEumlHf
S+Xmo0la88xR/jQZudvB5p9v6BMCCqrM3WWtdhErAo79sk9A3fbkiGFlLuaSYxwX
J4qDAAD+65hJyJ6m0fXQiNdDNnXLCiVrwjAzo/HuFzR51oA/Km3KEfblOqGl99wh
7Ga5drXzu2SBxFeI3bdK18rJDiTT8N0klVwCqe1VB7qBnxKQyhBiyW9a3hUjfFkr
cHyiv9A=
-----END CERTIFICATE-----
Generated at Fri May 17 02:38:40 2024 by rpki-client on console-fra.rpki-client.org