Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEF20/F26715B24F5F11ECB03B9E1BC4F9AE02/69BD1776579A11EEB2386282C4F9AE02.roa
File:                     69BD1776579A11EEB2386282C4F9AE02.roa (raw, json)
Hash identifier:          fvrI/G4/lZDcaHvJtqlBwFbuS2mrAEvqsqBeZAnHlsE=
Subject key identifier:   6F:E9:9C:1F:E2:10:A0:7D:8F:14:26:F7:89:CC:16:9B:BD:87:40:7F
Certificate issuer:       /CN=A91CEF20/serialNumber=4A89122712693EA008EBA7A101AC622695FAEC24
Certificate serial:       035C
Authority key identifier: 4A:89:12:27:12:69:3E:A0:08:EB:A7:A1:01:AC:62:26:95:FA:EC:24
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SokSJxJpPqAI66ehAaxiJpX67CQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CEF20/F26715B24F5F11ECB03B9E1BC4F9AE02/69BD1776579A11EEB2386282C4F9AE02.roa
Signing time:             Sat 23 Dec 2023 02:14:22 +0000
ROA not before:           Sat 23 Dec 2023 02:14:22 +0000
ROA not after:            Sun 02 Mar 2025 00:00:00 +0000
asID:                     149035
IP address blocks:        103.177.54.0/23 maxlen: 24
                          2001:df0:1d40::/48 maxlen: 56
                          2001:df0:1d41::/48 maxlen: 56

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CEF20/F26715B24F5F11ECB03B9E1BC4F9AE02/SokSJxJpPqAI66ehAaxiJpX67CQ.crl
                          rsync://rpki.apnic.net/member_repository/A91CEF20/F26715B24F5F11ECB03B9E1BC4F9AE02/SokSJxJpPqAI66ehAaxiJpX67CQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SokSJxJpPqAI66ehAaxiJpX67CQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 May 2024 02:30:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 860 (0x35c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CEF20/serialNumber=4A89122712693EA008EBA7A101AC622695FAEC24
        Validity
            Not Before: Dec 23 02:14:22 2023 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=6586427e-2472
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:42:9e:0e:8d:96:94:04:fd:a8:ff:f6:59:8a:
                    6b:93:af:6f:bc:63:e9:08:82:b5:c2:c7:6a:49:ea:
                    6d:63:91:8f:8d:f0:43:7b:ee:8a:f2:53:1e:f0:9d:
                    d3:55:d5:12:27:56:34:05:07:bd:a0:d5:bb:12:51:
                    77:bf:ab:11:68:14:b2:95:65:b1:fe:65:c8:93:e1:
                    f1:55:1e:da:28:5c:e2:b5:ff:9b:e2:d1:ca:68:f3:
                    b6:15:fb:6d:ef:19:09:62:43:d3:f8:fc:be:85:ae:
                    6e:11:d6:9a:a1:3a:35:12:f6:fe:87:0b:48:9b:f5:
                    3f:30:d0:71:32:c8:90:71:a6:2f:d0:08:33:15:91:
                    4f:72:9d:44:8e:99:42:6d:e5:e0:dc:0f:39:01:4b:
                    d7:2d:62:3c:87:08:b3:c9:97:64:42:45:4b:fa:85:
                    23:21:5b:03:61:19:e9:8e:81:47:d2:b7:bf:ab:00:
                    0d:85:1d:53:c7:70:f1:11:1d:a9:00:b9:d6:96:e1:
                    0b:a1:c3:77:a6:df:4f:6f:b3:b0:d3:f5:c4:e7:e2:
                    b7:b4:48:48:c4:75:d6:1f:32:27:36:00:36:b9:d4:
                    0a:22:da:5c:8d:da:1a:99:18:64:41:e8:df:9a:f7:
                    c3:3b:2a:e3:6f:23:f4:ae:90:7e:82:f8:ec:9a:f4:
                    89:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:E9:9C:1F:E2:10:A0:7D:8F:14:26:F7:89:CC:16:9B:BD:87:40:7F
            X509v3 Authority Key Identifier:
                keyid:4A:89:12:27:12:69:3E:A0:08:EB:A7:A1:01:AC:62:26:95:FA:EC:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CEF20/F26715B24F5F11ECB03B9E1BC4F9AE02/SokSJxJpPqAI66ehAaxiJpX67CQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SokSJxJpPqAI66ehAaxiJpX67CQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEF20/F26715B24F5F11ECB03B9E1BC4F9AE02/69BD1776579A11EEB2386282C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.177.54.0/23
                IPv6:
                  2001:df0:1d40::/47

    Signature Algorithm: sha256WithRSAEncryption
         54:92:58:d7:2a:09:52:9c:c0:5a:ae:6d:f8:7c:53:ff:6b:4b:
         d8:d2:f9:3d:0c:29:14:1d:d6:32:9b:19:4c:e8:55:f1:77:1c:
         b3:6e:c0:8f:48:5f:24:d6:79:14:16:df:81:2d:68:45:07:e2:
         81:09:ec:87:e6:02:08:7c:1e:2b:96:35:40:8e:34:34:01:92:
         12:bc:c8:06:b6:e3:ff:02:74:76:99:f3:9b:45:96:f3:5c:12:
         eb:c3:02:f9:6f:c5:63:d8:b7:18:7a:07:ae:90:f5:93:95:54:
         8b:49:eb:0e:bd:69:8c:9a:6c:f3:98:44:4f:3c:81:af:0e:68:
         ac:ed:3a:66:d5:4a:96:d5:ff:7a:49:65:bf:a2:e0:8c:23:a3:
         96:b8:85:ea:ea:9d:c7:b4:6a:51:f0:80:0a:95:46:c6:d7:49:
         9a:25:6c:c8:1a:38:8c:c1:6a:57:36:a5:0c:64:ef:d8:d7:87:
         12:a6:a7:a4:40:34:5b:16:5a:8d:5f:2d:4e:28:23:b5:4f:6b:
         d1:0c:0a:93:93:34:e8:ad:b5:e7:8e:65:db:54:a0:2a:39:fb:
         00:44:d8:6f:4d:92:0c:1e:f7:dc:23:f4:b1:cb:5e:1e:f2:28:
         b3:4d:e1:35:92:42:bd:0c:34:fb:22:51:25:ef:d0:24:1c:70:
         3d:32:12:66
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgICA1wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0VGMjAxMTAvBgNVBAUTKDRBODkxMjI3MTI2OTNFQTAwOEVCQTdBMTAxQUM2MjI2
OTVGQUVDMjQwHhcNMjMxMjIzMDIxNDIyWhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02NTg2NDI3ZS0yNDcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxkKeDo2WlAT9qP/2WYprk69vvGPpCIK1wsdqSeptY5GPjfBDe+6K8lMe8J3T
VdUSJ1Y0BQe9oNW7ElF3v6sRaBSylWWx/mXIk+HxVR7aKFzitf+b4tHKaPO2Fftt
7xkJYkPT+Py+ha5uEdaaoTo1Evb+hwtIm/U/MNBxMsiQcaYv0AgzFZFPcp1EjplC
beXg3A85AUvXLWI8hwizyZdkQkVL+oUjIVsDYRnpjoFH0re/qwANhR1Tx3DxER2p
ALnWluELocN3pt9Pb7Ow0/XE5+K3tEhIxHXWHzInNgA2udQKItpcjdoamRhkQejf
mvfDOyrjbyP0rpB+gvjsmvSJaQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFG/pnB/i
EKB9jxQm94nMFpu9h0B/MB8GA1UdIwQYMBaAFEqJEicSaT6gCOunoQGsYiaV+uwk
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUYyMC9GMjY3MTVCMjRG
NUYxMUVDQjAzQjlFMUJDNEY5QUUwMi9Tb2tTSnhKcFBxQUk2NmVoQWF4aUpwWDY3
Q1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1Nva1NKeEpwUHFBSTY2ZWhBYXhpSnBYNjdDUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Q0VGMjAvRjI2NzE1QjI0RjVGMTFFQ0IwM0I5RTFCQzRGOUFFMDIvNjlCRDE3NzY1
NzlBMTFFRUIyMzg2MjgyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E
ITAfMAwEAgABMAYDBAFnsTYwDwQCAAIwCQMHASABDfAdQDANBgkqhkiG9w0BAQsF
AAOCAQEAVJJY1yoJUpzAWq5t+HxT/2tL2NL5PQwpFB3WMpsZTOhV8Xccs27Aj0hf
JNZ5FBbfgS1oRQfigQnsh+YCCHweK5Y1QI40NAGSErzIBrbj/wJ0dpnzm0WW81wS
68MC+W/FY9i3GHoHrpD1k5VUi0nrDr1pjJps85hETzyBrw5orO06ZtVKltX/ekll
v6LgjCOjlriF6uqdx7RqUfCACpVGxtdJmiVsyBo4jMFqVzalDGTv2NeHEqanpEA0
WxZajV8tTigjtU9r0QwKk5M06K21545l21SgKjn7AETYb02SDB733CP0scteHvIo
s03hNZJCvQw0+yJRJe/QJBxwPTISZg==
-----END CERTIFICATE-----
Generated at Tue May 7 03:10:22 2024 by rpki-client on console-ams.rpki-client.org