Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0A62/1FA96DA0283111EC97A01316C4F9AE02/C54BA97E283311ECBE887F3BC4F9AE02.roa
File:                     C54BA97E283311ECBE887F3BC4F9AE02.roa (raw, json)
Hash identifier:          X/FT4st5+ImqbrdQ5iBO/3xpp/J9+a1OV9m+sESj8YI=
Subject key identifier:   68:80:73:57:F6:DD:DF:62:59:74:47:B9:17:95:E5:C3:14:A4:0A:D4
Certificate issuer:       /CN=A91D0A62/serialNumber=4CDEC7D421F16E851672A81239DD18FC8C1E3956
Certificate serial:       038E
Authority key identifier: 4C:DE:C7:D4:21:F1:6E:85:16:72:A8:12:39:DD:18:FC:8C:1E:39:56
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TN7H1CHxboUWcqgSOd0Y_IweOVY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D0A62/1FA96DA0283111EC97A01316C4F9AE02/C54BA97E283311ECBE887F3BC4F9AE02.roa
Signing time:             Tue 03 Oct 2023 01:22:51 +0000
ROA not before:           Tue 03 Oct 2023 01:22:51 +0000
ROA not after:            Sun 01 Dec 2024 00:00:00 +0000
asID:                     139195
IP address blocks:        103.174.70.0/24 maxlen: 24
                          103.174.71.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D0A62/1FA96DA0283111EC97A01316C4F9AE02/TN7H1CHxboUWcqgSOd0Y_IweOVY.crl
                          rsync://rpki.apnic.net/member_repository/A91D0A62/1FA96DA0283111EC97A01316C4F9AE02/TN7H1CHxboUWcqgSOd0Y_IweOVY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TN7H1CHxboUWcqgSOd0Y_IweOVY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 May 2024 02:17:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 910 (0x38e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D0A62/serialNumber=4CDEC7D421F16E851672A81239DD18FC8C1E3956
        Validity
            Not Before: Oct  3 01:22:51 2023 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=651b6ceb-3a2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:7a:3e:0d:39:78:17:56:61:00:56:24:b3:eb:
                    db:94:64:54:72:6c:18:d7:23:36:e3:48:5f:ab:7e:
                    ef:2a:fb:ef:b8:b0:05:35:e1:e1:b9:23:4a:44:00:
                    0d:0d:5d:c0:3d:37:87:a4:a1:ba:b5:76:3e:9f:ae:
                    7c:4d:75:57:5c:97:33:83:3a:50:d0:d5:6d:f0:fd:
                    0c:e0:74:8b:20:84:fb:ef:2b:06:91:41:91:04:6a:
                    b2:ab:21:92:65:87:ad:bc:e5:07:e3:99:60:ba:9c:
                    29:72:74:4d:47:ec:2f:3a:ca:0f:bd:f8:46:48:42:
                    15:30:c2:03:a9:31:f8:2c:4a:8a:fa:c7:6f:48:d3:
                    78:db:d2:4d:c8:71:e1:f1:65:6b:80:b7:37:22:e9:
                    8a:41:f4:22:ee:7f:c2:f3:09:55:e6:3c:19:a2:48:
                    ea:2b:44:64:bb:6a:c5:2b:fe:5a:88:32:60:f3:23:
                    36:a8:2f:fb:d0:7b:19:00:b1:ce:d0:ff:02:75:b7:
                    ea:26:d3:9e:21:11:58:c7:05:e8:8f:66:16:ca:26:
                    2e:b3:0e:e0:58:af:7f:e9:57:54:e8:0b:74:6d:51:
                    ab:83:91:90:1c:67:02:53:86:77:07:e9:ae:e6:ce:
                    a5:8f:2d:fb:c4:5c:34:65:cd:36:e6:45:1f:29:53:
                    90:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:80:73:57:F6:DD:DF:62:59:74:47:B9:17:95:E5:C3:14:A4:0A:D4
            X509v3 Authority Key Identifier:
                keyid:4C:DE:C7:D4:21:F1:6E:85:16:72:A8:12:39:DD:18:FC:8C:1E:39:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D0A62/1FA96DA0283111EC97A01316C4F9AE02/TN7H1CHxboUWcqgSOd0Y_IweOVY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TN7H1CHxboUWcqgSOd0Y_IweOVY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0A62/1FA96DA0283111EC97A01316C4F9AE02/C54BA97E283311ECBE887F3BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.174.70.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0c:fc:1e:de:01:85:4b:dd:d6:c8:dc:3b:c7:b1:b6:20:51:fe:
         17:b3:8c:79:d5:d8:40:7f:1d:ac:96:fd:31:9d:5c:dc:dc:a7:
         fd:61:3e:e9:84:9a:5f:f1:e7:f0:01:27:69:89:61:9a:a1:82:
         9a:39:73:3a:69:69:9f:bd:1a:4b:ae:2a:9c:53:2c:46:50:2d:
         57:59:8f:a8:db:ad:7b:43:53:0c:ea:f1:00:1b:06:67:c5:a1:
         83:c3:1b:17:29:00:f6:73:f6:39:04:fa:fd:c9:0c:19:e3:80:
         21:fe:f7:10:58:34:80:a8:05:5d:cf:e7:23:12:41:bc:6d:85:
         e8:4d:18:98:b9:e2:ef:61:c8:04:db:95:e5:1e:6f:9a:1a:45:
         14:b9:86:69:cc:4d:2a:bc:b9:58:8b:b4:34:1d:34:71:fc:be:
         d5:2b:5e:77:71:11:a3:93:8d:ca:56:ed:a4:3b:76:ec:de:b4:
         2a:fb:d2:46:a1:b1:9f:e3:b6:2b:de:20:db:94:34:43:70:5c:
         57:f1:9d:05:0d:d4:55:85:37:9e:e0:76:dd:03:3c:4f:8b:69:
         a9:5c:49:58:9d:f1:23:e9:2c:2e:ad:35:63:e6:dc:59:76:57:
         09:65:8b:5f:fc:c2:02:cc:ea:9e:b6:09:0b:77:91:4c:71:9d:
         84:af:7a:b9
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICA44wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDBBNjIxMTAvBgNVBAUTKDRDREVDN0Q0MjFGMTZFODUxNjcyQTgxMjM5REQxOEZD
OEMxRTM5NTYwHhcNMjMxMDAzMDEyMjUxWhcNMjQxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NTFiNmNlYi0zYTJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0Ho+DTl4F1ZhAFYks+vblGRUcmwY1yM240hfq37vKvvvuLAFNeHhuSNKRAAN
DV3APTeHpKG6tXY+n658TXVXXJczgzpQ0NVt8P0M4HSLIIT77ysGkUGRBGqyqyGS
ZYetvOUH45lgupwpcnRNR+wvOsoPvfhGSEIVMMIDqTH4LEqK+sdvSNN429JNyHHh
8WVrgLc3IumKQfQi7n/C8wlV5jwZokjqK0Rku2rFK/5aiDJg8yM2qC/70HsZALHO
0P8CdbfqJtOeIRFYxwXoj2YWyiYusw7gWK9/6VdU6At0bVGrg5GQHGcCU4Z3B+mu
5s6ljy37xFw0Zc025kUfKVOQ/QIDAQABo4IClTCCApEwHQYDVR0OBBYEFGiAc1f2
3d9iWXRHuReV5cMUpArUMB8GA1UdIwQYMBaAFEzex9Qh8W6FFnKoEjndGPyMHjlW
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMEE2Mi8xRkE5NkRBMDI4
MzExMUVDOTdBMDEzMTZDNEY5QUUwMi9UTjdIMUNIeGJvVVdjcWdTT2QwWV9Jd2VP
VlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1RON0gxQ0h4Ym9VV2NxZ1NPZDBZX0l3ZU9WWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RDBBNjIvMUZBOTZEQTAyODMxMTFFQzk3QTAxMzE2QzRGOUFFMDIvQzU0QkE5N0Uy
ODMzMTFFQ0JFODg3RjNCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnrkYwDQYJKoZIhvcNAQELBQADggEBAAz8Ht4BhUvd1sjc
O8extiBR/hezjHnV2EB/HayW/TGdXNzcp/1hPumEml/x5/ABJ2mJYZqhgpo5czpp
aZ+9GkuuKpxTLEZQLVdZj6jbrXtDUwzq8QAbBmfFoYPDGxcpAPZz9jkE+v3JDBnj
gCH+9xBYNICoBV3P5yMSQbxthehNGJi54u9hyATbleUeb5oaRRS5hmnMTSq8uViL
tDQdNHH8vtUrXndxEaOTjcpW7aQ7duzetCr70kahsZ/jtiveINuUNENwXFfxnQUN
1FWFN57gdt0DPE+LaalcSVid8SPpLC6tNWPm3Fl2Vwlli1/8wgLM6p62CQt3kUxx
nYSverk=
-----END CERTIFICATE-----
Generated at Fri May 17 03:17:01 2024 by rpki-client on console-fra.rpki-client.org