Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB7B3/2FD815EC30B411EC80609275C4F9AE02/E52DE77630B611EC981BBF1CC4F9AE02.roa
File:                     E52DE77630B611EC981BBF1CC4F9AE02.roa (raw, json)
Hash identifier:          Do6OgnR2E8Iy4DGGhWcszr7SeA/TupAI+DlFPIrWpNg=
Subject key identifier:   E6:CB:25:49:D3:30:9A:81:BD:A9:62:46:92:EE:92:89:75:B1:5A:8A
Certificate issuer:       /CN=A91DB7B3/serialNumber=1EFE76D1A8DC6CD024CB3CF40790A5F14A2C2138
Certificate serial:       03EF
Authority key identifier: 1E:FE:76:D1:A8:DC:6C:D0:24:CB:3C:F4:07:90:A5:F1:4A:2C:21:38
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hv520ajcbNAkyzz0B5Cl8UosITg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DB7B3/2FD815EC30B411EC80609275C4F9AE02/E52DE77630B611EC981BBF1CC4F9AE02.roa
Signing time:             Tue 21 May 2024 02:36:13 +0000
ROA not before:           Tue 21 May 2024 02:36:13 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     45753
IP address blocks:        103.89.72.0/24 maxlen: 24
                          103.133.72.0/23 maxlen: 24
                          103.133.74.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DB7B3/2FD815EC30B411EC80609275C4F9AE02/Hv520ajcbNAkyzz0B5Cl8UosITg.crl
                          rsync://rpki.apnic.net/member_repository/A91DB7B3/2FD815EC30B411EC80609275C4F9AE02/Hv520ajcbNAkyzz0B5Cl8UosITg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hv520ajcbNAkyzz0B5Cl8UosITg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 03:18:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1007 (0x3ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DB7B3/serialNumber=1EFE76D1A8DC6CD024CB3CF40790A5F14A2C2138
        Validity
            Not Before: May 21 02:36:13 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=664c089d-7bb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:75:ad:61:6d:e4:2f:05:e7:e7:e1:23:95:e9:
                    5d:55:00:3b:af:aa:cc:f7:1d:ff:2f:04:bb:4f:c0:
                    a3:b2:69:fd:cd:df:1d:cc:ac:08:af:c1:e7:1a:5c:
                    3b:d1:7e:df:a1:98:bb:fe:d4:e0:d3:7e:75:22:fb:
                    8e:40:0d:1a:ec:7c:44:3b:37:40:86:0b:5c:2f:bb:
                    51:a2:93:1c:44:26:af:ee:6e:98:27:c0:dd:59:a5:
                    47:cd:8a:10:09:bc:43:e0:ac:a4:66:fb:06:e4:34:
                    32:f9:78:d8:6f:89:9f:a4:0f:19:57:f3:d6:42:7b:
                    5c:56:6a:67:16:9c:5f:b8:34:06:0d:ba:6e:a8:af:
                    cc:ba:78:ef:b4:4f:bc:41:6b:32:a8:f4:88:40:01:
                    4f:3b:d8:58:7d:9a:36:43:56:b4:13:f8:5e:0d:02:
                    1e:a0:67:e1:83:40:21:b5:63:49:61:92:a4:05:39:
                    71:4a:22:83:0b:e7:e1:cb:b8:c8:75:88:27:da:6d:
                    3a:e9:88:88:55:e3:44:23:6b:9b:ef:5d:b7:fd:fd:
                    56:f4:57:15:11:fa:20:ea:9f:53:af:34:e3:3a:0b:
                    6b:9d:bd:92:cc:17:47:0f:41:03:86:0e:ed:cf:1d:
                    09:6b:43:f1:78:4d:6e:9b:13:c5:27:0a:50:9b:28:
                    31:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:CB:25:49:D3:30:9A:81:BD:A9:62:46:92:EE:92:89:75:B1:5A:8A
            X509v3 Authority Key Identifier:
                keyid:1E:FE:76:D1:A8:DC:6C:D0:24:CB:3C:F4:07:90:A5:F1:4A:2C:21:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DB7B3/2FD815EC30B411EC80609275C4F9AE02/Hv520ajcbNAkyzz0B5Cl8UosITg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hv520ajcbNAkyzz0B5Cl8UosITg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB7B3/2FD815EC30B411EC80609275C4F9AE02/E52DE77630B611EC981BBF1CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.89.72.0/24
                  103.133.72.0-103.133.74.255

    Signature Algorithm: sha256WithRSAEncryption
         6f:b9:72:f7:b5:c5:d4:9c:49:9f:98:74:44:83:68:f9:ce:c8:
         c6:7b:bb:ec:4c:35:8a:47:ac:c3:3f:fe:9a:89:59:47:6b:4e:
         c7:bf:94:5e:0f:3c:19:0d:7f:07:7b:3b:22:ab:e5:4c:58:98:
         ac:42:84:03:02:47:c4:b0:14:69:68:ae:6f:8c:f2:71:8b:d1:
         01:59:5d:4a:0c:f5:b8:79:10:31:f3:14:53:36:50:7e:5c:83:
         28:eb:46:6b:5d:57:db:5f:95:a8:aa:9f:b9:7c:59:de:eb:cc:
         95:ab:cb:1c:0f:12:df:13:7c:47:6a:f5:65:82:89:80:29:31:
         65:9e:a6:47:35:18:9f:89:58:f2:33:4f:53:4c:9b:21:31:6e:
         a8:e6:b1:f4:97:2e:5d:eb:ce:4d:55:fc:b3:a9:4e:ca:53:b4:
         b3:96:b3:f8:fd:0a:15:3e:b2:f5:fc:30:a8:50:c4:9e:70:5f:
         1f:93:e1:2e:b3:4a:a0:f8:6c:e1:37:93:3a:20:8a:0b:a9:6b:
         f6:e9:56:48:94:04:bc:92:5b:43:68:a0:8d:94:47:cd:10:86:
         b5:7a:a0:59:0b:d0:65:87:c4:fb:9b:1e:96:df:9b:f4:1d:ae:
         53:35:46:68:10:fe:95:d6:84:d0:45:40:7b:6a:73:47:95:ed:
         91:53:48:c5
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgICA+8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REI3QjMxMTAvBgNVBAUTKDFFRkU3NkQxQThEQzZDRDAyNENCM0NGNDA3OTBBNUYx
NEEyQzIxMzgwHhcNMjQwNTIxMDIzNjEzWhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NjRjMDg5ZC03YmI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApHWtYW3kLwXn5+EjleldVQA7r6rM9x3/LwS7T8Cjsmn9zd8dzKwIr8HnGlw7
0X7foZi7/tTg0351IvuOQA0a7HxEOzdAhgtcL7tRopMcRCav7m6YJ8DdWaVHzYoQ
CbxD4KykZvsG5DQy+XjYb4mfpA8ZV/PWQntcVmpnFpxfuDQGDbpuqK/MunjvtE+8
QWsyqPSIQAFPO9hYfZo2Q1a0E/heDQIeoGfhg0AhtWNJYZKkBTlxSiKDC+fhy7jI
dYgn2m066YiIVeNEI2ub7123/f1W9FcVEfog6p9TrzTjOgtrnb2SzBdHD0EDhg7t
zx0Ja0PxeE1umxPFJwpQmygxaQIDAQABo4ICozCCAp8wHQYDVR0OBBYEFObLJUnT
MJqBvaliRpLukol1sVqKMB8GA1UdIwQYMBaAFB7+dtGo3GzQJMs89AeQpfFKLCE4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjdCMy8yRkQ4MTVFQzMw
QjQxMUVDODA2MDkyNzVDNEY5QUUwMi9IdjUyMGFqY2JOQWt5enowQjVDbDhVb3NJ
VGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0h2NTIwYWpjYk5Ba3l6ejBCNUNsOFVvc0lUZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
REI3QjMvMkZEODE1RUMzMEI0MTFFQzgwNjA5Mjc1QzRGOUFFMDIvRTUyREU3NzYz
MEI2MTFFQzk4MUJCRjFDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLQYIKwYBBQUHAQcBAf8E
HjAcMBoEAgABMBQDBABnWUgwDAMEA2eFSAMEAGeFSjANBgkqhkiG9w0BAQsFAAOC
AQEAb7ly97XF1JxJn5h0RINo+c7Ixnu77Ew1ikeswz/+molZR2tOx7+UXg88GQ1/
B3s7IqvlTFiYrEKEAwJHxLAUaWiub4zycYvRAVldSgz1uHkQMfMUUzZQflyDKOtG
a11X21+VqKqfuXxZ3uvMlavLHA8S3xN8R2r1ZYKJgCkxZZ6mRzUYn4lY8jNPU0yb
ITFuqOax9JcuXevOTVX8s6lOylO0s5az+P0KFT6y9fwwqFDEnnBfH5PhLrNKoPhs
4TeTOiCKC6lr9ulWSJQEvJJbQ2igjZRHzRCGtXqgWQvQZYfE+5selt+b9B2uUzVG
aBD+ldaE0EVAe2pzR5XtkVNIxQ==
-----END CERTIFICATE-----
Generated at Sat Jun 1 04:07:32 2024 by rpki-client on console-ams.rpki-client.org