Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC6AD/539F23CC5DF211EE9B04430EC4F9AE02/E2ECBFC65DF211EEB46BCB27C4F9AE02.roa
File:                     E2ECBFC65DF211EEB46BCB27C4F9AE02.roa (raw, json)
Hash identifier:          9scsfricJHNTlxVYnqhrqI59Q1yKpliiSe4JfKuir+U=
Subject key identifier:   D5:E2:7D:F3:78:55:3D:53:15:75:31:70:F3:8A:5E:19:6C:62:5F:1A
Certificate issuer:       /CN=A91DC6AD/serialNumber=86993C8865CC06BD98BB94F4A6E9061227828000
Certificate serial:       1B
Authority key identifier: 86:99:3C:88:65:CC:06:BD:98:BB:94:F4:A6:E9:06:12:27:82:80:00
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hpk8iGXMBr2Yu5T0pukGEieCgAA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DC6AD/539F23CC5DF211EE9B04430EC4F9AE02/E2ECBFC65DF211EEB46BCB27C4F9AE02.roa
Signing time:             Sat 11 Nov 2023 06:36:45 +0000
ROA not before:           Sat 11 Nov 2023 06:36:45 +0000
ROA not after:            Mon 30 Dec 2024 00:00:00 +0000
asID:                     133778
IP address blocks:        103.143.82.0/23 maxlen: 23
                          103.143.82.0/24 maxlen: 24
                          103.143.83.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DC6AD/539F23CC5DF211EE9B04430EC4F9AE02/hpk8iGXMBr2Yu5T0pukGEieCgAA.crl
                          rsync://rpki.apnic.net/member_repository/A91DC6AD/539F23CC5DF211EE9B04430EC4F9AE02/hpk8iGXMBr2Yu5T0pukGEieCgAA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hpk8iGXMBr2Yu5T0pukGEieCgAA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 08:38:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 27 (0x1b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DC6AD/serialNumber=86993C8865CC06BD98BB94F4A6E9061227828000
        Validity
            Not Before: Nov 11 06:36:45 2023 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=654f20fc-d4bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:8e:57:35:11:8b:ba:8a:98:52:4b:f2:1e:6f:
                    76:11:95:dc:df:35:95:6b:54:88:ec:54:69:b4:09:
                    dd:56:ff:3b:0d:4a:70:95:30:31:53:07:c3:e7:7e:
                    8f:2a:82:9c:4d:eb:88:55:9d:ae:f8:7f:8d:5a:29:
                    50:63:ef:30:67:d7:fa:38:24:08:0a:e6:56:73:02:
                    a0:c7:0c:c1:22:a2:48:c3:24:24:4b:f4:43:01:4e:
                    55:d2:1b:74:2d:f8:28:83:9b:12:13:3e:f7:a0:b9:
                    ec:fe:e7:39:74:fc:41:a7:94:db:34:c3:4f:81:19:
                    60:e8:44:19:13:40:b8:d5:13:7f:cb:22:60:d0:7f:
                    05:60:19:9f:ad:64:18:bd:27:50:92:3d:71:17:5e:
                    57:3c:ee:c5:d9:8c:d5:87:26:6b:86:47:37:38:65:
                    e0:fc:95:93:65:fc:54:b4:ef:ec:bd:ed:f4:9d:2d:
                    4f:05:34:65:65:1d:cb:59:dd:ec:3f:9c:18:7e:22:
                    5f:e9:ef:34:b8:b9:be:51:73:2c:16:ff:f7:49:78:
                    a7:76:5c:81:97:0f:de:00:7f:c0:52:99:0c:65:d8:
                    43:1b:ac:30:36:18:56:53:05:45:64:54:68:64:d7:
                    a9:80:85:20:88:0b:bf:47:77:bd:c4:c6:7c:fd:7b:
                    d0:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:E2:7D:F3:78:55:3D:53:15:75:31:70:F3:8A:5E:19:6C:62:5F:1A
            X509v3 Authority Key Identifier:
                keyid:86:99:3C:88:65:CC:06:BD:98:BB:94:F4:A6:E9:06:12:27:82:80:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DC6AD/539F23CC5DF211EE9B04430EC4F9AE02/hpk8iGXMBr2Yu5T0pukGEieCgAA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hpk8iGXMBr2Yu5T0pukGEieCgAA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC6AD/539F23CC5DF211EE9B04430EC4F9AE02/E2ECBFC65DF211EEB46BCB27C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.143.82.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0a:10:e4:31:9f:f8:cf:75:70:cc:a2:1d:81:57:b3:cf:e9:dc:
         cc:ba:8c:e8:f3:23:5f:f0:4e:7d:08:ac:37:a5:37:2e:1c:4b:
         8c:4d:bf:f7:ce:42:c4:eb:34:3b:a0:52:77:1f:23:a3:fe:37:
         30:53:93:ce:b3:1e:4a:96:4a:11:c2:bd:a2:33:7d:6d:94:64:
         3d:2c:2d:cd:74:23:00:0a:63:be:31:5c:6a:74:dc:84:67:60:
         7b:ea:bd:d4:ca:2c:7e:b6:60:28:64:51:e1:7f:ad:0b:a7:28:
         5d:f0:d3:5d:f8:15:79:a4:ff:f1:11:a0:b7:da:45:12:a7:34:
         93:cf:67:d0:f0:cc:5a:48:a1:c0:ce:fb:4a:68:56:e0:f0:81:
         9b:01:e2:b5:30:49:93:25:4b:c2:5c:c3:16:db:73:fa:e4:53:
         be:8a:f5:fb:48:dd:fb:86:52:57:4d:19:a2:ea:cf:d7:bc:45:
         e0:95:2d:66:b1:2e:fd:f8:82:2e:3e:d9:98:dd:17:f5:4b:7b:
         62:46:b0:a4:6a:5c:f8:2e:13:9f:24:2c:b1:9f:30:27:bd:1f:
         77:e6:34:e6:90:c8:f2:09:0e:71:c9:b1:cc:9a:1d:5f:2b:00:
         2b:c9:23:5c:7b:72:88:06:fc:8f:ca:1f:cd:a3:b6:6d:ba:f7:
         7b:63:bc:45
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBGzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE
QzZBRDExMC8GA1UEBRMoODY5OTNDODg2NUNDMDZCRDk4QkI5NEY0QTZFOTA2MTIy
NzgyODAwMDAeFw0yMzExMTEwNjM2NDVaFw0yNDEyMzAwMDAwMDBaMBgxFjAUBgNV
BAMTDTY1NGYyMGZjLWQ0YmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCejlc1EYu6iphSS/Ieb3YRldzfNZVrVIjsVGm0Cd1W/zsNSnCVMDFTB8Pnfo8q
gpxN64hVna74f41aKVBj7zBn1/o4JAgK5lZzAqDHDMEiokjDJCRL9EMBTlXSG3Qt
+CiDmxITPveguez+5zl0/EGnlNs0w0+BGWDoRBkTQLjVE3/LImDQfwVgGZ+tZBi9
J1CSPXEXXlc87sXZjNWHJmuGRzc4ZeD8lZNl/FS07+y97fSdLU8FNGVlHctZ3ew/
nBh+Il/p7zS4ub5RcywW//dJeKd2XIGXD94Af8BSmQxl2EMbrDA2GFZTBUVkVGhk
16mAhSCIC79Hd73Exnz9e9BBAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQU1eJ983hV
PVMVdTFw84peGWxiXxowHwYDVR0jBBgwFoAUhpk8iGXMBr2Yu5T0pukGEieCgAAw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURDNkFELzUzOUYyM0NDNURG
MjExRUU5QjA0NDMwRUM0RjlBRTAyL2hwazhpR1hNQnIyWXU1VDBwdWtHRWllQ2dB
QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvaHBrOGlHWE1CcjJZdTVUMHB1a0dFaWVDZ0FBLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
QzZBRC81MzlGMjNDQzVERjIxMUVFOUIwNDQzMEVDNEY5QUUwMi9FMkVDQkZDNjVE
RjIxMUVFQjQ2QkNCMjdDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAWePUjANBgkqhkiG9w0BAQsFAAOCAQEAChDkMZ/4z3VwzKId
gVezz+nczLqM6PMjX/BOfQisN6U3LhxLjE2/985CxOs0O6BSdx8jo/43MFOTzrMe
SpZKEcK9ojN9bZRkPSwtzXQjAApjvjFcanTchGdge+q91MosfrZgKGRR4X+tC6co
XfDTXfgVeaT/8RGgt9pFEqc0k89n0PDMWkihwM77SmhW4PCBmwHitTBJkyVLwlzD
Fttz+uRTvor1+0jd+4ZSV00ZourP17xF4JUtZrEu/fiCLj7ZmN0X9Ut7YkawpGpc
+C4TnyQssZ8wJ70fd+Y05pDI8gkOccmxzJodXysAK8kjXHtyiAb8j8ofzaO2bbr3
e2O8RQ==
-----END CERTIFICATE-----
Generated at Sat Jun 1 11:47:34 2024 by rpki-client on console-ams.rpki-client.org