Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4023/613E3E9E011411EAAADAB253C4F9AE02/E14507F8011411EAAB0EF153C4F9AE02.roa
File:                     E14507F8011411EAAB0EF153C4F9AE02.roa (raw, json)
Hash identifier:          7/zOYWlkHCRbr7iUeae26YLjT9sPK5YOiyk3yGWxj90=
Subject key identifier:   42:C1:1B:B8:3A:42:AC:E8:62:67:44:39:BD:6B:73:93:49:1A:BD:FE
Certificate issuer:       /CN=A91E4023/serialNumber=6727B8F433EF2FE080842C6EE8A6CC3DC244626F
Certificate serial:       0AFC
Authority key identifier: 67:27:B8:F4:33:EF:2F:E0:80:84:2C:6E:E8:A6:CC:3D:C2:44:62:6F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zye49DPvL-CAhCxu6KbMPcJEYm8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E4023/613E3E9E011411EAAADAB253C4F9AE02/E14507F8011411EAAB0EF153C4F9AE02.roa
Signing time:             Thu 06 Jul 2023 18:55:52 +0000
ROA not before:           Thu 06 Jul 2023 18:55:52 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     132829
IP address blocks:        103.69.211.0/24 maxlen: 24
                          119.42.51.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E4023/613E3E9E011411EAAADAB253C4F9AE02/Zye49DPvL-CAhCxu6KbMPcJEYm8.crl
                          rsync://rpki.apnic.net/member_repository/A91E4023/613E3E9E011411EAAADAB253C4F9AE02/Zye49DPvL-CAhCxu6KbMPcJEYm8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zye49DPvL-CAhCxu6KbMPcJEYm8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 19:49:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2812 (0xafc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E4023/serialNumber=6727B8F433EF2FE080842C6EE8A6CC3DC244626F
        Validity
            Not Before: Jul  6 18:55:52 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=64a70e37-f834
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:28:7f:a9:e9:88:9e:3b:0c:aa:ac:fe:27:62:
                    88:12:26:a1:11:43:43:99:56:76:5e:58:19:e5:c2:
                    1f:55:65:e9:71:b7:8b:72:2f:c4:24:0b:14:32:1a:
                    cd:16:5c:92:52:19:aa:7e:01:8e:cb:fc:dc:52:07:
                    5d:08:ef:c7:23:cf:08:eb:42:c9:3e:1e:8d:56:03:
                    b6:0f:3b:b8:9e:b8:06:61:e6:75:3f:7e:77:33:cb:
                    c2:ff:ba:19:67:c2:67:bf:39:c4:0e:04:2b:22:f9:
                    5f:0e:57:90:de:52:74:0d:b8:71:2f:d7:d6:1c:51:
                    f0:ca:9a:b5:ad:8e:9f:f1:23:92:42:dd:01:04:00:
                    3c:60:a3:9a:64:cc:b1:88:53:03:dd:9c:aa:92:ce:
                    a9:69:a8:87:fd:31:2c:57:e3:fa:65:57:07:ad:f1:
                    08:45:ce:95:10:54:9b:d2:0b:b5:9c:6b:3e:ae:fc:
                    3d:2a:0d:8f:a1:1b:6c:11:fe:27:0a:e4:ed:81:78:
                    98:78:f9:98:88:aa:a8:70:de:48:7c:1a:5b:e2:1d:
                    d4:da:a1:81:16:86:99:c9:aa:68:fc:67:14:82:32:
                    a4:33:1e:e5:e1:a4:86:65:5e:d8:dd:e6:27:79:3d:
                    2b:e4:30:0c:3a:ef:b6:df:66:7a:22:e2:13:16:5a:
                    bd:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:C1:1B:B8:3A:42:AC:E8:62:67:44:39:BD:6B:73:93:49:1A:BD:FE
            X509v3 Authority Key Identifier:
                keyid:67:27:B8:F4:33:EF:2F:E0:80:84:2C:6E:E8:A6:CC:3D:C2:44:62:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E4023/613E3E9E011411EAAADAB253C4F9AE02/Zye49DPvL-CAhCxu6KbMPcJEYm8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zye49DPvL-CAhCxu6KbMPcJEYm8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4023/613E3E9E011411EAAADAB253C4F9AE02/E14507F8011411EAAB0EF153C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.69.211.0/24
                  119.42.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:84:69:5f:3c:e2:0d:53:e5:48:ee:a4:84:cc:6e:7e:be:4f:
         33:3d:cb:dc:88:46:03:02:98:9e:44:f1:1c:d8:5a:c3:c3:d6:
         82:31:41:fe:ef:2e:a1:b0:f4:25:02:8c:ce:37:18:64:b9:be:
         87:dc:84:71:c2:b1:2d:8f:2e:88:49:50:b2:f4:dd:7f:57:bf:
         da:9c:10:4d:96:98:9d:82:58:e7:e9:41:ca:ba:9f:d1:88:9d:
         f0:cf:83:66:e3:00:4e:d6:0c:6b:fa:e8:3f:7d:dc:69:dc:81:
         8f:99:6f:d3:2d:49:e5:5b:c7:c5:ae:e7:cd:5a:a8:5c:31:b0:
         40:08:6e:8a:1a:c8:84:08:be:58:ac:3c:54:70:76:4e:9d:c5:
         ae:45:b1:2d:ce:62:a7:7a:2f:09:50:1e:ec:0e:c9:d7:d3:d2:
         7a:41:9a:9a:91:0d:70:a5:56:0d:eb:ba:fd:db:4a:94:78:5c:
         e4:6c:4e:3d:25:aa:b0:6e:f5:57:d1:55:78:06:38:40:72:47:
         d6:08:88:b6:35:98:d2:6f:fd:3c:76:a6:36:4a:62:6f:67:c5:
         05:0c:dd:fb:a8:41:60:7a:a7:2f:c8:4a:f2:4d:84:47:37:3e:
         1c:d6:6f:eb:31:2c:a1:cc:8e:cd:ac:e4:6e:28:58:9b:9f:1a:
         2b:02:fc:8f
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICCvwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTQwMjMxMTAvBgNVBAUTKDY3MjdCOEY0MzNFRjJGRTA4MDg0MkM2RUU4QTZDQzNE
QzI0NDYyNkYwHhcNMjMwNzA2MTg1NTUyWhcNMjQwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NGE3MGUzNy1mODM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxCh/qemInjsMqqz+J2KIEiahEUNDmVZ2XlgZ5cIfVWXpcbeLci/EJAsUMhrN
FlySUhmqfgGOy/zcUgddCO/HI88I60LJPh6NVgO2Dzu4nrgGYeZ1P353M8vC/7oZ
Z8JnvznEDgQrIvlfDleQ3lJ0DbhxL9fWHFHwypq1rY6f8SOSQt0BBAA8YKOaZMyx
iFMD3Zyqks6paaiH/TEsV+P6ZVcHrfEIRc6VEFSb0gu1nGs+rvw9Kg2PoRtsEf4n
CuTtgXiYePmYiKqocN5IfBpb4h3U2qGBFoaZyapo/GcUgjKkMx7l4aSGZV7Y3eYn
eT0r5DAMOu+232Z6IuITFlq9owIDAQABo4ICmzCCApcwHQYDVR0OBBYEFELBG7g6
QqzoYmdEOb1rc5NJGr3+MB8GA1UdIwQYMBaAFGcnuPQz7y/ggIQsbuimzD3CRGJv
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDAyMy82MTNFM0U5RTAx
MTQxMUVBQUFEQUIyNTNDNEY5QUUwMi9aeWU0OURQdkwtQ0FoQ3h1NktiTVBjSkVZ
bTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1p5ZTQ5RFB2TC1DQWhDeHU2S2JNUGNKRVltOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTQwMjMvNjEzRTNFOUUwMTE0MTFFQUFBREFCMjUzQzRGOUFFMDIvRTE0NTA3Rjgw
MTE0MTFFQUFCMEVGMTUzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBABnRdMDBAB3KjMwDQYJKoZIhvcNAQELBQADggEBAGyEaV88
4g1T5UjupITMbn6+TzM9y9yIRgMCmJ5E8RzYWsPD1oIxQf7vLqGw9CUCjM43GGS5
vofchHHCsS2PLohJULL03X9Xv9qcEE2WmJ2CWOfpQcq6n9GInfDPg2bjAE7WDGv6
6D993GncgY+Zb9MtSeVbx8Wu581aqFwxsEAIbooayIQIvlisPFRwdk6dxa5FsS3O
Yqd6LwlQHuwOydfT0npBmpqRDXClVg3ruv3bSpR4XORsTj0lqrBu9VfRVXgGOEBy
R9YIiLY1mNJv/Tx2pjZKYm9nxQUM3fuoQWB6py/ISvJNhEc3PhzWb+sxLKHMjs2s
5G4oWJufGisC/I8=
-----END CERTIFICATE-----
Generated at Fri May 31 22:13:12 2024 by rpki-client on console-fra.rpki-client.org