Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E89AF/1860CA1A6FF511EB8264625BC4F9AE02/7C7FDC646FF711EBA7506161C4F9AE02.roa
File:                     7C7FDC646FF711EBA7506161C4F9AE02.roa (raw, json)
Hash identifier:          n1mrEqQcF6GFPhAEk3uJt2CvVWsLnN8TjzHuXjULSu8=
Subject key identifier:   B6:89:B3:1A:41:E7:DE:9C:A2:13:FB:7E:5D:79:60:88:CF:28:F6:47
Certificate issuer:       /CN=A91E89AF/serialNumber=5A7A2DDEA62C890E901F1DCD4046FCD78CC0B41C
Certificate serial:       05AA
Authority key identifier: 5A:7A:2D:DE:A6:2C:89:0E:90:1F:1D:CD:40:46:FC:D7:8C:C0:B4:1C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wnot3qYsiQ6QHx3NQEb814zAtBw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E89AF/1860CA1A6FF511EB8264625BC4F9AE02/7C7FDC646FF711EBA7506161C4F9AE02.roa
Signing time:             Sun 03 Mar 2024 00:12:41 +0000
ROA not before:           Sun 03 Mar 2024 00:12:41 +0000
ROA not after:            Wed 28 May 2025 00:00:00 +0000
asID:                     141710
IP address blocks:        103.162.119.0/24 maxlen: 24
                          2001:df5:f180::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E89AF/1860CA1A6FF511EB8264625BC4F9AE02/Wnot3qYsiQ6QHx3NQEb814zAtBw.crl
                          rsync://rpki.apnic.net/member_repository/A91E89AF/1860CA1A6FF511EB8264625BC4F9AE02/Wnot3qYsiQ6QHx3NQEb814zAtBw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wnot3qYsiQ6QHx3NQEb814zAtBw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1450 (0x5aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E89AF/serialNumber=5A7A2DDEA62C890E901F1DCD4046FCD78CC0B41C
        Validity
            Not Before: Mar  3 00:12:41 2024 GMT
            Not After : May 28 00:00:00 2025 GMT
        Subject: CN=65e3c078-56c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:97:ee:2a:f0:a3:82:53:2d:00:dc:8f:7b:47:
                    06:9f:e5:9f:53:da:0f:64:56:c9:1c:d5:55:a2:8c:
                    29:c6:ff:07:2e:02:55:5e:24:3f:93:db:e5:71:60:
                    d5:d6:e0:71:d8:5d:f0:29:69:54:45:18:f4:e0:b8:
                    29:b2:f8:2a:5c:58:7e:fe:06:4d:42:b5:62:bb:08:
                    d2:fa:b4:8a:17:df:70:17:44:ae:03:a1:a5:1a:0f:
                    a5:21:73:3a:8b:52:94:4f:16:55:aa:8a:03:3e:74:
                    35:5c:dd:c0:6c:46:db:5a:da:9f:d3:e4:1a:91:b3:
                    7c:8c:fc:45:6c:7f:dd:95:21:8e:90:79:80:45:f1:
                    20:1f:3f:9c:48:c1:f2:9d:cd:a7:56:f4:6a:e5:7c:
                    35:1c:87:e2:95:df:67:2f:a3:7f:4c:fd:8d:96:e1:
                    bf:9b:dc:b8:22:7a:a9:27:e5:25:45:aa:42:5c:cf:
                    2c:34:34:e2:1f:ea:71:9b:4a:80:d0:58:23:70:9d:
                    28:50:7d:5a:e5:cf:c7:ea:b5:12:25:6a:11:ac:0d:
                    5c:47:f7:93:5d:17:34:59:7a:ed:f0:ec:5e:95:73:
                    53:7f:4c:5e:61:07:50:92:40:4c:60:cd:fc:58:2d:
                    d7:33:4d:96:50:09:54:54:4a:e0:89:e4:e7:a3:ef:
                    2d:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:89:B3:1A:41:E7:DE:9C:A2:13:FB:7E:5D:79:60:88:CF:28:F6:47
            X509v3 Authority Key Identifier:
                keyid:5A:7A:2D:DE:A6:2C:89:0E:90:1F:1D:CD:40:46:FC:D7:8C:C0:B4:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E89AF/1860CA1A6FF511EB8264625BC4F9AE02/Wnot3qYsiQ6QHx3NQEb814zAtBw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wnot3qYsiQ6QHx3NQEb814zAtBw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E89AF/1860CA1A6FF511EB8264625BC4F9AE02/7C7FDC646FF711EBA7506161C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.162.119.0/24
                IPv6:
                  2001:df5:f180::/48

    Signature Algorithm: sha256WithRSAEncryption
         89:dd:9e:c6:3c:8c:0c:55:45:2a:cb:f5:38:b4:b6:51:db:69:
         ea:bf:d3:ab:fb:37:1e:d0:06:23:1e:2c:d9:3f:e2:21:f2:9e:
         87:79:dd:ae:7c:2e:2b:ae:87:6a:68:94:8c:84:5e:1d:f3:9a:
         bd:77:cf:53:d0:20:6f:4b:36:0c:0e:36:85:2a:69:9b:12:16:
         80:cf:b8:fe:32:94:2e:2e:f7:b9:00:64:7f:25:74:f0:83:93:
         49:14:8d:97:55:4c:01:a5:9d:75:99:7b:ee:c8:16:13:66:01:
         36:8b:28:10:17:c9:55:62:30:a9:a7:b6:1f:1a:8d:b8:91:93:
         53:68:aa:7a:e9:00:f7:89:c0:3a:73:99:09:a4:ac:c3:05:e5:
         2b:63:38:6f:ac:7c:fe:78:b3:d3:21:8f:81:c0:3c:94:ae:af:
         71:8f:37:56:29:e7:64:8f:ae:99:82:81:ab:7d:7f:1a:73:4e:
         82:9b:2e:65:8f:b2:2e:ce:6f:0d:ea:98:9d:7f:11:fe:32:88:
         7e:69:58:f4:3f:ba:1d:fe:69:5e:06:78:c2:20:0b:9c:9f:c7:
         01:cd:fd:37:d7:1b:c7:19:9b:2e:cf:3d:e6:c5:ac:d4:7b:61:
         7b:57:81:1b:03:d9:31:2c:09:d3:b0:10:a6:e2:f3:1a:74:ca:
         89:e9:03:8c
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgICBaowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTg5QUYxMTAvBgNVBAUTKDVBN0EyRERFQTYyQzg5MEU5MDFGMURDRDQwNDZGQ0Q3
OENDMEI0MUMwHhcNMjQwMzAzMDAxMjQxWhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02NWUzYzA3OC01NmM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0JfuKvCjglMtANyPe0cGn+WfU9oPZFbJHNVVoowpxv8HLgJVXiQ/k9vlcWDV
1uBx2F3wKWlURRj04LgpsvgqXFh+/gZNQrViuwjS+rSKF99wF0SuA6GlGg+lIXM6
i1KUTxZVqooDPnQ1XN3AbEbbWtqf0+QakbN8jPxFbH/dlSGOkHmARfEgHz+cSMHy
nc2nVvRq5Xw1HIfild9nL6N/TP2NluG/m9y4InqpJ+UlRapCXM8sNDTiH+pxm0qA
0FgjcJ0oUH1a5c/H6rUSJWoRrA1cR/eTXRc0WXrt8OxelXNTf0xeYQdQkkBMYM38
WC3XM02WUAlUVErgieTno+8t4QIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFLaJsxpB
596cohP7fl15YIjPKPZHMB8GA1UdIwQYMBaAFFp6Ld6mLIkOkB8dzUBG/NeMwLQc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODlBRi8xODYwQ0ExQTZG
RjUxMUVCODI2NDYyNUJDNEY5QUUwMi9Xbm90M3FZc2lRNlFIeDNOUUViODE0ekF0
QncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1dub3QzcVlzaVE2UUh4M05RRWI4MTR6QXRCdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTg5QUYvMTg2MENBMUE2RkY1MTFFQjgyNjQ2MjVCQzRGOUFFMDIvN0M3RkRDNjQ2
RkY3MTFFQkE3NTA2MTYxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E
ITAfMAwEAgABMAYDBABnoncwDwQCAAIwCQMHACABDfXxgDANBgkqhkiG9w0BAQsF
AAOCAQEAid2exjyMDFVFKsv1OLS2Udtp6r/Tq/s3HtAGIx4s2T/iIfKeh3ndrnwu
K66HamiUjIReHfOavXfPU9Agb0s2DA42hSppmxIWgM+4/jKULi73uQBkfyV08IOT
SRSNl1VMAaWddZl77sgWE2YBNosoEBfJVWIwqae2HxqNuJGTU2iqeukA94nAOnOZ
CaSswwXlK2M4b6x8/niz0yGPgcA8lK6vcY83VinnZI+umYKBq31/GnNOgpsuZY+y
Ls5vDeqYnX8R/jKIfmlY9D+6Hf5pXgZ4wiALnJ/HAc39N9cbxxmbLs895sWs1Hth
e1eBGwPZMSwJ07AQpuLzGnTKiekDjA==
-----END CERTIFICATE-----
Generated at Fri Nov 22 23:39:36 2024 by rpki-client on console-fra.rpki-client.org