Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDA20/B73BF37CB5E311EDAB54455AC4F9AE02/81BA905AB5E811EDA7091163C4F9AE02.roa
File:                     81BA905AB5E811EDA7091163C4F9AE02.roa (raw, json)
Hash identifier:          V9jWPnvI7fOBFI2KQePbEjNmv9YHdkUIjvmxVn4gKds=
Subject key identifier:   72:29:F1:EC:1A:75:FF:93:BD:D1:3C:40:DD:98:C4:F8:09:A0:E3:DB
Certificate issuer:       /CN=A91EDA20/serialNumber=962C2C9D5EDFDACEFDB1387E30BEC3FFBEFA5CD0
Certificate serial:       E5
Authority key identifier: 96:2C:2C:9D:5E:DF:DA:CE:FD:B1:38:7E:30:BE:C3:FF:BE:FA:5C:D0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/liwsnV7f2s79sTh-ML7D_776XNA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EDA20/B73BF37CB5E311EDAB54455AC4F9AE02/81BA905AB5E811EDA7091163C4F9AE02.roa
Signing time:             Wed 01 May 2024 06:39:21 +0000
ROA not before:           Wed 01 May 2024 06:39:21 +0000
ROA not after:            Thu 29 Aug 2024 00:00:00 +0000
asID:                     150778
IP address blocks:        103.93.140.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EDA20/B73BF37CB5E311EDAB54455AC4F9AE02/liwsnV7f2s79sTh-ML7D_776XNA.crl
                          rsync://rpki.apnic.net/member_repository/A91EDA20/B73BF37CB5E311EDAB54455AC4F9AE02/liwsnV7f2s79sTh-ML7D_776XNA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/liwsnV7f2s79sTh-ML7D_776XNA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 May 2024 05:34:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 229 (0xe5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EDA20/serialNumber=962C2C9D5EDFDACEFDB1387E30BEC3FFBEFA5CD0
        Validity
            Not Before: May  1 06:39:21 2024 GMT
            Not After : Aug 29 00:00:00 2024 GMT
        Subject: CN=6631e399-29c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:14:99:de:96:46:57:71:60:5c:57:84:f5:61:
                    41:4e:0b:1e:7a:79:d2:e1:fa:ce:f7:2d:13:7d:c8:
                    25:ee:c7:28:99:96:3b:c6:d8:12:0a:97:b5:a7:14:
                    95:4c:94:9c:83:90:ff:f3:2d:46:39:c3:4d:05:4e:
                    b2:fb:d0:03:9c:d0:01:9f:cc:2c:7e:5c:ea:7c:5d:
                    b9:e7:b9:6c:2e:c0:4b:f8:9e:85:f6:a3:11:25:1e:
                    9f:4a:e8:95:62:e3:9c:82:22:e8:b1:80:33:c6:ae:
                    51:b7:e0:d7:05:81:a5:23:16:8d:b6:5c:20:fd:56:
                    92:33:c7:35:c7:d6:32:4d:c1:7c:36:bb:68:24:c8:
                    6d:f0:2b:1d:73:6a:c9:73:fe:f0:58:1b:dd:a3:a3:
                    e2:14:89:fb:d0:53:7f:7f:43:4c:90:ee:6c:91:14:
                    ef:82:bf:96:da:f2:76:ce:5b:9e:82:f1:8a:3a:5c:
                    0a:72:40:86:26:84:98:9c:e2:50:a8:74:46:1f:d8:
                    67:2b:e1:f3:74:7b:f2:81:f9:41:64:d2:cc:52:09:
                    30:a2:ea:75:5f:0a:5a:43:c4:c1:55:35:9b:32:7d:
                    b7:18:32:44:1f:a8:16:9b:a0:85:bb:e2:21:29:b4:
                    6f:83:8d:e7:59:48:0d:50:90:44:c5:86:58:5a:04:
                    f2:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:29:F1:EC:1A:75:FF:93:BD:D1:3C:40:DD:98:C4:F8:09:A0:E3:DB
            X509v3 Authority Key Identifier:
                keyid:96:2C:2C:9D:5E:DF:DA:CE:FD:B1:38:7E:30:BE:C3:FF:BE:FA:5C:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EDA20/B73BF37CB5E311EDAB54455AC4F9AE02/liwsnV7f2s79sTh-ML7D_776XNA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/liwsnV7f2s79sTh-ML7D_776XNA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDA20/B73BF37CB5E311EDAB54455AC4F9AE02/81BA905AB5E811EDA7091163C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.93.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:17:20:78:fd:5b:d0:fd:9b:9e:f1:9b:94:ee:81:3f:7a:9f:
         1f:b8:7b:a0:a6:7f:6b:af:80:95:2d:71:4a:72:39:15:64:93:
         87:11:3b:f3:22:9b:0a:3d:e6:e3:cf:0c:78:05:43:f7:c6:f3:
         e3:ce:b6:81:c9:9f:d2:9f:e6:aa:47:8d:56:64:e6:b1:26:fc:
         46:c2:88:87:b2:82:01:9b:41:d7:b6:01:2d:26:a0:4f:96:34:
         f8:29:a4:28:b5:5b:de:52:5d:31:62:36:93:c3:c3:9d:34:57:
         65:47:83:cf:47:56:12:96:1e:24:95:a6:f9:6c:4a:ae:31:d4:
         b3:f8:e0:4f:e4:18:74:6c:34:68:2b:38:b7:34:50:71:4d:4b:
         bb:65:6b:10:1f:2d:fe:92:1e:64:09:46:1d:69:92:bc:ae:68:
         c2:7c:80:31:1c:9e:3a:d3:8b:6d:eb:30:21:cb:bb:9f:29:e6:
         ad:56:4e:ce:55:06:d5:98:b2:c8:86:f9:2e:ad:9e:27:b8:5e:
         5a:bb:7d:20:f1:02:fd:44:95:29:06:3e:67:f8:b9:88:7d:d2:
         b1:60:c9:e6:93:08:2d:8f:53:35:bd:49:52:f1:ed:2c:c1:71:
         5c:7b:07:d6:e8:75:5d:f6:9b:29:e6:36:cd:63:2f:23:0f:c0:
         23:e8:d3:9a
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAOUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RURBMjAxMTAvBgNVBAUTKDk2MkMyQzlENUVERkRBQ0VGREIxMzg3RTMwQkVDM0ZG
QkVGQTVDRDAwHhcNMjQwNTAxMDYzOTIxWhcNMjQwODI5MDAwMDAwWjAYMRYwFAYD
VQQDEw02NjMxZTM5OS0yOWMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwBSZ3pZGV3FgXFeE9WFBTgseennS4frO9y0Tfcgl7scomZY7xtgSCpe1pxSV
TJScg5D/8y1GOcNNBU6y+9ADnNABn8wsflzqfF2557lsLsBL+J6F9qMRJR6fSuiV
YuOcgiLosYAzxq5Rt+DXBYGlIxaNtlwg/VaSM8c1x9YyTcF8NrtoJMht8Csdc2rJ
c/7wWBvdo6PiFIn70FN/f0NMkO5skRTvgr+W2vJ2zluegvGKOlwKckCGJoSYnOJQ
qHRGH9hnK+HzdHvygflBZNLMUgkwoup1XwpaQ8TBVTWbMn23GDJEH6gWm6CFu+Ih
KbRvg43nWUgNUJBExYZYWgTyiQIDAQABo4IClTCCApEwHQYDVR0OBBYEFHIp8ewa
df+TvdE8QN2YxPgJoOPbMB8GA1UdIwQYMBaAFJYsLJ1e39rO/bE4fjC+w/+++lzQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFREEyMC9CNzNCRjM3Q0I1
RTMxMUVEQUI1NDQ1NUFDNEY5QUUwMi9saXdzblY3ZjJzNzlzVGgtTUw3RF83NzZY
TkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2xpd3NuVjdmMnM3OXNUaC1NTDdEXzc3NlhOQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RURBMjAvQjczQkYzN0NCNUUzMTFFREFCNTQ0NTVBQzRGOUFFMDIvODFCQTkwNUFC
NUU4MTFFREE3MDkxMTYzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnXYwwDQYJKoZIhvcNAQELBQADggEBABcXIHj9W9D9m57x
m5TugT96nx+4e6Cmf2uvgJUtcUpyORVkk4cRO/Mimwo95uPPDHgFQ/fG8+POtoHJ
n9Kf5qpHjVZk5rEm/EbCiIeyggGbQde2AS0moE+WNPgppCi1W95SXTFiNpPDw500
V2VHg89HVhKWHiSVpvlsSq4x1LP44E/kGHRsNGgrOLc0UHFNS7tlaxAfLf6SHmQJ
Rh1pkryuaMJ8gDEcnjrTi23rMCHLu58p5q1WTs5VBtWYssiG+S6tnie4Xlq7fSDx
Av1ElSkGPmf4uYh90rFgyeaTCC2PUzW9SVLx7SzBcVx7B9bodV32mynmNs1jLyMP
wCPo05o=
-----END CERTIFICATE-----
Generated at Fri May 17 06:46:30 2024 by rpki-client on console-ams.rpki-client.org