Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF547/626E109498C711EC86A00949C4F9AE02/6246B1F2609A11EDAAF70C26C4F9AE02.roa
File:                     6246B1F2609A11EDAAF70C26C4F9AE02.roa (raw, json)
Hash identifier:          9iuRPtJtPVpZtpxOlfWixhsZnHDnNABuW0tptS1BjqY=
Subject key identifier:   B4:D5:C7:CA:77:9E:3C:5F:6C:8E:62:87:6B:B2:DA:5A:9B:C8:52:DA
Certificate issuer:       /CN=A91EF547/serialNumber=A683632546F1A10784BC1A4FF6FA0BBE6CEC2D4E
Certificate serial:       0283
Authority key identifier: A6:83:63:25:46:F1:A1:07:84:BC:1A:4F:F6:FA:0B:BE:6C:EC:2D:4E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/poNjJUbxoQeEvBpP9voLvmzsLU4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EF547/626E109498C711EC86A00949C4F9AE02/6246B1F2609A11EDAAF70C26C4F9AE02.roa
Signing time:             Wed 01 Nov 2023 03:34:13 +0000
ROA not before:           Wed 01 Nov 2023 03:34:13 +0000
ROA not after:            Mon 30 Dec 2024 00:00:00 +0000
asID:                     9790
IP address blocks:        103.174.2.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EF547/626E109498C711EC86A00949C4F9AE02/poNjJUbxoQeEvBpP9voLvmzsLU4.crl
                          rsync://rpki.apnic.net/member_repository/A91EF547/626E109498C711EC86A00949C4F9AE02/poNjJUbxoQeEvBpP9voLvmzsLU4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/poNjJUbxoQeEvBpP9voLvmzsLU4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 May 2024 02:50:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 643 (0x283)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EF547/serialNumber=A683632546F1A10784BC1A4FF6FA0BBE6CEC2D4E
        Validity
            Not Before: Nov  1 03:34:13 2023 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=6541c735-b95a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c2:40:13:38:8b:73:ed:84:ca:a4:a6:2b:1b:
                    1e:17:e0:92:ae:b0:73:6f:d2:0c:14:85:b6:6f:f1:
                    6e:8c:c0:19:de:b6:4d:aa:82:1a:05:c5:92:23:0f:
                    dc:3a:93:7e:33:7d:17:2c:d1:74:53:84:82:9c:84:
                    86:11:df:28:ba:b3:cf:75:4e:6e:de:37:01:ec:a5:
                    7b:bf:c8:0f:7f:89:28:bc:d4:01:82:5b:ac:84:25:
                    8d:07:57:a3:a4:4d:4d:9c:ef:8a:65:d4:87:7b:cc:
                    b6:c2:b5:ab:92:43:03:7c:7d:de:3a:e4:f5:89:77:
                    49:d7:85:88:4e:c9:ff:b2:aa:16:cd:67:b0:1a:cc:
                    b1:9b:53:7e:b9:8b:a7:81:8a:b1:1d:15:e5:a5:84:
                    10:03:b3:9e:7d:60:55:11:e2:61:fe:ae:e7:60:bc:
                    ad:ee:40:38:7c:90:50:2b:40:77:9f:cf:ad:46:1b:
                    04:71:d0:20:3e:eb:79:6c:b1:c0:fe:3e:18:ad:c5:
                    11:99:f9:d9:d6:1a:8d:db:e6:6e:73:82:fb:1a:59:
                    f6:d7:24:16:74:3e:25:4f:cc:f7:10:aa:dd:9e:30:
                    a4:f7:79:18:cf:f8:b7:36:90:6a:8a:23:54:80:06:
                    0d:ca:bd:7f:cf:46:80:b6:03:33:27:9d:23:b6:16:
                    97:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:D5:C7:CA:77:9E:3C:5F:6C:8E:62:87:6B:B2:DA:5A:9B:C8:52:DA
            X509v3 Authority Key Identifier:
                keyid:A6:83:63:25:46:F1:A1:07:84:BC:1A:4F:F6:FA:0B:BE:6C:EC:2D:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EF547/626E109498C711EC86A00949C4F9AE02/poNjJUbxoQeEvBpP9voLvmzsLU4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/poNjJUbxoQeEvBpP9voLvmzsLU4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF547/626E109498C711EC86A00949C4F9AE02/6246B1F2609A11EDAAF70C26C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.174.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bc:17:9e:ea:e4:ac:14:a6:73:cc:4d:96:67:c8:43:96:f2:8b:
         a7:c0:7c:6f:1a:18:eb:e3:5a:f5:8e:d8:21:e0:6d:51:5b:12:
         0d:79:25:4f:59:9c:10:6b:53:b1:df:0c:af:19:8c:09:5e:c6:
         4e:03:5e:5d:9e:87:d5:b9:48:6d:25:f0:8e:32:b8:e3:a9:1d:
         20:10:f2:aa:fe:47:16:69:b3:ac:c6:8f:68:45:ec:68:55:98:
         37:19:22:10:dd:6e:a0:0c:6d:e8:71:93:15:d0:4a:e7:ca:06:
         ea:5e:32:91:a2:99:6e:74:d7:7b:73:ba:3f:c5:99:7b:62:31:
         7f:07:3e:f2:c1:2d:bc:80:9b:e3:e9:d5:40:f9:07:90:06:24:
         ad:79:ee:51:b1:70:a8:35:67:fd:7c:7a:e3:4e:26:7b:23:0b:
         61:49:4a:fa:78:bf:58:55:c5:35:41:07:72:2b:bd:77:eb:b2:
         c1:25:9e:5f:cb:92:07:f7:7b:31:96:f3:72:f1:78:51:e7:61:
         77:99:d5:8f:ce:20:f0:2a:95:bd:ac:0f:69:c3:2b:5f:28:f9:
         83:37:76:1e:ce:55:ea:a6:a2:3b:04:ea:15:8f:ce:31:7e:d8:
         42:13:ba:1a:e6:e5:34:7b:95:b4:e1:82:f9:a3:54:54:a0:57:
         95:e7:87:a1
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAoMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUY1NDcxMTAvBgNVBAUTKEE2ODM2MzI1NDZGMUExMDc4NEJDMUE0RkY2RkEwQkJF
NkNFQzJENEUwHhcNMjMxMTAxMDMzNDEzWhcNMjQxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NTQxYzczNS1iOTVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArsJAEziLc+2EyqSmKxseF+CSrrBzb9IMFIW2b/FujMAZ3rZNqoIaBcWSIw/c
OpN+M30XLNF0U4SCnISGEd8ourPPdU5u3jcB7KV7v8gPf4kovNQBglushCWNB1ej
pE1NnO+KZdSHe8y2wrWrkkMDfH3eOuT1iXdJ14WITsn/sqoWzWewGsyxm1N+uYun
gYqxHRXlpYQQA7OefWBVEeJh/q7nYLyt7kA4fJBQK0B3n8+tRhsEcdAgPut5bLHA
/j4YrcURmfnZ1hqN2+Zuc4L7Gln21yQWdD4lT8z3EKrdnjCk93kYz/i3NpBqiiNU
gAYNyr1/z0aAtgMzJ50jthaX+wIDAQABo4IClTCCApEwHQYDVR0OBBYEFLTVx8p3
njxfbI5ih2uy2lqbyFLaMB8GA1UdIwQYMBaAFKaDYyVG8aEHhLwaT/b6C75s7C1O
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjU0Ny82MjZFMTA5NDk4
QzcxMUVDODZBMDA5NDlDNEY5QUUwMi9wb05qSlVieG9RZUV2QnBQOXZvTHZtenNM
VTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3BvTmpKVWJ4b1FlRXZCcFA5dm9Mdm16c0xVNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RUY1NDcvNjI2RTEwOTQ5OEM3MTFFQzg2QTAwOTQ5QzRGOUFFMDIvNjI0NkIxRjI2
MDlBMTFFREFBRjcwQzI2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnrgIwDQYJKoZIhvcNAQELBQADggEBALwXnurkrBSmc8xN
lmfIQ5byi6fAfG8aGOvjWvWO2CHgbVFbEg15JU9ZnBBrU7HfDK8ZjAlexk4DXl2e
h9W5SG0l8I4yuOOpHSAQ8qr+RxZps6zGj2hF7GhVmDcZIhDdbqAMbehxkxXQSufK
BupeMpGimW5013tzuj/FmXtiMX8HPvLBLbyAm+Pp1UD5B5AGJK157lGxcKg1Z/18
euNOJnsjC2FJSvp4v1hVxTVBB3IrvXfrssElnl/Lkgf3ezGW83LxeFHnYXeZ1Y/O
IPAqlb2sD2nDK18o+YM3dh7OVeqmojsE6hWPzjF+2EITuhrm5TR7lbThgvmjVFSg
V5Xnh6E=
-----END CERTIFICATE-----
Generated at Sun May 19 04:20:44 2024 by rpki-client on console-ams.rpki-client.org