Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFC72/075F6968E60D11EBB09F6A61C4F9AE02/B63ACB8CCB8411EC98BF6718C4F9AE02.roa
File:                     B63ACB8CCB8411EC98BF6718C4F9AE02.roa (raw, json)
Hash identifier:          +lI8Md1ahy9z64y/SD7z39aoZKOSb4cML7YXr/5F5v8=
Subject key identifier:   76:D8:01:7D:83:65:25:E3:A6:1D:C4:6E:56:01:DB:F7:C6:5E:17:0A
Certificate issuer:       /CN=A91EFC72/serialNumber=B7A7A9FFBEC713F84E0B5180AF76DEB16E729229
Certificate serial:       0421
Authority key identifier: B7:A7:A9:FF:BE:C7:13:F8:4E:0B:51:80:AF:76:DE:B1:6E:72:92:29
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t6ep_77HE_hOC1GAr3besW5ykik.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EFC72/075F6968E60D11EBB09F6A61C4F9AE02/B63ACB8CCB8411EC98BF6718C4F9AE02.roa
Signing time:             Sat 15 Jul 2023 00:21:20 +0000
ROA not before:           Sat 15 Jul 2023 00:21:20 +0000
ROA not after:            Thu 31 Oct 2024 00:00:00 +0000
asID:                     134963
IP address blocks:        103.55.202.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EFC72/075F6968E60D11EBB09F6A61C4F9AE02/t6ep_77HE_hOC1GAr3besW5ykik.crl
                          rsync://rpki.apnic.net/member_repository/A91EFC72/075F6968E60D11EBB09F6A61C4F9AE02/t6ep_77HE_hOC1GAr3besW5ykik.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t6ep_77HE_hOC1GAr3besW5ykik.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 May 2024 01:20:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1057 (0x421)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EFC72/serialNumber=B7A7A9FFBEC713F84E0B5180AF76DEB16E729229
        Validity
            Not Before: Jul 15 00:21:20 2023 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=64b1e680-d07d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:74:04:fc:92:0a:67:68:54:81:63:71:71:5f:
                    92:83:ad:ab:b6:b9:32:e3:75:06:70:8d:29:f7:48:
                    0c:a8:5d:9d:80:34:58:70:67:1d:3d:ea:ec:26:be:
                    f3:ae:c6:0f:ef:f3:a2:0c:5e:f8:c6:e7:f9:ec:b1:
                    f2:de:05:b8:f4:12:af:08:f7:fd:90:dc:6f:21:60:
                    ef:b5:93:b6:66:9c:52:75:9d:a5:aa:46:ed:24:39:
                    25:35:4f:18:e1:66:8a:e9:11:de:79:b7:30:60:90:
                    b9:97:95:9b:b2:80:b0:e7:37:2b:03:18:71:8d:bc:
                    ec:0d:6c:ac:ab:c6:1d:ac:0e:99:1d:bc:80:67:8c:
                    f1:ef:ec:f5:1d:83:44:4e:f6:c3:de:1c:f9:a5:ab:
                    4c:23:5c:41:eb:80:03:bd:19:ba:7c:b3:e0:37:c4:
                    a3:0e:b5:20:c0:68:32:24:10:6c:bf:06:b1:b3:fc:
                    61:de:92:69:ee:0d:6d:98:9e:19:2a:1b:f3:10:14:
                    aa:e6:76:c9:bf:51:9b:6f:00:51:28:be:84:90:2c:
                    74:d2:23:a9:26:00:ca:a8:fc:db:c2:f4:4a:fb:05:
                    38:1d:48:b8:6f:a6:78:83:3d:41:3d:50:e8:8b:51:
                    15:9a:9d:0c:33:85:ca:4e:d9:14:68:ec:9d:d5:37:
                    d2:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:D8:01:7D:83:65:25:E3:A6:1D:C4:6E:56:01:DB:F7:C6:5E:17:0A
            X509v3 Authority Key Identifier:
                keyid:B7:A7:A9:FF:BE:C7:13:F8:4E:0B:51:80:AF:76:DE:B1:6E:72:92:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EFC72/075F6968E60D11EBB09F6A61C4F9AE02/t6ep_77HE_hOC1GAr3besW5ykik.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t6ep_77HE_hOC1GAr3besW5ykik.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFC72/075F6968E60D11EBB09F6A61C4F9AE02/B63ACB8CCB8411EC98BF6718C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.55.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:ee:5d:a8:46:b6:06:a0:3f:ac:4e:09:c0:3f:d7:66:1d:9f:
         53:59:59:06:aa:3a:e5:e5:a1:e7:c9:4f:6e:b6:2c:00:b7:a8:
         f9:9e:f7:17:80:90:8c:aa:49:3e:bc:f9:6f:cc:5e:7c:ce:4c:
         46:63:b6:3a:77:e6:f5:cb:ae:8a:e5:d3:7d:8a:93:8c:e3:06:
         8c:e8:6c:99:6b:40:56:f7:38:18:fc:e7:d7:f0:69:96:43:66:
         9c:47:e7:9d:7c:64:31:ee:bb:79:e8:0b:20:94:3f:fd:65:4f:
         b7:60:db:bc:c0:58:ec:b4:9b:92:8f:11:e2:07:52:1e:f8:c0:
         8f:59:55:1e:db:bc:99:94:ff:7f:e3:66:b3:58:89:61:8c:5a:
         da:63:ef:5d:ad:f6:e7:47:f6:2a:48:d2:d9:a9:cb:3d:b3:ff:
         44:5e:c6:9b:bf:91:57:01:d7:dd:31:c5:d6:6d:89:ad:86:30:
         cf:4b:9d:1d:c5:28:cb:12:38:30:0f:f1:03:50:c5:3f:40:e6:
         93:07:23:8d:ff:a4:5b:a9:83:e1:56:a8:23:53:12:6e:c7:c1:
         75:56:00:d5:02:37:25:d7:4d:42:c0:89:f9:4c:a8:c8:85:6e:
         28:ba:63:ef:f4:48:47:16:51:a6:40:dd:6d:a2:f5:f3:9e:fb:
         32:79:b7:e9
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBCEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUZDNzIxMTAvBgNVBAUTKEI3QTdBOUZGQkVDNzEzRjg0RTBCNTE4MEFGNzZERUIx
NkU3MjkyMjkwHhcNMjMwNzE1MDAyMTIwWhcNMjQxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NGIxZTY4MC1kMDdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAv3QE/JIKZ2hUgWNxcV+Sg62rtrky43UGcI0p90gMqF2dgDRYcGcdPersJr7z
rsYP7/OiDF74xuf57LHy3gW49BKvCPf9kNxvIWDvtZO2ZpxSdZ2lqkbtJDklNU8Y
4WaK6RHeebcwYJC5l5WbsoCw5zcrAxhxjbzsDWysq8YdrA6ZHbyAZ4zx7+z1HYNE
TvbD3hz5patMI1xB64ADvRm6fLPgN8SjDrUgwGgyJBBsvwaxs/xh3pJp7g1tmJ4Z
KhvzEBSq5nbJv1GbbwBRKL6EkCx00iOpJgDKqPzbwvRK+wU4HUi4b6Z4gz1BPVDo
i1EVmp0MM4XKTtkUaOyd1TfSbwIDAQABo4IClTCCApEwHQYDVR0OBBYEFHbYAX2D
ZSXjph3EblYB2/fGXhcKMB8GA1UdIwQYMBaAFLenqf++xxP4TgtRgK923rFucpIp
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRkM3Mi8wNzVGNjk2OEU2
MEQxMUVCQjA5RjZBNjFDNEY5QUUwMi90NmVwXzc3SEVfaE9DMUdBcjNiZXNXNXlr
aWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3Q2ZXBfNzdIRV9oT0MxR0FyM2Jlc1c1eWtpay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RUZDNzIvMDc1RjY5NjhFNjBEMTFFQkIwOUY2QTYxQzRGOUFFMDIvQjYzQUNCOEND
Qjg0MTFFQzk4QkY2NzE4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnN8owDQYJKoZIhvcNAQELBQADggEBAKnuXahGtgagP6xO
CcA/12Ydn1NZWQaqOuXloefJT262LAC3qPme9xeAkIyqST68+W/MXnzOTEZjtjp3
5vXLrorl032Kk4zjBozobJlrQFb3OBj859fwaZZDZpxH5518ZDHuu3noCyCUP/1l
T7dg27zAWOy0m5KPEeIHUh74wI9ZVR7bvJmU/3/jZrNYiWGMWtpj712t9udH9ipI
0tmpyz2z/0Rexpu/kVcB190xxdZtia2GMM9LnR3FKMsSODAP8QNQxT9A5pMHI43/
pFupg+FWqCNTEm7HwXVWANUCNyXXTULAiflMqMiFbii6Y+/0SEcWUaZA3W2i9fOe
+zJ5t+k=
-----END CERTIFICATE-----
Generated at Wed May 15 02:27:04 2024 by rpki-client on console-fra.rpki-client.org