Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F10DC/85B8E4AAC9D811ED97975A2EC4F9AE02/01003962C9DC11ED8D68375EC4F9AE02.roa
File:                     01003962C9DC11ED8D68375EC4F9AE02.roa (raw, json)
Hash identifier:          40grfM9Blc8mWrQHxfsLKS/1IkrQAzi1kEJy1AiE/G4=
Subject key identifier:   46:8B:67:51:0D:F8:D4:02:02:DA:63:24:D4:B4:97:7D:53:E7:E0:BA
Certificate issuer:       /CN=A91F10DC/serialNumber=104DEBDB4DFB8B9FFFE3A4EF7DB1657AFB2DF7E2
Certificate serial:       74
Authority key identifier: 10:4D:EB:DB:4D:FB:8B:9F:FF:E3:A4:EF:7D:B1:65:7A:FB:2D:F7:E2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EE3r2037i5__46TvfbFlevst9-I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F10DC/85B8E4AAC9D811ED97975A2EC4F9AE02/01003962C9DC11ED8D68375EC4F9AE02.roa
Signing time:             Fri 27 Oct 2023 04:56:16 +0000
ROA not before:           Fri 27 Oct 2023 04:56:16 +0000
ROA not after:            Mon 30 Dec 2024 00:00:00 +0000
asID:                     150343
IP address blocks:        103.68.105.0/24 maxlen: 24
                          2001:df1:5ac0::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F10DC/85B8E4AAC9D811ED97975A2EC4F9AE02/EE3r2037i5__46TvfbFlevst9-I.crl
                          rsync://rpki.apnic.net/member_repository/A91F10DC/85B8E4AAC9D811ED97975A2EC4F9AE02/EE3r2037i5__46TvfbFlevst9-I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EE3r2037i5__46TvfbFlevst9-I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 May 2024 05:34:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 116 (0x74)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F10DC/serialNumber=104DEBDB4DFB8B9FFFE3A4EF7DB1657AFB2DF7E2
        Validity
            Not Before: Oct 27 04:56:16 2023 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=653b42f0-b8f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:6c:02:ab:e9:a6:aa:5f:84:fc:b8:22:5f:63:
                    27:71:ab:68:51:f9:14:56:6f:fe:ea:d4:0a:f6:d8:
                    16:a3:45:d8:b1:11:0b:ec:8a:64:33:d5:28:49:5a:
                    71:84:61:bc:29:fb:80:f5:de:d2:04:18:55:c5:da:
                    fa:c8:99:a8:94:e3:0c:3c:35:55:6a:ed:53:3b:be:
                    12:27:50:09:91:dc:77:db:0e:5b:f8:ae:f2:b3:b1:
                    1b:62:57:08:84:99:3f:a7:d2:19:43:5d:6b:92:9f:
                    ee:8f:cf:6b:a5:10:6e:fd:e6:18:0d:ea:44:20:38:
                    45:52:6d:12:89:b0:e5:10:26:a9:c7:62:eb:54:b4:
                    3a:b0:34:d2:bb:96:5c:1f:fc:c3:d2:d2:15:b2:b7:
                    8f:cf:23:79:ef:4f:ac:27:45:99:7c:bb:18:a9:d0:
                    72:26:5a:a1:6f:b5:75:a1:a5:99:89:ef:80:be:ae:
                    46:0c:28:41:a7:7a:24:9a:be:bf:2e:44:64:9d:f0:
                    88:5b:71:b9:54:35:19:e4:3a:c1:ef:5d:0e:d6:f8:
                    73:68:7b:49:f9:64:5d:b1:84:02:77:c8:15:39:12:
                    50:65:69:3f:1b:b6:70:d9:92:36:2d:c0:ce:5c:dc:
                    7e:cb:3b:a4:e7:17:07:41:81:49:ae:44:c5:b1:12:
                    14:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:8B:67:51:0D:F8:D4:02:02:DA:63:24:D4:B4:97:7D:53:E7:E0:BA
            X509v3 Authority Key Identifier:
                keyid:10:4D:EB:DB:4D:FB:8B:9F:FF:E3:A4:EF:7D:B1:65:7A:FB:2D:F7:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F10DC/85B8E4AAC9D811ED97975A2EC4F9AE02/EE3r2037i5__46TvfbFlevst9-I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EE3r2037i5__46TvfbFlevst9-I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F10DC/85B8E4AAC9D811ED97975A2EC4F9AE02/01003962C9DC11ED8D68375EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.68.105.0/24
                IPv6:
                  2001:df1:5ac0::/48

    Signature Algorithm: sha256WithRSAEncryption
         a2:06:01:cb:87:de:0e:82:43:90:96:ae:2d:ff:33:0c:bd:26:
         30:df:97:32:87:08:10:6f:c9:39:cc:2f:dc:83:b3:73:ba:45:
         c9:ab:e8:c6:5b:22:cd:13:b2:a7:5b:5e:8e:a7:27:5e:67:cf:
         5f:b2:53:78:0a:15:45:67:5e:3d:a8:3b:77:2b:cf:f8:c1:5b:
         a5:fb:d7:7e:dd:df:ef:a9:76:60:c3:c4:64:9a:79:51:d2:0c:
         94:78:07:5d:03:e0:70:8d:51:30:26:38:30:af:7c:77:ec:05:
         fe:7f:f3:45:a4:4f:f3:e0:57:d3:81:58:70:47:10:7f:32:4b:
         df:22:02:4b:23:6f:52:8e:b8:32:3b:87:20:57:e8:54:40:36:
         a8:a3:04:bb:6e:36:94:f3:58:b0:ed:14:d1:de:d9:35:1d:92:
         a2:b0:86:21:66:00:c6:9f:59:4d:88:38:d5:a5:3f:32:42:6a:
         81:85:35:b4:e1:3a:63:ff:85:3f:cb:b0:ac:d1:29:bd:94:7f:
         1c:ad:59:48:16:b8:fa:4d:fd:25:0c:6d:a1:38:00:22:50:3e:
         01:d0:01:90:da:f5:ec:f2:63:c6:26:3f:4b:3b:e2:1b:7f:c4:
         4d:ed:31:68:39:01:d3:12:0e:98:31:4d:7c:cf:dd:91:8a:93:
         70:92:b4:a5
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIBdDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG
MTBEQzExMC8GA1UEBRMoMTA0REVCREI0REZCOEI5RkZGRTNBNEVGN0RCMTY1N0FG
QjJERjdFMjAeFw0yMzEwMjcwNDU2MTZaFw0yNDEyMzAwMDAwMDBaMBgxFjAUBgNV
BAMTDTY1M2I0MmYwLWI4ZjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDMbAKr6aaqX4T8uCJfYydxq2hR+RRWb/7q1Ar22BajRdixEQvsimQz1ShJWnGE
Ybwp+4D13tIEGFXF2vrImaiU4ww8NVVq7VM7vhInUAmR3HfbDlv4rvKzsRtiVwiE
mT+n0hlDXWuSn+6Pz2ulEG795hgN6kQgOEVSbRKJsOUQJqnHYutUtDqwNNK7llwf
/MPS0hWyt4/PI3nvT6wnRZl8uxip0HImWqFvtXWhpZmJ74C+rkYMKEGneiSavr8u
RGSd8IhbcblUNRnkOsHvXQ7W+HNoe0n5ZF2xhAJ3yBU5ElBlaT8btnDZkjYtwM5c
3H7LO6TnFwdBgUmuRMWxEhR5AgMBAAGjggKmMIICojAdBgNVHQ4EFgQURotnUQ34
1AIC2mMk1LSXfVPn4LowHwYDVR0jBBgwFoAUEE3r2037i5//46TvfbFlevst9+Iw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYxMERDLzg1QjhFNEFBQzlE
ODExRUQ5Nzk3NUEyRUM0RjlBRTAyL0VFM3IyMDM3aTVfXzQ2VHZmYkZsZXZzdDkt
SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvRUUzcjIwMzdpNV9fNDZUdmZiRmxldnN0OS1JLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
MTBEQy84NUI4RTRBQUM5RDgxMUVEOTc5NzVBMkVDNEY5QUUwMi8wMTAwMzk2MkM5
REMxMUVEOEQ2ODM3NUVDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAwBggrBgEFBQcBBwEB/wQh
MB8wDAQCAAEwBgMEAGdEaTAPBAIAAjAJAwcAIAEN8VrAMA0GCSqGSIb3DQEBCwUA
A4IBAQCiBgHLh94OgkOQlq4t/zMMvSYw35cyhwgQb8k5zC/cg7NzukXJq+jGWyLN
E7KnW16OpydeZ89fslN4ChVFZ149qDt3K8/4wVul+9d+3d/vqXZgw8RkmnlR0gyU
eAddA+BwjVEwJjgwr3x37AX+f/NFpE/z4FfTgVhwRxB/MkvfIgJLI29SjrgyO4cg
V+hUQDaoowS7bjaU81iw7RTR3tk1HZKisIYhZgDGn1lNiDjVpT8yQmqBhTW04Tpj
/4U/y7Cs0Sm9lH8crVlIFrj6Tf0lDG2hOAAiUD4B0AGQ2vXs8mPGJj9LO+Ibf8RN
7TFoOQHTEg6YMU18z92RipNwkrSl
-----END CERTIFICATE-----
Generated at Fri May 17 06:46:30 2024 by rpki-client on console-ams.rpki-client.org