Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3260/D78D2AA271A611EB87450466C4F9AE02/C5058712A3B911EC9709462AC4F9AE02.roa
File:                     C5058712A3B911EC9709462AC4F9AE02.roa (raw, json)
Hash identifier:          hoU0fh5Y3uQIrYD846BdOQsDfnxEJM+v6XQZHlQeugU=
Subject key identifier:   DF:49:AB:72:64:20:80:ED:3E:4B:65:80:2F:88:EE:9E:73:A2:6C:8B
Certificate issuer:       /CN=A91F3260/serialNumber=5AC97C91299A2FA9C8CED8AAC670FFEFC7B69A1B
Certificate serial:       051A
Authority key identifier: 5A:C9:7C:91:29:9A:2F:A9:C8:CE:D8:AA:C6:70:FF:EF:C7:B6:9A:1B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wsl8kSmaL6nIztiqxnD_78e2mhs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F3260/D78D2AA271A611EB87450466C4F9AE02/C5058712A3B911EC9709462AC4F9AE02.roa
Signing time:             Sun 07 May 2023 01:41:50 +0000
ROA not before:           Sun 07 May 2023 01:41:50 +0000
ROA not after:            Tue 30 Jul 2024 00:00:00 +0000
asID:                     136557
IP address blocks:        103.150.31.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F3260/D78D2AA271A611EB87450466C4F9AE02/Wsl8kSmaL6nIztiqxnD_78e2mhs.crl
                          rsync://rpki.apnic.net/member_repository/A91F3260/D78D2AA271A611EB87450466C4F9AE02/Wsl8kSmaL6nIztiqxnD_78e2mhs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wsl8kSmaL6nIztiqxnD_78e2mhs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 19:51:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1306 (0x51a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F3260/serialNumber=5AC97C91299A2FA9C8CED8AAC670FFEFC7B69A1B
        Validity
            Not Before: May  7 01:41:50 2023 GMT
            Not After : Jul 30 00:00:00 2024 GMT
        Subject: CN=645701dd-0a86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:94:a1:37:a8:19:09:dd:81:7d:b7:5f:d8:69:
                    5e:bf:33:f6:08:15:01:5d:5d:f5:0e:7a:68:63:fe:
                    40:1a:98:90:db:4f:22:33:2d:49:44:0b:db:c6:5a:
                    aa:c1:ab:c2:c5:05:9a:3a:5b:e8:c8:f6:d0:8d:a5:
                    d0:ab:7c:9c:e6:7c:04:da:e8:28:b3:01:13:2d:5e:
                    f3:34:1c:a1:b7:90:80:2b:e6:b9:e9:92:c6:7f:58:
                    84:49:9d:71:c0:ef:33:ca:70:61:80:b1:f4:d9:9a:
                    85:09:20:d7:bd:3d:ad:79:0d:52:73:ec:d1:41:f4:
                    6f:b0:a3:fd:6a:3f:38:f4:62:6b:6c:37:11:40:76:
                    8c:91:91:23:f9:85:63:e3:5d:cb:c7:d1:d9:c0:be:
                    26:ff:db:7f:f7:0c:2b:fa:59:63:e7:4f:72:e9:fe:
                    b6:00:e3:6c:d4:94:2a:e2:98:63:f4:94:04:63:67:
                    d1:89:4b:87:53:b4:ea:15:5e:f4:b2:a7:31:42:b6:
                    94:fb:e8:e5:87:fe:4d:34:08:a7:77:fc:4c:5b:18:
                    cd:60:16:1b:a4:41:58:4e:f7:ce:7e:2d:be:5e:20:
                    10:a7:91:a7:c7:76:c0:1e:2f:70:14:ce:eb:99:59:
                    6c:f7:fa:ca:f3:0e:b4:23:4b:91:51:ef:8b:58:19:
                    9e:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:49:AB:72:64:20:80:ED:3E:4B:65:80:2F:88:EE:9E:73:A2:6C:8B
            X509v3 Authority Key Identifier:
                keyid:5A:C9:7C:91:29:9A:2F:A9:C8:CE:D8:AA:C6:70:FF:EF:C7:B6:9A:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F3260/D78D2AA271A611EB87450466C4F9AE02/Wsl8kSmaL6nIztiqxnD_78e2mhs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wsl8kSmaL6nIztiqxnD_78e2mhs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3260/D78D2AA271A611EB87450466C4F9AE02/C5058712A3B911EC9709462AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.150.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         db:e7:6f:1b:16:f6:0b:66:e2:85:86:b5:f9:52:14:5b:3f:8b:
         af:08:26:5b:a8:eb:f4:c8:ba:af:57:c5:85:04:60:9a:1f:76:
         6c:48:37:1e:61:24:dd:aa:5e:59:c1:5d:47:cb:e8:e3:10:74:
         0f:db:10:7f:bd:e7:d9:db:63:e8:83:94:a7:60:6b:e4:f3:f1:
         7a:72:56:53:17:6e:ca:5b:ff:9d:9d:0e:14:86:6a:e8:67:08:
         eb:6b:bf:f3:e6:10:32:4b:b0:05:6d:0f:9d:5e:4a:74:2f:19:
         d1:03:04:88:3d:45:22:21:53:a2:6e:f3:4d:ac:e7:a3:92:52:
         27:93:21:fa:66:c6:71:8a:3c:96:09:ad:4f:bc:16:26:39:32:
         da:1e:29:13:ae:2d:61:b7:08:49:8f:b4:02:51:6e:42:f1:7c:
         65:55:da:e6:40:90:de:60:36:0c:2a:ac:7a:b5:44:a1:61:90:
         b3:a5:8d:90:1d:a2:92:da:7d:86:ad:c9:5c:99:05:13:4c:1d:
         49:87:30:43:03:d0:cc:c2:b7:7f:8b:f8:59:14:01:ef:a1:41:
         99:cb:1f:7f:06:83:5d:4c:e7:58:6f:05:7e:6e:90:a8:45:12:
         5f:62:87:89:42:a7:90:e0:44:22:3e:c2:2b:88:c8:46:7b:3c:
         e3:9b:41:5b
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBRowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjMyNjAxMTAvBgNVBAUTKDVBQzk3QzkxMjk5QTJGQTlDOENFRDhBQUM2NzBGRkVG
QzdCNjlBMUIwHhcNMjMwNTA3MDE0MTUwWhcNMjQwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NDU3MDFkZC0wYTg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA35ShN6gZCd2Bfbdf2GlevzP2CBUBXV31DnpoY/5AGpiQ208iMy1JRAvbxlqq
wavCxQWaOlvoyPbQjaXQq3yc5nwE2ugoswETLV7zNByht5CAK+a56ZLGf1iESZ1x
wO8zynBhgLH02ZqFCSDXvT2teQ1Sc+zRQfRvsKP9aj849GJrbDcRQHaMkZEj+YVj
413Lx9HZwL4m/9t/9wwr+llj509y6f62AONs1JQq4phj9JQEY2fRiUuHU7TqFV70
sqcxQraU++jlh/5NNAind/xMWxjNYBYbpEFYTvfOfi2+XiAQp5Gnx3bAHi9wFM7r
mVls9/rK8w60I0uRUe+LWBmelQIDAQABo4IClTCCApEwHQYDVR0OBBYEFN9Jq3Jk
IIDtPktlgC+I7p5zomyLMB8GA1UdIwQYMBaAFFrJfJEpmi+pyM7YqsZw/+/Htpob
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzI2MC9ENzhEMkFBMjcx
QTYxMUVCODc0NTA0NjZDNEY5QUUwMi9Xc2w4a1NtYUw2bkl6dGlxeG5EXzc4ZTJt
aHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1dzbDhrU21hTDZuSXp0aXF4bkRfNzhlMm1ocy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RjMyNjAvRDc4RDJBQTI3MUE2MTFFQjg3NDUwNDY2QzRGOUFFMDIvQzUwNTg3MTJB
M0I5MTFFQzk3MDk0NjJBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnlh8wDQYJKoZIhvcNAQELBQADggEBANvnbxsW9gtm4oWG
tflSFFs/i68IJluo6/TIuq9XxYUEYJofdmxINx5hJN2qXlnBXUfL6OMQdA/bEH+9
59nbY+iDlKdga+Tz8XpyVlMXbspb/52dDhSGauhnCOtrv/PmEDJLsAVtD51eSnQv
GdEDBIg9RSIhU6Ju802s56OSUieTIfpmxnGKPJYJrU+8FiY5MtoeKROuLWG3CEmP
tAJRbkLxfGVV2uZAkN5gNgwqrHq1RKFhkLOljZAdopLafYatyVyZBRNMHUmHMEMD
0MzCt3+L+FkUAe+hQZnLH38Gg11M51hvBX5ukKhFEl9ih4lCp5DgRCI+wiuIyEZ7
POObQVs=
-----END CERTIFICATE-----
Generated at Sun May 19 00:59:44 2024 by rpki-client on console-fra.rpki-client.org