Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6B3D/0E978E64596211EBA40B5C85C4F9AE02/0F83E674B45611EC8D43DA35C4F9AE02.roa
File:                     0F83E674B45611EC8D43DA35C4F9AE02.roa (raw, json)
Hash identifier:          bYHdRt1/A75HKSBpL0ack8Ps2fMH6cD+FjXiPah1vZo=
Subject key identifier:   C5:B6:21:7B:26:2B:DA:6B:FE:23:A1:33:26:06:E8:AD:59:A8:61:F0
Certificate issuer:       /CN=A91F6B3D/serialNumber=7B15015DDB9F84412A67DB3E26FECB4DDCBBD980
Certificate serial:       0587
Authority key identifier: 7B:15:01:5D:DB:9F:84:41:2A:67:DB:3E:26:FE:CB:4D:DC:BB:D9:80
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exUBXdufhEEqZ9s-Jv7LTdy72YA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F6B3D/0E978E64596211EBA40B5C85C4F9AE02/0F83E674B45611EC8D43DA35C4F9AE02.roa
Signing time:             Sat 12 Aug 2023 23:19:49 +0000
ROA not before:           Sat 12 Aug 2023 23:19:49 +0000
ROA not after:            Thu 31 Oct 2024 00:00:00 +0000
asID:                     59239
IP address blocks:        103.70.171.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F6B3D/0E978E64596211EBA40B5C85C4F9AE02/exUBXdufhEEqZ9s-Jv7LTdy72YA.crl
                          rsync://rpki.apnic.net/member_repository/A91F6B3D/0E978E64596211EBA40B5C85C4F9AE02/exUBXdufhEEqZ9s-Jv7LTdy72YA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exUBXdufhEEqZ9s-Jv7LTdy72YA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 May 2024 23:13:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1415 (0x587)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F6B3D/serialNumber=7B15015DDB9F84412A67DB3E26FECB4DDCBBD980
        Validity
            Not Before: Aug 12 23:19:49 2023 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=64d81395-eb13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:02:1e:9e:75:d8:52:6b:91:74:91:9a:9f:72:
                    68:dd:15:a7:79:4d:65:84:13:d5:59:51:cd:52:69:
                    e0:56:8c:84:75:e9:9c:df:23:f4:41:b5:df:4f:71:
                    88:a3:8e:b2:d8:f6:69:02:1b:f0:41:94:58:d3:bb:
                    ff:4f:fb:2c:a9:8d:fe:c7:f7:e3:d4:73:78:5e:07:
                    64:96:18:4e:1b:4a:b5:2f:c9:19:43:bb:a1:81:1e:
                    ae:ac:91:5e:22:39:1c:d8:ee:f1:7b:5f:4f:d5:1e:
                    1b:25:ab:a6:22:55:26:e4:a0:70:76:a4:06:0c:a0:
                    dd:d8:5c:ab:15:b9:e3:d8:bd:96:65:fd:ea:bf:e9:
                    2a:27:a6:f2:8a:e3:0c:54:b5:db:64:6a:d0:08:a9:
                    3f:06:07:f8:b9:fa:af:33:65:42:7f:5b:ad:ab:a5:
                    db:c4:77:55:73:56:de:cb:48:e5:08:50:56:70:36:
                    d1:02:9b:2a:c5:89:e4:03:d0:15:45:dd:98:1e:74:
                    cd:67:98:10:69:dc:1b:cd:75:1d:1b:25:b9:d8:9a:
                    d0:6d:c4:27:71:30:cd:94:b2:35:e8:d2:8f:0c:b1:
                    3c:29:67:64:de:32:e6:17:48:8a:19:2c:9f:07:a1:
                    99:91:ec:db:1d:5b:39:d2:d7:ad:76:f0:30:66:fe:
                    7c:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:B6:21:7B:26:2B:DA:6B:FE:23:A1:33:26:06:E8:AD:59:A8:61:F0
            X509v3 Authority Key Identifier:
                keyid:7B:15:01:5D:DB:9F:84:41:2A:67:DB:3E:26:FE:CB:4D:DC:BB:D9:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F6B3D/0E978E64596211EBA40B5C85C4F9AE02/exUBXdufhEEqZ9s-Jv7LTdy72YA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exUBXdufhEEqZ9s-Jv7LTdy72YA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6B3D/0E978E64596211EBA40B5C85C4F9AE02/0F83E674B45611EC8D43DA35C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.70.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:0d:5a:12:5c:98:71:58:44:51:c3:db:71:f9:46:4a:8c:7b:
         4f:69:e4:32:15:a9:93:28:61:90:72:69:0f:45:a6:b5:2e:00:
         ba:8c:fc:e9:86:2c:df:75:d3:d8:ab:5d:bb:97:52:de:e5:96:
         b9:03:a6:a0:cf:3a:e3:2e:50:2d:7b:b0:0f:39:eb:c5:ea:f0:
         6c:67:f3:5f:de:92:22:a0:c5:88:01:4b:91:af:d0:23:93:dc:
         f8:ec:7f:be:55:98:a6:be:28:26:b5:4d:60:dc:6e:d4:70:b5:
         0a:17:46:0e:65:a7:08:b2:ab:f7:e8:3e:bc:51:c8:bc:a7:97:
         86:75:c0:38:cc:d1:ca:09:30:41:6f:2b:e3:ab:67:5b:e8:4c:
         c7:31:b2:f0:5c:8a:0d:7d:81:b1:a9:d9:cc:e9:27:0b:70:51:
         e3:9c:c2:de:1a:a2:bc:90:df:67:f0:98:57:17:75:fd:e6:8c:
         79:e6:20:6a:1b:eb:30:10:6c:55:1a:a0:d6:0b:8f:69:94:fd:
         53:01:1b:50:42:9d:9f:a1:ad:e2:49:6b:9a:13:29:99:9e:28:
         d1:a7:19:74:33:63:ba:49:b1:11:77:a2:3f:c4:b8:d9:c0:b0:
         03:19:98:d2:59:ac:dc:8b:a7:12:64:6f:b9:d8:e2:a7:fc:e9:
         ab:3e:c7:d6
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBYcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjZCM0QxMTAvBgNVBAUTKDdCMTUwMTVEREI5Rjg0NDEyQTY3REIzRTI2RkVDQjRE
RENCQkQ5ODAwHhcNMjMwODEyMjMxOTQ5WhcNMjQxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NGQ4MTM5NS1lYjEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7QIennXYUmuRdJGan3Jo3RWneU1lhBPVWVHNUmngVoyEdemc3yP0QbXfT3GI
o46y2PZpAhvwQZRY07v/T/ssqY3+x/fj1HN4XgdklhhOG0q1L8kZQ7uhgR6urJFe
Ijkc2O7xe19P1R4bJaumIlUm5KBwdqQGDKDd2FyrFbnj2L2WZf3qv+kqJ6byiuMM
VLXbZGrQCKk/Bgf4ufqvM2VCf1utq6XbxHdVc1bey0jlCFBWcDbRApsqxYnkA9AV
Rd2YHnTNZ5gQadwbzXUdGyW52JrQbcQncTDNlLI16NKPDLE8KWdk3jLmF0iKGSyf
B6GZkezbHVs50tetdvAwZv58cQIDAQABo4IClTCCApEwHQYDVR0OBBYEFMW2IXsm
K9pr/iOhMyYG6K1ZqGHwMB8GA1UdIwQYMBaAFHsVAV3bn4RBKmfbPib+y03cu9mA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNkIzRC8wRTk3OEU2NDU5
NjIxMUVCQTQwQjVDODVDNEY5QUUwMi9leFVCWGR1ZmhFRXFaOXMtSnY3TFRkeTcy
WUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2V4VUJYZHVmaEVFcVo5cy1KdjdMVGR5NzJZQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RjZCM0QvMEU5NzhFNjQ1OTYyMTFFQkE0MEI1Qzg1QzRGOUFFMDIvMEY4M0U2NzRC
NDU2MTFFQzhENDNEQTM1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnRqswDQYJKoZIhvcNAQELBQADggEBADUNWhJcmHFYRFHD
23H5RkqMe09p5DIVqZMoYZByaQ9FprUuALqM/OmGLN9109irXbuXUt7llrkDpqDP
OuMuUC17sA8568Xq8Gxn81/ekiKgxYgBS5Gv0COT3Pjsf75VmKa+KCa1TWDcbtRw
tQoXRg5lpwiyq/foPrxRyLynl4Z1wDjM0coJMEFvK+OrZ1voTMcxsvBcig19gbGp
2czpJwtwUeOcwt4aoryQ32fwmFcXdf3mjHnmIGob6zAQbFUaoNYLj2mU/VMBG1BC
nZ+hreJJa5oTKZmeKNGnGXQzY7pJsRF3oj/EuNnAsAMZmNJZrNyLpxJkb7nY4qf8
6as+x9Y=
-----END CERTIFICATE-----
Generated at Fri May 17 00:24:22 2024 by rpki-client on console-fra.rpki-client.org