Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB0D0/93FB7F4EDBF611EC8B42F475C4F9AE02/D9EEB222DBFC11EC82E85E69C4F9AE02.roa
File:                     D9EEB222DBFC11EC82E85E69C4F9AE02.roa (raw, json)
Hash identifier:          jHd8qJcQlJOSStuF+vj3hLpCyj/EjA+DE0KlXQP34pw=
Subject key identifier:   25:A8:83:68:21:B2:CC:19:D4:3A:98:37:97:E7:C6:79:3C:37:71:59
Certificate issuer:       /CN=A91FB0D0/serialNumber=4B3C6956B044900100858C0DE50EB9A462B08CC7
Certificate serial:       0181
Authority key identifier: 4B:3C:69:56:B0:44:90:01:00:85:8C:0D:E5:0E:B9:A4:62:B0:8C:C7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SzxpVrBEkAEAhYwN5Q65pGKwjMc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FB0D0/93FB7F4EDBF611EC8B42F475C4F9AE02/D9EEB222DBFC11EC82E85E69C4F9AE02.roa
Signing time:             Wed 31 May 2023 06:08:13 +0000
ROA not before:           Wed 31 May 2023 06:08:13 +0000
ROA not after:            Tue 30 Jul 2024 00:00:00 +0000
asID:                     149832
IP address blocks:        103.187.136.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FB0D0/93FB7F4EDBF611EC8B42F475C4F9AE02/SzxpVrBEkAEAhYwN5Q65pGKwjMc.crl
                          rsync://rpki.apnic.net/member_repository/A91FB0D0/93FB7F4EDBF611EC8B42F475C4F9AE02/SzxpVrBEkAEAhYwN5Q65pGKwjMc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SzxpVrBEkAEAhYwN5Q65pGKwjMc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 May 2024 02:50:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 385 (0x181)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FB0D0/serialNumber=4B3C6956B044900100858C0DE50EB9A462B08CC7
        Validity
            Not Before: May 31 06:08:13 2023 GMT
            Not After : Jul 30 00:00:00 2024 GMT
        Subject: CN=6476e44d-7c6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b5:ff:1d:5f:63:6e:4a:95:5e:f1:c9:ec:88:
                    8b:65:28:c3:a3:ae:37:a3:4f:ee:47:38:2d:bc:0c:
                    8d:a3:3f:7d:02:e4:4d:ca:60:e2:c2:9a:4e:c2:9a:
                    57:2d:3d:32:d4:5e:b7:4b:bb:f9:79:06:08:21:ae:
                    cc:71:24:ff:2b:60:fd:eb:56:b1:c3:d5:c8:c2:72:
                    9f:6b:1f:48:68:55:22:8e:23:e3:a4:8b:49:8a:b3:
                    b7:32:91:4c:00:5e:e2:6d:a3:e5:36:f5:c4:32:42:
                    42:87:55:34:15:3a:f2:19:57:3d:fd:f0:ee:9c:a1:
                    41:32:e3:21:45:59:7e:be:b8:24:cd:8c:a9:62:3d:
                    2e:15:30:1d:1a:08:75:59:1c:23:18:0b:5b:62:d2:
                    ac:40:f8:0b:c5:a4:39:68:60:83:51:0d:31:66:ee:
                    b7:fa:16:fa:fc:0c:99:7a:12:21:31:ca:b0:9c:d0:
                    e1:5e:93:e3:78:73:3f:9b:29:a1:d6:88:e6:04:3a:
                    5f:b9:13:f6:96:fa:99:7e:ed:81:dd:eb:16:4a:6d:
                    59:3c:60:90:45:53:1f:7f:7d:7b:b1:6e:9b:9f:0d:
                    40:7e:b5:de:e5:74:1e:5c:28:1d:d5:be:ff:c0:d9:
                    ff:f7:c8:cb:96:96:b4:ba:04:e0:e4:e4:6a:0a:32:
                    dc:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:A8:83:68:21:B2:CC:19:D4:3A:98:37:97:E7:C6:79:3C:37:71:59
            X509v3 Authority Key Identifier:
                keyid:4B:3C:69:56:B0:44:90:01:00:85:8C:0D:E5:0E:B9:A4:62:B0:8C:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FB0D0/93FB7F4EDBF611EC8B42F475C4F9AE02/SzxpVrBEkAEAhYwN5Q65pGKwjMc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SzxpVrBEkAEAhYwN5Q65pGKwjMc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB0D0/93FB7F4EDBF611EC8B42F475C4F9AE02/D9EEB222DBFC11EC82E85E69C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.187.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:e1:bf:2c:8c:9c:f3:2f:3d:74:04:55:fd:21:13:3a:d8:d0:
         7e:4d:e9:44:3c:89:0e:db:fe:73:0e:04:71:dc:4c:1e:ea:38:
         43:1f:78:45:a7:89:1a:fb:87:55:92:5c:19:91:ce:9b:96:33:
         2f:d7:a0:6f:ed:06:ee:1d:ae:62:22:09:7f:6b:d5:ee:d1:3d:
         f1:ae:b8:0b:9c:eb:99:f8:11:40:97:11:c4:7a:6c:98:54:2d:
         19:53:75:dd:ea:83:26:c7:23:77:df:73:4d:a4:87:d2:d3:29:
         43:85:2b:15:d1:e8:80:0a:19:fb:d8:22:40:b8:79:39:74:86:
         db:70:de:04:0f:41:15:da:0e:55:10:46:d3:47:5a:3c:0e:f2:
         5c:d0:6d:78:50:d1:8d:38:74:5f:5c:77:b6:56:b0:44:84:14:
         95:3a:62:c7:4c:99:c1:55:58:1a:f4:05:ab:7e:f9:2d:48:b2:
         33:fb:10:e5:98:f4:1b:22:66:64:80:b8:64:66:8b:94:56:85:
         5c:ce:4f:00:47:52:4b:49:c9:f6:a3:8a:cc:06:08:b0:b4:19:
         9d:48:9f:26:04:9f:1b:27:0e:26:b6:15:b4:97:06:e4:7d:35:
         81:96:2a:4a:dd:d3:0a:49:de:d8:5e:3e:85:5b:0f:cf:56:2e:
         39:a4:17:2a
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAYEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkIwRDAxMTAvBgNVBAUTKDRCM0M2OTU2QjA0NDkwMDEwMDg1OEMwREU1MEVCOUE0
NjJCMDhDQzcwHhcNMjMwNTMxMDYwODEzWhcNMjQwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NDc2ZTQ0ZC03YzZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAu7X/HV9jbkqVXvHJ7IiLZSjDo643o0/uRzgtvAyNoz99AuRNymDiwppOwppX
LT0y1F63S7v5eQYIIa7McST/K2D961axw9XIwnKfax9IaFUijiPjpItJirO3MpFM
AF7ibaPlNvXEMkJCh1U0FTryGVc9/fDunKFBMuMhRVl+vrgkzYypYj0uFTAdGgh1
WRwjGAtbYtKsQPgLxaQ5aGCDUQ0xZu63+hb6/AyZehIhMcqwnNDhXpPjeHM/mymh
1ojmBDpfuRP2lvqZfu2B3esWSm1ZPGCQRVMff317sW6bnw1AfrXe5XQeXCgd1b7/
wNn/98jLlpa0ugTg5ORqCjLcHQIDAQABo4IClTCCApEwHQYDVR0OBBYEFCWog2gh
sswZ1DqYN5fnxnk8N3FZMB8GA1UdIwQYMBaAFEs8aVawRJABAIWMDeUOuaRisIzH
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQjBEMC85M0ZCN0Y0RURC
RjYxMUVDOEI0MkY0NzVDNEY5QUUwMi9TenhwVnJCRWtBRUFoWXdONVE2NXBHS3dq
TWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1N6eHBWckJFa0FFQWhZd041UTY1cEdLd2pNYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RkIwRDAvOTNGQjdGNEVEQkY2MTFFQzhCNDJGNDc1QzRGOUFFMDIvRDlFRUIyMjJE
QkZDMTFFQzgyRTg1RTY5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnu4gwDQYJKoZIhvcNAQELBQADggEBAGPhvyyMnPMvPXQE
Vf0hEzrY0H5N6UQ8iQ7b/nMOBHHcTB7qOEMfeEWniRr7h1WSXBmRzpuWMy/XoG/t
Bu4drmIiCX9r1e7RPfGuuAuc65n4EUCXEcR6bJhULRlTdd3qgybHI3ffc02kh9LT
KUOFKxXR6IAKGfvYIkC4eTl0httw3gQPQRXaDlUQRtNHWjwO8lzQbXhQ0Y04dF9c
d7ZWsESEFJU6YsdMmcFVWBr0Bat++S1IsjP7EOWY9BsiZmSAuGRmi5RWhVzOTwBH
UktJyfajiswGCLC0GZ1InyYEnxsnDia2FbSXBuR9NYGWKkrd0wpJ3thePoVbD89W
LjmkFyo=
-----END CERTIFICATE-----
Generated at Wed May 15 04:38:28 2024 by rpki-client on console-ams.rpki-client.org