Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9114814/1016892661BF11EE86024F3FC4F9AE02/F800BA84626111EE82BA5C5DC4F9AE02.roa
File:                     F800BA84626111EE82BA5C5DC4F9AE02.roa (raw, json)
Hash identifier:          aUFB4aYhGGe3Q1A/4qQPphh/RmFp8OnW/auHXXVnUmo=
Subject key identifier:   6B:E0:45:B0:67:84:2E:8C:0B:BD:35:24:61:6E:79:11:29:C7:F0:1E
Certificate issuer:       /CN=A9114814/serialNumber=81A0A184B9C6259360EA33BB283CA1B4321BB035
Certificate serial:       1A
Authority key identifier: 81:A0:A1:84:B9:C6:25:93:60:EA:33:BB:28:3C:A1:B4:32:1B:B0:35
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gaChhLnGJZNg6jO7KDyhtDIbsDU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9114814/1016892661BF11EE86024F3FC4F9AE02/F800BA84626111EE82BA5C5DC4F9AE02.roa
Signing time:             Thu 09 Nov 2023 06:57:33 +0000
ROA not before:           Thu 09 Nov 2023 06:57:33 +0000
ROA not after:            Mon 30 Dec 2024 00:00:00 +0000
asID:                     149031
IP address blocks:        103.174.146.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9114814/1016892661BF11EE86024F3FC4F9AE02/gaChhLnGJZNg6jO7KDyhtDIbsDU.crl
                          rsync://rpki.apnic.net/member_repository/A9114814/1016892661BF11EE86024F3FC4F9AE02/gaChhLnGJZNg6jO7KDyhtDIbsDU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gaChhLnGJZNg6jO7KDyhtDIbsDU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 08:39:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 26 (0x1a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9114814/serialNumber=81A0A184B9C6259360EA33BB283CA1B4321BB035
        Validity
            Not Before: Nov  9 06:57:33 2023 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=654c82dd-8a30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f9:65:98:84:d5:6f:43:48:08:d4:f8:59:4f:
                    14:ef:4f:4a:97:36:5c:4d:2b:76:a5:ba:82:6a:d0:
                    f5:5f:80:7f:ed:06:2f:f0:36:4a:6c:84:06:7f:0c:
                    11:aa:17:56:9f:ca:bc:1e:44:c1:05:0a:e2:b7:b8:
                    db:c2:65:57:28:42:1d:b4:1d:30:e4:1d:f3:64:9e:
                    5e:5a:2c:67:a1:92:2b:4d:8c:65:4e:90:00:ce:48:
                    6a:6d:88:82:32:39:86:fc:07:e0:17:6d:fe:a8:2a:
                    04:ef:35:b7:a7:b1:c6:06:8a:bc:ae:54:c0:d0:47:
                    09:09:69:fe:a1:a8:7e:d1:3b:d7:c0:c5:a6:17:21:
                    f4:16:1e:13:69:cc:18:be:af:bc:b5:f8:de:a4:90:
                    cf:9f:71:32:d0:58:16:dd:62:6c:85:84:a2:50:2e:
                    a3:78:44:f1:8a:59:71:f5:0e:8f:5d:cf:bb:c5:17:
                    60:cf:0d:ea:da:5a:2f:89:9d:af:8b:fc:cf:a1:7b:
                    fb:b0:db:8a:fe:5a:dd:fd:b0:b7:26:17:cf:a0:11:
                    6d:05:25:66:46:8c:6d:52:4f:90:e5:a4:71:fb:3f:
                    07:e5:b2:f0:e3:37:0c:fb:4b:e1:15:ce:1a:50:be:
                    3b:ca:89:ea:d6:a3:d9:b3:fb:35:f5:36:9e:ae:55:
                    6d:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:E0:45:B0:67:84:2E:8C:0B:BD:35:24:61:6E:79:11:29:C7:F0:1E
            X509v3 Authority Key Identifier:
                keyid:81:A0:A1:84:B9:C6:25:93:60:EA:33:BB:28:3C:A1:B4:32:1B:B0:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9114814/1016892661BF11EE86024F3FC4F9AE02/gaChhLnGJZNg6jO7KDyhtDIbsDU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gaChhLnGJZNg6jO7KDyhtDIbsDU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114814/1016892661BF11EE86024F3FC4F9AE02/F800BA84626111EE82BA5C5DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.174.146.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:b9:29:8b:a7:84:43:28:eb:42:2d:c6:af:c0:35:a7:30:fd:
         68:16:2f:25:29:28:0d:14:43:59:f4:f1:2a:5f:6f:cc:86:a1:
         be:82:b3:bc:2e:db:62:a9:95:94:03:0c:94:c0:b1:87:d1:f0:
         b8:5a:f7:df:b7:aa:bc:4b:49:f8:00:68:40:86:84:35:f2:a9:
         05:d5:f0:0c:41:84:96:da:e2:ce:fc:c1:b3:97:85:c8:52:df:
         85:96:2e:c6:c2:ea:56:03:ff:c0:67:23:88:70:dc:49:3a:a4:
         d3:85:e2:e5:40:32:92:56:f0:22:85:ef:53:bb:78:72:89:2b:
         86:18:7f:aa:b0:00:f7:87:1c:6e:07:ae:fe:c1:b6:60:d7:ff:
         f2:d2:8b:65:90:ca:2a:f7:b2:2b:cb:00:d6:ca:86:d3:d0:ed:
         64:53:49:e8:38:bc:ec:66:c8:c1:66:82:95:61:f5:4e:6b:ce:
         45:71:6c:fc:af:49:3d:6f:ac:9f:68:c6:ce:ca:a1:ab:6f:d0:
         4b:c3:ae:e6:a7:ae:b7:71:16:30:bd:b7:09:d2:d2:04:d5:e5:
         be:57:0d:02:06:01:97:e2:17:04:5e:72:bc:8a:0f:aa:9b:c5:
         53:51:aa:24:c9:1a:b0:e4:8a:4e:99:cd:c1:3a:70:ce:6b:53:
         86:36:99:cd
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBGjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx
NDgxNDExMC8GA1UEBRMoODFBMEExODRCOUM2MjU5MzYwRUEzM0JCMjgzQ0ExQjQz
MjFCQjAzNTAeFw0yMzExMDkwNjU3MzNaFw0yNDEyMzAwMDAwMDBaMBgxFjAUBgNV
BAMTDTY1NGM4MmRkLThhMzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC2+WWYhNVvQ0gI1PhZTxTvT0qXNlxNK3aluoJq0PVfgH/tBi/wNkpshAZ/DBGq
F1afyrweRMEFCuK3uNvCZVcoQh20HTDkHfNknl5aLGehkitNjGVOkADOSGptiIIy
OYb8B+AXbf6oKgTvNbenscYGiryuVMDQRwkJaf6hqH7RO9fAxaYXIfQWHhNpzBi+
r7y1+N6kkM+fcTLQWBbdYmyFhKJQLqN4RPGKWXH1Do9dz7vFF2DPDeraWi+Jna+L
/M+he/uw24r+Wt39sLcmF8+gEW0FJWZGjG1ST5DlpHH7PwflsvDjNwz7S+EVzhpQ
vjvKierWo9mz+zX1Np6uVW1fAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUa+BFsGeE
LowLvTUkYW55ESnH8B4wHwYDVR0jBBgwFoAUgaChhLnGJZNg6jO7KDyhtDIbsDUw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE0ODE0LzEwMTY4OTI2NjFC
RjExRUU4NjAyNEYzRkM0RjlBRTAyL2dhQ2hoTG5HSlpOZzZqTzdLRHlodERJYnNE
VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvZ2FDaGhMbkdKWk5nNmpPN0tEeWh0RElic0RVLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
NDgxNC8xMDE2ODkyNjYxQkYxMUVFODYwMjRGM0ZDNEY5QUUwMi9GODAwQkE4NDYy
NjExMUVFODJCQTVDNURDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAGeukjANBgkqhkiG9w0BAQsFAAOCAQEACrkpi6eEQyjrQi3G
r8A1pzD9aBYvJSkoDRRDWfTxKl9vzIahvoKzvC7bYqmVlAMMlMCxh9HwuFr337eq
vEtJ+ABoQIaENfKpBdXwDEGEltrizvzBs5eFyFLfhZYuxsLqVgP/wGcjiHDcSTqk
04Xi5UAyklbwIoXvU7t4cokrhhh/qrAA94ccbgeu/sG2YNf/8tKLZZDKKveyK8sA
1sqG09DtZFNJ6Di87GbIwWaClWH1TmvORXFs/K9JPW+sn2jGzsqhq2/QS8Ou5qeu
t3EWML23CdLSBNXlvlcNAgYBl+IXBF5yvIoPqpvFU1GqJMkasOSKTpnNwTpwzmtT
hjaZzQ==
-----END CERTIFICATE-----
Generated at Sat Jun 1 11:47:07 2024 by rpki-client on console-ams.rpki-client.org