Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911D1A9/8F916948328811EEB29D3042C4F9AE02/47C21286E20311EEA9823814C4F9AE02.roa
File:                     47C21286E20311EEA9823814C4F9AE02.roa (raw, json)
Hash identifier:          BO/9R4eeaU0uOGug16rEBmKzUDWP8siqXjtwv3CtjEg=
Subject key identifier:   32:FA:11:A9:BB:CE:9D:13:CC:00:BA:32:38:5B:40:E2:7F:04:02:DD
Certificate issuer:       /CN=A911D1A9/serialNumber=742174F32E6CC6E8D1F965BFA1D40A10D6E3E7C9
Certificate serial:       7C
Authority key identifier: 74:21:74:F3:2E:6C:C6:E8:D1:F9:65:BF:A1:D4:0A:10:D6:E3:E7:C9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dCF08y5sxujR-WW_odQKENbj58k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911D1A9/8F916948328811EEB29D3042C4F9AE02/47C21286E20311EEA9823814C4F9AE02.roa
Signing time:             Thu 14 Mar 2024 13:03:41 +0000
ROA not before:           Thu 14 Mar 2024 13:03:41 +0000
ROA not after:            Sun 01 Dec 2024 00:00:00 +0000
asID:                     63390
IP address blocks:        103.248.48.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911D1A9/8F916948328811EEB29D3042C4F9AE02/dCF08y5sxujR-WW_odQKENbj58k.crl
                          rsync://rpki.apnic.net/member_repository/A911D1A9/8F916948328811EEB29D3042C4F9AE02/dCF08y5sxujR-WW_odQKENbj58k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dCF08y5sxujR-WW_odQKENbj58k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 14 Jun 2024 07:17:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124 (0x7c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911D1A9/serialNumber=742174F32E6CC6E8D1F965BFA1D40A10D6E3E7C9
        Validity
            Not Before: Mar 14 13:03:41 2024 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=65f2f5ad-6e60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:86:c7:45:be:c6:48:47:38:70:aa:7a:f9:ba:
                    b8:b9:74:0e:90:06:da:8c:cf:57:3b:0a:07:05:59:
                    ac:8c:7d:d4:b4:d1:4f:03:ef:f0:9c:a1:17:54:7c:
                    9e:6d:e3:62:4c:86:e1:11:27:cf:7a:66:df:ad:23:
                    74:bb:d1:8c:9a:b2:f7:e0:ec:6f:15:dc:8e:b7:11:
                    e5:f2:b6:b8:22:d9:5d:ea:ed:88:41:c6:47:38:7b:
                    dd:7b:b1:7e:bb:f3:7c:02:8e:59:20:59:fd:bd:13:
                    84:83:0d:3d:9d:74:db:0c:1e:c6:7b:9f:83:55:14:
                    cc:b3:48:45:cd:28:03:77:15:3d:84:28:9f:14:be:
                    be:c1:23:e0:48:eb:b7:ac:0e:24:07:22:50:61:6c:
                    58:29:9d:36:4a:73:7f:1f:e7:ad:89:06:93:22:41:
                    b9:f7:71:ac:45:d5:30:28:c2:ab:aa:21:90:fb:1b:
                    67:5c:48:33:48:f0:16:23:b2:bb:6e:81:f3:ac:92:
                    b2:f7:66:40:41:f2:04:50:42:6b:68:9b:aa:67:68:
                    39:17:ef:1d:07:b6:6a:a1:4b:94:60:85:54:06:e9:
                    79:28:05:f7:28:c6:16:c3:03:1c:f2:65:0a:70:a0:
                    4f:05:be:3f:ac:3f:47:2e:36:e6:fb:1f:e9:64:15:
                    bb:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:FA:11:A9:BB:CE:9D:13:CC:00:BA:32:38:5B:40:E2:7F:04:02:DD
            X509v3 Authority Key Identifier:
                keyid:74:21:74:F3:2E:6C:C6:E8:D1:F9:65:BF:A1:D4:0A:10:D6:E3:E7:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911D1A9/8F916948328811EEB29D3042C4F9AE02/dCF08y5sxujR-WW_odQKENbj58k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dCF08y5sxujR-WW_odQKENbj58k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D1A9/8F916948328811EEB29D3042C4F9AE02/47C21286E20311EEA9823814C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.248.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d3:ab:fb:f3:39:b8:e8:22:d9:c7:df:16:9a:a6:0f:34:61:52:
         18:59:ce:d9:59:a8:66:9e:1e:50:cd:d9:29:bd:d0:1b:ae:6a:
         b7:da:e1:c8:22:d6:66:ad:4b:f3:8a:06:09:3a:c8:fd:5e:67:
         dd:69:d3:1f:3a:1e:d4:74:34:e6:b7:2a:95:0e:f7:df:0b:67:
         b8:f7:0c:e6:97:2c:29:cb:e9:a1:55:a7:9a:2b:55:49:38:df:
         e4:5f:38:2e:c8:f9:88:87:33:57:2a:dd:df:56:87:0c:97:1d:
         20:e6:c9:97:83:d2:cb:72:3e:eb:df:4f:a6:d5:9a:a5:c0:f6:
         aa:41:8d:59:8d:91:c1:82:da:04:c9:48:be:c2:35:ed:d7:43:
         8a:04:31:a8:25:fa:60:a8:25:f3:4b:63:cd:3e:16:89:5f:26:
         55:a5:4f:ce:a6:fe:93:03:44:b1:55:8d:4a:a0:fa:31:ca:04:
         3a:9d:dc:14:1f:7b:3b:23:ef:64:a9:9b:89:9e:e3:3f:38:0c:
         33:ad:81:23:db:4b:e4:5b:bc:d9:4a:49:ec:9d:78:4c:5d:02:
         f1:77:c0:b0:ad:cf:7c:dc:13:0d:63:cc:15:37:58:c5:33:6b:
         ee:88:b6:85:7d:1c:23:bc:95:4e:7f:5e:ec:3a:40:0c:c8:34:
         9b:28:0b:ee
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBfDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx
RDFBOTExMC8GA1UEBRMoNzQyMTc0RjMyRTZDQzZFOEQxRjk2NUJGQTFENDBBMTBE
NkUzRTdDOTAeFw0yNDAzMTQxMzAzNDFaFw0yNDEyMDEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY1ZjJmNWFkLTZlNjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDjhsdFvsZIRzhwqnr5uri5dA6QBtqMz1c7CgcFWayMfdS00U8D7/CcoRdUfJ5t
42JMhuERJ896Zt+tI3S70Yyasvfg7G8V3I63EeXytrgi2V3q7YhBxkc4e917sX67
83wCjlkgWf29E4SDDT2ddNsMHsZ7n4NVFMyzSEXNKAN3FT2EKJ8Uvr7BI+BI67es
DiQHIlBhbFgpnTZKc38f562JBpMiQbn3caxF1TAowquqIZD7G2dcSDNI8BYjsrtu
gfOskrL3ZkBB8gRQQmtom6pnaDkX7x0HtmqhS5RghVQG6XkoBfcoxhbDAxzyZQpw
oE8Fvj+sP0cuNub7H+lkFbslAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUMvoRqbvO
nRPMALoyOFtA4n8EAt0wHwYDVR0jBBgwFoAUdCF08y5sxujR+WW/odQKENbj58kw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFEMUE5LzhGOTE2OTQ4MzI4
ODExRUVCMjlEMzA0MkM0RjlBRTAyL2RDRjA4eTVzeHVqUi1XV19vZFFLRU5iajU4
ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvZENGMDh5NXN4dWpSLVdXX29kUUtFTmJqNThrLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
RDFBOS84RjkxNjk0ODMyODgxMUVFQjI5RDMwNDJDNEY5QUUwMi80N0MyMTI4NkUy
MDMxMUVFQTk4MjM4MTRDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAGf4MDANBgkqhkiG9w0BAQsFAAOCAQEA06v78zm46CLZx98W
mqYPNGFSGFnO2VmoZp4eUM3ZKb3QG65qt9rhyCLWZq1L84oGCTrI/V5n3WnTHzoe
1HQ05rcqlQ733wtnuPcM5pcsKcvpoVWnmitVSTjf5F84Lsj5iIczVyrd31aHDJcd
IObJl4PSy3I+699PptWapcD2qkGNWY2RwYLaBMlIvsI17ddDigQxqCX6YKgl80tj
zT4WiV8mVaVPzqb+kwNEsVWNSqD6McoEOp3cFB97OyPvZKmbiZ7jPzgMM62BI9tL
5Fu82UpJ7J14TF0C8XfAsK3PfNwTDWPMFTdYxTNr7oi2hX0cI7yVTn9e7DpADMg0
mygL7g==
-----END CERTIFICATE-----
Generated at Fri Jun 7 08:56:37 2024 by rpki-client on console-fra.rpki-client.org