Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912A646/2F639EB0F58511EC87F6FE13C4F9AE02/460F948CF58C11ECAE269934C4F9AE02.roa
File:                     460F948CF58C11ECAE269934C4F9AE02.roa (raw, json)
Hash identifier:          CJAECFRvckRTkxN4TQ1Tso6ML754+mwM96kOvYZ5nek=
Subject key identifier:   F4:67:51:AA:A1:22:15:FD:F1:6A:47:C2:15:45:C1:52:A3:C1:FB:5B
Certificate issuer:       /CN=A912A646/serialNumber=3FB3582470ED03F19435E69B2C19B4074770F097
Certificate serial:       0156
Authority key identifier: 3F:B3:58:24:70:ED:03:F1:94:35:E6:9B:2C:19:B4:07:47:70:F0:97
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7NYJHDtA_GUNeabLBm0B0dw8Jc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912A646/2F639EB0F58511EC87F6FE13C4F9AE02/460F948CF58C11ECAE269934C4F9AE02.roa
Signing time:             Mon 03 Jul 2023 02:52:34 +0000
ROA not before:           Mon 03 Jul 2023 02:52:34 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     149986
IP address blocks:        103.190.22.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912A646/2F639EB0F58511EC87F6FE13C4F9AE02/P7NYJHDtA_GUNeabLBm0B0dw8Jc.crl
                          rsync://rpki.apnic.net/member_repository/A912A646/2F639EB0F58511EC87F6FE13C4F9AE02/P7NYJHDtA_GUNeabLBm0B0dw8Jc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7NYJHDtA_GUNeabLBm0B0dw8Jc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 05:23:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 342 (0x156)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912A646/serialNumber=3FB3582470ED03F19435E69B2C19B4074770F097
        Validity
            Not Before: Jul  3 02:52:34 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=64a237f2-be1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:6c:50:fc:2a:5e:d3:de:ae:20:1e:62:4d:13:
                    81:51:f4:ea:a5:00:6f:35:b2:a3:50:f9:2c:b3:28:
                    27:1b:78:78:3d:91:e3:62:08:40:6e:f4:be:d1:8c:
                    15:85:8e:10:73:81:a8:e4:0c:4b:e1:e4:08:da:6b:
                    54:c1:ac:fd:66:1a:a6:c5:3f:80:a8:c6:0b:06:44:
                    7a:61:5d:1f:ee:a4:09:09:d5:6d:b4:c2:b6:0a:e0:
                    f8:43:dd:8b:8e:0f:3c:ed:3c:ee:e5:14:d8:e0:40:
                    5d:50:07:74:24:78:53:b9:2b:bb:0f:ec:a0:c6:ef:
                    1a:b0:4d:3b:16:3d:90:63:e7:c2:23:31:7d:09:2c:
                    50:fe:72:8e:48:4e:04:f0:b3:b0:44:6b:86:1a:ad:
                    d1:7b:75:2a:02:09:80:c5:69:7f:64:06:de:3d:b4:
                    e7:1d:0a:a8:11:92:af:d8:85:1b:55:6a:f0:f0:47:
                    0b:21:de:d2:28:e0:11:88:02:30:48:62:99:a2:65:
                    3f:cd:83:32:84:ee:38:cc:b5:eb:2e:6d:6d:8c:3a:
                    07:55:64:a8:98:44:c6:9a:5d:35:9d:8c:5d:b4:27:
                    1e:21:d9:c7:09:66:37:e5:d5:46:52:13:21:e5:9b:
                    83:71:b1:82:5e:dc:5b:f0:20:48:78:d5:1c:df:5f:
                    4a:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:67:51:AA:A1:22:15:FD:F1:6A:47:C2:15:45:C1:52:A3:C1:FB:5B
            X509v3 Authority Key Identifier:
                keyid:3F:B3:58:24:70:ED:03:F1:94:35:E6:9B:2C:19:B4:07:47:70:F0:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912A646/2F639EB0F58511EC87F6FE13C4F9AE02/P7NYJHDtA_GUNeabLBm0B0dw8Jc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7NYJHDtA_GUNeabLBm0B0dw8Jc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A646/2F639EB0F58511EC87F6FE13C4F9AE02/460F948CF58C11ECAE269934C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.190.22.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4e:3c:14:ab:3a:d0:be:7d:0f:f8:1f:4e:3a:bf:17:c3:40:25:
         5d:25:bf:47:cc:bd:60:9b:3d:7f:0f:a4:eb:29:03:9a:99:a6:
         d3:19:19:d3:d5:84:6e:cb:58:fe:11:bc:8c:4e:8d:b8:38:34:
         60:56:ed:c9:34:55:d6:ce:04:9d:64:32:6c:69:31:0e:20:2a:
         f7:25:fa:af:dc:47:c6:03:ec:a8:2d:df:f3:4a:b4:6f:73:32:
         d3:6a:99:80:79:7e:c5:0f:f1:00:19:df:74:cc:8f:f9:68:54:
         18:cf:f7:79:01:41:f8:b4:5d:60:7b:c2:21:08:b8:fc:79:45:
         f4:99:77:48:6d:3e:43:d0:fd:39:97:b3:24:3e:08:a3:99:b1:
         aa:7d:6f:6a:ed:5b:bb:04:50:42:35:cc:02:a7:bf:64:1b:9c:
         cc:2b:8c:8e:f6:3b:b3:95:7c:19:bb:e8:d3:31:63:a9:f5:db:
         3c:3d:98:fb:6d:22:7c:3b:44:ea:f2:c6:11:d2:b5:22:b0:49:
         b8:77:38:4b:60:3a:90:ec:df:fb:f3:5e:3a:cf:f9:07:dd:2f:
         f6:47:e2:82:75:9e:e9:b6:14:f8:e1:f3:95:46:7b:35:50:54:
         d3:9c:65:92:2d:05:ae:cc:f1:06:8d:4a:e5:f8:0f:ca:fb:94:
         10:95:3d:4c
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAVYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkE2NDYxMTAvBgNVBAUTKDNGQjM1ODI0NzBFRDAzRjE5NDM1RTY5QjJDMTlCNDA3
NDc3MEYwOTcwHhcNMjMwNzAzMDI1MjM0WhcNMjQwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NGEyMzdmMi1iZTFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA22xQ/Cpe096uIB5iTROBUfTqpQBvNbKjUPkssygnG3h4PZHjYghAbvS+0YwV
hY4Qc4Go5AxL4eQI2mtUwaz9ZhqmxT+AqMYLBkR6YV0f7qQJCdVttMK2CuD4Q92L
jg887Tzu5RTY4EBdUAd0JHhTuSu7D+ygxu8asE07Fj2QY+fCIzF9CSxQ/nKOSE4E
8LOwRGuGGq3Re3UqAgmAxWl/ZAbePbTnHQqoEZKv2IUbVWrw8EcLId7SKOARiAIw
SGKZomU/zYMyhO44zLXrLm1tjDoHVWSomETGml01nYxdtCceIdnHCWY35dVGUhMh
5ZuDcbGCXtxb8CBIeNUc319KewIDAQABo4IClTCCApEwHQYDVR0OBBYEFPRnUaqh
IhX98WpHwhVFwVKjwftbMB8GA1UdIwQYMBaAFD+zWCRw7QPxlDXmmywZtAdHcPCX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTY0Ni8yRjYzOUVCMEY1
ODUxMUVDODdGNkZFMTNDNEY5QUUwMi9QN05ZSkhEdEFfR1VOZWFiTEJtMEIwZHc4
SmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1A3TllKSER0QV9HVU5lYWJMQm0wQjBkdzhKYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MkE2NDYvMkY2MzlFQjBGNTg1MTFFQzg3RjZGRTEzQzRGOUFFMDIvNDYwRjk0OENG
NThDMTFFQ0FFMjY5OTM0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnvhYwDQYJKoZIhvcNAQELBQADggEBAE48FKs60L59D/gf
Tjq/F8NAJV0lv0fMvWCbPX8PpOspA5qZptMZGdPVhG7LWP4RvIxOjbg4NGBW7ck0
VdbOBJ1kMmxpMQ4gKvcl+q/cR8YD7Kgt3/NKtG9zMtNqmYB5fsUP8QAZ33TMj/lo
VBjP93kBQfi0XWB7wiEIuPx5RfSZd0htPkPQ/TmXsyQ+CKOZsap9b2rtW7sEUEI1
zAKnv2QbnMwrjI72O7OVfBm76NMxY6n12zw9mPttInw7ROryxhHStSKwSbh3OEtg
OpDs3/vzXjrP+QfdL/ZH4oJ1num2FPjh85VGezVQVNOcZZItBa7M8QaNSuX4D8r7
lBCVPUw=
-----END CERTIFICATE-----
Generated at Sat Jun 1 07:08:13 2024 by rpki-client on console-ams.rpki-client.org