Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/47A6C8E08DB811E98ACC9F7EC4F9AE02.roa
File:                     47A6C8E08DB811E98ACC9F7EC4F9AE02.roa (raw, json)
Hash identifier:          /Ifqf0984NjGPAWGbF4mso5wI1oMXObhk2vSnv1SWW4=
Subject key identifier:   95:E8:D0:86:38:EA:86:5E:BF:4E:C6:31:77:E6:53:56:7B:F8:8E:17
Certificate issuer:       /CN=A91697FA/serialNumber=9F82DBC9466312C5BA2E921279302400956A982A
Certificate serial:       33EC
Authority key identifier: 9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/47A6C8E08DB811E98ACC9F7EC4F9AE02.roa
Signing time:             Tue 20 Jun 2023 14:50:33 +0000
ROA not before:           Tue 20 Jun 2023 14:50:33 +0000
ROA not after:            Thu 31 Oct 2024 00:00:00 +0000
asID:                     46079
IP address blocks:        203.107.177.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.crl
                          rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 14:03:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13292 (0x33ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91697FA/serialNumber=9F82DBC9466312C5BA2E921279302400956A982A
        Validity
            Not Before: Jun 20 14:50:33 2023 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=6491bcb8-e246
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b6:f9:e3:a8:23:1b:a6:01:ef:da:18:c5:0e:
                    2b:c8:a9:4b:c2:f5:16:fd:b3:1a:4f:bf:af:6a:bf:
                    cd:2b:7d:df:a5:0b:55:8d:84:eb:91:91:96:70:58:
                    0c:89:4a:c0:17:cf:9c:88:21:b8:02:a3:b9:c4:f6:
                    89:aa:5a:3e:bf:53:f6:81:5e:fe:49:b1:7d:23:f2:
                    e5:a4:8d:ea:4e:dc:d6:86:26:9d:4c:fe:30:8a:2a:
                    19:ce:8d:27:49:57:38:f8:9b:af:c5:76:66:60:fd:
                    f7:02:e9:b3:a5:86:9e:54:5e:bf:ec:73:80:ea:8a:
                    55:1e:a6:68:9f:45:33:f2:45:9d:ed:ba:0e:79:0c:
                    52:97:6f:db:b8:f8:5b:a4:fc:2d:ea:c2:47:33:b3:
                    88:7d:4c:f9:59:d1:35:c1:ef:98:3d:d0:1f:3b:24:
                    5e:6b:1d:81:54:9c:78:33:21:c0:20:b0:9e:4b:0a:
                    f2:fc:57:ba:75:0d:55:ef:05:f1:87:5d:96:27:62:
                    72:0e:65:53:83:b4:f0:f4:f0:fb:9f:b2:d5:3b:de:
                    53:4b:56:82:ea:0a:a6:e6:04:26:02:0c:35:77:68:
                    16:37:d1:28:2f:90:e8:9f:c3:a7:9b:89:47:5a:80:
                    0c:47:d2:dc:41:b9:ea:91:59:53:49:9a:28:d1:b0:
                    25:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:E8:D0:86:38:EA:86:5E:BF:4E:C6:31:77:E6:53:56:7B:F8:8E:17
            X509v3 Authority Key Identifier:
                keyid:9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/47A6C8E08DB811E98ACC9F7EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.107.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:56:71:ce:ce:52:e9:12:30:97:fd:8a:e4:11:b9:fd:e8:51:
         d1:ef:01:da:8b:bb:21:8e:2e:7e:09:a1:cb:f1:ee:06:c0:d9:
         68:6e:da:da:bb:5c:42:70:3c:64:14:32:54:ce:cc:3c:43:c3:
         d3:a0:99:64:6f:b4:a9:b3:ff:5e:16:09:c7:96:9b:d6:42:9d:
         b5:cf:c6:f0:13:0f:2a:78:65:52:5e:40:2a:f7:1b:57:98:18:
         43:72:a6:41:ae:c1:ed:a2:9c:a0:7e:0e:7b:bc:56:0a:a6:9a:
         96:ae:2f:ed:b8:64:ef:3b:74:97:a1:1c:4b:92:f5:27:4b:c3:
         2e:7d:4c:20:ab:c9:42:1a:62:1c:94:14:61:40:c0:20:5f:19:
         e7:fa:17:7f:57:67:0f:5d:00:9f:3e:12:cb:3a:87:bc:d0:47:
         26:0d:a3:61:6a:fb:2c:fd:bd:e3:67:4d:66:5f:7b:b1:fc:6f:
         82:cd:59:1f:a9:f4:ae:43:27:a1:a3:c2:04:af:5a:8d:1e:eb:
         45:9c:b5:d2:1d:1e:14:12:a2:dd:91:21:10:bb:77:30:55:6a:
         9b:9a:82:5d:20:38:a8:96:97:5d:e1:ee:49:e9:d1:55:d7:8b:
         f0:4a:a5:6d:bd:e5:e6:e8:72:1f:65:84:f6:d8:ed:80:ee:02:
         e8:11:13:67
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICM+wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Njk3RkExMTAvBgNVBAUTKDlGODJEQkM5NDY2MzEyQzVCQTJFOTIxMjc5MzAyNDAw
OTU2QTk4MkEwHhcNMjMwNjIwMTQ1MDMzWhcNMjQxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NDkxYmNiOC1lMjQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArLb546gjG6YB79oYxQ4ryKlLwvUW/bMaT7+var/NK33fpQtVjYTrkZGWcFgM
iUrAF8+ciCG4AqO5xPaJqlo+v1P2gV7+SbF9I/LlpI3qTtzWhiadTP4wiioZzo0n
SVc4+JuvxXZmYP33AumzpYaeVF6/7HOA6opVHqZon0Uz8kWd7boOeQxSl2/buPhb
pPwt6sJHM7OIfUz5WdE1we+YPdAfOyReax2BVJx4MyHAILCeSwry/Fe6dQ1V7wXx
h12WJ2JyDmVTg7Tw9PD7n7LVO95TS1aC6gqm5gQmAgw1d2gWN9EoL5Don8Onm4lH
WoAMR9LcQbnqkVlTSZoo0bAlDwIDAQABo4IClTCCApEwHQYDVR0OBBYEFJXo0IY4
6oZev07GMXfmU1Z7+I4XMB8GA1UdIwQYMBaAFJ+C28lGYxLFui6SEnkwJACVapgq
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OTdGQS8yN0Y4M0I3MDFE
ODMxMUUyOTMyOTIxRDgwOEIwMkNEMi9uNExieVVaakVzVzZMcElTZVRBa0FKVnFt
Q28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL240TGJ5VVpqRXNXNkxwSVNlVEFrQUpWcW1Dby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Njk3RkEvMjdGODNCNzAxRDgzMTFFMjkzMjkyMUQ4MDhCMDJDRDIvNDdBNkM4RTA4
REI4MTFFOThBQ0M5RjdFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADLa7EwDQYJKoZIhvcNAQELBQADggEBAC1Wcc7OUukSMJf9
iuQRuf3oUdHvAdqLuyGOLn4Jocvx7gbA2Whu2tq7XEJwPGQUMlTOzDxDw9OgmWRv
tKmz/14WCceWm9ZCnbXPxvATDyp4ZVJeQCr3G1eYGENypkGuwe2inKB+Dnu8Vgqm
mpauL+24ZO87dJehHEuS9SdLwy59TCCryUIaYhyUFGFAwCBfGef6F39XZw9dAJ8+
Ess6h7zQRyYNo2Fq+yz9veNnTWZfe7H8b4LNWR+p9K5DJ6GjwgSvWo0e60WctdId
HhQSot2RIRC7dzBVapuagl0gOKiWl13h7knp0VXXi/BKpW295eboch9lhPbY7YDu
AugRE2c=
-----END CERTIFICATE-----
Generated at Thu Jun 6 15:11:44 2024 by rpki-client on console-ams.rpki-client.org