Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9181B90/F80CEFACE23D11EC84D2B35EC4F9AE02/BD65DA5EE24111ECB7132461C4F9AE02.roa
File:                     BD65DA5EE24111ECB7132461C4F9AE02.roa (raw, json)
Hash identifier:          1xNSVwrWuI1dNeDqj4OPmRPkWgqvypr2z6wt59QMq7Q=
Subject key identifier:   8F:79:00:08:BF:82:CC:D3:74:94:6A:43:71:A8:BD:AC:2D:63:A5:53
Certificate issuer:       /CN=A9181B90/serialNumber=5AC36DE95936B87A010A2A4BA915695A6999071D
Certificate serial:       0177
Authority key identifier: 5A:C3:6D:E9:59:36:B8:7A:01:0A:2A:4B:A9:15:69:5A:69:99:07:1D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WsNt6Vk2uHoBCipLqRVpWmmZBx0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9181B90/F80CEFACE23D11EC84D2B35EC4F9AE02/BD65DA5EE24111ECB7132461C4F9AE02.roa
Signing time:             Fri 09 Jun 2023 05:57:27 +0000
ROA not before:           Fri 09 Jun 2023 05:57:27 +0000
ROA not after:            Sat 31 Aug 2024 00:00:00 +0000
asID:                     149854
IP address blocks:        103.188.232.0/23 maxlen: 23
                          103.188.232.0/24 maxlen: 24
                          103.188.233.0/24 maxlen: 24
                          2001:df0:c8c0::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9181B90/F80CEFACE23D11EC84D2B35EC4F9AE02/WsNt6Vk2uHoBCipLqRVpWmmZBx0.crl
                          rsync://rpki.apnic.net/member_repository/A9181B90/F80CEFACE23D11EC84D2B35EC4F9AE02/WsNt6Vk2uHoBCipLqRVpWmmZBx0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WsNt6Vk2uHoBCipLqRVpWmmZBx0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 04:53:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 375 (0x177)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9181B90/serialNumber=5AC36DE95936B87A010A2A4BA915695A6999071D
        Validity
            Not Before: Jun  9 05:57:27 2023 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=6482bf47-9230
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:23:6c:c8:93:7b:e5:05:89:28:9a:59:cc:67:
                    23:45:22:a0:e8:6c:8a:85:58:99:b9:31:79:88:6e:
                    8b:06:40:0c:15:08:d7:5e:98:c7:62:1a:6f:0b:1d:
                    76:4c:16:b8:1a:3f:d7:6d:7e:0a:0f:b5:73:44:7f:
                    3c:32:c0:74:55:be:ec:02:42:28:f5:1b:42:94:a3:
                    00:24:ad:77:ab:39:ba:09:0a:b0:78:26:d7:5c:34:
                    96:0e:24:8a:90:d7:5a:35:b2:0b:ca:b8:3d:49:7c:
                    8e:a2:82:b6:96:ae:48:4f:11:5c:2c:55:5b:86:7b:
                    fc:e8:d2:da:42:78:76:18:26:98:23:ee:d0:dc:ac:
                    d1:18:5d:96:f4:3f:ea:c4:5d:6b:ee:a8:58:6a:3e:
                    0d:10:ea:90:74:90:74:54:db:a1:11:97:ca:ca:83:
                    5f:6d:a3:80:db:1e:47:54:f4:0f:d1:cc:08:a5:38:
                    42:4d:fd:e4:04:fb:7e:7d:cc:41:b3:6d:6d:00:ac:
                    1d:47:57:58:01:e3:14:13:96:cf:e2:29:f8:2f:de:
                    92:7e:90:97:2d:1d:47:d7:11:24:5c:6b:c0:1e:45:
                    a1:0f:28:76:f3:ad:76:4b:2e:b1:92:6f:18:76:61:
                    a0:60:9a:8d:62:9b:b1:26:2a:9d:91:41:21:be:ea:
                    c1:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:79:00:08:BF:82:CC:D3:74:94:6A:43:71:A8:BD:AC:2D:63:A5:53
            X509v3 Authority Key Identifier:
                keyid:5A:C3:6D:E9:59:36:B8:7A:01:0A:2A:4B:A9:15:69:5A:69:99:07:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9181B90/F80CEFACE23D11EC84D2B35EC4F9AE02/WsNt6Vk2uHoBCipLqRVpWmmZBx0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WsNt6Vk2uHoBCipLqRVpWmmZBx0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181B90/F80CEFACE23D11EC84D2B35EC4F9AE02/BD65DA5EE24111ECB7132461C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.188.232.0/23
                IPv6:
                  2001:df0:c8c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         a4:b1:bb:e9:c6:6a:d1:2f:d5:59:6f:c1:be:8a:97:b9:3d:c1:
         0e:b2:70:cc:38:22:f2:a6:e7:97:be:f7:3c:01:37:b1:28:46:
         2b:8f:ea:f5:cd:56:83:cb:51:7e:0d:3d:cf:cd:ed:55:88:36:
         41:b0:a9:01:52:49:9c:c4:eb:0b:22:d6:25:c0:73:6f:66:4b:
         17:db:59:5a:bc:08:85:2d:08:1e:b4:3d:7e:da:88:93:3f:51:
         79:54:d5:aa:4e:b5:b3:f5:00:6e:81:b7:eb:e5:65:18:87:3d:
         a7:fa:68:df:ad:c8:9d:d9:6d:8c:f4:59:57:dd:26:ea:b4:b2:
         0a:1a:2d:5f:61:1a:40:3a:cb:95:93:c1:0c:02:e1:ec:c2:3e:
         c2:c3:11:c2:4c:da:cf:02:ac:49:73:5d:ff:a9:98:91:c0:25:
         c7:8a:98:86:5d:e6:e0:6c:ed:b0:9a:b8:6b:19:ed:9b:ab:6b:
         41:f0:2f:57:9e:95:51:f1:6b:23:e7:88:3e:73:e4:ae:45:b0:
         6a:56:19:1e:c5:c9:75:9f:6c:63:d6:3d:a3:6d:2c:10:c5:22:
         77:26:90:5a:f7:29:18:53:99:19:5d:ef:ee:a0:80:a5:96:f3:
         02:e8:7b:f8:55:fe:94:a2:a8:08:6c:3c:ce:9d:4c:8f:6b:e6:
         f3:3c:f1:8b
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgICAXcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODFCOTAxMTAvBgNVBAUTKDVBQzM2REU5NTkzNkI4N0EwMTBBMkE0QkE5MTU2OTVB
Njk5OTA3MUQwHhcNMjMwNjA5MDU1NzI3WhcNMjQwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NDgyYmY0Ny05MjMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4yNsyJN75QWJKJpZzGcjRSKg6GyKhViZuTF5iG6LBkAMFQjXXpjHYhpvCx12
TBa4Gj/XbX4KD7VzRH88MsB0Vb7sAkIo9RtClKMAJK13qzm6CQqweCbXXDSWDiSK
kNdaNbILyrg9SXyOooK2lq5ITxFcLFVbhnv86NLaQnh2GCaYI+7Q3KzRGF2W9D/q
xF1r7qhYaj4NEOqQdJB0VNuhEZfKyoNfbaOA2x5HVPQP0cwIpThCTf3kBPt+fcxB
s21tAKwdR1dYAeMUE5bP4in4L96SfpCXLR1H1xEkXGvAHkWhDyh28612Sy6xkm8Y
dmGgYJqNYpuxJiqdkUEhvurB1QIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFI95AAi/
gszTdJRqQ3GovawtY6VTMB8GA1UdIwQYMBaAFFrDbelZNrh6AQoqS6kVaVppmQcd
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MUI5MC9GODBDRUZBQ0Uy
M0QxMUVDODREMkIzNUVDNEY5QUUwMi9Xc050NlZrMnVIb0JDaXBMcVJWcFdtbVpC
eDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1dzTnQ2VmsydUhvQkNpcExxUlZwV21tWkJ4MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODFCOTAvRjgwQ0VGQUNFMjNEMTFFQzg0RDJCMzVFQzRGOUFFMDIvQkQ2NURBNUVF
MjQxMTFFQ0I3MTMyNDYxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E
ITAfMAwEAgABMAYDBAFnvOgwDwQCAAIwCQMHACABDfDIwDANBgkqhkiG9w0BAQsF
AAOCAQEApLG76cZq0S/VWW/BvoqXuT3BDrJwzDgi8qbnl773PAE3sShGK4/q9c1W
g8tRfg09z83tVYg2QbCpAVJJnMTrCyLWJcBzb2ZLF9tZWrwIhS0IHrQ9ftqIkz9R
eVTVqk61s/UAboG36+VlGIc9p/po363IndltjPRZV90m6rSyChotX2EaQDrLlZPB
DALh7MI+wsMRwkzazwKsSXNd/6mYkcAlx4qYhl3m4GztsJq4axntm6trQfAvV56V
UfFrI+eIPnPkrkWwalYZHsXJdZ9sY9Y9o20sEMUidyaQWvcpGFOZGV3v7qCApZbz
Auh7+FX+lKKoCGw8zp1Mj2vm8zzxiw==
-----END CERTIFICATE-----
Generated at Sat Jun 1 05:48:43 2024 by rpki-client on console-fra.rpki-client.org