Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919014C/154FAC2C547E11EE8E710074C4F9AE02/503DC7FA547F11EE9512EE75C4F9AE02.roa
File:                     503DC7FA547F11EE9512EE75C4F9AE02.roa (raw, json)
Hash identifier:          r4dxDMwbUQsfYacjNMiODTUgG9J0kzkIZYBKgmYXnoo=
Subject key identifier:   2E:24:70:48:66:C7:7A:CC:76:4E:8A:1A:82:E2:DD:59:66:B4:41:1A
Certificate issuer:       /CN=A919014C/serialNumber=52759DE35C02679DB6E932EA88689DC10D5CCCAE
Certificate serial:       1B
Authority key identifier: 52:75:9D:E3:5C:02:67:9D:B6:E9:32:EA:88:68:9D:C1:0D:5C:CC:AE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UnWd41wCZ5226TLqiGidwQ1czK4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919014C/154FAC2C547E11EE8E710074C4F9AE02/503DC7FA547F11EE9512EE75C4F9AE02.roa
Signing time:             Tue 31 Oct 2023 06:16:51 +0000
ROA not before:           Tue 31 Oct 2023 06:16:51 +0000
ROA not after:            Mon 30 Dec 2024 00:00:00 +0000
asID:                     150386
IP address blocks:        103.88.52.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919014C/154FAC2C547E11EE8E710074C4F9AE02/UnWd41wCZ5226TLqiGidwQ1czK4.crl
                          rsync://rpki.apnic.net/member_repository/A919014C/154FAC2C547E11EE8E710074C4F9AE02/UnWd41wCZ5226TLqiGidwQ1czK4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UnWd41wCZ5226TLqiGidwQ1czK4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 07:43:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 27 (0x1b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919014C/serialNumber=52759DE35C02679DB6E932EA88689DC10D5CCCAE
        Validity
            Not Before: Oct 31 06:16:51 2023 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=65409bd3-fad7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:c1:27:bb:2b:c3:c5:84:a1:f1:51:85:f4:85:
                    0f:a2:9f:cd:b9:b9:a5:bf:67:4b:86:a2:3e:64:75:
                    3b:84:4b:5e:3f:7e:30:0f:a2:67:c7:59:f4:c8:9d:
                    9a:96:26:73:f0:a9:37:7c:f8:49:db:c7:b2:95:22:
                    af:02:6f:ea:d0:6b:c3:2a:60:08:7e:7a:84:46:11:
                    66:54:bb:c6:d5:4e:7b:1d:bf:1f:48:ce:e0:ac:94:
                    5e:cf:3e:3d:93:2f:a8:4b:f6:d5:00:85:eb:15:3b:
                    f6:c2:62:53:1d:24:b2:4a:9a:40:79:cb:09:4d:77:
                    08:42:29:c7:33:17:eb:5e:02:de:79:68:63:f2:66:
                    12:77:3f:13:9a:b3:1b:51:84:66:2e:61:91:60:51:
                    9c:37:d3:fa:ab:3f:14:9a:fd:20:c3:af:e4:b4:0e:
                    7b:98:ef:eb:40:e0:db:45:92:9c:84:b7:53:d0:37:
                    47:23:34:94:aa:9e:e5:64:19:fd:3a:0b:9e:35:0a:
                    7a:b8:d9:e9:ad:50:7f:1b:26:f4:e9:04:5c:51:d2:
                    3b:20:2a:e9:af:c8:28:4f:f8:d6:a3:96:62:00:40:
                    29:ca:26:b0:1b:ad:23:7a:96:cd:73:b8:20:d0:a1:
                    eb:5d:cf:1f:35:81:10:8c:db:3d:98:d4:51:a1:d3:
                    cd:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:24:70:48:66:C7:7A:CC:76:4E:8A:1A:82:E2:DD:59:66:B4:41:1A
            X509v3 Authority Key Identifier:
                keyid:52:75:9D:E3:5C:02:67:9D:B6:E9:32:EA:88:68:9D:C1:0D:5C:CC:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919014C/154FAC2C547E11EE8E710074C4F9AE02/UnWd41wCZ5226TLqiGidwQ1czK4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UnWd41wCZ5226TLqiGidwQ1czK4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919014C/154FAC2C547E11EE8E710074C4F9AE02/503DC7FA547F11EE9512EE75C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.88.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:40:98:da:d5:76:2d:2e:63:42:ae:81:93:2b:ad:7b:64:f0:
         93:46:94:12:83:56:16:51:77:9a:8b:61:74:bb:5d:14:e6:51:
         72:af:63:15:5e:66:d4:64:08:ac:90:1a:60:4e:18:84:82:7f:
         9e:07:bb:97:85:e7:69:1c:0c:23:21:49:e7:fc:cf:50:46:bd:
         78:60:da:15:52:ab:eb:57:09:e9:79:9e:40:72:86:35:f0:40:
         85:17:ff:b1:73:70:36:c2:0b:53:d7:44:dd:84:e0:d6:6e:e2:
         1c:f7:03:fb:5f:91:da:a9:bf:cd:68:51:4a:21:7b:ad:3c:6c:
         c4:c9:03:13:3b:62:e3:a4:0c:5c:78:49:f6:5d:f6:14:6e:7e:
         6a:7f:06:8c:fe:fd:e6:4a:10:14:29:89:39:c1:ac:39:4f:0b:
         58:65:55:d4:4a:b7:a8:48:3c:ee:b8:f1:3d:1e:8b:d7:1a:bc:
         91:e5:ee:9d:88:33:14:bd:aa:dc:1c:fa:3b:06:7a:73:2f:45:
         6d:02:95:93:67:4d:25:db:b8:ba:a6:4d:ed:05:f4:4b:b1:92:
         05:e5:12:86:ad:ab:d1:9f:7c:e6:7b:c1:e6:a8:f2:3d:a5:0f:
         f2:21:3d:ee:fc:5f:3b:79:a5:25:35:2c:69:d9:f5:a0:b6:65:
         8a:03:8b:db
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBGzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5
MDE0QzExMC8GA1UEBRMoNTI3NTlERTM1QzAyNjc5REI2RTkzMkVBODg2ODlEQzEw
RDVDQ0NBRTAeFw0yMzEwMzEwNjE2NTFaFw0yNDEyMzAwMDAwMDBaMBgxFjAUBgNV
BAMTDTY1NDA5YmQzLWZhZDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDHwSe7K8PFhKHxUYX0hQ+in825uaW/Z0uGoj5kdTuES14/fjAPomfHWfTInZqW
JnPwqTd8+Enbx7KVIq8Cb+rQa8MqYAh+eoRGEWZUu8bVTnsdvx9IzuCslF7PPj2T
L6hL9tUAhesVO/bCYlMdJLJKmkB5ywlNdwhCKcczF+teAt55aGPyZhJ3PxOasxtR
hGYuYZFgUZw30/qrPxSa/SDDr+S0DnuY7+tA4NtFkpyEt1PQN0cjNJSqnuVkGf06
C541Cnq42emtUH8bJvTpBFxR0jsgKumvyChP+NajlmIAQCnKJrAbrSN6ls1zuCDQ
oetdzx81gRCM2z2Y1FGh083nAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQULiRwSGbH
esx2TooaguLdWWa0QRowHwYDVR0jBBgwFoAUUnWd41wCZ5226TLqiGidwQ1czK4w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkwMTRDLzE1NEZBQzJDNTQ3
RTExRUU4RTcxMDA3NEM0RjlBRTAyL1VuV2Q0MXdDWjUyMjZUTHFpR2lkd1ExY3pL
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvVW5XZDQxd0NaNTIyNlRMcWlHaWR3UTFjeks0LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
MDE0Qy8xNTRGQUMyQzU0N0UxMUVFOEU3MTAwNzRDNEY5QUUwMi81MDNEQzdGQTU0
N0YxMUVFOTUxMkVFNzVDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAGdYNDANBgkqhkiG9w0BAQsFAAOCAQEAUkCY2tV2LS5jQq6B
kyute2Twk0aUEoNWFlF3mothdLtdFOZRcq9jFV5m1GQIrJAaYE4YhIJ/nge7l4Xn
aRwMIyFJ5/zPUEa9eGDaFVKr61cJ6XmeQHKGNfBAhRf/sXNwNsILU9dE3YTg1m7i
HPcD+1+R2qm/zWhRSiF7rTxsxMkDEzti46QMXHhJ9l32FG5+an8GjP795koQFCmJ
OcGsOU8LWGVV1Eq3qEg87rjxPR6L1xq8keXunYgzFL2q3Bz6OwZ6cy9FbQKVk2dN
Jdu4uqZN7QX0S7GSBeUShq2r0Z985nvB5qjyPaUP8iE97vxfO3mlJTUsadn1oLZl
igOL2w==
-----END CERTIFICATE-----
Generated at Sat Jun 1 09:10:34 2024 by rpki-client on console-fra.rpki-client.org