Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/DAD50CA0F0A411ED80D2CB35C4F9AE02.roa
File:                     DAD50CA0F0A411ED80D2CB35C4F9AE02.roa (raw, json)
Hash identifier:          /ux3ordt3jLupGujOrn0CKlZqAooF+uQFSEjCZzACr8=
Subject key identifier:   95:14:AC:40:27:64:16:C9:EC:16:5E:BD:5D:3F:08:D6:15:CD:D5:B9
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       3F2C
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/DAD50CA0F0A411ED80D2CB35C4F9AE02.roa
Signing time:             Tue 12 Sep 2023 02:44:13 +0000
ROA not before:           Tue 12 Sep 2023 02:44:13 +0000
ROA not after:            Thu 31 Oct 2024 00:00:00 +0000
asID:                     63734
IP address blocks:        103.199.16.0/22 maxlen: 22
                          2404:fbc0::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 14:37:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16172 (0x3f2c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Sep 12 02:44:13 2023 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=64ffd07c-d53b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:73:0f:41:56:65:44:14:63:fb:b6:70:4d:97:
                    eb:61:69:f8:4b:0d:05:34:ce:72:2e:50:77:05:1b:
                    45:f4:2e:e3:bd:9e:9f:09:b7:6f:35:63:34:67:2d:
                    83:3b:3d:50:68:c7:0f:11:36:1a:e4:87:3d:01:3e:
                    63:43:c4:ba:14:9d:74:38:5a:5b:f9:7a:f9:b7:2c:
                    08:f8:7f:25:8d:0a:bc:ca:f6:c6:06:e1:ea:2d:00:
                    06:86:2c:cb:da:f1:38:38:3b:53:a7:20:f8:99:b9:
                    fe:3f:a2:05:be:bf:01:e0:15:92:70:34:bf:e8:85:
                    4f:4d:24:df:4b:dd:9c:eb:c8:a6:8a:4a:c2:da:3c:
                    bd:ba:1e:f8:8f:b3:97:71:5e:b4:a6:27:f2:e7:fa:
                    bd:8c:3c:8e:12:bb:09:1b:5d:76:68:e4:7f:e3:8f:
                    bb:04:96:12:8a:cd:9f:d3:a2:c2:a8:e0:ed:ca:e3:
                    ac:1e:7d:c0:21:01:32:fb:0d:b6:77:43:91:9f:8a:
                    1f:a4:af:d4:29:3c:2d:48:1b:60:95:c6:8e:f8:43:
                    ac:6b:a4:bb:24:0a:c5:f7:01:35:42:1d:66:bd:c8:
                    65:7e:6c:43:66:8e:a5:a4:09:57:7f:d7:67:48:6b:
                    be:84:92:21:e4:de:bb:5f:43:5a:69:ce:86:5d:70:
                    8d:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:14:AC:40:27:64:16:C9:EC:16:5E:BD:5D:3F:08:D6:15:CD:D5:B9
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/DAD50CA0F0A411ED80D2CB35C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.199.16.0/22
                IPv6:
                  2404:fbc0::/48

    Signature Algorithm: sha256WithRSAEncryption
         b6:4f:2b:37:86:e4:aa:35:56:28:2b:aa:06:37:49:d9:14:78:
         46:f9:0a:5b:6c:35:92:aa:83:39:34:98:2c:62:88:b4:9d:4b:
         26:8c:80:21:94:1f:a0:9b:36:91:f7:bd:e6:d5:fd:98:ef:63:
         2b:43:b5:82:0a:e9:57:a1:12:0d:4e:6f:d5:94:53:ca:09:83:
         c0:94:28:62:a4:74:cc:7d:44:9a:01:64:f8:51:d6:30:1d:9d:
         d9:10:94:0c:f6:90:0c:3c:4a:0b:2e:2d:83:e6:82:01:fb:cf:
         17:ec:33:3a:a0:4d:ef:19:40:60:7f:0c:ad:d3:40:78:fc:ab:
         74:fc:a9:e6:83:fc:e6:6a:95:82:78:0e:6d:ca:cf:85:b0:e8:
         43:71:22:d6:02:46:cf:1f:45:0a:b8:15:cd:be:30:3c:44:0a:
         45:3b:40:a2:4b:bd:fd:7c:e2:9a:ed:d0:75:c9:92:19:10:12:
         a6:0f:4b:7e:be:61:84:d5:ed:b5:dd:4f:f4:17:4d:4b:05:55:
         78:2d:9a:c1:da:e0:a5:e9:f9:fe:8a:9b:83:52:7f:9c:72:0d:
         bd:4e:89:a0:fe:45:9a:ca:24:d8:15:db:5d:06:e7:0b:6a:b5:
         d2:eb:f5:72:ba:42:52:50:85:d8:7c:36:da:1b:3f:7b:0f:b5:
         0c:25:6a:bc
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgICPywwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3
NTZBQzZGMEEwHhcNMjMwOTEyMDI0NDEzWhcNMjQxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NGZmZDA3Yy1kNTNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAp3MPQVZlRBRj+7ZwTZfrYWn4Sw0FNM5yLlB3BRtF9C7jvZ6fCbdvNWM0Zy2D
Oz1QaMcPETYa5Ic9AT5jQ8S6FJ10OFpb+Xr5tywI+H8ljQq8yvbGBuHqLQAGhizL
2vE4ODtTpyD4mbn+P6IFvr8B4BWScDS/6IVPTSTfS92c68imikrC2jy9uh74j7OX
cV60pify5/q9jDyOErsJG112aOR/44+7BJYSis2f06LCqODtyuOsHn3AIQEy+w22
d0ORn4ofpK/UKTwtSBtglcaO+EOsa6S7JArF9wE1Qh1mvchlfmxDZo6lpAlXf9dn
SGu+hJIh5N67X0Naac6GXXCNLQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFJUUrEAn
ZBbJ7BZevV0/CNYVzdW5MB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE
OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi
d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvREFENTBDQTBG
MEE0MTFFRDgwRDJDQjM1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E
ITAfMAwEAgABMAYDBAJnxxAwDwQCAAIwCQMHACQE+8AAADANBgkqhkiG9w0BAQsF
AAOCAQEAtk8rN4bkqjVWKCuqBjdJ2RR4RvkKW2w1kqqDOTSYLGKItJ1LJoyAIZQf
oJs2kfe95tX9mO9jK0O1ggrpV6ESDU5v1ZRTygmDwJQoYqR0zH1EmgFk+FHWMB2d
2RCUDPaQDDxKCy4tg+aCAfvPF+wzOqBN7xlAYH8MrdNAePyrdPyp5oP85mqVgngO
bcrPhbDoQ3Ei1gJGzx9FCrgVzb4wPEQKRTtAoku9/Xzimu3QdcmSGRASpg9Lfr5h
hNXttd1P9BdNSwVVeC2awdrgpen5/oqbg1J/nHINvU6JoP5Fmsok2BXbXQbnC2q1
0uv1crpCUlCF2Hw22hs/ew+1DCVqvA==
-----END CERTIFICATE-----
Generated at Fri May 31 16:41:41 2024 by rpki-client on console-ams.rpki-client.org