Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911073A/EB4A3ADAF64111EEBB11EF53C4F9AE02/9D50BCA4F64211EE9114A555C4F9AE02.roa
File:                     9D50BCA4F64211EE9114A555C4F9AE02.roa (raw, json)
Hash identifier:          HUL9A15K3QXg4KiojfWyiL6fLdOjifKgkpo2+Is4ENA=
Subject key identifier:   77:67:40:17:61:6A:A2:21:04:8D:CD:DD:45:8C:95:6A:0E:C2:31:66
Certificate issuer:       /CN=A911073A/serialNumber=F5502A4D7D14A6AA63E5FFABF936E152A8DF803B
Certificate serial:       04
Authority key identifier: F5:50:2A:4D:7D:14:A6:AA:63:E5:FF:AB:F9:36:E1:52:A8:DF:80:3B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VAqTX0Upqpj5f-r-TbhUqjfgDs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911073A/EB4A3ADAF64111EEBB11EF53C4F9AE02/9D50BCA4F64211EE9114A555C4F9AE02.roa
Signing time:             Tue 09 Apr 2024 07:29:39 +0000
ROA not before:           Tue 09 Apr 2024 07:29:39 +0000
ROA not after:            Thu 31 Oct 2024 00:00:00 +0000
asID:                     150157
IP address blocks:        103.15.227.0/24 maxlen: 24
                          2001:df1:18c0::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911073A/EB4A3ADAF64111EEBB11EF53C4F9AE02/9VAqTX0Upqpj5f-r-TbhUqjfgDs.crl
                          rsync://rpki.apnic.net/member_repository/A911073A/EB4A3ADAF64111EEBB11EF53C4F9AE02/9VAqTX0Upqpj5f-r-TbhUqjfgDs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VAqTX0Upqpj5f-r-TbhUqjfgDs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 09:39:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911073A/serialNumber=F5502A4D7D14A6AA63E5FFABF936E152A8DF803B
        Validity
            Not Before: Apr  9 07:29:39 2024 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=6614ee63-28b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e6:3b:ee:a8:9b:ec:92:b8:bc:97:6c:c4:cb:
                    28:4f:8b:18:a7:35:4a:7c:67:8e:30:2d:6f:7d:72:
                    9e:8b:2e:b8:3b:49:ab:34:3b:62:11:d9:e7:2c:4f:
                    6a:04:ff:da:da:c4:db:43:cb:f4:21:e5:d5:74:70:
                    ea:7c:99:6b:3d:73:c0:42:23:dc:d6:56:69:f5:fb:
                    ac:ab:f1:c9:83:8e:b5:4d:c1:b0:ef:36:52:13:89:
                    9d:80:10:9f:a9:9c:fd:58:be:50:0c:20:40:48:ea:
                    d3:09:d5:6c:16:66:2e:a5:25:3b:af:5d:fc:c0:15:
                    54:8c:89:50:27:7c:80:e1:f7:cd:4c:6a:6c:11:41:
                    75:d4:99:8e:8d:ab:b6:05:2e:59:b3:d1:1d:56:68:
                    2f:60:20:df:14:b4:5b:44:6d:2a:a5:24:0f:98:ba:
                    8c:b8:63:96:dd:a6:5e:cd:80:d6:67:9e:8a:cc:a3:
                    75:d4:83:0c:25:a3:fa:ad:83:61:68:9a:31:9a:8d:
                    13:ca:0c:33:58:6b:71:b8:05:e3:9b:44:90:cc:87:
                    eb:1d:5a:08:b7:ca:62:9f:a4:bf:94:c7:dd:d2:90:
                    f2:bf:ec:69:82:33:cf:20:24:6b:e9:f6:b3:56:a4:
                    97:e6:2c:ee:79:3b:b8:84:06:63:47:6d:1c:9a:af:
                    5b:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:67:40:17:61:6A:A2:21:04:8D:CD:DD:45:8C:95:6A:0E:C2:31:66
            X509v3 Authority Key Identifier:
                keyid:F5:50:2A:4D:7D:14:A6:AA:63:E5:FF:AB:F9:36:E1:52:A8:DF:80:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911073A/EB4A3ADAF64111EEBB11EF53C4F9AE02/9VAqTX0Upqpj5f-r-TbhUqjfgDs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VAqTX0Upqpj5f-r-TbhUqjfgDs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911073A/EB4A3ADAF64111EEBB11EF53C4F9AE02/9D50BCA4F64211EE9114A555C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.15.227.0/24
                IPv6:
                  2001:df1:18c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         1c:56:25:d9:47:c5:15:be:44:24:0e:d8:03:37:ac:07:35:b5:
         39:98:16:d0:6e:d3:b2:18:52:24:e8:c8:b3:00:7a:51:03:a9:
         4d:9c:b0:e0:1c:60:3c:e5:c5:a9:cf:2d:39:70:1d:7b:f7:bc:
         6c:df:b4:72:bb:6f:56:b3:13:f3:51:ea:3d:65:fa:74:c3:71:
         26:73:3c:72:6c:a1:98:7f:5e:f2:c1:c1:4b:cc:33:25:fe:3b:
         75:ea:ce:2b:cb:b2:cb:67:b8:55:96:9e:46:db:97:02:46:15:
         15:6a:b9:73:78:a2:03:56:3b:7d:b8:92:17:5b:d7:2c:9b:19:
         08:41:9d:b7:b3:57:2a:90:13:9a:7d:5f:17:12:e8:b5:13:b9:
         a9:d9:f9:60:aa:3d:c1:dc:ef:a3:ce:7e:6b:33:c8:b2:74:c6:
         c5:a1:f2:d5:91:c5:1e:16:9c:c4:12:11:cb:7d:22:e3:47:6d:
         05:1c:97:71:c5:7b:1a:d1:e4:46:48:9d:28:46:64:29:be:13:
         71:27:a8:f6:68:f2:ec:64:bd:57:f4:bf:37:61:2b:f3:5d:7b:
         51:0e:a8:81:97:1a:c8:f4:13:29:8e:91:a7:66:09:48:2b:30:
         99:2b:40:66:51:52:50:60:87:1a:28:8e:17:0b:27:16:e6:2b:
         a2:00:02:b1
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIBBDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx
MDczQTExMC8GA1UEBRMoRjU1MDJBNEQ3RDE0QTZBQTYzRTVGRkFCRjkzNkUxNTJB
OERGODAzQjAeFw0yNDA0MDkwNzI5MzlaFw0yNDEwMzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY2MTRlZTYzLTI4YjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC55jvuqJvskri8l2zEyyhPixinNUp8Z44wLW99cp6LLrg7Sas0O2IR2ecsT2oE
/9raxNtDy/Qh5dV0cOp8mWs9c8BCI9zWVmn1+6yr8cmDjrVNwbDvNlITiZ2AEJ+p
nP1YvlAMIEBI6tMJ1WwWZi6lJTuvXfzAFVSMiVAnfIDh981MamwRQXXUmY6Nq7YF
Llmz0R1WaC9gIN8UtFtEbSqlJA+Yuoy4Y5bdpl7NgNZnnorMo3XUgwwlo/qtg2Fo
mjGajRPKDDNYa3G4BeObRJDMh+sdWgi3ymKfpL+Ux93SkPK/7GmCM88gJGvp9rNW
pJfmLO55O7iEBmNHbRyar1tVAgMBAAGjggKmMIICojAdBgNVHQ4EFgQUd2dAF2Fq
oiEEjc3dRYyVag7CMWYwHwYDVR0jBBgwFoAU9VAqTX0Upqpj5f+r+TbhUqjfgDsw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEwNzNBL0VCNEEzQURBRjY0
MTExRUVCQjExRUY1M0M0RjlBRTAyLzlWQXFUWDBVcHFwajVmLXItVGJoVXFqZmdE
cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvOVZBcVRYMFVwcXBqNWYtci1UYmhVcWpmZ0RzLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
MDczQS9FQjRBM0FEQUY2NDExMUVFQkIxMUVGNTNDNEY5QUUwMi85RDUwQkNBNEY2
NDIxMUVFOTExNEE1NTVDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAwBggrBgEFBQcBBwEB/wQh
MB8wDAQCAAEwBgMEAGcP4zAPBAIAAjAJAwcAIAEN8RjAMA0GCSqGSIb3DQEBCwUA
A4IBAQAcViXZR8UVvkQkDtgDN6wHNbU5mBbQbtOyGFIk6MizAHpRA6lNnLDgHGA8
5cWpzy05cB1797xs37Ryu29WsxPzUeo9Zfp0w3EmczxybKGYf17ywcFLzDMl/jt1
6s4ry7LLZ7hVlp5G25cCRhUVarlzeKIDVjt9uJIXW9csmxkIQZ23s1cqkBOafV8X
Eui1E7mp2flgqj3B3O+jzn5rM8iydMbFofLVkcUeFpzEEhHLfSLjR20FHJdxxXsa
0eRGSJ0oRmQpvhNxJ6j2aPLsZL1X9L83YSvzXXtRDqiBlxrI9BMpjpGnZglIKzCZ
K0BmUVJQYIcaKI4XCycW5iuiAAKx
-----END CERTIFICATE-----
Generated at Fri May 31 13:04:13 2024 by rpki-client on console-ams.rpki-client.org