Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912372F/9326C790776F11EC82642461C4F9AE02/FD8409A09C2611EC89DFBD46C4F9AE02.roa
File:                     FD8409A09C2611EC89DFBD46C4F9AE02.roa (raw, json)
Hash identifier:          6MXSJ/lagKJhnJMTWfmSujuxJaXP8laB5E8wEkXW4C8=
Subject key identifier:   E1:4C:9A:5A:B4:E1:B9:09:07:9D:D4:47:E0:B0:33:B8:A1:92:E0:CF
Certificate issuer:       /CN=A912372F/serialNumber=1FC75AADA0A51BEE1ABE6F73359F79B6A346F6A4
Certificate serial:       02C9
Authority key identifier: 1F:C7:5A:AD:A0:A5:1B:EE:1A:BE:6F:73:35:9F:79:B6:A3:46:F6:A4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H8daraClG-4avm9zNZ95tqNG9qQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912372F/9326C790776F11EC82642461C4F9AE02/FD8409A09C2611EC89DFBD46C4F9AE02.roa
Signing time:             Thu 05 Oct 2023 01:43:43 +0000
ROA not before:           Thu 05 Oct 2023 01:43:43 +0000
ROA not after:            Sun 01 Dec 2024 00:00:00 +0000
asID:                     135525
IP address blocks:        103.155.50.0/24 maxlen: 24
                          103.155.51.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912372F/9326C790776F11EC82642461C4F9AE02/H8daraClG-4avm9zNZ95tqNG9qQ.crl
                          rsync://rpki.apnic.net/member_repository/A912372F/9326C790776F11EC82642461C4F9AE02/H8daraClG-4avm9zNZ95tqNG9qQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H8daraClG-4avm9zNZ95tqNG9qQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 May 2024 02:53:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 713 (0x2c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912372F/serialNumber=1FC75AADA0A51BEE1ABE6F73359F79B6A346F6A4
        Validity
            Not Before: Oct  5 01:43:43 2023 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=651e14cf-e36a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:fc:cb:fa:3a:32:04:72:55:5f:5a:1b:b6:ad:
                    cb:6c:04:1f:58:19:90:1f:54:bc:e4:1e:c7:ea:1f:
                    e7:f9:27:58:92:23:eb:d5:74:09:59:b6:f3:70:24:
                    16:ed:5c:79:d2:9f:81:ed:95:db:1e:c1:51:71:97:
                    64:5b:3e:ba:ca:3e:87:bc:dc:51:a3:c4:f8:0c:a7:
                    e6:43:f1:df:6c:59:f2:66:15:82:35:51:da:69:05:
                    15:fd:aa:c9:45:a5:8f:10:57:50:a2:8b:83:a4:bb:
                    8c:e4:0c:ea:35:bc:ae:78:09:cf:8b:1f:05:85:ea:
                    45:9e:0d:a3:88:16:9b:c2:ee:bc:68:8a:d2:8a:7d:
                    c3:d3:b0:d5:da:0d:42:6e:fb:23:32:45:81:71:b8:
                    b3:ed:80:4d:49:01:f5:39:eb:23:86:e9:b8:84:34:
                    af:78:00:3d:9b:d8:06:ee:7b:9d:4f:e8:0e:b5:df:
                    15:ec:5a:56:b7:ca:20:93:36:82:73:67:78:d4:86:
                    ed:99:8d:bb:46:b5:1c:d2:0d:ba:b7:c6:68:3e:01:
                    5a:cd:4e:f6:44:40:42:89:9e:62:7a:f2:b1:be:95:
                    a3:5e:6f:29:57:8a:d8:30:b5:fb:bd:a2:d0:47:d6:
                    a1:8c:6e:13:89:81:b2:7b:1a:55:57:39:52:1b:54:
                    9a:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:4C:9A:5A:B4:E1:B9:09:07:9D:D4:47:E0:B0:33:B8:A1:92:E0:CF
            X509v3 Authority Key Identifier:
                keyid:1F:C7:5A:AD:A0:A5:1B:EE:1A:BE:6F:73:35:9F:79:B6:A3:46:F6:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912372F/9326C790776F11EC82642461C4F9AE02/H8daraClG-4avm9zNZ95tqNG9qQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H8daraClG-4avm9zNZ95tqNG9qQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912372F/9326C790776F11EC82642461C4F9AE02/FD8409A09C2611EC89DFBD46C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.155.50.0/23

    Signature Algorithm: sha256WithRSAEncryption
         42:43:12:da:ac:b3:9e:5f:92:6d:fb:a7:54:96:d4:c4:35:46:
         b9:5d:5b:60:6c:f8:0e:e3:e4:23:dc:70:7f:c4:61:7b:c4:79:
         e7:47:62:a6:45:ec:a4:d5:f4:63:d7:27:eb:a8:df:dd:22:77:
         69:eb:5b:cd:5f:71:4d:2e:ed:84:a5:29:c0:1a:d2:ea:fe:1e:
         2b:3f:04:67:45:47:31:53:e7:44:50:fb:30:60:00:c4:da:29:
         cf:a0:58:3a:cc:fe:0b:db:b0:19:0d:4a:f9:52:0b:3d:59:57:
         e3:bc:85:a1:88:fd:bd:f1:bc:8a:02:2a:0e:fc:37:8f:c7:b3:
         ca:60:89:02:f8:1d:e9:b7:24:93:50:6e:3b:39:62:e1:5c:73:
         45:9c:a2:98:fb:65:3b:62:0a:1e:5b:dd:d6:d3:21:5c:a4:6c:
         37:c7:54:45:ab:87:d9:bf:34:79:47:82:c8:ae:43:74:9d:80:
         e3:44:6a:2f:ea:c3:d9:f0:f7:ae:93:21:a4:53:2a:85:c1:3f:
         63:26:d2:dc:06:bb:e2:0c:11:c1:83:d7:a8:1f:97:06:4b:4a:
         86:dc:b0:96:cf:1b:0e:66:a0:47:6f:f2:7e:43:86:18:ca:6e:
         c1:d2:80:ed:46:d0:1a:f5:38:d4:e8:b1:34:c3:02:d4:12:aa:
         73:aa:2e:df
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAskwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjM3MkYxMTAvBgNVBAUTKDFGQzc1QUFEQTBBNTFCRUUxQUJFNkY3MzM1OUY3OUI2
QTM0NkY2QTQwHhcNMjMxMDA1MDE0MzQzWhcNMjQxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NTFlMTRjZi1lMzZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvfzL+joyBHJVX1obtq3LbAQfWBmQH1S85B7H6h/n+SdYkiPr1XQJWbbzcCQW
7Vx50p+B7ZXbHsFRcZdkWz66yj6HvNxRo8T4DKfmQ/HfbFnyZhWCNVHaaQUV/arJ
RaWPEFdQoouDpLuM5AzqNbyueAnPix8FhepFng2jiBabwu68aIrSin3D07DV2g1C
bvsjMkWBcbiz7YBNSQH1Oesjhum4hDSveAA9m9gG7nudT+gOtd8V7FpWt8ogkzaC
c2d41IbtmY27RrUc0g26t8ZoPgFazU72REBCiZ5ievKxvpWjXm8pV4rYMLX7vaLQ
R9ahjG4TiYGyexpVVzlSG1SaEwIDAQABo4IClTCCApEwHQYDVR0OBBYEFOFMmlq0
4bkJB53UR+CwM7ihkuDPMB8GA1UdIwQYMBaAFB/HWq2gpRvuGr5vczWfebajRvak
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzcyRi85MzI2Qzc5MDc3
NkYxMUVDODI2NDI0NjFDNEY5QUUwMi9IOGRhcmFDbEctNGF2bTl6Tlo5NXRxTkc5
cVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0g4ZGFyYUNsRy00YXZtOXpOWjk1dHFORzlxUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MjM3MkYvOTMyNkM3OTA3NzZGMTFFQzgyNjQyNDYxQzRGOUFFMDIvRkQ4NDA5QTA5
QzI2MTFFQzg5REZCRDQ2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnmzIwDQYJKoZIhvcNAQELBQADggEBAEJDEtqss55fkm37
p1SW1MQ1RrldW2Bs+A7j5CPccH/EYXvEeedHYqZF7KTV9GPXJ+uo390id2nrW81f
cU0u7YSlKcAa0ur+His/BGdFRzFT50RQ+zBgAMTaKc+gWDrM/gvbsBkNSvlSCz1Z
V+O8haGI/b3xvIoCKg78N4/Hs8pgiQL4Hem3JJNQbjs5YuFcc0Wcopj7ZTtiCh5b
3dbTIVykbDfHVEWrh9m/NHlHgsiuQ3SdgONEai/qw9nw966TIaRTKoXBP2Mm0twG
u+IMEcGD16gflwZLSobcsJbPGw5moEdv8n5DhhjKbsHSgO1G0Br1ONTosTTDAtQS
qnOqLt8=
-----END CERTIFICATE-----
Generated at Fri May 17 03:52:19 2024 by rpki-client on console-ams.rpki-client.org