Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9127EEB/19A626FE128611EA82AA0E5EC4F9AE02/B0B1732A2EE911EBA4CFBA4EC4F9AE02.roa
File:                     B0B1732A2EE911EBA4CFBA4EC4F9AE02.roa (download)
Hash identifier:          OZKOsHHBOXR5f9QYkbA4yDcsZu2KLwufYAgX9aAjyH4=
Subject key identifier:   41:7F:BC:13:C9:1D:1C:93:46:B0:EE:E8:48:55:DF:93:7D:87:B4:20
Certificate issuer:       /CN=A9127EEB/serialNumber=B3DF6BDBA3EFEB6516D0E77E13682FCAF1139EE5
Certificate serial:       0879
Authority key identifier: B3:DF:6B:DB:A3:EF:EB:65:16:D0:E7:7E:13:68:2F:CA:F1:13:9E:E5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s99r26Pv62UW0Od-E2gvyvETnuU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9127EEB/19A626FE128611EA82AA0E5EC4F9AE02/B0B1732A2EE911EBA4CFBA4EC4F9AE02.roa
ROA valid until:          May 01 00:00:00 2023 GMT
asID:                     20473
IP address blocks:
    1: 103.49.42.0/24 maxlen: 24

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2169 (0x879)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9127EEB/serialNumber=B3DF6BDBA3EFEB6516D0E77E13682FCAF1139EE5
        Validity
            Not Before: Feb 22 08:46:32 2022 GMT
            Not After : May  1 00:00:00 2023 GMT
        Subject: CN=6214a2e8-0b68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:46:0e:48:e0:94:57:a0:c2:2f:01:f3:5b:02:
                    9d:3c:11:89:1c:c7:f3:68:b2:d8:c1:21:12:fb:84:
                    52:73:37:59:28:18:0f:78:a0:c1:c4:3c:9c:fd:67:
                    d5:38:d0:62:24:2a:9c:93:c5:38:da:93:6d:a4:41:
                    8b:70:44:8b:fe:09:56:43:aa:b4:10:01:7e:3c:ec:
                    ce:87:43:56:50:c3:ae:f4:42:47:70:79:5a:f1:ca:
                    04:06:ec:76:ea:41:10:de:d5:86:9e:eb:cc:5b:e3:
                    7d:80:c0:0d:79:cc:e1:d5:3e:3b:65:28:6d:8a:44:
                    30:33:a3:75:ce:48:0a:1a:47:92:1c:29:bb:64:b9:
                    8b:17:fe:a4:6d:70:bf:e5:17:27:97:44:96:17:c0:
                    5d:40:0b:1a:5e:cc:30:c0:6f:df:60:b2:1e:96:f1:
                    92:83:ac:09:0d:6e:49:8e:6d:30:79:06:99:73:a2:
                    62:85:0e:af:5e:e1:53:75:bb:6d:27:e4:ad:9b:dc:
                    23:22:75:0c:88:8b:dd:77:3d:7a:44:0b:b7:4f:9e:
                    70:f0:44:21:43:f9:55:ac:14:fe:f8:ca:83:27:e4:
                    f9:83:ed:44:7c:47:98:78:eb:75:81:d5:94:28:c3:
                    38:1c:39:9c:a6:e5:52:fc:25:85:d0:ad:2f:5a:73:
                    e3:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                41:7F:BC:13:C9:1D:1C:93:46:B0:EE:E8:48:55:DF:93:7D:87:B4:20
            X509v3 Authority Key Identifier: 
                keyid:B3:DF:6B:DB:A3:EF:EB:65:16:D0:E7:7E:13:68:2F:CA:F1:13:9E:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9127EEB/19A626FE128611EA82AA0E5EC4F9AE02/s99r26Pv62UW0Od-E2gvyvETnuU.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s99r26Pv62UW0Od-E2gvyvETnuU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127EEB/19A626FE128611EA82AA0E5EC4F9AE02/B0B1732A2EE911EBA4CFBA4EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.49.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:4b:cd:5b:64:39:15:d4:09:8f:d9:2f:21:a4:83:08:ee:b3:
         a4:49:ec:b8:ea:ec:86:ec:56:de:1f:bb:88:b2:1b:8d:40:12:
         6b:4a:67:89:e8:c8:7d:01:09:c8:0e:92:4b:56:93:57:44:9f:
         b4:82:66:af:e1:2a:b0:a9:eb:6d:b8:d3:dc:6c:eb:80:47:86:
         ac:3b:bc:a2:05:19:67:2f:a8:2f:fb:1d:21:03:4c:30:c9:9d:
         ca:42:a6:5c:56:68:02:6e:b8:3e:d9:ca:39:93:0c:de:45:74:
         70:87:a0:ba:7d:8d:3b:c3:ef:93:14:a4:8d:ef:4a:ce:2a:c9:
         b6:52:fd:16:9f:58:d8:a0:d3:02:55:9c:27:fc:76:8f:f5:c2:
         04:6d:ef:33:27:ab:f1:46:d6:f3:c6:05:4a:13:1c:48:77:c9:
         2d:b7:d4:52:c7:e5:64:02:a7:1e:2a:ba:62:e5:8c:b8:52:b7:
         39:9e:d6:29:22:7a:1d:2e:ff:34:da:26:f7:fe:a3:d2:8e:9f:
         b8:fa:46:94:81:ba:14:2c:d6:26:37:ea:d2:9f:19:86:21:27:
         6f:09:79:f9:f6:f9:ae:75:fc:b0:78:42:8c:d8:6c:6f:64:ed:
         32:59:8b:11:1a:20:d6:8b:eb:d2:a9:7d:58:6f:e3:49:25:06:
         2c:73:67:93
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICCHkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjdFRUIxMTAvBgNVBAUTKEIzREY2QkRCQTNFRkVCNjUxNkQwRTc3RTEzNjgyRkNB
RjExMzlFRTUwHhcNMjIwMjIyMDg0NjMyWhcNMjMwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02MjE0YTJlOC0wYjY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqUYOSOCUV6DCLwHzWwKdPBGJHMfzaLLYwSES+4RSczdZKBgPeKDBxDyc/WfV
ONBiJCqck8U42pNtpEGLcESL/glWQ6q0EAF+POzOh0NWUMOu9EJHcHla8coEBux2
6kEQ3tWGnuvMW+N9gMANeczh1T47ZShtikQwM6N1zkgKGkeSHCm7ZLmLF/6kbXC/
5Rcnl0SWF8BdQAsaXswwwG/fYLIelvGSg6wJDW5Jjm0weQaZc6JihQ6vXuFTdbtt
J+Stm9wjInUMiIvddz16RAu3T55w8EQhQ/lVrBT++MqDJ+T5g+1EfEeYeOt1gdWU
KMM4HDmcpuVS/CWF0K0vWnPjvQIDAQABo4IClTCCApEwHQYDVR0OBBYEFEF/vBPJ
HRyTRrDu6EhV35N9h7QgMB8GA1UdIwQYMBaAFLPfa9uj7+tlFtDnfhNoL8rxE57l
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyN0VFQi8xOUE2MjZGRTEy
ODYxMUVBODJBQTBFNUVDNEY5QUUwMi9zOTlyMjZQdjYyVVcwT2QtRTJndnl2RVRu
dVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3M5OXIyNlB2NjJVVzBPZC1FMmd2eXZFVG51VS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MjdFRUIvMTlBNjI2RkUxMjg2MTFFQTgyQUEwRTVFQzRGOUFFMDIvQjBCMTczMkEy
RUU5MTFFQkE0Q0ZCQTRFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnMSowDQYJKoZIhvcNAQELBQADggEBAGVLzVtkORXUCY/Z
LyGkgwjus6RJ7Ljq7IbsVt4fu4iyG41AEmtKZ4noyH0BCcgOkktWk1dEn7SCZq/h
KrCp622409xs64BHhqw7vKIFGWcvqC/7HSEDTDDJncpCplxWaAJuuD7ZyjmTDN5F
dHCHoLp9jTvD75MUpI3vSs4qybZS/RafWNig0wJVnCf8do/1wgRt7zMnq/FG1vPG
BUoTHEh3yS231FLH5WQCpx4qumLljLhStzme1ikieh0u/zTaJvf+o9KOn7j6RpSB
uhQs1iY36tKfGYYhJ28Jefn2+a51/LB4QozYbG9k7TJZixEaINaL69KpfVhv40kl
BixzZ5M=
-----END CERTIFICATE-----
Generated at Fri Dec 9 03:32:19 2022 by rpki-client.