Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912AC33/04B3348872BC11EC86116D5EC4F9AE02/E4804004737211EC866EAC24C4F9AE02.roa
File:                     E4804004737211EC866EAC24C4F9AE02.roa (raw, json)
Hash identifier:          Z9M2BTILWpi1zrWrtTIZdVPHhfVkCZzh9YzYElbGzh4=
Subject key identifier:   E1:19:88:3F:45:0B:5D:BD:FE:62:9A:99:FD:A1:86:DA:5D:D5:2A:2B
Certificate issuer:       /CN=A912AC33/serialNumber=C95CE9D1B6B31081C025D46A3A167FCFDFA72634
Certificate serial:       02D5
Authority key identifier: C9:5C:E9:D1:B6:B3:10:81:C0:25:D4:6A:3A:16:7F:CF:DF:A7:26:34
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912AC33/04B3348872BC11EC86116D5EC4F9AE02/E4804004737211EC866EAC24C4F9AE02.roa
Signing time:             Fri 15 Sep 2023 01:43:17 +0000
ROA not before:           Fri 15 Sep 2023 01:43:17 +0000
ROA not after:            Sun 01 Dec 2024 00:00:00 +0000
asID:                     59253
IP address blocks:        103.47.155.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912AC33/04B3348872BC11EC86116D5EC4F9AE02/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.crl
                          rsync://rpki.apnic.net/member_repository/A912AC33/04B3348872BC11EC86116D5EC4F9AE02/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 May 2024 02:53:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 725 (0x2d5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912AC33/serialNumber=C95CE9D1B6B31081C025D46A3A167FCFDFA72634
        Validity
            Not Before: Sep 15 01:43:17 2023 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=6503b6b5-c6a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:9e:2e:1c:6a:87:0d:de:cf:ef:b6:46:e9:d8:
                    f0:c1:b8:a8:6a:e7:b0:86:8b:a3:9d:5d:36:6f:a4:
                    e0:bd:e7:84:ba:c2:42:09:d5:9d:de:3f:80:9e:a9:
                    a9:43:40:5d:00:bf:e6:52:a2:5b:27:cf:8e:ce:6b:
                    19:67:a0:9c:45:5b:b8:4c:d1:0c:ff:23:96:63:00:
                    58:83:74:43:4e:2e:d5:b2:88:69:6f:8d:d0:36:a7:
                    26:b2:2b:6e:c1:c9:49:c2:75:af:16:0c:48:41:f6:
                    4d:8c:d0:b8:9c:eb:e9:00:af:c5:7d:2c:3e:7e:8c:
                    1b:41:66:47:1f:f5:b2:96:7c:95:d0:cb:fe:7f:51:
                    09:0a:12:05:6a:84:2e:c7:a1:e6:f2:3e:bd:e7:a1:
                    e9:f9:17:38:bd:4d:25:40:67:40:18:b5:10:69:77:
                    bb:49:d2:da:5e:ff:fc:55:59:3c:be:e0:07:13:d3:
                    db:61:16:c2:6a:95:45:a9:db:8c:24:47:45:13:0c:
                    0c:2a:15:d8:94:4d:de:7e:e5:65:80:4c:60:43:79:
                    9c:8a:9f:cd:a7:3f:19:cd:9c:68:88:53:e5:e3:7c:
                    97:84:24:cb:73:4d:49:19:c3:9e:cf:1b:13:7e:14:
                    cc:67:5f:07:e9:19:72:18:12:c4:8b:ff:f3:b6:75:
                    e8:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:19:88:3F:45:0B:5D:BD:FE:62:9A:99:FD:A1:86:DA:5D:D5:2A:2B
            X509v3 Authority Key Identifier:
                keyid:C9:5C:E9:D1:B6:B3:10:81:C0:25:D4:6A:3A:16:7F:CF:DF:A7:26:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912AC33/04B3348872BC11EC86116D5EC4F9AE02/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AC33/04B3348872BC11EC86116D5EC4F9AE02/E4804004737211EC866EAC24C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.47.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:e4:79:86:87:bd:53:c7:2d:b2:d0:a3:50:b5:1c:81:81:43:
         54:9b:4e:24:d3:77:72:e9:cd:bd:df:bd:14:dd:22:09:54:90:
         95:06:be:62:94:87:6e:de:3a:15:f1:4c:2b:22:26:bf:37:67:
         18:bd:4e:a8:58:4e:1e:f9:79:90:f9:83:06:61:ec:d2:48:22:
         69:9d:6e:5e:0d:84:53:6e:52:04:60:eb:54:9b:8a:10:60:27:
         22:d3:d0:63:44:82:19:c5:bf:47:03:6c:34:96:ee:11:1f:d2:
         6e:01:d9:2d:af:cb:e2:25:3c:94:9e:73:65:a1:94:c8:c7:d8:
         78:a1:cf:f7:5b:b4:bb:8f:4f:73:6a:fe:89:cb:bd:ba:bb:f6:
         ae:d2:6a:8a:d7:06:8b:c2:92:a1:19:9b:aa:53:10:db:fe:7e:
         f8:22:c8:34:06:e7:f0:d6:39:3d:3d:40:ee:f4:00:88:37:fe:
         42:b3:d9:08:3e:c5:9a:4b:d5:60:db:91:48:4c:47:d3:3c:8a:
         f2:f3:15:37:21:1e:d3:dd:ab:87:1f:a5:63:ce:74:35:b0:e1:
         40:49:98:21:4e:49:ed:69:d8:96:6a:65:03:70:07:f2:44:6c:
         e5:33:41:05:e8:49:76:32:d1:d0:6c:b0:05:2f:b4:66:27:53:
         e4:e3:82:41
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAtUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkFDMzMxMTAvBgNVBAUTKEM5NUNFOUQxQjZCMzEwODFDMDI1RDQ2QTNBMTY3RkNG
REZBNzI2MzQwHhcNMjMwOTE1MDE0MzE3WhcNMjQxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NTAzYjZiNS1jNmEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA054uHGqHDd7P77ZG6djwwbioauewhoujnV02b6TgveeEusJCCdWd3j+Anqmp
Q0BdAL/mUqJbJ8+OzmsZZ6CcRVu4TNEM/yOWYwBYg3RDTi7Vsohpb43QNqcmsitu
wclJwnWvFgxIQfZNjNC4nOvpAK/FfSw+fowbQWZHH/WylnyV0Mv+f1EJChIFaoQu
x6Hm8j6956Hp+Rc4vU0lQGdAGLUQaXe7SdLaXv/8VVk8vuAHE9PbYRbCapVFqduM
JEdFEwwMKhXYlE3efuVlgExgQ3mcip/Npz8ZzZxoiFPl43yXhCTLc01JGcOezxsT
fhTMZ18H6RlyGBLEi//ztnXoIQIDAQABo4IClTCCApEwHQYDVR0OBBYEFOEZiD9F
C129/mKamf2hhtpd1SorMB8GA1UdIwQYMBaAFMlc6dG2sxCBwCXUajoWf8/fpyY0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQUMzMy8wNEIzMzQ4ODcy
QkMxMUVDODYxMTZENUVDNEY5QUUwMi95VnpwMGJhekVJSEFKZFJxT2haX3o5LW5K
alEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3lWenAwYmF6RUlIQUpkUnFPaFpfejktbkpqUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MkFDMzMvMDRCMzM0ODg3MkJDMTFFQzg2MTE2RDVFQzRGOUFFMDIvRTQ4MDQwMDQ3
MzcyMTFFQzg2NkVBQzI0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnL5swDQYJKoZIhvcNAQELBQADggEBAAvkeYaHvVPHLbLQ
o1C1HIGBQ1SbTiTTd3Lpzb3fvRTdIglUkJUGvmKUh27eOhXxTCsiJr83Zxi9TqhY
Th75eZD5gwZh7NJIImmdbl4NhFNuUgRg61SbihBgJyLT0GNEghnFv0cDbDSW7hEf
0m4B2S2vy+IlPJSec2WhlMjH2Hihz/dbtLuPT3Nq/onLvbq79q7SaorXBovCkqEZ
m6pTENv+fvgiyDQG5/DWOT09QO70AIg3/kKz2Qg+xZpL1WDbkUhMR9M8ivLzFTch
HtPdq4cfpWPOdDWw4UBJmCFOSe1p2JZqZQNwB/JEbOUzQQXoSXYy0dBssAUvtGYn
U+TjgkE=
-----END CERTIFICATE-----
Generated at Fri May 17 03:50:05 2024 by rpki-client on console-fra.rpki-client.org