Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913258C/B4C45FE0548D11EA86C9DD7EC4F9AE02/F4E06C32804911EDABB05C09C4F9AE02.roa
File:                     F4E06C32804911EDABB05C09C4F9AE02.roa (raw, json)
Hash identifier:          Cs3XDB8Exoiwq3DikXDvRD8e+RQefxvnYwVttguA5sI=
Subject key identifier:   2D:67:3E:73:CD:AC:FD:78:CF:07:A1:D7:19:6A:8B:51:31:33:B8:6A
Certificate issuer:       /CN=A913258C/serialNumber=A68CFA311EBB1F10320EA207753030E7F3A28F72
Certificate serial:       090A
Authority key identifier: A6:8C:FA:31:1E:BB:1F:10:32:0E:A2:07:75:30:30:E7:F3:A2:8F:72
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/poz6MR67HxAyDqIHdTAw5_Oij3I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913258C/B4C45FE0548D11EA86C9DD7EC4F9AE02/F4E06C32804911EDABB05C09C4F9AE02.roa
Signing time:             Sat 04 Feb 2023 21:47:40 +0000
ROA not before:           Sat 04 Feb 2023 21:47:40 +0000
ROA not after:            Wed 01 May 2024 00:00:00 +0000
asID:                     140224
IP address blocks:        103.148.150.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913258C/B4C45FE0548D11EA86C9DD7EC4F9AE02/poz6MR67HxAyDqIHdTAw5_Oij3I.crl
                          rsync://rpki.apnic.net/member_repository/A913258C/B4C45FE0548D11EA86C9DD7EC4F9AE02/poz6MR67HxAyDqIHdTAw5_Oij3I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/poz6MR67HxAyDqIHdTAw5_Oij3I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 Mar 2023 21:27:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2314 (0x90a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913258C/serialNumber=A68CFA311EBB1F10320EA207753030E7F3A28F72
        Validity
            Not Before: Feb  4 21:47:40 2023 GMT
            Not After : May  1 00:00:00 2024 GMT
        Subject: CN=63ded27b-998d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:30:34:e5:34:a5:e5:e4:69:74:0d:cd:70:34:
                    14:41:36:0b:db:13:c7:f9:4a:2d:c8:2b:60:f3:92:
                    30:c8:ce:3e:42:14:8b:fb:53:c7:a7:97:e0:fb:d9:
                    7a:a7:a2:6f:4c:fe:6e:01:b0:e1:d0:72:a8:b3:18:
                    fc:77:50:dd:b2:48:ce:11:21:bd:b6:b5:35:9e:75:
                    72:01:07:55:b0:1e:19:ac:7e:e3:9d:f2:98:8c:17:
                    b1:20:28:e7:65:2a:23:17:b9:18:3a:a1:79:4e:25:
                    34:87:8d:93:9f:d2:20:35:63:c0:c9:50:1b:c4:9a:
                    2f:af:bb:cf:31:5c:e8:73:0e:ca:9c:fc:7c:8f:0e:
                    7b:1c:00:2f:31:ba:13:15:8d:f9:8f:bd:42:4a:f1:
                    0d:bc:f0:3f:50:d6:9c:4a:eb:81:29:ed:88:48:da:
                    e3:96:3f:a7:88:f6:88:86:18:2e:be:d9:30:16:14:
                    c6:b0:c6:ed:25:68:91:60:ab:b3:1f:bc:a6:86:2b:
                    10:5c:02:d4:a0:5c:31:8f:dc:22:1b:90:22:2d:03:
                    8e:1e:40:7d:b9:6e:5d:ae:62:45:55:cd:ac:15:2e:
                    93:0c:0a:c0:00:f3:51:2d:9d:cc:26:83:a5:61:00:
                    cc:34:fd:f0:55:8b:3a:81:97:87:4e:3c:af:a8:42:
                    ef:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                2D:67:3E:73:CD:AC:FD:78:CF:07:A1:D7:19:6A:8B:51:31:33:B8:6A
            X509v3 Authority Key Identifier: 
                keyid:A6:8C:FA:31:1E:BB:1F:10:32:0E:A2:07:75:30:30:E7:F3:A2:8F:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913258C/B4C45FE0548D11EA86C9DD7EC4F9AE02/poz6MR67HxAyDqIHdTAw5_Oij3I.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/poz6MR67HxAyDqIHdTAw5_Oij3I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913258C/B4C45FE0548D11EA86C9DD7EC4F9AE02/F4E06C32804911EDABB05C09C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.148.150.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a5:c4:fb:d9:9d:de:be:cd:96:04:92:fd:1a:90:14:9d:ee:01:
         66:32:81:fd:d9:27:9a:12:58:17:09:b8:c3:21:2a:6f:9f:7f:
         d1:c8:f7:59:76:76:4f:c5:1d:9d:06:6f:ee:91:22:42:6e:c8:
         89:fa:bc:e1:95:9e:b3:08:d4:2c:18:73:d9:41:04:0b:ed:b4:
         d4:52:61:20:9e:13:b3:a9:b0:a3:69:6c:27:fa:31:fc:29:1a:
         c6:77:96:da:a3:65:49:71:2c:98:ec:3b:55:ca:32:09:9c:4a:
         a1:d7:04:90:20:f1:a9:06:04:5b:9a:dd:9e:e5:bf:93:09:35:
         83:03:70:2e:b1:01:9d:e0:94:16:ed:f8:b7:bc:ab:5b:d1:d5:
         eb:dc:f2:74:0e:6c:f8:85:b2:7c:04:23:c8:f0:e0:88:0d:bb:
         c7:b0:00:c1:c6:65:58:ed:da:69:71:20:ec:36:2c:07:73:2d:
         24:61:10:62:a0:20:fa:94:d2:ec:f5:28:1c:67:89:7f:b5:86:
         be:ac:4c:01:11:e1:32:6b:1b:1c:4d:15:ad:1d:e6:b5:db:ba:
         16:40:29:53:1d:53:70:a3:11:fa:cd:50:2d:29:05:dc:5f:55:
         36:ea:a3:45:a7:3e:4f:12:38:d0:92:1e:f3:9b:e2:51:67:80:
         94:75:a1:20
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICCQowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzI1OEMxMTAvBgNVBAUTKEE2OENGQTMxMUVCQjFGMTAzMjBFQTIwNzc1MzAzMEU3
RjNBMjhGNzIwHhcNMjMwMjA0MjE0NzQwWhcNMjQwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02M2RlZDI3Yi05OThkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzDA05TSl5eRpdA3NcDQUQTYL2xPH+UotyCtg85IwyM4+QhSL+1PHp5fg+9l6
p6JvTP5uAbDh0HKosxj8d1DdskjOESG9trU1nnVyAQdVsB4ZrH7jnfKYjBexICjn
ZSojF7kYOqF5TiU0h42Tn9IgNWPAyVAbxJovr7vPMVzocw7KnPx8jw57HAAvMboT
FY35j71CSvENvPA/UNacSuuBKe2ISNrjlj+niPaIhhguvtkwFhTGsMbtJWiRYKuz
H7ymhisQXALUoFwxj9wiG5AiLQOOHkB9uW5drmJFVc2sFS6TDArAAPNRLZ3MJoOl
YQDMNP3wVYs6gZeHTjyvqELv6QIDAQABo4IClTCCApEwHQYDVR0OBBYEFC1nPnPN
rP14zweh1xlqi1ExM7hqMB8GA1UdIwQYMBaAFKaM+jEeux8QMg6iB3UwMOfzoo9y
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMjU4Qy9CNEM0NUZFMDU0
OEQxMUVBODZDOUREN0VDNEY5QUUwMi9wb3o2TVI2N0h4QXlEcUlIZFRBdzVfT2lq
M0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3BvejZNUjY3SHhBeURxSUhkVEF3NV9PaWozSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzI1OEMvQjRDNDVGRTA1NDhEMTFFQTg2QzlERDdFQzRGOUFFMDIvRjRFMDZDMzI4
MDQ5MTFFREFCQjA1QzA5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnlJYwDQYJKoZIhvcNAQELBQADggEBAKXE+9md3r7NlgSS
/RqQFJ3uAWYygf3ZJ5oSWBcJuMMhKm+ff9HI91l2dk/FHZ0Gb+6RIkJuyIn6vOGV
nrMI1CwYc9lBBAvttNRSYSCeE7OpsKNpbCf6MfwpGsZ3ltqjZUlxLJjsO1XKMgmc
SqHXBJAg8akGBFua3Z7lv5MJNYMDcC6xAZ3glBbt+Le8q1vR1evc8nQObPiFsnwE
I8jw4IgNu8ewAMHGZVjt2mlxIOw2LAdzLSRhEGKgIPqU0uz1KBxniX+1hr6sTAER
4TJrGxxNFa0d5rXbuhZAKVMdU3CjEfrNUC0pBdxfVTbqo0WnPk8SONCSHvOb4lFn
gJR1oSA=
-----END CERTIFICATE-----
Generated at Wed Mar 15 11:53:17 2023 by rpki-client on console-fra.rpki-client.org