Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/B97D647C1A8811EEB5AE963CC4F9AE02.roa
File:                     B97D647C1A8811EEB5AE963CC4F9AE02.roa (raw, json)
Hash identifier:          ZeCYlYIZOe18L8obkQDh8oWchb2x2gc6pA83/iYindw=
Subject key identifier:   11:99:A5:81:61:91:F5:CB:9E:F5:30:48:01:B1:25:5F:CE:7A:F0:AF
Certificate issuer:       /CN=A913FBB2/serialNumber=AD85B7E18B3A16F53E92938A334EC6BB3EB8B630
Certificate serial:       7D
Authority key identifier: AD:85:B7:E1:8B:3A:16:F5:3E:92:93:8A:33:4E:C6:BB:3E:B8:B6:30
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rYW34Ys6FvU-kpOKM07Guz64tjA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/B97D647C1A8811EEB5AE963CC4F9AE02.roa
Signing time:             Fri 09 Feb 2024 06:08:01 +0000
ROA not before:           Fri 09 Feb 2024 06:08:01 +0000
ROA not after:            Thu 01 May 2025 00:00:00 +0000
asID:                     16509
IP address blocks:        103.73.186.0/24 maxlen: 24
                          103.73.187.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.crl
                          rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rYW34Ys6FvU-kpOKM07Guz64tjA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 08 May 2024 06:37:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125 (0x7d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913FBB2/serialNumber=AD85B7E18B3A16F53E92938A334EC6BB3EB8B630
        Validity
            Not Before: Feb  9 06:08:01 2024 GMT
            Not After : May  1 00:00:00 2025 GMT
        Subject: CN=65c5c141-ce26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:40:2b:a8:70:8e:02:20:e7:d3:35:e2:54:3b:
                    72:c6:8c:ee:37:98:7e:17:e6:99:3d:ad:b8:8c:f7:
                    dc:8b:0f:53:ce:2d:8b:a4:2a:79:dc:8d:6d:77:9c:
                    29:45:2e:f6:b6:5f:e1:a7:21:d4:10:63:37:ed:e6:
                    ae:b6:dc:3c:af:76:c6:0a:75:7f:d3:8d:87:bd:1b:
                    83:66:b6:4c:2c:43:2e:88:1e:8b:81:50:63:00:a8:
                    30:63:cc:2f:62:3c:52:07:fd:d6:cb:70:5a:b3:de:
                    d3:d7:f4:64:40:f1:de:5b:cc:4b:d5:92:32:b1:e6:
                    9f:f1:a7:36:37:d6:b0:45:7c:cd:2c:da:b4:c8:9d:
                    e2:35:cd:66:2f:78:58:64:dd:13:a4:cf:52:e6:d8:
                    06:56:6e:67:1d:6f:05:97:98:a8:8d:fd:86:e6:67:
                    cb:80:37:f7:96:d1:fd:16:33:c2:1d:50:fa:4b:58:
                    2b:ef:5e:10:77:e0:bb:d8:ef:40:9b:a2:56:58:75:
                    4c:28:c0:62:7f:8a:85:fb:50:99:bc:54:fa:fc:cb:
                    2b:c1:29:2d:2c:cc:e1:22:2d:0e:56:76:30:ca:21:
                    a6:4c:44:5c:49:7c:c1:b3:f0:6c:87:ab:78:ad:3d:
                    d9:10:90:40:1c:e7:26:6c:88:59:da:75:ef:0e:b8:
                    23:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:99:A5:81:61:91:F5:CB:9E:F5:30:48:01:B1:25:5F:CE:7A:F0:AF
            X509v3 Authority Key Identifier:
                keyid:AD:85:B7:E1:8B:3A:16:F5:3E:92:93:8A:33:4E:C6:BB:3E:B8:B6:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rYW34Ys6FvU-kpOKM07Guz64tjA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/B97D647C1A8811EEB5AE963CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.73.186.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7d:28:29:c8:1e:f7:30:7b:6c:67:86:52:6f:c2:f2:6b:a9:c3:
         ed:6c:88:b5:aa:99:ee:6f:95:ea:5e:34:51:48:85:21:20:69:
         c0:9c:09:4f:44:7d:22:47:09:62:20:98:8f:cf:a5:a1:6b:23:
         54:9e:e6:37:b5:d5:2f:13:14:ee:23:04:96:53:75:27:ae:fe:
         70:53:df:0e:c6:e5:1c:43:0e:7b:ac:d6:bc:7e:b7:aa:b8:95:
         be:5c:61:74:90:fc:1b:47:7d:c2:3a:de:c9:4b:48:a5:5a:3f:
         87:c0:6e:82:7e:23:9f:c0:98:f4:1a:bc:af:4d:9b:66:9a:20:
         80:62:b5:8a:1f:a7:47:46:11:54:93:24:58:c6:cc:92:70:8e:
         58:f0:9d:71:9f:62:d1:57:71:9a:b1:29:d0:79:06:79:37:bd:
         ab:d5:ee:82:b8:3d:cc:61:2c:19:e2:ff:5f:95:a8:7d:a1:d8:
         71:e0:8f:35:72:d5:54:db:72:dd:5d:ba:5d:f7:51:22:d5:d8:
         ca:3f:33:8b:92:83:18:05:21:65:1e:ce:16:14:40:27:23:f1:
         a2:dc:ff:6c:7c:b7:96:7b:89:3f:dd:0d:fc:d7:27:8d:9e:62:
         c2:f3:34:15:3c:59:70:e7:12:52:36:38:a9:03:78:6b:b4:e2:
         c7:a3:e8:e6
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBfTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz
RkJCMjExMC8GA1UEBRMoQUQ4NUI3RTE4QjNBMTZGNTNFOTI5MzhBMzM0RUM2QkIz
RUI4QjYzMDAeFw0yNDAyMDkwNjA4MDFaFw0yNTA1MDEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY1YzVjMTQxLWNlMjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCfQCuocI4CIOfTNeJUO3LGjO43mH4X5pk9rbiM99yLD1POLYukKnncjW13nClF
Lva2X+GnIdQQYzft5q623DyvdsYKdX/TjYe9G4NmtkwsQy6IHouBUGMAqDBjzC9i
PFIH/dbLcFqz3tPX9GRA8d5bzEvVkjKx5p/xpzY31rBFfM0s2rTIneI1zWYveFhk
3ROkz1Lm2AZWbmcdbwWXmKiN/YbmZ8uAN/eW0f0WM8IdUPpLWCvvXhB34LvY70Cb
olZYdUwowGJ/ioX7UJm8VPr8yyvBKS0szOEiLQ5WdjDKIaZMRFxJfMGz8GyHq3it
PdkQkEAc5yZsiFnade8OuCPXAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUEZmlgWGR
9cue9TBIAbElX8568K8wHwYDVR0jBBgwFoAUrYW34Ys6FvU+kpOKM07Guz64tjAw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNGQkIyLzBFMjcwNTQ0MUE4
NjExRUVBMEFBODcxNkM0RjlBRTAyL3JZVzM0WXM2RnZVLWtwT0tNMDdHdXo2NHRq
QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvcllXMzRZczZGdlUta3BPS00wN0d1ejY0dGpBLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
RkJCMi8wRTI3MDU0NDFBODYxMUVFQTBBQTg3MTZDNEY5QUUwMi9COTdENjQ3QzFB
ODgxMUVFQjVBRTk2M0NDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAWdJujANBgkqhkiG9w0BAQsFAAOCAQEAfSgpyB73MHtsZ4ZS
b8Lya6nD7WyItaqZ7m+V6l40UUiFISBpwJwJT0R9IkcJYiCYj8+loWsjVJ7mN7XV
LxMU7iMEllN1J67+cFPfDsblHEMOe6zWvH63qriVvlxhdJD8G0d9wjreyUtIpVo/
h8Bugn4jn8CY9Bq8r02bZpoggGK1ih+nR0YRVJMkWMbMknCOWPCdcZ9i0VdxmrEp
0HkGeTe9q9Xugrg9zGEsGeL/X5WofaHYceCPNXLVVNty3V26XfdRItXYyj8zi5KD
GAUhZR7OFhRAJyPxotz/bHy3lnuJP90N/NcnjZ5iwvM0FTxZcOcSUjY4qQN4a7Ti
x6Po5g==
-----END CERTIFICATE-----
Generated at Wed May 1 07:55:38 2024 by rpki-client on console-fra.rpki-client.org