Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/59D3C5822AF711EE8EDEA185C4F9AE02.roa
File:                     59D3C5822AF711EE8EDEA185C4F9AE02.roa (raw, json)
Hash identifier:          8Chv2g/XLV0WVFsAUAJn4qrWtRsDgyBb3YJ5fOKl4mQ=
Subject key identifier:   74:B4:C7:69:D5:BB:B7:DB:38:D1:32:1B:8E:A8:01:6D:5F:FE:28:DB
Certificate issuer:       /CN=A9144436/serialNumber=CC69231C1CA15BCE00EE8D45D3CCFFDE452D4B92
Certificate serial:       1354
Authority key identifier: CC:69:23:1C:1C:A1:5B:CE:00:EE:8D:45:D3:CC:FF:DE:45:2D:4B:92
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zGkjHByhW84A7o1F08z_3kUtS5I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/59D3C5822AF711EE8EDEA185C4F9AE02.roa
Signing time:             Tue 25 Jul 2023 14:27:15 +0000
ROA not before:           Tue 25 Jul 2023 14:27:15 +0000
ROA not after:            Sat 31 Aug 2024 00:00:00 +0000
asID:                     131464
IP address blocks:        103.115.242.0/23 maxlen: 23
                          103.115.242.0/24 maxlen: 24
                          103.115.243.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.crl
                          rsync://rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zGkjHByhW84A7o1F08z_3kUtS5I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 14:50:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4948 (0x1354)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9144436/serialNumber=CC69231C1CA15BCE00EE8D45D3CCFFDE452D4B92
        Validity
            Not Before: Jul 25 14:27:15 2023 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=64bfdbc3-2500
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:d1:3c:a5:f2:4e:43:24:c9:96:dd:ee:25:cc:
                    4c:71:42:29:88:1f:63:5a:d6:29:94:8b:72:35:ab:
                    b3:6e:46:c2:1b:21:e1:60:0d:14:49:d1:d7:9f:0e:
                    be:2b:dd:28:70:b7:1c:40:52:0a:1a:3e:04:06:38:
                    a3:5a:c0:4c:c2:35:b2:e6:81:ad:54:1a:77:5f:99:
                    4b:45:60:7b:f4:10:20:10:52:41:57:55:92:51:b1:
                    09:05:d3:51:c2:ae:48:b2:6f:bb:81:94:8c:6f:08:
                    a1:e9:f5:04:c3:f9:35:85:88:48:27:f3:50:ba:38:
                    2a:bb:df:8c:77:7c:b6:d3:9e:fb:48:74:33:51:02:
                    7f:f5:43:a9:4c:88:cf:d2:07:1c:b7:e0:df:bb:29:
                    6f:ad:f5:4c:a2:90:87:6c:a9:e9:b7:a4:bf:3b:f6:
                    f3:c6:3e:89:9f:84:6b:d9:49:9c:d4:75:72:8d:6f:
                    5a:e3:dc:78:c7:91:fd:dc:e9:2f:83:b0:a4:db:b0:
                    6b:16:76:44:a4:5a:57:36:61:b5:ea:65:b8:7b:f2:
                    e9:8c:de:41:54:44:8d:cb:28:20:ab:6a:66:cb:fc:
                    e0:46:f5:2a:14:c5:65:dd:b6:56:84:13:ba:6d:e0:
                    54:d3:52:5f:43:f0:5c:4b:36:24:1b:59:ee:91:17:
                    a9:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:B4:C7:69:D5:BB:B7:DB:38:D1:32:1B:8E:A8:01:6D:5F:FE:28:DB
            X509v3 Authority Key Identifier:
                keyid:CC:69:23:1C:1C:A1:5B:CE:00:EE:8D:45:D3:CC:FF:DE:45:2D:4B:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zGkjHByhW84A7o1F08z_3kUtS5I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/59D3C5822AF711EE8EDEA185C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.115.242.0/23

    Signature Algorithm: sha256WithRSAEncryption
         28:ee:6d:52:5c:b9:fa:90:97:d5:be:bf:a0:0a:42:8b:8f:8c:
         2f:62:cc:41:9b:d9:b7:f2:e3:da:d8:a0:42:21:2f:84:d2:e4:
         86:7e:2f:bb:6e:f1:7f:4b:5f:80:42:51:bc:93:b8:4e:55:07:
         7b:f1:69:f2:f4:84:d0:eb:12:55:45:d8:f6:47:a6:7b:f1:7e:
         b3:1b:7c:61:49:5f:82:71:31:07:65:25:8f:d4:82:39:c6:5f:
         09:48:c7:7d:78:1a:96:52:29:d3:2f:5e:f3:8a:58:5a:5a:5d:
         ac:1f:e0:d0:ce:da:c6:5a:4a:ed:04:e2:9a:8d:9e:cc:53:ca:
         0c:02:62:f0:ff:b8:25:dc:7c:b0:22:51:26:06:3d:54:8e:b7:
         81:93:da:6c:83:11:ba:e0:ad:9c:b7:83:25:f7:9e:8d:55:9c:
         0c:8d:b1:1d:c7:6d:ec:4d:0a:3f:aa:8a:1b:b7:af:fa:d8:37:
         0c:33:44:14:0e:c4:9f:5d:bf:1f:7d:4b:69:a5:40:5f:24:27:
         95:f9:ae:63:7e:02:f9:75:00:c1:27:85:1f:90:9a:3d:3b:74:
         06:ca:8e:d4:a0:ca:75:8d:85:1c:c5:e4:13:36:b9:c1:e4:7d:
         cc:be:80:d4:dd:77:58:17:ee:19:3e:b7:43:9a:49:99:c1:2c:
         5a:82:16:df
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICE1QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDQ0MzYxMTAvBgNVBAUTKENDNjkyMzFDMUNBMTVCQ0UwMEVFOEQ0NUQzQ0NGRkRF
NDUyRDRCOTIwHhcNMjMwNzI1MTQyNzE1WhcNMjQwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NGJmZGJjMy0yNTAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAodE8pfJOQyTJlt3uJcxMcUIpiB9jWtYplItyNauzbkbCGyHhYA0USdHXnw6+
K90ocLccQFIKGj4EBjijWsBMwjWy5oGtVBp3X5lLRWB79BAgEFJBV1WSUbEJBdNR
wq5Ism+7gZSMbwih6fUEw/k1hYhIJ/NQujgqu9+Md3y20577SHQzUQJ/9UOpTIjP
0gcct+DfuylvrfVMopCHbKnpt6S/O/bzxj6Jn4Rr2Umc1HVyjW9a49x4x5H93Okv
g7Ck27BrFnZEpFpXNmG16mW4e/LpjN5BVESNyyggq2pmy/zgRvUqFMVl3bZWhBO6
beBU01JfQ/BcSzYkG1nukRep5wIDAQABo4IClTCCApEwHQYDVR0OBBYEFHS0x2nV
u7fbONEyG46oAW1f/ijbMB8GA1UdIwQYMBaAFMxpIxwcoVvOAO6NRdPM/95FLUuS
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDQzNi82NDA3RTA2NjY1
RTkxMUU4QjUyN0EzMjNDNEY5QUUwMi96R2tqSEJ5aFc4NEE3bzFGMDh6XzNrVXRT
NUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3pHa2pIQnloVzg0QTdvMUYwOHpfM2tVdFM1SS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDQ0MzYvNjQwN0UwNjY2NUU5MTFFOEI1MjdBMzIzQzRGOUFFMDIvNTlEM0M1ODIy
QUY3MTFFRThFREVBMTg1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnc/IwDQYJKoZIhvcNAQELBQADggEBACjubVJcufqQl9W+
v6AKQouPjC9izEGb2bfy49rYoEIhL4TS5IZ+L7tu8X9LX4BCUbyTuE5VB3vxafL0
hNDrElVF2PZHpnvxfrMbfGFJX4JxMQdlJY/UgjnGXwlIx314GpZSKdMvXvOKWFpa
Xawf4NDO2sZaSu0E4pqNnsxTygwCYvD/uCXcfLAiUSYGPVSOt4GT2myDEbrgrZy3
gyX3no1VnAyNsR3HbexNCj+qihu3r/rYNwwzRBQOxJ9dvx99S2mlQF8kJ5X5rmN+
Avl1AMEnhR+Qmj07dAbKjtSgynWNhRzF5BM2ucHkfcy+gNTdd1gX7hk+t0OaSZnB
LFqCFt8=
-----END CERTIFICATE-----
Generated at Sat May 18 18:12:31 2024 by rpki-client on console-fra.rpki-client.org