Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/B59E671A5F9911EE8FA1D64AC4F9AE02.roa
File:                     B59E671A5F9911EE8FA1D64AC4F9AE02.roa (raw, json)
Hash identifier:          MTIOw7xLdvVTH2lWya59unxXLxigJTU1L9jNb07qwqE=
Subject key identifier:   4B:CE:F7:76:88:73:54:8B:AD:D0:EF:ED:06:F2:04:0C:12:52:0B:2C
Certificate issuer:       /CN=A91462B5/serialNumber=6483198A5054D4AB7A0161CD6391FA6C14B00208
Certificate serial:       0213
Authority key identifier: 64:83:19:8A:50:54:D4:AB:7A:01:61:CD:63:91:FA:6C:14:B0:02:08
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/B59E671A5F9911EE8FA1D64AC4F9AE02.roa
Signing time:             Sat 30 Sep 2023 14:00:28 +0000
ROA not before:           Sat 30 Sep 2023 14:00:28 +0000
ROA not after:            Tue 30 Jul 2024 00:00:00 +0000
asID:                     64021
IP address blocks:        103.215.124.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.crl
                          rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 04 May 2024 03:36:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 531 (0x213)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91462B5/serialNumber=6483198A5054D4AB7A0161CD6391FA6C14B00208
        Validity
            Not Before: Sep 30 14:00:28 2023 GMT
            Not After : Jul 30 00:00:00 2024 GMT
        Subject: CN=651829fb-c482
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:fa:c5:6a:90:e9:f0:71:25:ef:58:b2:74:ff:
                    98:fb:88:83:15:18:cf:5d:ef:29:28:ff:5e:23:0a:
                    0a:a9:5a:c6:0c:81:1f:26:8d:40:4a:a8:ae:34:9e:
                    d0:4c:52:f9:f2:e5:23:66:c4:02:b7:36:b9:26:68:
                    8c:37:ee:bb:9c:91:37:94:d7:23:84:40:04:47:10:
                    c8:80:7e:1f:cf:df:17:c5:58:b8:28:7e:a5:62:97:
                    96:60:ef:ec:e8:75:d4:c2:f0:27:7a:fa:03:80:ad:
                    e2:bf:d1:87:db:f9:21:9c:74:e1:50:b1:c1:a3:e3:
                    9f:b0:9b:d1:9e:e3:16:fe:38:73:af:32:6a:05:48:
                    d9:66:e4:20:79:f0:a1:fc:be:32:b6:4e:2a:56:5f:
                    19:60:b2:bc:48:4d:25:ea:71:4f:1b:11:84:b8:bf:
                    42:31:f8:ad:0f:68:4f:b3:00:37:b6:f7:5e:01:92:
                    0c:d3:45:7a:6d:cb:4b:54:b2:5d:c2:f6:43:ab:f2:
                    d3:8e:9b:cd:47:fc:af:5f:bb:d9:cb:44:96:da:4b:
                    28:b3:9d:d6:a2:da:2c:59:35:7c:c1:45:fb:de:87:
                    74:7a:d9:f9:b2:06:66:33:ae:55:a0:4b:10:42:a4:
                    08:9d:29:b7:c0:dd:5e:ab:24:12:df:ba:ad:3e:97:
                    b8:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:CE:F7:76:88:73:54:8B:AD:D0:EF:ED:06:F2:04:0C:12:52:0B:2C
            X509v3 Authority Key Identifier:
                keyid:64:83:19:8A:50:54:D4:AB:7A:01:61:CD:63:91:FA:6C:14:B0:02:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/B59E671A5F9911EE8FA1D64AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.215.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:83:34:f1:7c:81:71:7a:9f:e5:25:71:c0:fe:b5:d8:91:45:
         16:0c:98:2f:b5:4a:bb:71:b2:f9:1a:e0:1a:6f:f4:78:9f:4c:
         f2:92:32:de:c6:b5:c5:74:01:a3:f8:9d:91:f9:e8:fb:f3:e3:
         cd:2f:2b:40:f8:e1:02:50:a2:8e:91:f5:76:03:fa:e5:87:52:
         80:74:34:47:21:bf:c8:e6:17:ac:52:d4:ef:39:6b:84:44:0a:
         6d:e5:67:ad:bc:e1:ec:93:3c:61:73:fb:f7:44:b0:e3:dc:b0:
         3b:bf:ec:4d:0b:d7:c0:ed:e9:d4:8c:f3:40:7e:b1:77:d7:f3:
         a4:78:33:b5:64:35:d8:71:52:ac:05:59:2c:d5:de:39:2a:83:
         0b:34:16:1f:3c:c2:6d:72:de:08:0b:c2:88:14:1e:42:53:03:
         da:93:a8:8f:08:51:f6:7f:61:7b:85:e7:05:b4:f0:b0:58:96:
         7b:d1:22:2e:bf:ed:d8:04:cc:e1:a2:23:40:4f:eb:c6:cd:1f:
         19:ca:ae:c9:7f:23:36:84:91:56:be:d7:c9:ba:44:b2:a5:d2:
         9f:0c:d9:1d:04:76:0a:97:cb:65:7c:f4:93:a1:0a:80:ac:5b:
         aa:09:63:9f:52:dc:b8:3d:ad:8f:68:e0:c7:95:0d:47:28:0b:
         1b:ce:77:50
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAhMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDYyQjUxMTAvBgNVBAUTKDY0ODMxOThBNTA1NEQ0QUI3QTAxNjFDRDYzOTFGQTZD
MTRCMDAyMDgwHhcNMjMwOTMwMTQwMDI4WhcNMjQwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NTE4MjlmYi1jNDgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3vrFapDp8HEl71iydP+Y+4iDFRjPXe8pKP9eIwoKqVrGDIEfJo1ASqiuNJ7Q
TFL58uUjZsQCtza5JmiMN+67nJE3lNcjhEAERxDIgH4fz98XxVi4KH6lYpeWYO/s
6HXUwvAnevoDgK3iv9GH2/khnHThULHBo+OfsJvRnuMW/jhzrzJqBUjZZuQgefCh
/L4ytk4qVl8ZYLK8SE0l6nFPGxGEuL9CMfitD2hPswA3tvdeAZIM00V6bctLVLJd
wvZDq/LTjpvNR/yvX7vZy0SW2ksos53WotosWTV8wUX73od0etn5sgZmM65VoEsQ
QqQInSm3wN1eqyQS37qtPpe4MQIDAQABo4IClTCCApEwHQYDVR0OBBYEFEvO93aI
c1SLrdDv7QbyBAwSUgssMB8GA1UdIwQYMBaAFGSDGYpQVNSregFhzWOR+mwUsAII
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NjJCNS82RDVGRUQ5MkND
MkYxMUVDODU1MzgwMzdDNEY5QUUwMi9aSU1aaWxCVTFLdDZBV0hOWTVINmJCU3dB
Z2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1pJTVppbEJVMUt0NkFXSE5ZNUg2YkJTd0FnZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDYyQjUvNkQ1RkVEOTJDQzJGMTFFQzg1NTM4MDM3QzRGOUFFMDIvQjU5RTY3MUE1
Rjk5MTFFRThGQTFENjRBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABn13wwDQYJKoZIhvcNAQELBQADggEBAFaDNPF8gXF6n+Ul
ccD+tdiRRRYMmC+1Srtxsvka4Bpv9HifTPKSMt7GtcV0AaP4nZH56Pvz480vK0D4
4QJQoo6R9XYD+uWHUoB0NEchv8jmF6xS1O85a4RECm3lZ6284eyTPGFz+/dEsOPc
sDu/7E0L18Dt6dSM80B+sXfX86R4M7VkNdhxUqwFWSzV3jkqgws0Fh88wm1y3ggL
wogUHkJTA9qTqI8IUfZ/YXuF5wW08LBYlnvRIi6/7dgEzOGiI0BP68bNHxnKrsl/
IzaEkVa+18m6RLKl0p8M2R0EdgqXy2V89JOhCoCsW6oJY59S3Lg9rY9o4MeVDUco
CxvOd1A=
-----END CERTIFICATE-----
Generated at Sat Apr 27 10:18:48 2024 by rpki-client on console-ams.rpki-client.org