Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146B28/FAEF8CBE134311E596F5401EC4F9AE02/9E7A9830049911E89DF5A065C4F9AE02.roa
File:                     9E7A9830049911E89DF5A065C4F9AE02.roa (raw, json)
Hash identifier:          TTyQzKMXjkPWyXvajVKaBFtUmzYEXlg1V3ki4Q5gLXA=
Subject key identifier:   4E:56:B3:17:1A:3E:1B:FA:96:79:E7:B1:3A:F3:6E:CD:08:F0:38:7C
Certificate issuer:       /CN=A9146B28/serialNumber=471606785B32F4DF3EC943F2A787DBA212696E1F
Certificate serial:       2465
Authority key identifier: 47:16:06:78:5B:32:F4:DF:3E:C9:43:F2:A7:87:DB:A2:12:69:6E:1F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RxYGeFsy9N8-yUPyp4fbohJpbh8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146B28/FAEF8CBE134311E596F5401EC4F9AE02/9E7A9830049911E89DF5A065C4F9AE02.roa
Signing time:             Sat 16 Sep 2023 15:52:39 +0000
ROA not before:           Sat 16 Sep 2023 15:52:39 +0000
ROA not after:            Sun 01 Dec 2024 00:00:00 +0000
asID:                     133588
IP address blocks:        103.237.53.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9146B28/FAEF8CBE134311E596F5401EC4F9AE02/RxYGeFsy9N8-yUPyp4fbohJpbh8.crl
                          rsync://rpki.apnic.net/member_repository/A9146B28/FAEF8CBE134311E596F5401EC4F9AE02/RxYGeFsy9N8-yUPyp4fbohJpbh8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RxYGeFsy9N8-yUPyp4fbohJpbh8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 May 2024 16:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9317 (0x2465)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146B28/serialNumber=471606785B32F4DF3EC943F2A787DBA212696E1F
        Validity
            Not Before: Sep 16 15:52:39 2023 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=6505cf46-81d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ff:81:7a:68:ab:d9:18:e5:5f:9b:ce:46:aa:
                    46:54:74:e1:a3:30:b1:16:62:6c:68:1e:50:a8:71:
                    30:9a:9c:76:97:02:e1:a4:60:64:db:1a:44:be:02:
                    56:3d:7f:c9:6d:e5:7c:be:08:be:40:ea:7c:ee:77:
                    fe:55:56:a5:96:6a:08:be:fb:5d:38:02:6a:6a:d5:
                    99:93:94:f1:0a:ff:c6:1e:72:6e:f2:b0:f3:36:ba:
                    14:51:0a:18:2b:15:21:94:0e:b3:b8:0d:a6:1a:72:
                    be:d0:54:a9:1f:7b:83:c2:14:d6:94:e9:2c:11:21:
                    01:1b:08:bb:59:ee:7d:00:8e:06:06:9c:c6:a1:28:
                    17:07:ff:28:47:0a:a4:d1:08:89:5e:94:df:da:54:
                    62:5b:e9:f8:1b:25:fb:e6:e6:95:87:56:9f:50:cb:
                    56:c1:c4:93:b9:cf:0a:33:18:2e:8d:8f:b6:62:c1:
                    36:f5:9d:ec:43:37:b1:c2:c3:a0:66:e7:7e:11:6d:
                    5b:67:5c:b2:7a:92:33:a2:8d:fb:98:03:cc:15:4b:
                    65:f3:15:96:db:0d:20:02:10:a9:d1:50:9d:40:3c:
                    47:f1:d5:65:0f:f5:b9:c0:82:f7:57:81:c3:ef:42:
                    81:67:3b:96:35:ed:4f:30:d9:9b:10:61:09:d3:84:
                    92:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:56:B3:17:1A:3E:1B:FA:96:79:E7:B1:3A:F3:6E:CD:08:F0:38:7C
            X509v3 Authority Key Identifier:
                keyid:47:16:06:78:5B:32:F4:DF:3E:C9:43:F2:A7:87:DB:A2:12:69:6E:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146B28/FAEF8CBE134311E596F5401EC4F9AE02/RxYGeFsy9N8-yUPyp4fbohJpbh8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RxYGeFsy9N8-yUPyp4fbohJpbh8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146B28/FAEF8CBE134311E596F5401EC4F9AE02/9E7A9830049911E89DF5A065C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.237.53.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:a0:a2:b6:0a:ba:9d:63:43:71:06:22:6c:d1:5a:f4:b1:65:
         34:68:27:5f:26:e4:2f:be:2e:18:39:97:90:61:50:7f:76:ad:
         89:5b:d6:24:21:22:cb:64:62:05:64:1f:75:d3:84:47:90:f2:
         8f:41:a8:2d:91:48:10:d7:52:1f:df:a9:25:22:32:4f:a4:5c:
         f5:58:23:a3:f1:b8:22:f2:c4:54:5e:f1:26:09:94:a0:24:63:
         f0:fa:7d:2c:43:8c:c7:c8:7d:89:e0:7e:10:60:2e:92:3d:d4:
         c4:0d:90:2d:b5:35:60:3d:cf:fc:83:33:1d:66:8c:d9:66:ad:
         eb:51:0f:cf:bf:5e:b9:30:30:b7:fa:67:24:a4:e7:98:e5:18:
         6e:8a:8f:75:4a:52:fc:86:2e:06:a2:57:34:c8:a2:c9:aa:97:
         d1:48:90:cc:59:7b:cc:58:1e:d4:46:48:04:94:a9:a4:2c:c4:
         49:ae:e2:8c:df:04:94:08:73:6b:97:76:9b:fa:dc:de:f2:0e:
         0c:28:c6:a9:68:8c:5e:98:c6:c6:1c:17:45:6a:25:ec:f6:b6:
         f2:d9:ac:7d:e7:ec:28:b9:4a:b9:83:34:57:68:f8:76:ce:01:
         d7:ff:6d:6b:85:40:5f:4d:f1:94:b9:f9:90:77:77:b5:a9:c5:
         eb:46:ce:6c
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICJGUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDZCMjgxMTAvBgNVBAUTKDQ3MTYwNjc4NUIzMkY0REYzRUM5NDNGMkE3ODdEQkEy
MTI2OTZFMUYwHhcNMjMwOTE2MTU1MjM5WhcNMjQxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NTA1Y2Y0Ni04MWQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1v+Bemir2RjlX5vORqpGVHThozCxFmJsaB5QqHEwmpx2lwLhpGBk2xpEvgJW
PX/JbeV8vgi+QOp87nf+VVallmoIvvtdOAJqatWZk5TxCv/GHnJu8rDzNroUUQoY
KxUhlA6zuA2mGnK+0FSpH3uDwhTWlOksESEBGwi7We59AI4GBpzGoSgXB/8oRwqk
0QiJXpTf2lRiW+n4GyX75uaVh1afUMtWwcSTuc8KMxgujY+2YsE29Z3sQzexwsOg
Zud+EW1bZ1yyepIzoo37mAPMFUtl8xWW2w0gAhCp0VCdQDxH8dVlD/W5wIL3V4HD
70KBZzuWNe1PMNmbEGEJ04SSCQIDAQABo4IClTCCApEwHQYDVR0OBBYEFE5Wsxca
Phv6lnnnsTrzbs0I8Dh8MB8GA1UdIwQYMBaAFEcWBnhbMvTfPslD8qeH26ISaW4f
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkIyOC9GQUVGOENCRTEz
NDMxMUU1OTZGNTQwMUVDNEY5QUUwMi9SeFlHZUZzeTlOOC15VVB5cDRmYm9oSnBi
aDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1J4WUdlRnN5OU44LXlVUHlwNGZib2hKcGJoOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDZCMjgvRkFFRjhDQkUxMzQzMTFFNTk2RjU0MDFFQzRGOUFFMDIvOUU3QTk4MzAw
NDk5MTFFODlERjVBMDY1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABn7TUwDQYJKoZIhvcNAQELBQADggEBAJmgorYKup1jQ3EG
ImzRWvSxZTRoJ18m5C++Lhg5l5BhUH92rYlb1iQhIstkYgVkH3XThEeQ8o9BqC2R
SBDXUh/fqSUiMk+kXPVYI6PxuCLyxFRe8SYJlKAkY/D6fSxDjMfIfYngfhBgLpI9
1MQNkC21NWA9z/yDMx1mjNlmretRD8+/XrkwMLf6ZySk55jlGG6Kj3VKUvyGLgai
VzTIosmql9FIkMxZe8xYHtRGSASUqaQsxEmu4ozfBJQIc2uXdpv63N7yDgwoxqlo
jF6YxsYcF0VqJez2tvLZrH3n7Ci5SrmDNFdo+HbOAdf/bWuFQF9N8ZS5+ZB3d7Wp
xetGzmw=
-----END CERTIFICATE-----
Generated at Thu May 16 17:51:19 2024 by rpki-client on console-ams.rpki-client.org