Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9148F50/A1E1F79C411E11EBA0B8FA56C4F9AE02/B6A436A8411F11EBA45D5857C4F9AE02.roa
File:                     B6A436A8411F11EBA45D5857C4F9AE02.roa (raw, json)
Hash identifier:          COBPm0g4nlJAOhrh0hQYrpWCggmct2exc7fAFXJ645A=
Subject key identifier:   6B:69:C1:04:04:D6:34:22:ED:58:24:C6:B1:AE:5E:89:FC:30:D7:61
Certificate issuer:       /CN=A9148F50/serialNumber=4CF6BA29426CBC2074DF62C51FAF378C42D3B8AF
Certificate serial:       066F
Authority key identifier: 4C:F6:BA:29:42:6C:BC:20:74:DF:62:C5:1F:AF:37:8C:42:D3:B8:AF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TPa6KUJsvCB032LFH683jELTuK8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9148F50/A1E1F79C411E11EBA0B8FA56C4F9AE02/B6A436A8411F11EBA45D5857C4F9AE02.roa
Signing time:             Wed 24 Jul 2024 23:01:02 +0000
ROA not before:           Wed 24 Jul 2024 23:01:01 +0000
ROA not after:            Sun 31 Aug 2025 00:00:00 +0000
asID:                     131226
IP address blocks:        103.37.200.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9148F50/A1E1F79C411E11EBA0B8FA56C4F9AE02/TPa6KUJsvCB032LFH683jELTuK8.crl
                          rsync://rpki.apnic.net/member_repository/A9148F50/A1E1F79C411E11EBA0B8FA56C4F9AE02/TPa6KUJsvCB032LFH683jELTuK8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TPa6KUJsvCB032LFH683jELTuK8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1647 (0x66f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9148F50/serialNumber=4CF6BA29426CBC2074DF62C51FAF378C42D3B8AF
        Validity
            Not Before: Jul 24 23:01:01 2024 GMT
            Not After : Aug 31 00:00:00 2025 GMT
        Subject: CN=66a187ad-3dc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:da:01:5b:95:8f:41:1d:77:7e:5e:27:45:b7:
                    a6:6c:90:54:0c:90:36:62:f3:d5:b3:b3:75:ac:54:
                    4c:8f:25:bd:b3:f5:9d:24:a2:06:f9:21:77:49:31:
                    e6:3d:15:5a:2b:4a:94:cf:9d:f6:5b:b5:8b:c4:1e:
                    ff:b0:09:38:3f:1c:a3:c5:b2:a4:b8:69:26:b7:1a:
                    3a:dc:0c:94:31:f7:d7:cd:c1:2f:ed:e1:7a:3f:df:
                    45:fe:86:72:a4:78:3c:b0:04:98:f7:e8:97:c4:6b:
                    be:8d:bf:32:0c:e6:59:53:48:9c:77:1e:3a:ce:c3:
                    10:07:e9:23:f6:99:ba:d4:c9:b8:48:19:0d:fd:e0:
                    08:12:27:a9:d2:b8:da:13:f3:92:73:fb:ee:aa:36:
                    9e:a4:96:e4:fa:aa:62:58:9a:ee:4f:c0:8c:ef:04:
                    b0:ab:5a:9c:85:e0:bb:c5:8a:79:37:f6:f2:c7:95:
                    81:39:1d:83:67:0b:e1:7f:0d:60:f5:f2:1c:07:7f:
                    ff:e6:5e:ac:9c:d1:48:82:3d:d0:e8:3c:15:7d:0c:
                    35:4f:c9:b6:bb:f4:35:91:84:ec:1d:79:0e:bc:37:
                    ea:3f:7e:14:71:c2:f6:37:8e:09:a6:89:11:9a:ed:
                    45:b0:fa:0d:b0:e7:b4:19:f4:a5:08:d3:ae:ae:ae:
                    bd:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:69:C1:04:04:D6:34:22:ED:58:24:C6:B1:AE:5E:89:FC:30:D7:61
            X509v3 Authority Key Identifier:
                keyid:4C:F6:BA:29:42:6C:BC:20:74:DF:62:C5:1F:AF:37:8C:42:D3:B8:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9148F50/A1E1F79C411E11EBA0B8FA56C4F9AE02/TPa6KUJsvCB032LFH683jELTuK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TPa6KUJsvCB032LFH683jELTuK8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148F50/A1E1F79C411E11EBA0B8FA56C4F9AE02/B6A436A8411F11EBA45D5857C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.37.200.0/23

    Signature Algorithm: sha256WithRSAEncryption
         65:bd:53:56:df:ab:20:e9:d6:ef:b5:ef:cc:c2:9d:b5:54:a8:
         0f:42:cc:f4:bb:f8:82:de:f1:58:7c:b0:07:fb:b0:dd:21:15:
         3a:71:28:d5:6d:e1:0f:ff:0d:79:be:6a:e6:fd:96:8c:e1:27:
         98:7b:84:75:3c:ea:0b:7c:51:30:91:1b:c6:0b:7d:7b:39:2f:
         9c:56:94:6b:84:51:73:92:50:7b:ea:5f:94:e5:68:23:c2:88:
         50:0c:eb:42:5b:0a:53:7b:46:fe:be:02:67:c6:99:a9:f3:b8:
         35:22:29:d2:f0:1b:1b:7c:33:7f:d5:34:0f:b1:82:23:24:48:
         d5:aa:8f:be:1f:e2:7d:94:06:82:7e:d1:93:3f:a7:32:0f:c2:
         5d:ca:27:b1:d9:15:cb:b4:1c:20:c2:8d:d3:cc:c3:28:bf:16:
         55:39:b8:39:92:a5:6d:da:62:a7:07:0c:bc:b2:93:7d:41:1a:
         39:18:17:5d:37:a8:8a:f5:ca:e7:97:ad:74:14:29:9c:d0:f6:
         f6:a2:7e:0e:4d:44:bf:2f:29:86:e2:98:82:82:cd:07:ac:3b:
         0c:e5:16:d5:07:79:27:fb:63:5c:e9:66:3f:fa:f8:4a:3c:3f:
         7f:d3:63:fa:3e:27:49:09:73:fd:21:ac:2f:35:25:44:bc:b7:
         43:08:8c:72
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBm8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDhGNTAxMTAvBgNVBAUTKDRDRjZCQTI5NDI2Q0JDMjA3NERGNjJDNTFGQUYzNzhD
NDJEM0I4QUYwHhcNMjQwNzI0MjMwMTAxWhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmExODdhZC0zZGM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA+NoBW5WPQR13fl4nRbembJBUDJA2YvPVs7N1rFRMjyW9s/WdJKIG+SF3STHm
PRVaK0qUz532W7WLxB7/sAk4PxyjxbKkuGkmtxo63AyUMffXzcEv7eF6P99F/oZy
pHg8sASY9+iXxGu+jb8yDOZZU0icdx46zsMQB+kj9pm61Mm4SBkN/eAIEiep0rja
E/OSc/vuqjaepJbk+qpiWJruT8CM7wSwq1qcheC7xYp5N/byx5WBOR2DZwvhfw1g
9fIcB3//5l6snNFIgj3Q6DwVfQw1T8m2u/Q1kYTsHXkOvDfqP34UccL2N44JpokR
mu1FsPoNsOe0GfSlCNOurq69NQIDAQABo4IClTCCApEwHQYDVR0OBBYEFGtpwQQE
1jQi7VgkxrGuXon8MNdhMB8GA1UdIwQYMBaAFEz2uilCbLwgdN9ixR+vN4xC07iv
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEY1MC9BMUUxRjc5QzQx
MUUxMUVCQTBCOEZBNTZDNEY5QUUwMi9UUGE2S1VKc3ZDQjAzMkxGSDY4M2pFTFR1
SzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1RQYTZLVUpzdkNCMDMyTEZINjgzakVMVHVLOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDhGNTAvQTFFMUY3OUM0MTFFMTFFQkEwQjhGQTU2QzRGOUFFMDIvQjZBNDM2QTg0
MTFGMTFFQkE0NUQ1ODU3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnJcgwDQYJKoZIhvcNAQELBQADggEBAGW9U1bfqyDp1u+1
78zCnbVUqA9CzPS7+ILe8Vh8sAf7sN0hFTpxKNVt4Q//DXm+aub9lozhJ5h7hHU8
6gt8UTCRG8YLfXs5L5xWlGuEUXOSUHvqX5TlaCPCiFAM60JbClN7Rv6+AmfGmanz
uDUiKdLwGxt8M3/VNA+xgiMkSNWqj74f4n2UBoJ+0ZM/pzIPwl3KJ7HZFcu0HCDC
jdPMwyi/FlU5uDmSpW3aYqcHDLyyk31BGjkYF103qIr1yueXrXQUKZzQ9vaifg5N
RL8vKYbimIKCzQesOwzlFtUHeSf7Y1zpZj/6+Eo8P3/TY/o+J0kJc/0hrC81JUS8
t0MIjHI=
-----END CERTIFICATE-----
Generated at Fri Nov 22 22:24:07 2024 by rpki-client on console-fra.rpki-client.org