Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914B45F/40BB15742F6511EE95FDED56C4F9AE02/578C92D62F6611EE9CAFAA58C4F9AE02.roa
File:                     578C92D62F6611EE9CAFAA58C4F9AE02.roa (raw, json)
Hash identifier:          bFE0C6cY72P0B85UzFO6PyAXBD4kZvyKw41cMruk0XM=
Subject key identifier:   1F:71:1D:23:54:3E:EB:CA:10:A8:AB:70:C1:24:4E:F9:36:7C:68:F3
Certificate issuer:       /CN=A914B45F/serialNumber=CFAE231A989737F61DAD957CC24D213585818EDC
Certificate serial:       02
Authority key identifier: CF:AE:23:1A:98:97:37:F6:1D:AD:95:7C:C2:4D:21:35:85:81:8E:DC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z64jGpiXN_YdrZV8wk0hNYWBjtw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914B45F/40BB15742F6511EE95FDED56C4F9AE02/578C92D62F6611EE9CAFAA58C4F9AE02.roa
Signing time:             Mon 31 Jul 2023 05:51:50 +0000
ROA not before:           Mon 31 Jul 2023 05:51:50 +0000
ROA not after:            Thu 31 Oct 2024 00:00:00 +0000
asID:                     151637
IP address blocks:        103.215.14.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914B45F/40BB15742F6511EE95FDED56C4F9AE02/z64jGpiXN_YdrZV8wk0hNYWBjtw.crl
                          rsync://rpki.apnic.net/member_repository/A914B45F/40BB15742F6511EE95FDED56C4F9AE02/z64jGpiXN_YdrZV8wk0hNYWBjtw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z64jGpiXN_YdrZV8wk0hNYWBjtw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 07:43:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914B45F/serialNumber=CFAE231A989737F61DAD957CC24D213585818EDC
        Validity
            Not Before: Jul 31 05:51:50 2023 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=64c74bf5-94f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d2:3a:d8:10:d1:29:0f:cb:3c:4e:2c:ce:88:
                    ae:fc:a1:fc:7d:59:8c:fd:82:c7:80:9e:9d:a2:5b:
                    91:7d:97:67:1b:02:e5:62:fe:3a:01:bc:57:76:44:
                    87:07:e6:30:d6:01:72:3b:82:b2:85:d6:60:d3:60:
                    be:62:e9:48:42:cc:9f:35:14:cb:af:69:bb:88:56:
                    bf:d7:eb:cd:d6:6a:9a:65:f1:e2:3c:9d:29:c7:6c:
                    fd:41:e5:33:0b:a5:34:50:da:45:da:49:c9:06:a0:
                    2c:8a:8d:d2:2a:80:80:e5:a4:47:39:52:55:b2:c9:
                    68:5a:de:26:83:64:4b:08:47:9b:94:c1:40:20:d4:
                    cd:9a:c0:9a:02:c5:d2:91:5b:68:c2:22:9e:e0:f1:
                    41:f9:5f:d9:72:46:bc:43:05:9c:02:25:d6:80:8d:
                    62:a9:92:8a:e6:b8:a2:9a:e5:b5:ae:2f:29:6b:4a:
                    47:9c:d8:da:3b:91:e0:a1:a9:25:af:15:d7:7c:12:
                    41:9f:c4:61:15:77:63:fc:9d:c0:b8:5f:f4:1c:22:
                    f2:75:43:c9:04:17:b6:d8:fb:ec:7b:b2:13:88:2d:
                    d7:35:83:8f:14:f1:0a:99:ec:6b:f6:20:ba:bf:24:
                    65:09:ea:c6:c2:42:e1:bc:38:02:b0:76:f9:84:bb:
                    5d:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:71:1D:23:54:3E:EB:CA:10:A8:AB:70:C1:24:4E:F9:36:7C:68:F3
            X509v3 Authority Key Identifier:
                keyid:CF:AE:23:1A:98:97:37:F6:1D:AD:95:7C:C2:4D:21:35:85:81:8E:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914B45F/40BB15742F6511EE95FDED56C4F9AE02/z64jGpiXN_YdrZV8wk0hNYWBjtw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z64jGpiXN_YdrZV8wk0hNYWBjtw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B45F/40BB15742F6511EE95FDED56C4F9AE02/578C92D62F6611EE9CAFAA58C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.215.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:c2:ea:2a:9e:1b:a0:67:40:0e:cc:36:0b:00:cf:e1:a1:ad:
         60:6f:ce:6b:63:3a:94:2d:5b:d2:65:4f:9e:a7:87:6d:58:ac:
         f9:fe:9f:4b:61:05:41:28:32:e4:13:7d:2d:c0:d0:4b:89:84:
         20:19:fb:d3:02:6e:c1:af:7a:f9:ef:20:b3:cb:41:a2:ec:5d:
         c9:c0:d3:ac:e1:ce:a0:a7:09:15:3b:b0:3c:0b:93:32:a8:7d:
         cc:0e:18:fd:95:53:82:44:d3:37:bb:33:34:22:cc:bb:1a:bd:
         88:d7:7a:fb:c8:28:7d:52:f8:51:d9:23:2b:49:9f:74:8b:a2:
         85:fe:7a:23:ad:c7:85:63:2d:00:1e:c7:eb:dd:04:8a:5e:a2:
         df:ec:a6:a0:1d:fa:b4:e4:8d:4b:dc:13:51:61:06:5d:15:b4:
         ce:e7:74:3b:e4:0e:36:b1:ac:46:be:39:1e:63:eb:66:f4:7d:
         6e:2c:20:28:97:23:56:3b:b1:a0:94:bc:3c:6a:c8:23:94:d6:
         c3:3b:a2:93:a5:0e:15:16:5e:b2:46:f5:cc:a0:9a:cb:8e:17:
         0b:57:83:78:2e:d5:cd:3f:a7:d0:00:90:f4:dd:5f:bd:5d:9d:
         58:1b:0d:4b:79:64:fc:19:9d:75:f0:f2:a6:72:40:68:67:e8:
         9e:9c:30:9c
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0
QjQ1RjExMC8GA1UEBRMoQ0ZBRTIzMUE5ODk3MzdGNjFEQUQ5NTdDQzI0RDIxMzU4
NTgxOEVEQzAeFw0yMzA3MzEwNTUxNTBaFw0yNDEwMzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY0Yzc0YmY1LTk0ZjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDG0jrYENEpD8s8TizOiK78ofx9WYz9gseAnp2iW5F9l2cbAuVi/joBvFd2RIcH
5jDWAXI7grKF1mDTYL5i6UhCzJ81FMuvabuIVr/X683Wappl8eI8nSnHbP1B5TML
pTRQ2kXaSckGoCyKjdIqgIDlpEc5UlWyyWha3iaDZEsIR5uUwUAg1M2awJoCxdKR
W2jCIp7g8UH5X9lyRrxDBZwCJdaAjWKpkormuKKa5bWuLylrSkec2No7keChqSWv
Fdd8EkGfxGEVd2P8ncC4X/QcIvJ1Q8kEF7bY++x7shOILdc1g48U8QqZ7Gv2ILq/
JGUJ6sbCQuG8OAKwdvmEu10tAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUH3EdI1Q+
68oQqKtwwSRO+TZ8aPMwHwYDVR0jBBgwFoAUz64jGpiXN/YdrZV8wk0hNYWBjtww
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRCNDVGLzQwQkIxNTc0MkY2
NTExRUU5NUZERUQ1NkM0RjlBRTAyL3o2NGpHcGlYTl9ZZHJaVjh3azBoTllXQmp0
dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvejY0akdwaVhOX1lkclpWOHdrMGhOWVdCanR3LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
QjQ1Ri80MEJCMTU3NDJGNjUxMUVFOTVGREVENTZDNEY5QUUwMi81NzhDOTJENjJG
NjYxMUVFOUNBRkFBNThDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAGfXDjANBgkqhkiG9w0BAQsFAAOCAQEAgsLqKp4boGdADsw2
CwDP4aGtYG/Oa2M6lC1b0mVPnqeHbVis+f6fS2EFQSgy5BN9LcDQS4mEIBn70wJu
wa96+e8gs8tBouxdycDTrOHOoKcJFTuwPAuTMqh9zA4Y/ZVTgkTTN7szNCLMuxq9
iNd6+8gofVL4UdkjK0mfdIuihf56I63HhWMtAB7H690Eil6i3+ymoB36tOSNS9wT
UWEGXRW0zud0O+QONrGsRr45HmPrZvR9biwgKJcjVjuxoJS8PGrII5TWwzuik6UO
FRZeskb1zKCay44XC1eDeC7VzT+n0ACQ9N1fvV2dWBsNS3lk/BmddfDypnJAaGfo
npwwnA==
-----END CERTIFICATE-----
Generated at Sat Jun 1 09:10:32 2024 by rpki-client on console-fra.rpki-client.org