Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914E08F/A8F20308B5B911E88AD9A20DC4F9AE02/47C453F638A411E9AA7CEB37C4F9AE02.roa
File:                     47C453F638A411E9AA7CEB37C4F9AE02.roa (raw, json)
Hash identifier:          XrfTkWWxSRHzIDn40ycWMNLbdsfmTyqKfBxNaVztmaY=
Subject key identifier:   BC:AC:39:98:35:A5:F9:2E:D5:80:56:C2:41:2F:EA:28:84:3F:A9:A8
Certificate issuer:       /CN=A914E08F/serialNumber=BF55A5B0062A4E6A3DC879E3C9FCB2667C6892B7
Certificate serial:       11E4
Authority key identifier: BF:55:A5:B0:06:2A:4E:6A:3D:C8:79:E3:C9:FC:B2:66:7C:68:92:B7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1WlsAYqTmo9yHnjyfyyZnxokrc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E08F/A8F20308B5B911E88AD9A20DC4F9AE02/47C453F638A411E9AA7CEB37C4F9AE02.roa
Signing time:             Tue 14 Nov 2023 17:44:59 +0000
ROA not before:           Tue 14 Nov 2023 17:44:59 +0000
ROA not after:            Mon 30 Dec 2024 00:00:00 +0000
asID:                     1221
IP address blocks:        103.129.227.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914E08F/A8F20308B5B911E88AD9A20DC4F9AE02/v1WlsAYqTmo9yHnjyfyyZnxokrc.crl
                          rsync://rpki.apnic.net/member_repository/A914E08F/A8F20308B5B911E88AD9A20DC4F9AE02/v1WlsAYqTmo9yHnjyfyyZnxokrc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1WlsAYqTmo9yHnjyfyyZnxokrc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 May 2024 17:44:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4580 (0x11e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E08F/serialNumber=BF55A5B0062A4E6A3DC879E3C9FCB2667C6892B7
        Validity
            Not Before: Nov 14 17:44:59 2023 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=6553b21b-ee68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ab:16:fc:af:68:22:89:cb:39:34:f3:a5:48:
                    dc:0b:be:9e:e2:69:0b:5d:5b:85:84:17:58:2a:8c:
                    b0:c8:7f:dd:f6:3d:96:67:ca:44:4e:c2:3b:06:b6:
                    ba:19:67:ed:7d:1c:92:eb:e5:f3:98:59:93:dc:35:
                    7e:31:ff:71:a3:66:4d:04:dd:eb:a5:0d:ae:62:c5:
                    ec:02:bc:73:d9:f5:8d:e2:a1:32:76:70:45:f9:8b:
                    23:b1:b7:4f:0c:ec:76:92:95:b3:f0:6f:bc:7f:3b:
                    e2:11:a3:3f:9f:f7:2b:2d:cf:39:e4:1f:2c:0a:7d:
                    fd:ff:07:9d:04:ed:3e:55:56:9a:94:07:70:92:18:
                    11:93:74:7c:f0:f5:4f:1c:19:fe:83:3d:c6:42:66:
                    b5:be:d8:5d:fc:cc:9b:09:2a:62:7a:67:73:8c:e2:
                    a2:a5:05:5a:78:73:08:ab:5b:de:4a:f0:62:88:eb:
                    21:16:6f:ea:37:08:ca:06:29:16:af:e4:42:4f:6b:
                    f5:26:d1:28:4d:14:76:31:ef:54:47:b1:da:6c:ba:
                    5f:02:ba:63:c1:20:80:4d:eb:49:44:9f:b0:f5:c2:
                    e5:d7:57:11:1f:ff:98:c9:0f:9c:fb:2c:cb:64:0f:
                    c0:cb:7f:c8:36:f2:d6:a8:e6:1d:b8:73:e4:ea:cf:
                    38:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:AC:39:98:35:A5:F9:2E:D5:80:56:C2:41:2F:EA:28:84:3F:A9:A8
            X509v3 Authority Key Identifier:
                keyid:BF:55:A5:B0:06:2A:4E:6A:3D:C8:79:E3:C9:FC:B2:66:7C:68:92:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E08F/A8F20308B5B911E88AD9A20DC4F9AE02/v1WlsAYqTmo9yHnjyfyyZnxokrc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1WlsAYqTmo9yHnjyfyyZnxokrc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E08F/A8F20308B5B911E88AD9A20DC4F9AE02/47C453F638A411E9AA7CEB37C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.129.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:87:3a:85:9f:f1:ab:e3:23:16:94:99:74:20:94:87:18:f3:
         e3:16:ac:73:d0:11:f6:fa:20:b0:7a:9c:f3:1f:aa:22:fa:15:
         b1:e9:81:04:47:05:a9:2b:8a:24:92:31:a3:b6:7d:24:df:dc:
         a5:70:56:0f:45:d3:a0:58:83:cf:22:97:dd:73:7e:89:80:d4:
         fc:68:68:b2:fa:50:12:06:32:ef:fd:12:ae:b6:33:98:96:25:
         28:23:3b:f6:3a:34:3f:53:55:56:a8:8d:5c:d6:12:08:ec:a5:
         3f:d8:b5:bc:a6:87:3c:82:c5:a5:38:45:23:09:d3:6d:0b:ad:
         ee:f9:21:27:81:74:cf:52:76:37:f5:dd:7d:15:1b:46:5e:c5:
         f1:2e:9b:0a:af:8a:71:28:d9:24:93:ca:85:f2:2b:5f:33:ed:
         e4:97:3a:61:2d:c4:c8:ad:41:e8:e9:5b:c7:a0:bf:38:7f:b3:
         5c:82:8f:10:a0:63:a8:cf:2b:1b:79:d4:71:41:76:61:32:35:
         5f:24:0d:25:78:63:58:8b:c9:8d:b1:87:be:26:64:bb:ee:dc:
         e2:78:a6:d1:be:97:a1:b0:1e:89:b6:7a:90:16:2d:b4:cb:31:
         bf:3a:a0:87:89:ff:9d:9c:a2:5f:c2:1f:4c:a5:40:18:d0:4a:
         56:33:2b:95
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICEeQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEUwOEYxMTAvBgNVBAUTKEJGNTVBNUIwMDYyQTRFNkEzREM4NzlFM0M5RkNCMjY2
N0M2ODkyQjcwHhcNMjMxMTE0MTc0NDU5WhcNMjQxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NTUzYjIxYi1lZTY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApqsW/K9oIonLOTTzpUjcC76e4mkLXVuFhBdYKoywyH/d9j2WZ8pETsI7Bra6
GWftfRyS6+XzmFmT3DV+Mf9xo2ZNBN3rpQ2uYsXsArxz2fWN4qEydnBF+YsjsbdP
DOx2kpWz8G+8fzviEaM/n/crLc855B8sCn39/wedBO0+VVaalAdwkhgRk3R88PVP
HBn+gz3GQma1vthd/MybCSpiemdzjOKipQVaeHMIq1veSvBiiOshFm/qNwjKBikW
r+RCT2v1JtEoTRR2Me9UR7HabLpfArpjwSCATetJRJ+w9cLl11cRH/+YyQ+c+yzL
ZA/Ay3/INvLWqOYduHPk6s84ZwIDAQABo4IClTCCApEwHQYDVR0OBBYEFLysOZg1
pfku1YBWwkEv6iiEP6moMB8GA1UdIwQYMBaAFL9VpbAGKk5qPch548n8smZ8aJK3
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTA4Ri9BOEYyMDMwOEI1
QjkxMUU4OEFEOUEyMERDNEY5QUUwMi92MVdsc0FZcVRtbzl5SG5qeWZ5eVpueG9r
cmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3YxV2xzQVlxVG1vOXlIbmp5Znl5Wm54b2tyYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NEUwOEYvQThGMjAzMDhCNUI5MTFFODhBRDlBMjBEQzRGOUFFMDIvNDdDNDUzRjYz
OEE0MTFFOUFBN0NFQjM3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABngeMwDQYJKoZIhvcNAQELBQADggEBAGCHOoWf8avjIxaU
mXQglIcY8+MWrHPQEfb6ILB6nPMfqiL6FbHpgQRHBakriiSSMaO2fSTf3KVwVg9F
06BYg88il91zfomA1PxoaLL6UBIGMu/9Eq62M5iWJSgjO/Y6ND9TVVaojVzWEgjs
pT/YtbymhzyCxaU4RSMJ020Lre75ISeBdM9Sdjf13X0VG0ZexfEumwqvinEo2SST
yoXyK18z7eSXOmEtxMitQejpW8egvzh/s1yCjxCgY6jPKxt51HFBdmEyNV8kDSV4
Y1iLyY2xh74mZLvu3OJ4ptG+l6GwHom2epAWLbTLMb86oIeJ/52col/CH0ylQBjQ
SlYzK5U=
-----END CERTIFICATE-----
Generated at Thu May 16 18:26:04 2024 by rpki-client on console-fra.rpki-client.org