Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/D931AD927E0F11EE97A4761DC4F9AE02.roa
File:                     D931AD927E0F11EE97A4761DC4F9AE02.roa (raw, json)
Hash identifier:          2hXzIfia1ct9rb2x5T3paqVVwh+0S7xJlQUc1UDiscA=
Subject key identifier:   B7:47:C2:01:20:B6:94:2F:E5:BD:AE:DF:CE:3A:64:1D:D8:1B:E2:5C
Certificate issuer:       /CN=A914EAE4/serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA
Certificate serial:       1D25
Authority key identifier: AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/D931AD927E0F11EE97A4761DC4F9AE02.roa
Signing time:             Tue 02 Jan 2024 16:54:21 +0000
ROA not before:           Tue 02 Jan 2024 16:54:21 +0000
ROA not after:            Sun 01 Dec 2024 00:00:00 +0000
asID:                     151397
IP address blocks:        203.86.116.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.crl
                          rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 14:50:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7461 (0x1d25)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914EAE4/serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA
        Validity
            Not Before: Jan  2 16:54:21 2024 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=65943fbd-13b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:87:06:2e:24:0b:9a:e0:bf:1c:e0:85:f6:2b:
                    01:40:d5:04:21:a7:6d:0f:b7:ad:0d:a4:a1:da:ab:
                    4f:64:fd:4b:41:1c:45:ac:b5:2b:fe:13:df:19:42:
                    e5:76:6d:b7:70:86:b0:41:cd:85:1b:d2:96:91:85:
                    ec:c7:4f:08:22:9b:d8:ab:93:9f:ca:6c:43:9e:24:
                    b7:cd:4d:da:cb:68:a2:64:92:9d:e7:35:d1:15:0b:
                    77:81:7d:8b:67:39:03:e6:cf:0a:8f:94:8f:ec:25:
                    1a:c9:73:34:c3:65:cf:a8:c6:73:e8:9c:e3:9d:6d:
                    4d:21:a3:e4:55:ec:9b:b7:96:e8:bc:3a:ac:0a:bf:
                    09:63:06:cb:0e:fa:b5:22:89:44:e7:b9:06:56:1b:
                    75:15:51:2b:9a:3e:e4:21:3e:f2:38:2d:09:c9:4d:
                    11:60:57:f8:2f:42:12:16:95:ab:89:12:4d:29:24:
                    2c:f3:60:55:f8:91:dd:30:a6:b8:b4:fd:0b:aa:7a:
                    6f:72:6e:b7:46:77:3e:84:76:05:c9:52:36:d4:67:
                    df:a5:a9:9e:4c:a1:af:a3:d1:fa:23:0d:4a:e5:11:
                    77:42:33:d3:52:5f:42:a3:22:e1:f4:a2:62:5a:3b:
                    8e:24:b9:64:5b:76:07:07:82:6a:3f:e3:d7:28:e4:
                    5d:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:47:C2:01:20:B6:94:2F:E5:BD:AE:DF:CE:3A:64:1D:D8:1B:E2:5C
            X509v3 Authority Key Identifier:
                keyid:AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/D931AD927E0F11EE97A4761DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.86.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:b4:87:88:17:a1:d8:5c:7f:11:44:4e:90:94:aa:97:c8:23:
         28:21:9b:9f:ab:ae:92:15:d1:c0:81:18:50:8c:ae:60:fe:2d:
         e9:1b:32:df:d9:e5:93:6b:75:68:8c:d4:31:81:01:41:80:b1:
         1d:32:cb:57:fb:4c:c9:85:a3:cc:96:bf:0f:68:67:c3:e8:25:
         22:31:e7:c8:9c:c5:40:4c:1d:ef:1d:bc:5a:5c:77:b7:42:6a:
         a2:8b:8a:c9:b4:2f:c8:af:ab:04:f5:e9:2e:3e:0d:c9:74:4e:
         53:7c:34:b5:f7:eb:5c:53:5b:37:e8:2a:24:a2:71:50:c5:21:
         26:3b:a1:68:61:30:bb:d0:74:8a:83:3e:64:21:54:09:e5:d2:
         7d:0a:8b:40:0d:95:0a:6b:69:4f:03:1c:35:d8:c2:ae:ed:eb:
         47:0b:8d:dd:18:1d:75:04:76:20:80:c1:39:79:83:40:d5:46:
         7b:d6:d4:55:ff:86:f0:2b:bc:b7:8d:38:d7:62:7d:44:42:14:
         61:19:d1:18:5f:06:42:17:b0:3d:46:c0:a2:42:e9:09:04:86:
         34:72:a7:71:d5:b2:8e:78:01:a5:19:78:08:4c:a3:1b:c4:e6:
         55:58:ab:28:92:76:34:d1:f4:0a:14:66:a0:e3:67:d5:8b:e9:
         0c:2a:20:ea
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICHSUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEVBRTQxMTAvBgNVBAUTKEFENTZCNjcxODdBOThCQTMxNDA4NDQwNTc5N0JEOTY1
NkU4QUM4QkEwHhcNMjQwMTAyMTY1NDIxWhcNMjQxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NTk0M2ZiZC0xM2I3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzYcGLiQLmuC/HOCF9isBQNUEIadtD7etDaSh2qtPZP1LQRxFrLUr/hPfGULl
dm23cIawQc2FG9KWkYXsx08IIpvYq5OfymxDniS3zU3ay2iiZJKd5zXRFQt3gX2L
ZzkD5s8Kj5SP7CUayXM0w2XPqMZz6JzjnW1NIaPkVeybt5bovDqsCr8JYwbLDvq1
IolE57kGVht1FVErmj7kIT7yOC0JyU0RYFf4L0ISFpWriRJNKSQs82BV+JHdMKa4
tP0Lqnpvcm63Rnc+hHYFyVI21GffpameTKGvo9H6Iw1K5RF3QjPTUl9CoyLh9KJi
WjuOJLlkW3YHB4JqP+PXKORdWwIDAQABo4IClTCCApEwHQYDVR0OBBYEFLdHwgEg
tpQv5b2u3846ZB3YG+JcMB8GA1UdIwQYMBaAFK1WtnGHqYujFAhEBXl72WVuisi6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUFFNC82NzUzQjhBRTI1
NzUxMUU3QUMwRDE3MkFDNEY5QUUwMi9yVmEyY1llcGk2TVVDRVFGZVh2WlpXNkt5
TG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3JWYTJjWWVwaTZNVUNFUUZlWHZaWlc2S3lMby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NEVBRTQvNjc1M0I4QUUyNTc1MTFFN0FDMEQxNzJBQzRGOUFFMDIvRDkzMUFEOTI3
RTBGMTFFRTk3QTQ3NjFEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADLVnQwDQYJKoZIhvcNAQELBQADggEBAAu0h4gXodhcfxFE
TpCUqpfIIyghm5+rrpIV0cCBGFCMrmD+LekbMt/Z5ZNrdWiM1DGBAUGAsR0yy1f7
TMmFo8yWvw9oZ8PoJSIx58icxUBMHe8dvFpcd7dCaqKLism0L8ivqwT16S4+Dcl0
TlN8NLX361xTWzfoKiSicVDFISY7oWhhMLvQdIqDPmQhVAnl0n0Ki0ANlQpraU8D
HDXYwq7t60cLjd0YHXUEdiCAwTl5g0DVRnvW1FX/hvArvLeNONdifURCFGEZ0Rhf
BkIXsD1GwKJC6QkEhjRyp3HVso54AaUZeAhMoxvE5lVYqyiSdjTR9AoUZqDjZ9WL
6QwqIOo=
-----END CERTIFICATE-----
Generated at Sat May 18 18:21:36 2024 by rpki-client on console-ams.rpki-client.org