Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9150B91/76304A785A9311E8B7C2161FC4F9AE02/4674A74E5DB211E8A30DF983C4F9AE02.roa
File:                     4674A74E5DB211E8A30DF983C4F9AE02.roa (raw, json)
Hash identifier:          I7PM3BbfrLZiQgLK45SAxypIlTaPy+TLNTjrQNO4V6c=
Subject key identifier:   FA:07:88:E8:56:21:55:81:20:A1:79:CD:F3:4B:16:EC:E0:E0:5F:5F
Certificate issuer:       /CN=A9150B91/serialNumber=B35A72E56F0902C7E1B8D812C5D8365411DDA31D
Certificate serial:       135B
Authority key identifier: B3:5A:72:E5:6F:09:02:C7:E1:B8:D8:12:C5:D8:36:54:11:DD:A3:1D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s1py5W8JAsfhuNgSxdg2VBHdox0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9150B91/76304A785A9311E8B7C2161FC4F9AE02/4674A74E5DB211E8A30DF983C4F9AE02.roa
Signing time:             Thu 22 Jun 2023 17:46:39 +0000
ROA not before:           Thu 22 Jun 2023 17:46:39 +0000
ROA not after:            Sat 31 Aug 2024 00:00:00 +0000
asID:                     137836
IP address blocks:        103.115.97.0/24 maxlen: 24
                          103.117.62.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9150B91/76304A785A9311E8B7C2161FC4F9AE02/s1py5W8JAsfhuNgSxdg2VBHdox0.crl
                          rsync://rpki.apnic.net/member_repository/A9150B91/76304A785A9311E8B7C2161FC4F9AE02/s1py5W8JAsfhuNgSxdg2VBHdox0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s1py5W8JAsfhuNgSxdg2VBHdox0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 May 2024 17:34:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4955 (0x135b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9150B91/serialNumber=B35A72E56F0902C7E1B8D812C5D8365411DDA31D
        Validity
            Not Before: Jun 22 17:46:39 2023 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=649488ff-6ec6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ac:6e:31:20:81:bf:51:7d:e5:89:5c:bd:ca:
                    c4:69:8f:24:41:93:8b:ec:33:04:ed:a2:23:aa:85:
                    7f:ca:29:9a:a0:d9:a4:46:8b:81:42:36:5d:8f:0a:
                    ec:e3:94:cd:cd:47:20:94:73:b6:73:09:f9:7a:4f:
                    64:82:2a:e6:f3:46:4b:20:e1:c0:cc:2a:84:5f:13:
                    fb:49:db:7c:f0:3f:17:54:df:a4:5e:c1:ec:37:54:
                    35:d3:b7:fd:7a:8c:f3:20:2d:1f:7b:f3:2b:a8:26:
                    fa:c8:9d:6e:6f:04:46:71:19:19:70:d3:1a:2a:30:
                    56:c1:1a:d1:74:a5:5c:60:8a:99:42:4c:dd:c6:2a:
                    6a:93:55:45:f1:f1:54:6c:20:b2:ed:5f:ad:2d:33:
                    fa:9b:c5:16:92:a6:07:0f:3d:b6:95:48:f0:7d:09:
                    83:25:73:fe:ec:ae:6c:ba:f5:6e:66:4a:13:ef:6b:
                    3c:29:9d:09:f6:d0:a7:25:dd:06:5f:16:57:d6:48:
                    28:96:85:0f:c8:b4:8c:fc:51:9e:c5:08:dc:c7:4b:
                    db:19:ae:be:73:91:d8:ae:d3:27:fe:15:44:4b:33:
                    dd:37:58:8b:62:e5:e3:a2:15:30:10:61:73:4a:4c:
                    cb:1c:fa:4b:26:91:9a:bd:ff:e1:e4:ac:e1:dd:48:
                    ea:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:07:88:E8:56:21:55:81:20:A1:79:CD:F3:4B:16:EC:E0:E0:5F:5F
            X509v3 Authority Key Identifier:
                keyid:B3:5A:72:E5:6F:09:02:C7:E1:B8:D8:12:C5:D8:36:54:11:DD:A3:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9150B91/76304A785A9311E8B7C2161FC4F9AE02/s1py5W8JAsfhuNgSxdg2VBHdox0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s1py5W8JAsfhuNgSxdg2VBHdox0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150B91/76304A785A9311E8B7C2161FC4F9AE02/4674A74E5DB211E8A30DF983C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.115.97.0/24
                  103.117.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:47:4e:0f:1d:40:1b:bb:85:6a:8b:e1:29:f7:d0:a6:c7:93:
         9f:60:12:f2:07:9e:b5:9a:b9:90:e8:82:1b:1f:bd:85:56:dc:
         96:a0:1f:bc:74:2d:20:be:db:c8:30:19:85:c5:b6:f8:91:50:
         10:02:c6:5b:5f:88:f7:37:7d:f4:aa:ac:ed:e9:ea:47:dc:94:
         3b:2c:af:e8:78:45:2a:a6:63:58:48:c5:cf:da:00:fd:2c:6f:
         41:67:5d:18:cc:18:28:a0:73:c5:c3:5d:f1:a0:4b:dc:f8:03:
         95:dd:1e:21:f4:43:61:78:41:a6:a2:61:14:af:93:df:27:6b:
         60:d6:6f:06:d3:55:01:af:a6:b8:8a:1e:3e:f3:e4:ad:ea:e9:
         da:ee:f7:f2:07:3b:17:be:73:59:60:fa:e8:55:78:96:ad:4a:
         f5:db:5d:15:4b:06:8e:d8:92:b4:20:e4:b4:f4:1d:52:fa:2e:
         a5:68:b0:77:d2:c5:89:a0:b5:32:ab:e2:84:fe:bc:0f:2a:fa:
         33:b4:80:11:a7:17:f9:92:e4:4a:04:b6:a5:7d:15:fb:d9:9a:
         95:88:42:ff:16:1c:89:d1:ed:a8:69:71:68:a9:ed:50:c2:3e:
         0b:b2:f2:5f:0e:5f:7f:f1:03:f7:56:b6:bd:22:47:db:a0:ca:
         51:f9:ae:b7
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICE1swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTBCOTExMTAvBgNVBAUTKEIzNUE3MkU1NkYwOTAyQzdFMUI4RDgxMkM1RDgzNjU0
MTFEREEzMUQwHhcNMjMwNjIyMTc0NjM5WhcNMjQwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NDk0ODhmZi02ZWM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyqxuMSCBv1F95YlcvcrEaY8kQZOL7DME7aIjqoV/yimaoNmkRouBQjZdjwrs
45TNzUcglHO2cwn5ek9kgirm80ZLIOHAzCqEXxP7Sdt88D8XVN+kXsHsN1Q107f9
eozzIC0fe/MrqCb6yJ1ubwRGcRkZcNMaKjBWwRrRdKVcYIqZQkzdxipqk1VF8fFU
bCCy7V+tLTP6m8UWkqYHDz22lUjwfQmDJXP+7K5suvVuZkoT72s8KZ0J9tCnJd0G
XxZX1kgoloUPyLSM/FGexQjcx0vbGa6+c5HYrtMn/hVESzPdN1iLYuXjohUwEGFz
SkzLHPpLJpGavf/h5Kzh3UjqlQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFPoHiOhW
IVWBIKF5zfNLFuzg4F9fMB8GA1UdIwQYMBaAFLNacuVvCQLH4bjYEsXYNlQR3aMd
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MEI5MS83NjMwNEE3ODVB
OTMxMUU4QjdDMjE2MUZDNEY5QUUwMi9zMXB5NVc4SkFzZmh1TmdTeGRnMlZCSGRv
eDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3MxcHk1VzhKQXNmaHVOZ1N4ZGcyVkJIZG94MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTBCOTEvNzYzMDRBNzg1QTkzMTFFOEI3QzIxNjFGQzRGOUFFMDIvNDY3NEE3NEU1
REIyMTFFOEEzMERGOTgzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBABnc2EDBABndT4wDQYJKoZIhvcNAQELBQADggEBAG5HTg8d
QBu7hWqL4Sn30KbHk59gEvIHnrWauZDoghsfvYVW3JagH7x0LSC+28gwGYXFtviR
UBACxltfiPc3ffSqrO3p6kfclDssr+h4RSqmY1hIxc/aAP0sb0FnXRjMGCigc8XD
XfGgS9z4A5XdHiH0Q2F4QaaiYRSvk98na2DWbwbTVQGvpriKHj7z5K3q6dru9/IH
Oxe+c1lg+uhVeJatSvXbXRVLBo7YkrQg5LT0HVL6LqVosHfSxYmgtTKr4oT+vA8q
+jO0gBGnF/mS5EoEtqV9FfvZmpWIQv8WHInR7ahpcWip7VDCPguy8l8OX3/xA/dW
tr0iR9ugylH5rrc=
-----END CERTIFICATE-----
Generated at Thu May 16 20:25:41 2024 by rpki-client on console-ams.rpki-client.org