Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9154657/715F33341D7111E2A2DB44B608B02CD2/E93EEAFCB0F811E595E0F761C4F9AE02.roa
File:                     E93EEAFCB0F811E595E0F761C4F9AE02.roa (raw, json)
Hash identifier:          63yMYUZE3120qDbsxbpHv5kOq7xlxLFTMK9ZWashgbU=
Subject key identifier:   10:42:4D:B5:8C:F8:1D:6E:D7:5C:70:9A:7B:51:DB:1E:2F:12:1D:B3
Certificate issuer:       /CN=A9154657/serialNumber=2093A98B0DA548CC0D1C5FBCA3D725146F444D72
Certificate serial:       339F
Authority key identifier: 20:93:A9:8B:0D:A5:48:CC:0D:1C:5F:BC:A3:D7:25:14:6F:44:4D:72
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IJOpiw2lSMwNHF-8o9clFG9ETXI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9154657/715F33341D7111E2A2DB44B608B02CD2/E93EEAFCB0F811E595E0F761C4F9AE02.roa
Signing time:             Thu 02 Nov 2023 14:40:12 +0000
ROA not before:           Thu 02 Nov 2023 14:40:12 +0000
ROA not after:            Mon 30 Dec 2024 00:00:00 +0000
asID:                     9482
IP address blocks:        103.5.92.0/22 maxlen: 22
                          2402:8700::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9154657/715F33341D7111E2A2DB44B608B02CD2/IJOpiw2lSMwNHF-8o9clFG9ETXI.crl
                          rsync://rpki.apnic.net/member_repository/A9154657/715F33341D7111E2A2DB44B608B02CD2/IJOpiw2lSMwNHF-8o9clFG9ETXI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IJOpiw2lSMwNHF-8o9clFG9ETXI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 May 2024 14:20:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13215 (0x339f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9154657/serialNumber=2093A98B0DA548CC0D1C5FBCA3D725146F444D72
        Validity
            Not Before: Nov  2 14:40:12 2023 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=6543b4cc-857d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:7b:62:22:7e:32:05:8c:1b:de:01:2d:d7:ab:
                    66:66:b9:47:e3:ba:2c:29:0e:67:77:59:9c:1c:a6:
                    7e:e2:43:f6:92:fe:a1:c7:be:f0:7f:08:ea:fa:a0:
                    e4:4f:2c:b5:28:0a:60:5e:be:0d:1d:97:7d:83:29:
                    db:cc:ac:42:75:a0:20:d3:bf:43:5e:4e:cf:2b:93:
                    56:f9:61:4c:c4:38:b7:9d:c3:03:66:b8:ec:00:cf:
                    d2:5e:fb:6f:72:2b:bf:e7:8e:83:85:b3:7b:44:18:
                    c5:58:30:cf:5b:c1:e7:ac:0a:b9:37:62:a7:f7:1d:
                    22:bc:bc:75:bf:29:18:fd:93:34:0a:f7:2b:93:22:
                    fe:0f:b3:c3:45:3b:fc:9c:c6:5a:ee:e3:95:c9:ef:
                    bc:3e:73:bf:a0:92:40:95:5b:67:fd:ef:f6:04:fe:
                    2b:29:f7:8e:fe:cb:7c:38:13:2d:3f:97:8c:49:1e:
                    74:01:f5:15:66:9e:4b:cd:c4:9e:af:53:1c:fd:09:
                    0e:d8:3f:cd:05:90:b8:95:59:0e:ae:e5:49:92:1e:
                    a5:e6:bf:9e:e9:d7:a5:42:24:4d:b5:65:cf:eb:8a:
                    b4:34:d1:d0:1f:58:45:28:3a:8c:9e:2c:a8:a8:f7:
                    af:fa:03:43:19:93:ce:b3:55:72:97:2a:c7:da:72:
                    e0:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:42:4D:B5:8C:F8:1D:6E:D7:5C:70:9A:7B:51:DB:1E:2F:12:1D:B3
            X509v3 Authority Key Identifier:
                keyid:20:93:A9:8B:0D:A5:48:CC:0D:1C:5F:BC:A3:D7:25:14:6F:44:4D:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9154657/715F33341D7111E2A2DB44B608B02CD2/IJOpiw2lSMwNHF-8o9clFG9ETXI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IJOpiw2lSMwNHF-8o9clFG9ETXI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154657/715F33341D7111E2A2DB44B608B02CD2/E93EEAFCB0F811E595E0F761C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.5.92.0/22
                IPv6:
                  2402:8700::/32

    Signature Algorithm: sha256WithRSAEncryption
         29:17:d4:dd:9e:70:16:21:2a:c7:5e:8c:32:01:b7:e1:36:51:
         1d:01:65:2b:2c:cb:31:ba:60:9e:40:f0:25:de:f9:1c:f6:cc:
         ca:6a:1e:08:84:50:ba:43:65:51:a7:04:d7:b7:72:5d:83:9c:
         cc:e1:22:99:d4:89:3b:80:ad:d2:81:64:34:c0:34:e8:1c:bc:
         b3:9b:80:08:16:68:5f:18:63:8b:56:4b:53:ad:19:23:e7:13:
         47:36:b2:fc:0a:59:d2:55:73:45:18:6d:52:31:f2:42:a7:67:
         c1:d8:88:77:ae:b3:0f:e6:3b:b3:0c:e1:7f:8a:56:46:70:fc:
         f5:c0:d8:15:d5:f6:a1:b6:ff:3b:65:71:92:16:00:b0:27:ea:
         a7:1d:1f:ca:7e:56:8c:e7:42:3c:66:72:8c:56:db:92:69:39:
         3e:01:ee:5e:be:19:e4:1a:d5:89:9e:4d:2e:ae:70:d5:46:34:
         84:0e:bb:8c:64:c5:4a:2d:d3:83:ff:2e:b1:7e:a7:90:7b:d7:
         21:7e:48:78:8c:8c:49:87:d2:01:b4:25:2f:98:c5:ff:5f:a0:
         0f:4c:4c:bf:7e:4a:8d:9a:cd:b5:fc:40:df:7a:05:44:fe:7e:
         90:b9:6a:18:20:b5:1a:19:2b:d8:54:4a:b8:31:c0:75:2d:3b:
         c7:20:88:40
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICM58wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTQ2NTcxMTAvBgNVBAUTKDIwOTNBOThCMERBNTQ4Q0MwRDFDNUZCQ0EzRDcyNTE0
NkY0NDRENzIwHhcNMjMxMTAyMTQ0MDEyWhcNMjQxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NTQzYjRjYy04NTdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxHtiIn4yBYwb3gEt16tmZrlH47osKQ5nd1mcHKZ+4kP2kv6hx77wfwjq+qDk
Tyy1KApgXr4NHZd9gynbzKxCdaAg079DXk7PK5NW+WFMxDi3ncMDZrjsAM/SXvtv
ciu/546DhbN7RBjFWDDPW8HnrAq5N2Kn9x0ivLx1vykY/ZM0CvcrkyL+D7PDRTv8
nMZa7uOVye+8PnO/oJJAlVtn/e/2BP4rKfeO/st8OBMtP5eMSR50AfUVZp5LzcSe
r1Mc/QkO2D/NBZC4lVkOruVJkh6l5r+e6delQiRNtWXP64q0NNHQH1hFKDqMniyo
qPev+gNDGZPOs1VylyrH2nLguwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFBBCTbWM
+B1u11xwmntR2x4vEh2zMB8GA1UdIwQYMBaAFCCTqYsNpUjMDRxfvKPXJRRvRE1y
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDY1Ny83MTVGMzMzNDFE
NzExMUUyQTJEQjQ0QjYwOEIwMkNEMi9JSk9waXcybFNNd05IRi04bzljbEZHOUVU
WEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0lKT3BpdzJsU013TkhGLThvOWNsRkc5RVRYSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTQ2NTcvNzE1RjMzMzQxRDcxMTFFMkEyREI0NEI2MDhCMDJDRDIvRTkzRUVBRkNC
MEY4MTFFNTk1RTBGNzYxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E
HzAdMAwEAgABMAYDBAJnBVwwDQQCAAIwBwMFACQChwAwDQYJKoZIhvcNAQELBQAD
ggEBACkX1N2ecBYhKsdejDIBt+E2UR0BZSssyzG6YJ5A8CXe+Rz2zMpqHgiEULpD
ZVGnBNe3cl2DnMzhIpnUiTuArdKBZDTANOgcvLObgAgWaF8YY4tWS1OtGSPnE0c2
svwKWdJVc0UYbVIx8kKnZ8HYiHeusw/mO7MM4X+KVkZw/PXA2BXV9qG2/ztlcZIW
ALAn6qcdH8p+VoznQjxmcoxW25JpOT4B7l6+GeQa1YmeTS6ucNVGNIQOu4xkxUot
04P/LrF+p5B71yF+SHiMjEmH0gG0JS+Yxf9foA9MTL9+So2azbX8QN96BUT+fpC5
ahggtRoZK9hUSrgxwHUtO8cgiEA=
-----END CERTIFICATE-----
Generated at Wed May 22 16:49:07 2024 by rpki-client on console-fra.rpki-client.org