Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9157E9C/50C993CE7D6311ECAC5C7F1EC4F9AE02/E3CD40BE7D6611ECBA65C232C4F9AE02.roa
File:                     E3CD40BE7D6611ECBA65C232C4F9AE02.roa (raw, json)
Hash identifier:          Ia+t11bwzeFSnidT+Txw3RneKFNlzClO5q3mp6PPWGM=
Subject key identifier:   AD:E3:47:1C:BE:C4:36:9E:34:B2:DB:3E:F2:7E:E6:3E:C6:B8:60:C0
Certificate issuer:       /CN=A9157E9C/serialNumber=E99FF0448B0BDA3771CDC4A96C59F7C9F9C87944
Certificate serial:       028A
Authority key identifier: E9:9F:F0:44:8B:0B:DA:37:71:CD:C4:A9:6C:59:F7:C9:F9:C8:79:44
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9157E9C/50C993CE7D6311ECAC5C7F1EC4F9AE02/E3CD40BE7D6611ECBA65C232C4F9AE02.roa
Signing time:             Thu 29 Jun 2023 01:49:00 +0000
ROA not before:           Thu 29 Jun 2023 01:49:00 +0000
ROA not after:            Sat 31 Aug 2024 00:00:00 +0000
asID:                     7575
IP address blocks:        203.22.214.0/24 maxlen: 24
                          2401:2fc0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9157E9C/50C993CE7D6311ECAC5C7F1EC4F9AE02/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.crl
                          rsync://rpki.apnic.net/member_repository/A9157E9C/50C993CE7D6311ECAC5C7F1EC4F9AE02/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 May 2024 02:53:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 650 (0x28a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9157E9C/serialNumber=E99FF0448B0BDA3771CDC4A96C59F7C9F9C87944
        Validity
            Not Before: Jun 29 01:49:00 2023 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=649ce30b-d7b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:09:6b:dc:97:e6:2f:6d:4c:a5:9b:7c:cd:2f:
                    c1:32:f3:1c:c8:36:51:f0:da:5f:0d:22:30:c9:32:
                    bc:86:85:80:cb:53:7c:23:7d:e4:18:0d:5b:29:7a:
                    51:2a:54:78:86:ca:1a:1c:9c:1f:09:bc:02:26:5a:
                    fa:b2:62:35:40:33:a6:e2:e6:9e:44:e0:a4:2d:71:
                    a4:e3:f8:24:35:6a:d0:3d:d4:cc:41:34:51:18:fd:
                    16:6b:82:77:c9:54:6f:33:e1:4e:8c:8f:20:e2:3f:
                    cd:47:ec:7f:16:83:6c:91:54:5d:70:2c:9e:91:51:
                    71:2b:49:9c:db:42:94:23:01:97:b9:e2:96:00:77:
                    d9:21:4b:27:c4:0a:be:02:65:c7:b0:ad:c2:b3:fc:
                    38:1d:e3:73:e3:1e:4c:7b:a8:fc:9a:1d:e5:96:fe:
                    ab:b8:f0:f6:17:a2:7a:61:66:83:0f:42:75:d5:89:
                    b4:be:50:86:b4:91:22:1e:fd:b0:c8:87:9a:cf:c8:
                    5c:42:78:80:d4:fb:29:19:40:1e:45:1a:26:af:e9:
                    3d:5c:c0:a5:29:bd:65:0d:d3:97:95:9c:9d:6d:e2:
                    16:a6:19:fe:43:24:34:65:90:31:a2:45:5d:51:3a:
                    fa:e6:93:b4:08:ea:94:6b:54:2b:78:a9:40:96:e7:
                    89:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:E3:47:1C:BE:C4:36:9E:34:B2:DB:3E:F2:7E:E6:3E:C6:B8:60:C0
            X509v3 Authority Key Identifier:
                keyid:E9:9F:F0:44:8B:0B:DA:37:71:CD:C4:A9:6C:59:F7:C9:F9:C8:79:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9157E9C/50C993CE7D6311ECAC5C7F1EC4F9AE02/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157E9C/50C993CE7D6311ECAC5C7F1EC4F9AE02/E3CD40BE7D6611ECBA65C232C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.22.214.0/24
                IPv6:
                  2401:2fc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         8a:18:84:27:84:53:ca:08:fd:46:8e:93:db:3b:09:5b:46:77:
         8f:6e:40:8b:cb:3a:4e:15:69:17:21:d1:2d:2d:7b:f7:ba:4e:
         3d:1a:4d:67:9a:a3:41:6b:27:97:46:83:03:3b:b3:52:db:7b:
         bf:68:6a:03:da:ae:9a:38:ca:3c:06:7d:68:5c:bf:ad:1f:fd:
         36:e5:d6:2e:98:c0:c7:24:88:3d:55:53:16:11:3c:00:71:4a:
         ff:b6:b2:25:66:84:c0:6d:f4:ef:80:91:2e:ce:3c:c9:ec:2c:
         8a:d8:b0:5d:13:23:65:97:6a:b6:70:0d:62:ff:e2:55:7b:01:
         13:92:08:41:e6:58:0f:4c:c5:eb:ee:34:7e:c6:97:1f:42:c0:
         2c:38:aa:d7:76:b8:3e:d2:49:61:75:78:2d:fa:54:d0:81:22:
         34:9d:0c:56:03:f3:85:dc:29:f8:55:5d:90:ea:61:77:af:e1:
         d3:09:77:c9:0b:79:64:c1:7e:37:99:66:45:dd:3b:52:07:78:
         01:c3:a0:40:64:56:c1:b5:2f:f5:4b:35:17:c6:57:f1:e5:6e:
         3e:ff:d0:66:78:0a:b1:00:41:4f:6f:3a:62:60:ca:df:e3:8d:
         63:5f:5c:73:72:8d:53:f7:11:b4:4f:2a:1f:cb:eb:37:2d:e0:
         b5:2d:c3:07
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICAoowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTdFOUMxMTAvBgNVBAUTKEU5OUZGMDQ0OEIwQkRBMzc3MUNEQzRBOTZDNTlGN0M5
RjlDODc5NDQwHhcNMjMwNjI5MDE0OTAwWhcNMjQwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NDljZTMwYi1kN2IyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwQlr3JfmL21MpZt8zS/BMvMcyDZR8NpfDSIwyTK8hoWAy1N8I33kGA1bKXpR
KlR4hsoaHJwfCbwCJlr6smI1QDOm4uaeROCkLXGk4/gkNWrQPdTMQTRRGP0Wa4J3
yVRvM+FOjI8g4j/NR+x/FoNskVRdcCyekVFxK0mc20KUIwGXueKWAHfZIUsnxAq+
AmXHsK3Cs/w4HeNz4x5Me6j8mh3llv6ruPD2F6J6YWaDD0J11Ym0vlCGtJEiHv2w
yIeaz8hcQniA1PspGUAeRRomr+k9XMClKb1lDdOXlZydbeIWphn+QyQ0ZZAxokVd
UTr65pO0COqUa1QreKlAlueJWQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFK3jRxy+
xDaeNLLbPvJ+5j7GuGDAMB8GA1UdIwQYMBaAFOmf8ESLC9o3cc3EqWxZ98n5yHlE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0U5Qy81MEM5OTNDRTdE
NjMxMUVDQUM1QzdGMUVDNEY5QUUwMi82Wl93UklzTDJqZHh6Y1NwYkZuM3lmbkll
VVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzZaX3dSSXNMMmpkeHpjU3BiRm4zeWZuSWVVUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTdFOUMvNTBDOTkzQ0U3RDYzMTFFQ0FDNUM3RjFFQzRGOUFFMDIvRTNDRDQwQkU3
RDY2MTFFQ0JBNjVDMjMyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E
HzAdMAwEAgABMAYDBADLFtYwDQQCAAIwBwMFACQBL8AwDQYJKoZIhvcNAQELBQAD
ggEBAIoYhCeEU8oI/UaOk9s7CVtGd49uQIvLOk4VaRch0S0te/e6Tj0aTWeao0Fr
J5dGgwM7s1Lbe79oagParpo4yjwGfWhcv60f/Tbl1i6YwMckiD1VUxYRPABxSv+2
siVmhMBt9O+AkS7OPMnsLIrYsF0TI2WXarZwDWL/4lV7AROSCEHmWA9MxevuNH7G
lx9CwCw4qtd2uD7SSWF1eC36VNCBIjSdDFYD84XcKfhVXZDqYXev4dMJd8kLeWTB
fjeZZkXdO1IHeAHDoEBkVsG1L/VLNRfGV/Hlbj7/0GZ4CrEAQU9vOmJgyt/jjWNf
XHNyjVP3EbRPKh/L6zct4LUtwwc=
-----END CERTIFICATE-----
Generated at Fri May 17 03:52:21 2024 by rpki-client on console-ams.rpki-client.org