Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915C241/689AC53801D211EDA63D7E28C4F9AE02/9A26AFD201D611EDA3BFA62EC4F9AE02.roa
File:                     9A26AFD201D611EDA3BFA62EC4F9AE02.roa (raw, json)
Hash identifier:          BSDVALklh20lmgqf3aWX8r8+66lwc6XTeIKSmxYVQCY=
Subject key identifier:   36:65:00:D8:38:73:F8:E4:81:5C:19:36:8C:E9:F3:65:7E:D4:9B:BD
Certificate issuer:       /CN=A915C241/serialNumber=1D61DB24D2179647497614C14F66BBFFACA9CBFD
Certificate serial:       0183
Authority key identifier: 1D:61:DB:24:D2:17:96:47:49:76:14:C1:4F:66:BB:FF:AC:A9:CB:FD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWHbJNIXlkdJdhTBT2a7_6ypy_0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915C241/689AC53801D211EDA63D7E28C4F9AE02/9A26AFD201D611EDA3BFA62EC4F9AE02.roa
Signing time:             Fri 01 Dec 2023 04:34:47 +0000
ROA not before:           Fri 01 Dec 2023 04:34:47 +0000
ROA not after:            Fri 31 Jan 2025 00:00:00 +0000
asID:                     17483
IP address blocks:        103.243.116.0/24 maxlen: 24
                          103.243.117.0/24 maxlen: 24
                          103.243.118.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915C241/689AC53801D211EDA63D7E28C4F9AE02/HWHbJNIXlkdJdhTBT2a7_6ypy_0.crl
                          rsync://rpki.apnic.net/member_repository/A915C241/689AC53801D211EDA63D7E28C4F9AE02/HWHbJNIXlkdJdhTBT2a7_6ypy_0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWHbJNIXlkdJdhTBT2a7_6ypy_0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 May 2024 04:20:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 387 (0x183)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915C241/serialNumber=1D61DB24D2179647497614C14F66BBFFACA9CBFD
        Validity
            Not Before: Dec  1 04:34:47 2023 GMT
            Not After : Jan 31 00:00:00 2025 GMT
        Subject: CN=65696267-c2c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:97:a9:be:69:f3:34:98:77:9d:a9:c9:78:c9:
                    ee:d6:83:64:03:1b:79:76:fc:7e:21:13:b1:30:be:
                    c5:97:c6:3c:bb:07:e2:82:b5:02:7b:bb:0b:8f:cc:
                    23:b7:1f:ee:3d:1f:71:58:8b:92:3c:c9:a4:c3:53:
                    60:b2:0d:c9:f2:3b:7c:b0:78:b6:53:ac:5d:52:36:
                    58:c2:20:61:06:8a:66:45:00:69:72:bd:36:eb:e6:
                    af:14:96:d7:7c:f9:84:72:aa:aa:b0:9f:d7:33:32:
                    e4:da:08:4f:f9:f3:04:9e:5d:ad:ea:c1:e1:ec:a0:
                    79:04:ba:a7:bf:e8:93:cd:a6:b6:dc:5e:f8:53:b4:
                    a8:9b:59:b9:0d:6f:7a:c9:e2:8a:28:c9:5f:92:9d:
                    aa:08:c0:7d:40:70:7c:6c:94:c5:d8:e4:ca:0c:bb:
                    2a:57:c4:1d:a4:18:2b:59:c9:78:15:c8:8b:98:a2:
                    f2:72:ca:46:01:55:0e:c2:ad:c1:aa:18:f9:ee:cd:
                    e5:01:69:f4:4a:c5:41:9c:86:01:5b:0e:c7:e7:70:
                    7d:e5:17:70:2d:3f:3d:cf:df:68:93:a4:08:59:c9:
                    04:69:16:4b:6b:89:32:11:f1:83:55:87:de:40:73:
                    13:07:8f:2d:bb:e5:b2:83:23:a4:d0:9e:d6:89:1e:
                    2c:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:65:00:D8:38:73:F8:E4:81:5C:19:36:8C:E9:F3:65:7E:D4:9B:BD
            X509v3 Authority Key Identifier:
                keyid:1D:61:DB:24:D2:17:96:47:49:76:14:C1:4F:66:BB:FF:AC:A9:CB:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915C241/689AC53801D211EDA63D7E28C4F9AE02/HWHbJNIXlkdJdhTBT2a7_6ypy_0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWHbJNIXlkdJdhTBT2a7_6ypy_0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C241/689AC53801D211EDA63D7E28C4F9AE02/9A26AFD201D611EDA3BFA62EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.243.116.0-103.243.118.255

    Signature Algorithm: sha256WithRSAEncryption
         8d:73:f7:0f:1a:b4:a3:9b:4a:cd:ff:b7:46:e8:90:2b:f0:b2:
         0b:9c:1e:e6:ce:70:bb:48:f3:2d:0e:a6:ed:c8:e5:2c:e1:53:
         45:af:e9:9a:fd:57:6b:c0:18:14:f8:eb:b6:d0:c1:5c:4a:65:
         dd:b3:b0:4b:32:9a:2b:e2:a7:c3:db:11:02:2d:7a:95:98:3d:
         e9:47:42:92:ef:87:5b:d7:7f:5c:9b:07:0a:50:9c:6d:e2:c6:
         d1:ad:2d:60:7b:16:23:29:b3:84:75:9c:5e:3a:1b:f0:6a:f6:
         d2:b9:7b:72:05:7e:1b:2d:89:ff:37:ff:60:e1:0f:a9:63:06:
         aa:a0:a6:e6:8f:56:c2:fd:c5:e8:01:56:1e:83:f0:35:31:04:
         39:97:ba:4c:21:25:a9:56:b5:23:4d:e5:6e:01:c5:7c:7d:c6:
         74:0c:9b:33:af:8b:f5:52:fc:d3:b0:ba:e7:38:6b:1f:7b:09:
         92:73:19:51:59:16:b5:71:e9:51:12:36:64:60:c6:a9:a6:fe:
         7e:69:cd:ca:dc:7c:a6:2d:fe:00:f2:d1:ea:92:2d:86:68:27:
         6a:d9:f7:1d:8a:35:c7:96:a8:c8:c1:5f:8e:49:c7:b6:48:e2:
         26:13:64:5c:b1:50:a3:e5:21:65:af:d9:23:b6:76:6f:c0:c2:
         6d:0d:ad:a7
-----BEGIN CERTIFICATE-----
MIIFeTCCBGGgAwIBAgICAYMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUMyNDExMTAvBgNVBAUTKDFENjFEQjI0RDIxNzk2NDc0OTc2MTRDMTRGNjZCQkZG
QUNBOUNCRkQwHhcNMjMxMjAxMDQzNDQ3WhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NTY5NjI2Ny1jMmMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApZepvmnzNJh3nanJeMnu1oNkAxt5dvx+IROxML7Fl8Y8uwfigrUCe7sLj8wj
tx/uPR9xWIuSPMmkw1Ngsg3J8jt8sHi2U6xdUjZYwiBhBopmRQBpcr026+avFJbX
fPmEcqqqsJ/XMzLk2ghP+fMEnl2t6sHh7KB5BLqnv+iTzaa23F74U7Som1m5DW96
yeKKKMlfkp2qCMB9QHB8bJTF2OTKDLsqV8QdpBgrWcl4FciLmKLycspGAVUOwq3B
qhj57s3lAWn0SsVBnIYBWw7H53B95RdwLT89z99ok6QIWckEaRZLa4kyEfGDVYfe
QHMTB48tu+WygyOk0J7WiR4sIwIDAQABo4ICnTCCApkwHQYDVR0OBBYEFDZlANg4
c/jkgVwZNozp82V+1Ju9MB8GA1UdIwQYMBaAFB1h2yTSF5ZHSXYUwU9mu/+sqcv9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QzI0MS82ODlBQzUzODAx
RDIxMUVEQTYzRDdFMjhDNEY5QUUwMi9IV0hiSk5JWGxrZEpkaFRCVDJhN182eXB5
XzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0hXSGJKTklYbGtkSmRoVEJUMmE3XzZ5cHlfMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NUMyNDEvNjg5QUM1MzgwMUQyMTFFREE2M0Q3RTI4QzRGOUFFMDIvOUEyNkFGRDIw
MUQ2MTFFREEzQkZBNjJFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJwYIKwYBBQUHAQcBAf8E
GDAWMBQEAgABMA4wDAMEAmfzdAMEAGfzdjANBgkqhkiG9w0BAQsFAAOCAQEAjXP3
Dxq0o5tKzf+3RuiQK/CyC5we5s5wu0jzLQ6m7cjlLOFTRa/pmv1Xa8AYFPjrttDB
XEpl3bOwSzKaK+Knw9sRAi16lZg96UdCku+HW9d/XJsHClCcbeLG0a0tYHsWIymz
hHWcXjob8Gr20rl7cgV+Gy2J/zf/YOEPqWMGqqCm5o9Wwv3F6AFWHoPwNTEEOZe6
TCElqVa1I03lbgHFfH3GdAybM6+L9VL807C65zhrH3sJknMZUVkWtXHpURI2ZGDG
qab+fmnNytx8pi3+APLR6pIthmgnatn3HYo1x5aoyMFfjknHtkjiJhNkXLFQo+Uh
Za/ZI7Z2b8DCbQ2tpw==
-----END CERTIFICATE-----
Generated at Tue May 7 05:39:52 2024 by rpki-client on console-fra.rpki-client.org