Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9166638/41EFC51E48CA11EAA214AF4CC4F9AE02/8E49B7320E8C11EDAB2A8680C4F9AE02.roa
File:                     8E49B7320E8C11EDAB2A8680C4F9AE02.roa (raw, json)
Hash identifier:          Vv8Vj2CQY2WTQMBqO6pos1ZPHZns0aipT9C2c2KARg4=
Subject key identifier:   CF:B7:0F:8E:D5:ED:C2:AE:9F:C4:44:05:3C:24:D0:3E:56:F3:8E:AC
Certificate issuer:       /CN=A9166638/serialNumber=5A6CA86E40FB6C268E8FE651FF32ECE44D857D03
Certificate serial:       0990
Authority key identifier: 5A:6C:A8:6E:40:FB:6C:26:8E:8F:E6:51:FF:32:EC:E4:4D:85:7D:03
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WmyobkD7bCaOj-ZR_zLs5E2FfQM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9166638/41EFC51E48CA11EAA214AF4CC4F9AE02/8E49B7320E8C11EDAB2A8680C4F9AE02.roa
Signing time:             Fri 28 Jul 2023 20:17:13 +0000
ROA not before:           Fri 28 Jul 2023 20:17:13 +0000
ROA not after:            Sat 31 Aug 2024 00:00:00 +0000
asID:                     140540
IP address blocks:        103.148.32.0/24 maxlen: 24
                          103.148.32.0/25 maxlen: 25
                          103.148.32.128/27 maxlen: 27
                          103.148.32.160/27 maxlen: 27
                          103.148.32.192/27 maxlen: 27
                          103.148.32.224/27 maxlen: 27

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9166638/41EFC51E48CA11EAA214AF4CC4F9AE02/WmyobkD7bCaOj-ZR_zLs5E2FfQM.crl
                          rsync://rpki.apnic.net/member_repository/A9166638/41EFC51E48CA11EAA214AF4CC4F9AE02/WmyobkD7bCaOj-ZR_zLs5E2FfQM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WmyobkD7bCaOj-ZR_zLs5E2FfQM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 May 2024 20:05:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2448 (0x990)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9166638/serialNumber=5A6CA86E40FB6C268E8FE651FF32ECE44D857D03
        Validity
            Not Before: Jul 28 20:17:13 2023 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=64c42249-f74a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:01:cb:ed:6c:97:4b:b9:db:a3:d5:c7:7a:2c:
                    1c:24:eb:41:e3:31:7e:61:c9:c1:a9:7d:58:da:92:
                    f5:43:92:34:7d:b6:dd:22:3c:bd:92:24:67:3a:9b:
                    ac:c4:6d:6f:99:aa:4a:83:bb:a5:e0:89:56:6e:6e:
                    5f:de:98:39:31:2b:b0:b2:b4:5d:dd:7e:e1:3f:d4:
                    22:48:53:dc:89:65:e2:97:0c:c2:de:7a:74:2e:21:
                    75:82:65:b3:10:db:ae:13:08:21:d6:94:e4:fc:8e:
                    1d:c6:e2:af:41:7d:d2:25:39:5b:52:1f:b0:6f:31:
                    45:f6:f1:b7:93:b1:0b:1e:f7:c8:eb:f7:1d:dc:54:
                    b8:6b:f8:b2:5e:80:e8:17:17:fe:99:ae:47:99:f6:
                    14:1f:f7:72:f4:d3:0f:01:0d:34:b7:8c:68:3f:31:
                    b7:9e:4b:ab:26:ee:25:9c:cd:b7:15:11:7c:41:db:
                    39:06:99:b8:fa:8b:cb:59:2b:0f:de:50:63:1e:76:
                    ff:66:9a:13:1b:22:36:d6:77:cc:f4:31:89:30:55:
                    a4:e5:fa:d2:6e:64:04:de:77:0e:25:5c:82:7a:78:
                    70:fd:03:44:d7:41:52:fb:e0:e4:71:9c:8b:d9:9a:
                    1d:30:5c:f3:af:fd:bf:a0:9c:12:63:70:6f:50:1a:
                    97:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:B7:0F:8E:D5:ED:C2:AE:9F:C4:44:05:3C:24:D0:3E:56:F3:8E:AC
            X509v3 Authority Key Identifier:
                keyid:5A:6C:A8:6E:40:FB:6C:26:8E:8F:E6:51:FF:32:EC:E4:4D:85:7D:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9166638/41EFC51E48CA11EAA214AF4CC4F9AE02/WmyobkD7bCaOj-ZR_zLs5E2FfQM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WmyobkD7bCaOj-ZR_zLs5E2FfQM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166638/41EFC51E48CA11EAA214AF4CC4F9AE02/8E49B7320E8C11EDAB2A8680C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.148.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:ea:10:77:32:4c:5d:e8:8c:7a:07:ee:d8:3a:9c:3b:36:c7:
         65:17:c4:1a:2d:76:dd:89:83:98:eb:8b:72:b6:c1:42:8d:22:
         41:d3:48:e9:4f:94:6e:99:2a:68:32:35:15:71:a7:6a:0c:b1:
         9c:35:f2:56:a4:8e:53:36:28:00:53:b6:58:55:6f:82:81:97:
         56:38:9b:b3:8e:16:d5:73:e6:30:e5:2a:68:d8:c9:0c:b5:4a:
         f2:7c:2b:3a:45:14:ee:d2:96:86:d2:75:70:01:f5:a3:ea:3e:
         f8:39:0c:12:cf:f9:62:f0:f4:be:1a:55:26:36:df:41:4c:73:
         35:db:91:a0:b3:6b:e9:82:7d:55:93:fa:e9:13:26:31:3a:73:
         5f:7d:8d:9d:3d:bd:09:05:23:07:40:5b:66:42:f3:ea:0e:3a:
         36:43:77:ce:f0:ad:ff:15:88:77:0c:b6:b1:ea:63:ab:74:a3:
         59:27:6a:0c:f1:c7:43:0c:b4:94:bb:ab:7b:cc:35:a5:c0:c1:
         c4:58:20:28:95:8e:64:ef:db:de:2f:82:d2:2a:f8:b9:55:c3:
         6c:07:3d:c8:d1:87:50:cd:2a:01:a4:06:37:08:fd:b8:3c:3e:
         00:5c:0a:75:6a:07:3c:cb:d9:b6:84:ec:ed:38:6f:f9:e8:b9:
         dc:83:e9:16
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICCZAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjY2MzgxMTAvBgNVBAUTKDVBNkNBODZFNDBGQjZDMjY4RThGRTY1MUZGMzJFQ0U0
NEQ4NTdEMDMwHhcNMjMwNzI4MjAxNzEzWhcNMjQwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NGM0MjI0OS1mNzRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvQHL7WyXS7nbo9XHeiwcJOtB4zF+YcnBqX1Y2pL1Q5I0fbbdIjy9kiRnOpus
xG1vmapKg7ul4IlWbm5f3pg5MSuwsrRd3X7hP9QiSFPciWXilwzC3np0LiF1gmWz
ENuuEwgh1pTk/I4dxuKvQX3SJTlbUh+wbzFF9vG3k7ELHvfI6/cd3FS4a/iyXoDo
Fxf+ma5HmfYUH/dy9NMPAQ00t4xoPzG3nkurJu4lnM23FRF8Qds5Bpm4+ovLWSsP
3lBjHnb/ZpoTGyI21nfM9DGJMFWk5frSbmQE3ncOJVyCenhw/QNE10FS++DkcZyL
2ZodMFzzr/2/oJwSY3BvUBqXIQIDAQABo4IClTCCApEwHQYDVR0OBBYEFM+3D47V
7cKun8REBTwk0D5W846sMB8GA1UdIwQYMBaAFFpsqG5A+2wmjo/mUf8y7ORNhX0D
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NjYzOC80MUVGQzUxRTQ4
Q0ExMUVBQTIxNEFGNENDNEY5QUUwMi9XbXlvYmtEN2JDYU9qLVpSX3pMczVFMkZm
UU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1dteW9ia0Q3YkNhT2otWlJfekxzNUUyRmZRTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NjY2MzgvNDFFRkM1MUU0OENBMTFFQUEyMTRBRjRDQzRGOUFFMDIvOEU0OUI3MzIw
RThDMTFFREFCMkE4NjgwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnlCAwDQYJKoZIhvcNAQELBQADggEBAKHqEHcyTF3ojHoH
7tg6nDs2x2UXxBotdt2Jg5jri3K2wUKNIkHTSOlPlG6ZKmgyNRVxp2oMsZw18lak
jlM2KABTtlhVb4KBl1Y4m7OOFtVz5jDlKmjYyQy1SvJ8KzpFFO7SlobSdXAB9aPq
Pvg5DBLP+WLw9L4aVSY230FMczXbkaCza+mCfVWT+ukTJjE6c199jZ09vQkFIwdA
W2ZC8+oOOjZDd87wrf8ViHcMtrHqY6t0o1knagzxx0MMtJS7q3vMNaXAwcRYICiV
jmTv294vgtIq+LlVw2wHPcjRh1DNKgGkBjcI/bg8PgBcCnVqBzzL2baE7O04b/no
udyD6RY=
-----END CERTIFICATE-----
Generated at Thu May 16 22:34:46 2024 by rpki-client on console-ams.rpki-client.org