Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9166E2B/27E7CAA60C2D11EAB029DB53C4F9AE02/8045C26A3B3E11EC94B9CE0BC4F9AE02.roa
File:                     8045C26A3B3E11EC94B9CE0BC4F9AE02.roa (raw, json)
Hash identifier:          unWEVW99jcgEqQR6p5xroTJKftsLi8aygBIWPAop84o=
Subject key identifier:   73:00:9F:E9:85:74:D5:32:34:47:2E:56:0A:75:CB:31:56:43:0F:11
Certificate issuer:       /CN=A9166E2B/serialNumber=01032D9DFC362A958743E86D3C8D0611A6ADB05B
Certificate serial:       0AD0
Authority key identifier: 01:03:2D:9D:FC:36:2A:95:87:43:E8:6D:3C:8D:06:11:A6:AD:B0:5B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AQMtnfw2KpWHQ-htPI0GEaatsFs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9166E2B/27E7CAA60C2D11EAB029DB53C4F9AE02/8045C26A3B3E11EC94B9CE0BC4F9AE02.roa
Signing time:             Thu 06 Jul 2023 19:16:14 +0000
ROA not before:           Thu 06 Jul 2023 19:16:14 +0000
ROA not after:            Sat 31 Aug 2024 00:00:00 +0000
asID:                     139294
IP address blocks:        103.115.117.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9166E2B/27E7CAA60C2D11EAB029DB53C4F9AE02/AQMtnfw2KpWHQ-htPI0GEaatsFs.crl
                          rsync://rpki.apnic.net/member_repository/A9166E2B/27E7CAA60C2D11EAB029DB53C4F9AE02/AQMtnfw2KpWHQ-htPI0GEaatsFs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AQMtnfw2KpWHQ-htPI0GEaatsFs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 May 2024 19:38:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2768 (0xad0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9166E2B/serialNumber=01032D9DFC362A958743E86D3C8D0611A6ADB05B
        Validity
            Not Before: Jul  6 19:16:14 2023 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=64a712fe-c17b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:4a:4d:3b:87:f4:c7:25:fb:b2:b1:de:40:4b:
                    61:3d:71:d1:50:0b:66:50:e6:13:1a:19:a0:88:3c:
                    04:94:94:db:1c:57:cb:2e:76:68:b6:3c:56:d0:96:
                    0d:07:95:b8:87:8f:54:c7:55:a8:9a:bf:ad:38:33:
                    4a:9b:fe:1e:83:df:d9:35:13:55:36:49:6a:4c:23:
                    c5:8d:cb:6c:ad:e1:51:52:68:5d:30:12:ac:d1:48:
                    d4:85:81:99:d3:d4:15:75:af:f4:18:84:95:0a:a0:
                    cb:af:b1:ad:10:bb:72:08:d0:b3:58:bb:64:ca:34:
                    60:6e:58:2f:9f:92:18:99:49:0d:73:a2:c4:3c:0d:
                    1c:e1:40:4c:55:3a:fc:e3:78:ff:12:fb:94:eb:fe:
                    be:b4:84:00:f8:4a:d3:7f:00:be:c6:59:c4:b5:ca:
                    bf:e2:1d:5c:1d:2c:d1:a4:9f:db:35:81:ec:03:83:
                    db:5b:69:01:f5:54:5d:e1:82:74:31:b0:c6:5a:57:
                    a5:cf:0c:68:a6:0e:40:be:7e:a3:93:c2:c3:24:4e:
                    be:4b:40:71:1d:1d:65:1d:a8:80:9b:3f:22:8d:bd:
                    a9:e7:ac:5b:63:55:0e:9f:f7:4a:64:ee:c6:60:42:
                    c2:d8:c0:1c:b6:1f:2e:58:41:18:9f:52:d6:e0:73:
                    a1:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:00:9F:E9:85:74:D5:32:34:47:2E:56:0A:75:CB:31:56:43:0F:11
            X509v3 Authority Key Identifier:
                keyid:01:03:2D:9D:FC:36:2A:95:87:43:E8:6D:3C:8D:06:11:A6:AD:B0:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9166E2B/27E7CAA60C2D11EAB029DB53C4F9AE02/AQMtnfw2KpWHQ-htPI0GEaatsFs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AQMtnfw2KpWHQ-htPI0GEaatsFs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166E2B/27E7CAA60C2D11EAB029DB53C4F9AE02/8045C26A3B3E11EC94B9CE0BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.115.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:49:ef:1c:e4:00:f7:ae:56:2c:73:74:fc:67:4e:ef:6a:7e:
         16:2c:41:08:df:3b:0a:04:96:de:55:a5:23:fa:58:05:99:b5:
         f8:39:99:de:a7:47:1c:0d:89:d3:a1:1f:d1:8c:d7:64:c9:18:
         0e:e5:af:90:3d:c0:a9:fb:24:e7:e9:f5:a5:4d:a0:da:ab:07:
         81:bd:f6:12:85:a6:fb:e7:30:6b:33:56:d3:2b:ec:f2:db:18:
         d7:85:69:dc:fd:db:9d:6a:bc:6f:1d:8a:c2:3e:40:9b:39:9d:
         e7:9e:cf:86:f7:cc:87:24:2c:ef:16:e9:9d:07:c9:01:d8:97:
         6f:49:11:f6:16:1d:c7:f6:08:58:f9:49:92:b5:c1:0b:41:e6:
         5b:bb:13:8b:e1:da:69:e5:eb:27:90:5c:10:2f:48:12:08:29:
         ce:60:25:1f:4f:a1:f0:6d:dd:30:40:b7:d4:a6:b5:5d:28:7b:
         16:8e:e9:5e:f8:d4:a8:5f:7b:66:15:97:e1:c7:1e:f4:4c:c6:
         0d:03:ba:7d:a7:c1:db:0d:17:b0:15:0d:af:cd:00:fa:84:86:
         6b:ef:6e:22:b0:73:32:48:ee:52:b7:59:f1:42:f5:6a:c6:99:
         cf:98:1a:a8:41:ed:89:e2:94:9a:66:2c:36:b5:cd:06:72:fe:
         00:07:7a:20
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICCtAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjZFMkIxMTAvBgNVBAUTKDAxMDMyRDlERkMzNjJBOTU4NzQzRTg2RDNDOEQwNjEx
QTZBREIwNUIwHhcNMjMwNzA2MTkxNjE0WhcNMjQwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NGE3MTJmZS1jMTdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwkpNO4f0xyX7srHeQEthPXHRUAtmUOYTGhmgiDwElJTbHFfLLnZotjxW0JYN
B5W4h49Ux1Womr+tODNKm/4eg9/ZNRNVNklqTCPFjctsreFRUmhdMBKs0UjUhYGZ
09QVda/0GISVCqDLr7GtELtyCNCzWLtkyjRgblgvn5IYmUkNc6LEPA0c4UBMVTr8
43j/EvuU6/6+tIQA+ErTfwC+xlnEtcq/4h1cHSzRpJ/bNYHsA4PbW2kB9VRd4YJ0
MbDGWlelzwxopg5Avn6jk8LDJE6+S0BxHR1lHaiAmz8ijb2p56xbY1UOn/dKZO7G
YELC2MActh8uWEEYn1LW4HOhIQIDAQABo4IClTCCApEwHQYDVR0OBBYEFHMAn+mF
dNUyNEcuVgp1yzFWQw8RMB8GA1UdIwQYMBaAFAEDLZ38NiqVh0PobTyNBhGmrbBb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NkUyQi8yN0U3Q0FBNjBD
MkQxMUVBQjAyOURCNTNDNEY5QUUwMi9BUU10bmZ3MktwV0hRLWh0UEkwR0VhYXRz
RnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0FRTXRuZncyS3BXSFEtaHRQSTBHRWFhdHNGcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NjZFMkIvMjdFN0NBQTYwQzJEMTFFQUIwMjlEQjUzQzRGOUFFMDIvODA0NUMyNkEz
QjNFMTFFQzk0QjlDRTBCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnc3UwDQYJKoZIhvcNAQELBQADggEBAFxJ7xzkAPeuVixz
dPxnTu9qfhYsQQjfOwoElt5VpSP6WAWZtfg5md6nRxwNidOhH9GM12TJGA7lr5A9
wKn7JOfp9aVNoNqrB4G99hKFpvvnMGszVtMr7PLbGNeFadz9251qvG8disI+QJs5
neeez4b3zIckLO8W6Z0HyQHYl29JEfYWHcf2CFj5SZK1wQtB5lu7E4vh2mnl6yeQ
XBAvSBIIKc5gJR9PofBt3TBAt9SmtV0oexaO6V741Khfe2YVl+HHHvRMxg0Dun2n
wdsNF7AVDa/NAPqEhmvvbiKwczJI7lK3WfFC9WrGmc+YGqhB7YnilJpmLDa1zQZy
/gAHeiA=
-----END CERTIFICATE-----
Generated at Wed May 22 23:16:45 2024 by rpki-client on console-ams.rpki-client.org