Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916DB8E/FF80276C3BCC11EC8A6BCD7EC4F9AE02/81C6ECD03BD011ECBCB98F83C4F9AE02.roa
File:                     81C6ECD03BD011ECBCB98F83C4F9AE02.roa (raw, json)
Hash identifier:          pR8RPoAza4T5e/Q4AbLsnA7RUrt8QCAz9qVDD44RShc=
Subject key identifier:   DE:6D:D1:D3:EB:07:99:6C:5E:C3:02:95:3F:7F:15:DC:BC:C1:52:55
Certificate issuer:       /CN=A916DB8E/serialNumber=9DE3DA7A0AC6940D32ABB9CFFCB061F2AEE5661D
Certificate serial:       030B
Authority key identifier: 9D:E3:DA:7A:0A:C6:94:0D:32:AB:B9:CF:FC:B0:61:F2:AE:E5:66:1D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nePaegrGlA0yq7nP_LBh8q7lZh0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916DB8E/FF80276C3BCC11EC8A6BCD7EC4F9AE02/81C6ECD03BD011ECBCB98F83C4F9AE02.roa
Signing time:             Thu 13 Apr 2023 04:04:32 +0000
ROA not before:           Thu 13 Apr 2023 04:04:32 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     399955
IP address blocks:        45.113.0.0/22 maxlen: 24
                          103.52.152.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916DB8E/FF80276C3BCC11EC8A6BCD7EC4F9AE02/nePaegrGlA0yq7nP_LBh8q7lZh0.crl
                          rsync://rpki.apnic.net/member_repository/A916DB8E/FF80276C3BCC11EC8A6BCD7EC4F9AE02/nePaegrGlA0yq7nP_LBh8q7lZh0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nePaegrGlA0yq7nP_LBh8q7lZh0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 10 May 2023 04:10:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 779 (0x30b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916DB8E/serialNumber=9DE3DA7A0AC6940D32ABB9CFFCB061F2AEE5661D
        Validity
            Not Before: Apr 13 04:04:32 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=64377f4f-3e0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:70:ba:2b:1e:b0:37:cf:f1:f1:0c:51:fe:42:
                    69:0f:4f:98:c4:4b:1b:e0:2c:df:b3:47:ac:2c:ef:
                    02:c6:20:7c:59:87:e3:2c:b9:5c:00:f0:26:4b:c2:
                    f4:a5:35:41:d2:f4:aa:fc:db:63:74:d5:f1:e6:c9:
                    3e:83:53:1c:5d:bf:44:b7:62:c7:ec:be:85:4b:b8:
                    e0:2e:c1:66:e2:8d:b6:ed:82:bb:4d:1a:0d:03:eb:
                    f2:52:8b:42:d0:3a:89:dc:a5:68:11:3e:62:03:ad:
                    7c:2a:44:42:64:d8:9d:bd:3d:a0:8d:e0:06:14:93:
                    29:8a:1b:2b:33:ff:63:e6:bc:e5:d1:fc:e2:5d:4b:
                    a9:96:c7:99:53:02:80:fd:c0:87:77:98:0a:d1:ec:
                    db:50:ba:c7:79:90:93:47:1e:c8:0c:d9:b1:a6:2a:
                    31:69:44:6b:b0:15:33:03:8c:c3:bb:60:f1:61:f0:
                    dd:dd:b6:53:3c:10:cb:c1:ba:96:c3:8a:42:5a:fb:
                    fa:6e:61:dd:fa:41:98:13:05:ff:cf:5b:20:64:6a:
                    65:f7:51:e2:b2:9d:c1:c8:5c:f7:f1:03:d8:e6:25:
                    37:d5:6a:68:7b:86:47:f3:7d:cc:c5:17:e2:93:50:
                    b0:68:dc:fa:d1:b5:f6:26:c7:35:ba:ff:5e:22:ad:
                    c3:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                DE:6D:D1:D3:EB:07:99:6C:5E:C3:02:95:3F:7F:15:DC:BC:C1:52:55
            X509v3 Authority Key Identifier: 
                keyid:9D:E3:DA:7A:0A:C6:94:0D:32:AB:B9:CF:FC:B0:61:F2:AE:E5:66:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916DB8E/FF80276C3BCC11EC8A6BCD7EC4F9AE02/nePaegrGlA0yq7nP_LBh8q7lZh0.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nePaegrGlA0yq7nP_LBh8q7lZh0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DB8E/FF80276C3BCC11EC8A6BCD7EC4F9AE02/81C6ECD03BD011ECBCB98F83C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.113.0.0/22
                  103.52.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9e:d9:ca:2c:c0:0a:21:14:a5:f0:ed:de:34:fd:8e:d9:e9:dc:
         9c:0d:5c:14:14:6b:93:e5:e4:f1:38:03:29:1c:0e:ef:4d:4c:
         3d:e4:de:31:9f:2e:09:97:b9:0d:2a:31:01:90:db:f9:54:ac:
         18:7c:5b:8e:54:d3:d5:10:8d:be:d7:71:49:3f:88:ba:87:c8:
         a2:ce:de:db:8b:28:a6:9f:47:a4:69:b8:7b:43:e3:7a:c4:d0:
         f0:36:f3:2b:b2:17:04:82:13:2c:8d:c0:21:bf:09:86:fd:92:
         94:77:82:99:d4:57:cb:a0:c8:d3:86:0e:86:d5:6f:b5:c2:76:
         38:b3:38:f0:e0:a2:d1:0b:a1:97:eb:b8:b9:52:48:88:c1:16:
         5c:7b:fe:c7:0c:af:6b:88:7d:16:e3:03:12:bf:de:25:28:e8:
         7b:0f:1f:ae:a2:6d:f8:2f:d7:62:c7:e4:02:fc:24:53:f3:e8:
         04:27:70:51:9a:35:d1:74:e5:9c:27:b3:02:51:44:2b:a6:d6:
         8d:c1:77:7a:e4:00:f2:75:00:e5:01:36:eb:97:b5:a6:17:97:
         8f:2e:ff:55:29:bc:af:5d:77:1c:6d:c7:15:8b:b3:65:c5:2c:
         21:6b:71:8c:40:48:44:a1:cd:7f:0e:7e:c5:99:08:3a:64:c0:
         f6:ca:81:73
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICAwswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkRCOEUxMTAvBgNVBAUTKDlERTNEQTdBMEFDNjk0MEQzMkFCQjlDRkZDQjA2MUYy
QUVFNTY2MUQwHhcNMjMwNDEzMDQwNDMyWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NDM3N2Y0Zi0zZTBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxXC6Kx6wN8/x8QxR/kJpD0+YxEsb4Czfs0esLO8CxiB8WYfjLLlcAPAmS8L0
pTVB0vSq/NtjdNXx5sk+g1McXb9Et2LH7L6FS7jgLsFm4o227YK7TRoNA+vyUotC
0DqJ3KVoET5iA618KkRCZNidvT2gjeAGFJMpihsrM/9j5rzl0fziXUuplseZUwKA
/cCHd5gK0ezbULrHeZCTRx7IDNmxpioxaURrsBUzA4zDu2DxYfDd3bZTPBDLwbqW
w4pCWvv6bmHd+kGYEwX/z1sgZGpl91Hisp3ByFz38QPY5iU31Wpoe4ZH833MxRfi
k1CwaNz60bX2Jsc1uv9eIq3DKQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFN5t0dPr
B5lsXsMClT9/Fdy8wVJVMB8GA1UdIwQYMBaAFJ3j2noKxpQNMqu5z/ywYfKu5WYd
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2REI4RS9GRjgwMjc2QzNC
Q0MxMUVDOEE2QkNEN0VDNEY5QUUwMi9uZVBhZWdyR2xBMHlxN25QX0xCaDhxN2xa
aDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL25lUGFlZ3JHbEEweXE3blBfTEJoOHE3bFpoMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NkRCOEUvRkY4MDI3NkMzQkNDMTFFQzhBNkJDRDdFQzRGOUFFMDIvODFDNkVDRDAz
QkQwMTFFQ0JDQjk4RjgzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBAItcQADBAJnNJgwDQYJKoZIhvcNAQELBQADggEBAJ7ZyizA
CiEUpfDt3jT9jtnp3JwNXBQUa5Pl5PE4AykcDu9NTD3k3jGfLgmXuQ0qMQGQ2/lU
rBh8W45U09UQjb7XcUk/iLqHyKLO3tuLKKafR6RpuHtD43rE0PA28yuyFwSCEyyN
wCG/CYb9kpR3gpnUV8ugyNOGDobVb7XCdjizOPDgotELoZfruLlSSIjBFlx7/scM
r2uIfRbjAxK/3iUo6HsPH66ibfgv12LH5AL8JFPz6AQncFGaNdF05ZwnswJRRCum
1o3Bd3rkAPJ1AOUBNuuXtaYXl48u/1UpvK9ddxxtxxWLs2XFLCFrcYxASEShzX8O
fsWZCDpkwPbKgXM=
-----END CERTIFICATE-----
Generated at Wed May 3 13:18:24 2023 by rpki-client on console-ams.rpki-client.org