Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9174A4F/E5295C48B1AF11E985975A63C4F9AE02/7592203EB1B111E999187E66C4F9AE02.roa
File:                     7592203EB1B111E999187E66C4F9AE02.roa (raw, json)
Hash identifier:          qCAKgLjSLQVpqeSB9DPCjoQb5DaM/m2x9TSh6/Y2h7g=
Subject key identifier:   EF:50:E5:4D:67:46:5C:8F:09:A8:AC:C1:46:FC:93:B7:2E:16:21:50
Certificate issuer:       /CN=A9174A4F/serialNumber=1E0A938A4DC7D3BAD4F5F965DCD55E0B298C42DB
Certificate serial:       0CBC
Authority key identifier: 1E:0A:93:8A:4D:C7:D3:BA:D4:F5:F9:65:DC:D5:5E:0B:29:8C:42:DB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HgqTik3H07rU9fll3NVeCymMQts.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9174A4F/E5295C48B1AF11E985975A63C4F9AE02/7592203EB1B111E999187E66C4F9AE02.roa
Signing time:             Wed 20 Sep 2023 18:36:22 +0000
ROA not before:           Wed 20 Sep 2023 18:36:22 +0000
ROA not after:            Sun 01 Dec 2024 00:00:00 +0000
asID:                     135366
IP address blocks:        103.99.160.0/22 maxlen: 22
                          103.99.160.0/23 maxlen: 23
                          103.99.160.0/24 maxlen: 24
                          103.99.161.0/24 maxlen: 24
                          103.99.162.0/23 maxlen: 23
                          103.99.162.0/24 maxlen: 24
                          103.99.163.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9174A4F/E5295C48B1AF11E985975A63C4F9AE02/HgqTik3H07rU9fll3NVeCymMQts.crl
                          rsync://rpki.apnic.net/member_repository/A9174A4F/E5295C48B1AF11E985975A63C4F9AE02/HgqTik3H07rU9fll3NVeCymMQts.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HgqTik3H07rU9fll3NVeCymMQts.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 May 2024 18:49:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3260 (0xcbc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9174A4F/serialNumber=1E0A938A4DC7D3BAD4F5F965DCD55E0B298C42DB
        Validity
            Not Before: Sep 20 18:36:22 2023 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=650b3ba6-bd05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:1c:a9:89:42:c3:43:fd:f5:20:90:35:e0:cb:
                    ec:e5:8e:4e:80:87:fb:b9:1d:ad:74:fd:f7:57:eb:
                    f3:3a:bb:eb:1a:08:91:0a:33:05:04:a1:b0:9c:62:
                    fb:b2:25:03:ca:8c:41:d5:38:f6:fb:fd:85:05:fc:
                    9c:37:30:d0:98:f4:48:70:06:61:bc:89:bf:4c:c0:
                    e8:d3:ef:a4:6a:70:81:05:b1:72:e6:10:6d:2e:37:
                    60:cc:01:92:7f:ff:2b:d3:36:79:3f:79:ee:60:89:
                    34:6d:59:e2:a0:44:f2:b8:21:c0:e0:f0:cb:43:04:
                    48:20:19:01:fc:c7:7c:2d:a6:92:0c:5b:18:18:3f:
                    93:ac:97:74:df:f5:88:15:d6:90:6a:f7:b3:85:8b:
                    5c:e0:b1:b4:8b:04:bb:4b:11:ac:a8:0d:8a:05:fa:
                    52:0f:1a:df:79:91:25:58:21:c2:01:40:a3:bf:c3:
                    4c:33:5b:9c:f5:40:b4:2a:1d:52:4d:b9:f4:b0:a9:
                    26:4d:7c:f2:02:5d:fb:9d:83:62:dd:9c:e8:ff:9f:
                    0c:ef:65:dc:21:65:dd:11:15:2f:7c:d6:92:0a:be:
                    84:10:cc:56:ba:4a:1e:f4:ee:c1:35:8b:83:21:08:
                    88:13:2f:80:b1:14:cd:76:b1:fd:6c:51:ea:63:15:
                    f0:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:50:E5:4D:67:46:5C:8F:09:A8:AC:C1:46:FC:93:B7:2E:16:21:50
            X509v3 Authority Key Identifier:
                keyid:1E:0A:93:8A:4D:C7:D3:BA:D4:F5:F9:65:DC:D5:5E:0B:29:8C:42:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9174A4F/E5295C48B1AF11E985975A63C4F9AE02/HgqTik3H07rU9fll3NVeCymMQts.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HgqTik3H07rU9fll3NVeCymMQts.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174A4F/E5295C48B1AF11E985975A63C4F9AE02/7592203EB1B111E999187E66C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.99.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         62:37:83:e5:02:d6:0f:73:4d:0d:1d:5c:37:7a:5a:e3:a4:1a:
         7c:ea:20:68:fa:aa:4c:84:1f:4b:c0:20:ea:77:80:7d:8a:3c:
         bc:fc:3e:08:ff:c2:ad:23:03:92:01:26:21:86:9d:52:57:65:
         53:d5:4c:45:eb:3c:5c:30:e5:ce:9f:9d:c5:15:c3:76:74:71:
         b8:53:a9:05:96:6b:d3:1f:d9:a4:63:8e:cf:3c:40:d1:69:b6:
         16:d1:50:88:15:e8:4b:1e:e4:1f:23:d3:53:1e:84:57:de:a0:
         8b:f1:61:9a:a7:22:4f:84:57:51:ab:28:9f:f2:e8:9f:49:4b:
         ab:5d:a3:3d:c5:4f:74:f1:56:42:80:84:f6:b3:31:ca:3a:87:
         4f:cf:d7:df:56:fc:f6:73:d1:cf:99:8a:50:3e:dc:89:5c:2e:
         7b:23:18:b4:01:4c:83:21:46:3e:6b:c4:13:59:6b:2f:10:80:
         28:e3:d7:48:9e:5d:32:01:3c:45:d6:a7:0d:84:1d:a2:2a:ba:
         c3:e9:30:57:c7:1b:24:d4:d4:2e:7c:56:74:90:dd:97:ac:a7:
         72:4d:0e:95:b3:07:e3:b7:7f:5f:dc:48:d3:0a:24:cc:90:6a:
         d2:b6:f1:44:dd:97:4d:b4:80:80:2f:92:9d:69:28:a3:a0:d5:
         fe:1c:59:6e
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICDLwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzRBNEYxMTAvBgNVBAUTKDFFMEE5MzhBNERDN0QzQkFENEY1Rjk2NURDRDU1RTBC
Mjk4QzQyREIwHhcNMjMwOTIwMTgzNjIyWhcNMjQxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NTBiM2JhNi1iZDA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6RypiULDQ/31IJA14Mvs5Y5OgIf7uR2tdP33V+vzOrvrGgiRCjMFBKGwnGL7
siUDyoxB1Tj2+/2FBfycNzDQmPRIcAZhvIm/TMDo0++kanCBBbFy5hBtLjdgzAGS
f/8r0zZ5P3nuYIk0bVnioETyuCHA4PDLQwRIIBkB/Md8LaaSDFsYGD+TrJd03/WI
FdaQavezhYtc4LG0iwS7SxGsqA2KBfpSDxrfeZElWCHCAUCjv8NMM1uc9UC0Kh1S
Tbn0sKkmTXzyAl37nYNi3Zzo/58M72XcIWXdERUvfNaSCr6EEMxWukoe9O7BNYuD
IQiIEy+AsRTNdrH9bFHqYxXwNwIDAQABo4IClTCCApEwHQYDVR0OBBYEFO9Q5U1n
RlyPCaiswUb8k7cuFiFQMB8GA1UdIwQYMBaAFB4Kk4pNx9O61PX5ZdzVXgspjELb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NEE0Ri9FNTI5NUM0OEIx
QUYxMUU5ODU5NzVBNjNDNEY5QUUwMi9IZ3FUaWszSDA3clU5ZmxsM05WZUN5bU1R
dHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0hncVRpazNIMDdyVTlmbGwzTlZlQ3ltTVF0cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NzRBNEYvRTUyOTVDNDhCMUFGMTFFOTg1OTc1QTYzQzRGOUFFMDIvNzU5MjIwM0VC
MUIxMTFFOTk5MTg3RTY2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAJnY6AwDQYJKoZIhvcNAQELBQADggEBAGI3g+UC1g9zTQ0d
XDd6WuOkGnzqIGj6qkyEH0vAIOp3gH2KPLz8Pgj/wq0jA5IBJiGGnVJXZVPVTEXr
PFww5c6fncUVw3Z0cbhTqQWWa9Mf2aRjjs88QNFpthbRUIgV6Ese5B8j01MehFfe
oIvxYZqnIk+EV1GrKJ/y6J9JS6tdoz3FT3TxVkKAhPazMco6h0/P199W/PZz0c+Z
ilA+3IlcLnsjGLQBTIMhRj5rxBNZay8QgCjj10ieXTIBPEXWpw2EHaIqusPpMFfH
GyTU1C58VnSQ3Zesp3JNDpWzB+O3f1/cSNMKJMyQatK28UTdl020gIAvkp1pKKOg
1f4cWW4=
-----END CERTIFICATE-----
Generated at Thu May 16 19:49:59 2024 by rpki-client on console-fra.rpki-client.org