Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917C34D/F4F049186B4211EB9D2C192CC4F9AE02/00F7933C6F3B11EBA740F268C4F9AE02.roa
File:                     00F7933C6F3B11EBA740F268C4F9AE02.roa (raw, json)
Hash identifier:          W7le14999KEWD+G9NtgkVSRfMfJSgYHx2F5Qt/nqg0Q=
Subject key identifier:   A2:48:4E:D8:6F:99:79:FF:E1:3C:54:AD:A4:65:94:CB:0B:12:74:75
Certificate issuer:       /CN=A917C34D/serialNumber=4C0579E57C9D1E94A4E3E4E066566620EC30E2A7
Certificate serial:       0589
Authority key identifier: 4C:05:79:E5:7C:9D:1E:94:A4:E3:E4:E0:66:56:66:20:EC:30:E2:A7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TAV55XydHpSk4-TgZlZmIOww4qc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917C34D/F4F049186B4211EB9D2C192CC4F9AE02/00F7933C6F3B11EBA740F268C4F9AE02.roa
Signing time:             Sat 02 Dec 2023 23:51:22 +0000
ROA not before:           Sat 02 Dec 2023 23:51:22 +0000
ROA not after:            Fri 31 Jan 2025 00:00:00 +0000
asID:                     45671
IP address blocks:        103.203.190.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917C34D/F4F049186B4211EB9D2C192CC4F9AE02/TAV55XydHpSk4-TgZlZmIOww4qc.crl
                          rsync://rpki.apnic.net/member_repository/A917C34D/F4F049186B4211EB9D2C192CC4F9AE02/TAV55XydHpSk4-TgZlZmIOww4qc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TAV55XydHpSk4-TgZlZmIOww4qc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Dec 2024 17:11:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1417 (0x589)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917C34D/serialNumber=4C0579E57C9D1E94A4E3E4E066566620EC30E2A7
        Validity
            Not Before: Dec  2 23:51:22 2023 GMT
            Not After : Jan 31 00:00:00 2025 GMT
        Subject: CN=656bc2fa-8154
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ff:49:4c:1f:b8:07:48:87:88:d2:ac:5b:dc:
                    e1:f2:e8:29:67:6a:51:13:5a:96:f9:bc:b6:39:36:
                    ec:a6:6c:bb:df:2e:ff:1c:b9:ab:15:8a:d1:be:78:
                    6b:e4:0a:a8:6a:1c:9b:96:c0:e6:20:94:8b:91:c0:
                    79:d2:cf:2e:f1:8d:34:b0:80:25:2c:19:86:fb:f9:
                    b0:36:2c:b5:17:47:1a:79:b6:a8:e8:5c:d2:4e:84:
                    6e:a3:fd:75:5b:4a:f8:88:97:47:e8:c3:f2:6a:10:
                    53:4b:cc:c4:3d:45:66:ff:c6:11:4b:f0:74:ec:85:
                    a3:a5:ba:a8:2b:ea:60:49:d0:91:23:d5:eb:cc:e3:
                    0c:dd:25:8a:b0:3b:b1:36:57:4b:ea:5b:b9:6c:bd:
                    af:bd:b4:d8:89:cf:05:77:24:d7:cd:f4:11:6a:dd:
                    99:bf:91:a1:a7:4e:51:1e:db:1c:1e:78:57:d6:91:
                    fe:a5:b6:b0:45:69:bd:5a:bd:11:2f:c4:a8:b6:86:
                    bd:b9:8b:af:59:3a:28:2a:93:d2:87:f5:dd:ca:d3:
                    fb:89:6b:b6:7c:2a:2e:92:6a:4f:e9:b0:ff:8a:0f:
                    a9:d4:3e:07:bd:87:ec:b2:4f:76:dc:fb:66:b3:35:
                    a4:e8:e7:65:96:a6:13:45:6c:5d:b5:45:3e:d1:fb:
                    d8:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:48:4E:D8:6F:99:79:FF:E1:3C:54:AD:A4:65:94:CB:0B:12:74:75
            X509v3 Authority Key Identifier:
                keyid:4C:05:79:E5:7C:9D:1E:94:A4:E3:E4:E0:66:56:66:20:EC:30:E2:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917C34D/F4F049186B4211EB9D2C192CC4F9AE02/TAV55XydHpSk4-TgZlZmIOww4qc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TAV55XydHpSk4-TgZlZmIOww4qc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C34D/F4F049186B4211EB9D2C192CC4F9AE02/00F7933C6F3B11EBA740F268C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.203.190.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1f:41:13:4c:c9:68:9d:b8:c1:aa:37:9a:61:d1:fa:5d:27:34:
         bc:63:32:d1:95:1c:ef:82:db:72:11:81:61:af:79:79:56:ea:
         67:b7:43:49:c2:dc:3f:83:38:b8:72:d6:9d:05:a6:db:be:9f:
         6b:8d:62:8c:44:ab:d8:06:5e:41:b0:57:5b:89:07:91:b4:48:
         e4:8a:71:f4:9a:f0:3c:65:b0:ad:7d:0a:fd:19:fe:b9:15:f4:
         d1:7f:d9:18:c3:45:b0:7a:91:bb:ee:c1:2b:9d:37:90:26:df:
         68:7c:74:3c:84:5f:1f:4c:66:0e:46:de:3c:6c:8d:47:8a:d0:
         35:63:3d:5e:48:71:51:c5:ff:d0:71:83:3c:dc:41:97:dc:28:
         9c:5d:64:7f:10:bc:53:b8:3e:f1:46:ff:29:16:c0:ed:63:98:
         fd:6d:5a:8d:4d:07:8a:7a:69:12:96:71:98:d7:66:13:32:6c:
         f0:db:7d:8c:a4:9d:32:07:ef:ea:e8:af:08:cc:cc:e2:ed:fd:
         46:4a:63:20:13:5e:0c:3a:17:18:83:ad:96:89:b7:ac:75:f0:
         0a:2f:a1:e3:21:87:31:ed:5e:73:04:b6:5a:8d:9c:6c:51:90:
         f9:30:b7:0a:8a:5b:15:fe:10:f0:ab:cd:cc:ee:1e:34:48:a2:
         cc:56:62:0a
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBYkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0MzNEQxMTAvBgNVBAUTKDRDMDU3OUU1N0M5RDFFOTRBNEUzRTRFMDY2NTY2NjIw
RUMzMEUyQTcwHhcNMjMxMjAyMjM1MTIyWhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NTZiYzJmYS04MTU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0P9JTB+4B0iHiNKsW9zh8ugpZ2pRE1qW+by2OTbspmy73y7/HLmrFYrRvnhr
5AqoahyblsDmIJSLkcB50s8u8Y00sIAlLBmG+/mwNiy1F0caebao6FzSToRuo/11
W0r4iJdH6MPyahBTS8zEPUVm/8YRS/B07IWjpbqoK+pgSdCRI9XrzOMM3SWKsDux
NldL6lu5bL2vvbTYic8FdyTXzfQRat2Zv5Ghp05RHtscHnhX1pH+pbawRWm9Wr0R
L8Sotoa9uYuvWTooKpPSh/XdytP7iWu2fCoukmpP6bD/ig+p1D4HvYfssk923Ptm
szWk6OdllqYTRWxdtUU+0fvYaQIDAQABo4IClTCCApEwHQYDVR0OBBYEFKJITthv
mXn/4TxUraRllMsLEnR1MB8GA1UdIwQYMBaAFEwFeeV8nR6UpOPk4GZWZiDsMOKn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzM0RC9GNEYwNDkxODZC
NDIxMUVCOUQyQzE5MkNDNEY5QUUwMi9UQVY1NVh5ZEhwU2s0LVRnWmxabUlPd3c0
cWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1RBVjU1WHlkSHBTazQtVGdabFptSU93dzRxYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
N0MzNEQvRjRGMDQ5MTg2QjQyMTFFQjlEMkMxOTJDQzRGOUFFMDIvMDBGNzkzM0M2
RjNCMTFFQkE3NDBGMjY4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFny74wDQYJKoZIhvcNAQELBQADggEBAB9BE0zJaJ24wao3
mmHR+l0nNLxjMtGVHO+C23IRgWGveXlW6me3Q0nC3D+DOLhy1p0Fptu+n2uNYoxE
q9gGXkGwV1uJB5G0SOSKcfSa8DxlsK19Cv0Z/rkV9NF/2RjDRbB6kbvuwSudN5Am
32h8dDyEXx9MZg5G3jxsjUeK0DVjPV5IcVHF/9BxgzzcQZfcKJxdZH8QvFO4PvFG
/ykWwO1jmP1tWo1NB4p6aRKWcZjXZhMybPDbfYyknTIH7+rorwjMzOLt/UZKYyAT
Xgw6FxiDrZaJt6x18AovoeMhhzHtXnMEtlqNnGxRkPkwtwqKWxX+EPCrzczuHjRI
osxWYgo=
-----END CERTIFICATE-----
Generated at Sun Nov 24 23:58:48 2024 by rpki-client on console-fra.rpki-client.org