Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/9746A47821DD11EBBEEF997DC4F9AE02.roa
File:                     9746A47821DD11EBBEEF997DC4F9AE02.roa (raw, json)
Hash identifier:          pr7m+D7SykxUkKmJQQ4/ELXCqqOkh9LqbSAC/lmnnK0=
Subject key identifier:   D9:67:AA:39:4D:A4:F9:ED:4A:31:8E:56:D2:E1:1F:60:92:D8:34:1B
Certificate issuer:       /CN=A91841D2/serialNumber=7EE71AD847E9D56810CD49E27785C6385CCCF96B
Certificate serial:       0864
Authority key identifier: 7E:E7:1A:D8:47:E9:D5:68:10:CD:49:E2:77:85:C6:38:5C:CC:F9:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuca2Efp1WgQzUnid4XGOFzM-Ws.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/9746A47821DD11EBBEEF997DC4F9AE02.roa
Signing time:             Thu 22 Jun 2023 21:52:23 +0000
ROA not before:           Thu 22 Jun 2023 21:52:23 +0000
ROA not after:            Tue 30 Jul 2024 00:00:00 +0000
asID:                     18013
IP address blocks:        103.150.181.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/fuca2Efp1WgQzUnid4XGOFzM-Ws.crl
                          rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/fuca2Efp1WgQzUnid4XGOFzM-Ws.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuca2Efp1WgQzUnid4XGOFzM-Ws.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 19:51:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2148 (0x864)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91841D2/serialNumber=7EE71AD847E9D56810CD49E27785C6385CCCF96B
        Validity
            Not Before: Jun 22 21:52:23 2023 GMT
            Not After : Jul 30 00:00:00 2024 GMT
        Subject: CN=6494c297-7cb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:cf:f4:4b:1c:00:43:bb:71:07:e9:c8:ee:40:
                    8f:52:9f:b5:97:26:3f:cb:d4:8e:fa:76:0f:b9:9f:
                    26:3b:35:bd:5b:0f:75:dd:03:87:fc:f4:53:13:e8:
                    ba:eb:9b:78:f8:4b:9b:b7:e7:4c:bb:90:15:08:d8:
                    14:4a:10:e6:7e:e6:60:77:8f:23:a0:1c:b0:e1:41:
                    9e:af:0f:88:9a:cd:20:09:b5:40:44:d7:cf:0a:6a:
                    f3:b8:40:9a:67:a7:5d:56:ac:43:6a:a1:1e:02:ec:
                    6a:53:14:d8:70:df:96:d3:65:94:03:e5:2c:0f:01:
                    29:01:1c:cb:fb:47:23:05:ba:70:09:20:89:8c:58:
                    53:71:d7:d0:15:cd:5f:e3:17:87:3c:c4:8a:77:55:
                    12:10:35:5c:4b:8a:20:f9:4a:b0:d9:71:53:b3:a3:
                    6a:5d:ca:bb:8b:6f:a9:91:25:69:9e:3a:ff:20:7c:
                    f0:5b:0d:7d:11:99:af:d0:20:d7:9e:20:76:4b:2d:
                    27:27:24:bc:90:f6:a4:45:e6:47:9f:56:cc:65:d4:
                    55:8c:83:90:8d:77:03:50:7d:38:c4:d8:3f:74:40:
                    21:7c:38:64:1e:ed:19:54:14:ff:be:d7:13:07:15:
                    e9:f1:36:18:22:f1:18:97:e8:e2:38:6b:dd:61:42:
                    18:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:67:AA:39:4D:A4:F9:ED:4A:31:8E:56:D2:E1:1F:60:92:D8:34:1B
            X509v3 Authority Key Identifier:
                keyid:7E:E7:1A:D8:47:E9:D5:68:10:CD:49:E2:77:85:C6:38:5C:CC:F9:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/fuca2Efp1WgQzUnid4XGOFzM-Ws.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuca2Efp1WgQzUnid4XGOFzM-Ws.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/9746A47821DD11EBBEEF997DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.150.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:5f:b5:38:f2:10:f7:65:cb:46:a2:cd:0d:68:c7:a5:07:3c:
         6e:a3:a1:ef:6e:cb:0e:89:bd:5f:92:ca:db:e8:99:bf:11:12:
         a6:ab:20:10:ae:c2:6c:d9:99:1d:a2:39:4b:4c:34:c9:0b:8b:
         90:04:8f:07:b8:b8:30:77:7b:92:0e:89:d2:96:8a:f8:bd:00:
         08:1c:2e:7f:18:5a:b6:50:e7:32:7f:41:c0:59:ff:b7:a2:ce:
         c1:b6:61:d1:5e:25:c9:4b:27:3a:be:a1:21:7f:2b:f8:33:96:
         58:77:94:3e:4c:f8:f0:90:b6:00:6a:f8:89:68:1f:da:eb:0e:
         99:0a:3c:16:5f:c3:92:3b:f0:f3:fd:64:5d:28:95:b1:e3:4c:
         a8:00:a4:53:51:14:d1:5c:ff:6d:6d:e7:a5:69:07:29:41:95:
         05:5b:c5:32:cb:40:12:ab:39:ed:a3:16:5a:80:11:11:15:9c:
         eb:ae:1e:ff:55:bd:a2:73:f2:0a:8d:4a:7b:31:d5:21:29:41:
         da:26:33:4e:d7:d7:98:5d:d4:b6:af:c6:50:d7:2b:eb:82:f0:
         57:b9:a6:56:5a:58:55:ae:12:6d:4c:1a:94:a1:60:03:a3:cc:
         6a:9f:ba:cf:8d:be:ab:b4:69:3c:e4:52:78:92:ef:91:d1:4b:
         c2:6c:24:51
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICCGQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODQxRDIxMTAvBgNVBAUTKDdFRTcxQUQ4NDdFOUQ1NjgxMENENDlFMjc3ODVDNjM4
NUNDQ0Y5NkIwHhcNMjMwNjIyMjE1MjIzWhcNMjQwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NDk0YzI5Ny03Y2IxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxM/0SxwAQ7txB+nI7kCPUp+1lyY/y9SO+nYPuZ8mOzW9Ww913QOH/PRTE+i6
65t4+Eubt+dMu5AVCNgUShDmfuZgd48joByw4UGerw+Ims0gCbVARNfPCmrzuECa
Z6ddVqxDaqEeAuxqUxTYcN+W02WUA+UsDwEpARzL+0cjBbpwCSCJjFhTcdfQFc1f
4xeHPMSKd1USEDVcS4og+Uqw2XFTs6NqXcq7i2+pkSVpnjr/IHzwWw19EZmv0CDX
niB2Sy0nJyS8kPakReZHn1bMZdRVjIOQjXcDUH04xNg/dEAhfDhkHu0ZVBT/vtcT
BxXp8TYYIvEYl+jiOGvdYUIYPwIDAQABo4IClTCCApEwHQYDVR0OBBYEFNlnqjlN
pPntSjGOVtLhH2CS2DQbMB8GA1UdIwQYMBaAFH7nGthH6dVoEM1J4neFxjhczPlr
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDFEMi9GNzIyM0ZCNDg0
NTQxMUVBOEQ2RTM1MEVDNEY5QUUwMi9mdWNhMkVmcDFXZ1F6VW5pZDRYR09Gek0t
V3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2Z1Y2EyRWZwMVdnUXpVbmlkNFhHT0Z6TS1Xcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODQxRDIvRjcyMjNGQjQ4NDU0MTFFQThENkUzNTBFQzRGOUFFMDIvOTc0NkE0Nzgy
MUREMTFFQkJFRUY5OTdEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnlrUwDQYJKoZIhvcNAQELBQADggEBAB9ftTjyEPdly0ai
zQ1ox6UHPG6joe9uyw6JvV+Sytvomb8REqarIBCuwmzZmR2iOUtMNMkLi5AEjwe4
uDB3e5IOidKWivi9AAgcLn8YWrZQ5zJ/QcBZ/7eizsG2YdFeJclLJzq+oSF/K/gz
llh3lD5M+PCQtgBq+IloH9rrDpkKPBZfw5I78PP9ZF0olbHjTKgApFNRFNFc/21t
56VpBylBlQVbxTLLQBKrOe2jFlqAEREVnOuuHv9VvaJz8gqNSnsx1SEpQdomM07X
15hd1LavxlDXK+uC8Fe5plZaWFWuEm1MGpShYAOjzGqfus+Nvqu0aTzkUniS75HR
S8JsJFE=
-----END CERTIFICATE-----
Generated at Sat May 18 22:27:56 2024 by rpki-client on console-ams.rpki-client.org