Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/216F6BD88AF411EB83B94969C4F9AE02.roa
File:                     216F6BD88AF411EB83B94969C4F9AE02.roa (raw, json)
Hash identifier:          4lgQNtS2ON797M7tp5XJ4RYpdciDIfm94EB7RREd/Oo=
Subject key identifier:   39:FD:97:05:32:D3:AD:A5:1A:70:57:67:4A:0A:04:FE:AC:CA:E4:18
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       6EF7
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/216F6BD88AF411EB83B94969C4F9AE02.roa
Signing time:             Wed 10 May 2023 16:36:32 +0000
ROA not before:           Wed 10 May 2023 16:36:32 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     141786
IP address blocks:        103.164.44.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 15:38:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28407 (0x6ef7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 10 16:36:32 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=645bc810-51e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:96:8a:d6:33:ad:1d:2c:91:31:a2:0d:1b:ca:
                    2e:de:a5:93:fa:b1:07:0d:39:6c:df:bf:a1:24:b7:
                    ed:fb:b3:f0:40:d0:91:22:f3:0f:7a:73:31:98:6e:
                    c5:8f:14:87:50:db:5f:9f:7a:0b:ec:4d:97:cc:b9:
                    b4:75:fb:2a:ef:b1:09:27:64:c2:30:da:62:3b:45:
                    ba:fa:79:3d:aa:91:d0:2e:24:ec:fd:9e:47:51:26:
                    68:b1:1b:c1:d6:33:e7:04:41:5d:89:09:c5:e7:c7:
                    c5:7b:d4:cc:f6:40:72:fe:6f:69:85:5c:c1:b5:d7:
                    6a:5e:1a:6b:02:88:b7:03:d6:05:d3:1a:4e:9a:09:
                    dc:00:c3:37:1a:a0:4b:ee:da:34:c2:83:aa:12:0b:
                    61:39:bf:1c:82:aa:c9:39:03:81:06:a6:99:83:34:
                    2e:29:6f:5c:97:dc:ab:18:ba:6b:ab:93:41:e3:0a:
                    33:04:1a:5a:66:87:62:19:1c:46:f6:c5:ca:28:0e:
                    75:5b:1f:8d:91:80:a0:cd:c8:bf:1d:36:82:8e:2e:
                    f3:d9:a1:83:05:a7:c4:f7:cd:4f:88:4d:de:e0:36:
                    7a:21:79:ed:0a:a1:a9:18:95:b2:46:72:00:0c:f0:
                    09:69:9d:16:51:23:f3:61:78:2b:3a:b7:71:01:c5:
                    0c:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:FD:97:05:32:D3:AD:A5:1A:70:57:67:4A:0A:04:FE:AC:CA:E4:18
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/216F6BD88AF411EB83B94969C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.164.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:f1:bb:0d:d6:3b:24:f1:d5:87:6b:ab:4e:f3:d5:4d:af:af:
         ef:5c:af:e9:d7:a7:1e:76:a2:88:c8:94:83:26:73:0b:a3:89:
         4a:90:33:4a:32:51:7a:1b:fa:24:cb:5a:8e:32:a2:c9:61:e6:
         6a:da:3a:e7:86:e5:82:6c:0c:ed:b3:3f:61:1a:4e:e9:d2:e3:
         b9:83:e3:f9:75:c4:b8:43:14:0c:7f:89:2d:d3:5f:1b:0f:b6:
         c6:10:fa:19:00:12:6d:44:a9:14:21:59:e3:c4:98:44:16:db:
         56:fd:71:1a:e3:8f:43:f0:95:cb:8f:cc:55:cf:6f:e9:02:a3:
         48:a4:15:8d:97:95:68:02:76:83:f8:41:6d:9d:ca:70:df:7e:
         c0:03:b7:ef:a1:34:a2:ef:48:5f:75:7e:c6:9d:a6:6f:0f:67:
         dd:41:02:8d:14:1c:d5:18:06:2b:7a:cf:c1:5e:ed:a7:4c:27:
         a0:7e:fd:f6:12:93:72:16:85:3d:50:9e:f5:c2:6c:e4:0a:6e:
         31:f5:3c:24:37:4b:a1:25:9c:dc:4d:8d:b3:41:ca:dc:2e:1b:
         50:9c:b5:6f:95:c6:ce:76:e4:b3:13:9b:36:06:c2:3e:3e:d5:
         7c:02:86:d9:7d:a0:81:5c:9b:0f:9f:5c:1a:a7:55:3e:cd:eb:
         f0:69:60:ca
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICbvcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz
RTNBQkM4MjMwHhcNMjMwNTEwMTYzNjMyWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NDViYzgxMC01MWU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxJaK1jOtHSyRMaING8ou3qWT+rEHDTls37+hJLft+7PwQNCRIvMPenMxmG7F
jxSHUNtfn3oL7E2XzLm0dfsq77EJJ2TCMNpiO0W6+nk9qpHQLiTs/Z5HUSZosRvB
1jPnBEFdiQnF58fFe9TM9kBy/m9phVzBtddqXhprAoi3A9YF0xpOmgncAMM3GqBL
7to0woOqEgthOb8cgqrJOQOBBqaZgzQuKW9cl9yrGLprq5NB4wozBBpaZodiGRxG
9sXKKA51Wx+NkYCgzci/HTaCji7z2aGDBafE981PiE3e4DZ6IXntCqGpGJWyRnIA
DPAJaZ0WUSPzYXgrOrdxAcUMhQIDAQABo4IClTCCApEwHQYDVR0OBBYEFDn9lwUy
062lGnBXZ0oKBP6syuQYMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5
Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMjE2RjZCRDg4
QUY0MTFFQjgzQjk0OTY5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnpCwwDQYJKoZIhvcNAQELBQADggEBAE7xuw3WOyTx1Ydr
q07z1U2vr+9cr+nXpx52oojIlIMmcwujiUqQM0oyUXob+iTLWo4yoslh5mraOueG
5YJsDO2zP2EaTunS47mD4/l1xLhDFAx/iS3TXxsPtsYQ+hkAEm1EqRQhWePEmEQW
21b9cRrjj0PwlcuPzFXPb+kCo0ikFY2XlWgCdoP4QW2dynDffsADt++hNKLvSF91
fsadpm8PZ91BAo0UHNUYBit6z8Fe7adMJ6B+/fYSk3IWhT1QnvXCbOQKbjH1PCQ3
S6ElnNxNjbNBytwuG1CctW+Vxs525LMTmzYGwj4+1XwChtl9oIFcmw+fXBqnVT7N
6/BpYMo=
-----END CERTIFICATE-----
Generated at Sat Apr 27 10:19:28 2024 by rpki-client on console-ams.rpki-client.org