Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4E4864449C5F11EB8D550436C4F9AE02.roa
File:                     4E4864449C5F11EB8D550436C4F9AE02.roa (raw, json)
Hash identifier:          NE3VKZ11/WCqAOz6JxjPZgzSA+DyeS4W6X2G+rxpVdM=
Subject key identifier:   C3:BE:C3:EF:44:CC:37:5F:7E:EE:BC:8B:D4:A2:A0:CE:5C:71:1D:7B
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       6E98
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4E4864449C5F11EB8D550436C4F9AE02.roa
Signing time:             Wed 10 May 2023 16:34:46 +0000
ROA not before:           Wed 10 May 2023 16:34:46 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     141323
IP address blocks:        103.157.188.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 15:38:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28312 (0x6e98)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 10 16:34:46 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=645bc7a6-5aa1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:3c:d6:4a:54:8f:42:8c:69:72:e5:ee:6e:22:
                    f8:7d:31:5e:26:e4:17:91:52:7b:0b:bd:f0:9b:d5:
                    6d:02:53:8e:c4:43:5d:bf:28:14:46:b3:cb:62:dc:
                    aa:5c:cc:49:dd:02:ff:3e:4d:cf:bd:f2:47:d7:7c:
                    82:9b:58:ae:77:6b:31:3e:61:76:12:99:7d:ed:a4:
                    f9:52:5e:37:b6:48:03:3b:d6:9d:9e:02:b3:c1:69:
                    c7:f7:e0:86:4b:37:5d:f9:f4:90:fa:f1:fd:e2:4e:
                    0c:ca:fb:06:d4:6b:7e:03:5e:df:39:3d:e9:b9:52:
                    88:03:ad:db:38:83:03:4f:fb:11:ad:35:1a:bf:77:
                    83:ac:ab:d3:41:fb:d8:60:e3:1c:46:61:f7:fb:7d:
                    7a:34:2e:2f:c9:ac:a3:ac:85:98:c4:b3:a0:18:2c:
                    61:ed:78:a3:90:2a:f7:20:f8:92:c3:43:54:2d:89:
                    09:1d:26:4b:1e:fa:62:85:83:8c:70:da:f1:a3:aa:
                    ec:35:93:31:09:b1:5d:68:9d:1d:eb:6f:31:77:af:
                    5e:22:3d:ad:b9:b0:c3:71:55:b8:a9:a1:e4:b1:93:
                    65:52:5e:80:1f:ca:56:22:3c:d3:90:0c:9a:12:1b:
                    8c:59:d1:e9:73:7e:ce:13:e2:8d:5b:44:94:9c:53:
                    3b:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:BE:C3:EF:44:CC:37:5F:7E:EE:BC:8B:D4:A2:A0:CE:5C:71:1D:7B
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4E4864449C5F11EB8D550436C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.157.188.0/23

    Signature Algorithm: sha256WithRSAEncryption
         34:96:7c:fd:7e:c9:9e:2c:6f:08:e5:57:57:d7:bf:13:6b:96:
         ea:2c:67:21:81:41:84:3e:07:ba:25:9b:09:38:bc:5e:00:db:
         84:29:3a:4a:2b:20:e1:96:85:41:0b:57:6a:56:c1:eb:fb:12:
         45:e4:06:c3:d2:a0:f6:0f:00:27:e8:71:53:ea:70:d9:f2:8d:
         55:24:1a:67:35:53:20:cb:65:6b:2a:02:a2:50:f0:08:82:60:
         ff:d3:58:50:97:56:77:9c:3b:7a:7f:3f:21:86:4b:64:20:90:
         34:da:b7:fb:1b:c3:7d:3a:7c:6d:04:ad:57:5b:e3:e1:09:c7:
         bb:17:1f:b1:ab:4d:79:5f:50:9b:a2:41:6c:c9:12:3d:40:f8:
         e8:4a:45:65:96:5e:74:ea:0d:b6:fb:7d:bb:a2:84:ff:d6:b7:
         f3:9c:81:91:64:3f:b0:a6:f3:aa:e6:b2:89:e0:4e:29:0b:1c:
         c0:28:df:f1:2a:e5:90:22:ce:b3:a5:cb:d8:03:6a:b8:27:ee:
         ef:7b:27:00:95:04:13:3a:0f:cf:43:f1:3b:11:db:3e:54:10:
         02:3a:88:ea:8b:3e:dd:56:ec:0e:4b:d4:bf:5c:e2:02:c5:cb:
         a8:5a:e0:10:08:2c:e4:be:e4:64:70:8e:ab:e9:03:2e:8d:5d:
         b3:88:3d:b0
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICbpgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz
RTNBQkM4MjMwHhcNMjMwNTEwMTYzNDQ2WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NDViYzdhNi01YWExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAszzWSlSPQoxpcuXubiL4fTFeJuQXkVJ7C73wm9VtAlOOxENdvygURrPLYtyq
XMxJ3QL/Pk3PvfJH13yCm1iud2sxPmF2Epl97aT5Ul43tkgDO9adngKzwWnH9+CG
Szdd+fSQ+vH94k4MyvsG1Gt+A17fOT3puVKIA63bOIMDT/sRrTUav3eDrKvTQfvY
YOMcRmH3+316NC4vyayjrIWYxLOgGCxh7XijkCr3IPiSw0NULYkJHSZLHvpihYOM
cNrxo6rsNZMxCbFdaJ0d628xd69eIj2tubDDcVW4qaHksZNlUl6AH8pWIjzTkAya
EhuMWdHpc37OE+KNW0SUnFM7QwIDAQABo4IClTCCApEwHQYDVR0OBBYEFMO+w+9E
zDdffu68i9SioM5ccR17MB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5
Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNEU0ODY0NDQ5
QzVGMTFFQjhENTUwNDM2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnnbwwDQYJKoZIhvcNAQELBQADggEBADSWfP1+yZ4sbwjl
V1fXvxNrluosZyGBQYQ+B7olmwk4vF4A24QpOkorIOGWhUELV2pWwev7EkXkBsPS
oPYPACfocVPqcNnyjVUkGmc1UyDLZWsqAqJQ8AiCYP/TWFCXVnecO3p/PyGGS2Qg
kDTat/sbw306fG0ErVdb4+EJx7sXH7GrTXlfUJuiQWzJEj1A+OhKRWWWXnTqDbb7
fbuihP/Wt/OcgZFkP7Cm86rmsongTikLHMAo3/Eq5ZAizrOly9gDargn7u97JwCV
BBM6D89D8TsR2z5UEAI6iOqLPt1W7A5L1L9c4gLFy6ha4BAILOS+5GRwjqvpAy6N
XbOIPbA=
-----END CERTIFICATE-----
Generated at Sat Apr 27 10:19:33 2024 by rpki-client on console-ams.rpki-client.org