Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/50FEDA52BDCF11EA8755D90DC4F9AE02.roa
File:                     50FEDA52BDCF11EA8755D90DC4F9AE02.roa (raw, json)
Hash identifier:          a473blFCdTFYT7I3y4VIB/1EWWUhn8+mvkPnAGN7tmQ=
Subject key identifier:   18:62:0B:B1:A1:2E:B7:67:36:FE:88:8E:9B:06:83:31:72:CA:E1:6E
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       6A46
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/50FEDA52BDCF11EA8755D90DC4F9AE02.roa
Signing time:             Wed 10 May 2023 16:13:58 +0000
ROA not before:           Wed 10 May 2023 16:13:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     132999
IP address blocks:        103.141.88.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 15:38:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 27206 (0x6a46)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 10 16:13:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=645bc2c6-a126
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:7c:47:36:f7:19:63:71:55:e8:45:6f:31:1a:
                    d6:28:70:4f:ca:36:f4:1f:98:06:cb:ce:ba:13:99:
                    ac:99:40:c2:9c:cb:7c:71:45:98:e1:5b:99:bc:a8:
                    08:92:c0:a3:17:95:2e:1d:c3:12:6d:85:07:3b:9c:
                    c1:80:4d:66:16:56:24:64:3f:46:fc:d3:63:fa:ed:
                    37:3b:6b:4a:33:b9:c5:53:8d:25:2b:c5:c9:0d:19:
                    5e:a7:04:cf:c3:df:16:ac:d4:2e:4e:a4:b8:3f:1d:
                    dd:54:b1:34:87:f7:35:be:4c:99:2a:66:9f:d7:bf:
                    25:04:65:f3:c0:13:5d:38:83:c7:2b:26:03:c0:01:
                    fa:15:bc:1e:74:87:0a:c9:ff:a5:e6:28:8a:26:51:
                    d5:8c:c3:15:24:cd:39:f7:f1:97:51:35:19:8e:3d:
                    c0:6d:83:ae:21:88:56:81:ae:8a:de:35:6d:79:00:
                    65:0e:4b:44:ec:93:44:fa:62:a8:60:3e:33:5d:c8:
                    99:96:51:f5:8c:db:35:39:14:cd:62:5e:ff:47:46:
                    c5:c1:a5:21:22:71:1d:9b:d8:06:c4:a1:a0:2a:47:
                    6e:cb:35:17:a1:c8:e0:2d:0c:d7:97:25:af:6c:45:
                    da:10:51:10:bd:4f:b3:83:07:25:8f:38:f3:8c:fc:
                    f5:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:62:0B:B1:A1:2E:B7:67:36:FE:88:8E:9B:06:83:31:72:CA:E1:6E
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/50FEDA52BDCF11EA8755D90DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.141.88.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5e:87:a7:05:f4:cd:1e:93:a9:57:c3:92:02:eb:a9:c0:f4:68:
         62:d0:ad:cd:80:51:c1:49:43:d7:7b:5c:e4:fe:b3:89:93:47:
         39:b0:50:65:c2:fe:67:1a:b1:16:3c:8d:8b:7f:18:0a:89:ff:
         10:6e:91:85:99:73:94:ae:be:b8:ec:14:19:ed:58:d1:54:7a:
         67:8e:e1:d4:78:f1:57:c9:24:2d:e8:36:3e:2a:df:12:b2:1e:
         72:d8:a9:b3:a2:7b:c0:10:24:9c:c4:4f:6e:fa:bf:c4:59:29:
         e7:46:75:66:8f:c6:19:63:2a:18:3c:6a:32:a6:cb:b0:a7:dd:
         4b:e9:47:8b:66:e1:0d:2b:8d:1b:9a:b9:23:36:34:56:eb:b2:
         3e:af:17:9d:31:24:86:3a:d3:23:9e:51:38:38:25:c1:35:26:
         98:fa:d1:0b:9d:40:86:c2:13:b1:84:7d:f6:90:ab:6d:5d:92:
         cd:0d:08:e6:e7:ab:6d:91:b7:8c:12:95:73:2a:57:70:2c:b2:
         cd:ef:0c:5f:e6:26:78:7f:fc:aa:e5:bf:54:a9:01:dd:d3:3d:
         cb:f9:59:3e:36:ea:aa:b3:32:f9:29:7e:01:bd:a9:9f:ea:b9:
         6b:4a:81:fb:60:6a:e8:60:01:02:f0:51:e3:48:a8:1f:f1:c7:
         68:28:15:e0
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICakYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz
RTNBQkM4MjMwHhcNMjMwNTEwMTYxMzU4WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NDViYzJjNi1hMTI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAx3xHNvcZY3FV6EVvMRrWKHBPyjb0H5gGy866E5msmUDCnMt8cUWY4VuZvKgI
ksCjF5UuHcMSbYUHO5zBgE1mFlYkZD9G/NNj+u03O2tKM7nFU40lK8XJDRlepwTP
w98WrNQuTqS4Px3dVLE0h/c1vkyZKmaf178lBGXzwBNdOIPHKyYDwAH6FbwedIcK
yf+l5iiKJlHVjMMVJM059/GXUTUZjj3AbYOuIYhWga6K3jVteQBlDktE7JNE+mKo
YD4zXciZllH1jNs1ORTNYl7/R0bFwaUhInEdm9gGxKGgKkduyzUXocjgLQzXlyWv
bEXaEFEQvU+zgwcljzjzjPz1TQIDAQABo4IClTCCApEwHQYDVR0OBBYEFBhiC7Gh
LrdnNv6IjpsGgzFyyuFuMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5
Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNTBGRURBNTJC
RENGMTFFQTg3NTVEOTBEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnjVgwDQYJKoZIhvcNAQELBQADggEBAF6HpwX0zR6TqVfD
kgLrqcD0aGLQrc2AUcFJQ9d7XOT+s4mTRzmwUGXC/mcasRY8jYt/GAqJ/xBukYWZ
c5SuvrjsFBntWNFUemeO4dR48VfJJC3oNj4q3xKyHnLYqbOie8AQJJzET276v8RZ
KedGdWaPxhljKhg8ajKmy7Cn3UvpR4tm4Q0rjRuauSM2NFbrsj6vF50xJIY60yOe
UTg4JcE1Jpj60QudQIbCE7GEffaQq21dks0NCObnq22Rt4wSlXMqV3Asss3vDF/m
Jnh//Krlv1SpAd3TPcv5WT426qqzMvkpfgG9qZ/quWtKgftgauhgAQLwUeNIqB/x
x2goFeA=
-----END CERTIFICATE-----
Generated at Sat Apr 27 10:19:33 2024 by rpki-client on console-ams.rpki-client.org