Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/63DC4E26EE5511EC8AC1570CC4F9AE02.roa
File:                     63DC4E26EE5511EC8AC1570CC4F9AE02.roa (raw, json)
Hash identifier:          CvufHzKKsvzrn8dJkM0T+/F3YAdBgfoRqbNVd/MEejw=
Subject key identifier:   BA:65:BF:1A:49:A1:2F:85:96:4C:EC:27:B6:01:40:A5:02:96:46:56
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       70A6
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/63DC4E26EE5511EC8AC1570CC4F9AE02.roa
Signing time:             Wed 10 May 2023 16:44:34 +0000
ROA not before:           Wed 10 May 2023 16:44:34 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     149624
IP address blocks:        103.189.211.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 15:38:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28838 (0x70a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 10 16:44:34 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=645bc9f1-88b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:cc:19:90:8d:9a:12:b7:ce:ba:e3:63:14:45:
                    61:f2:34:af:46:9c:c5:bf:1c:21:09:9f:0b:ce:18:
                    d8:d9:ad:b2:de:e4:58:ac:04:6a:28:8a:8a:b1:ce:
                    f0:17:7b:63:6d:e8:55:69:4d:56:8b:b6:7b:96:f2:
                    11:41:7d:53:57:30:bb:41:c5:5b:0b:bf:64:38:a6:
                    1f:48:7f:1b:08:ba:e6:11:95:00:d4:4a:22:2c:05:
                    90:7b:a7:13:54:27:3e:3d:e2:f5:38:91:8e:07:9f:
                    7f:77:fc:4d:57:33:7d:fe:49:74:92:5c:53:6e:6e:
                    84:1e:ef:21:81:49:6e:9e:1d:1d:30:e5:49:62:d7:
                    b3:30:8c:d5:d1:56:d0:45:8a:a8:b2:4a:c0:f6:14:
                    d5:59:f7:0b:26:34:4e:43:98:aa:ce:26:6f:9b:b1:
                    1c:72:36:d0:f8:45:29:9b:8e:ae:a8:1f:65:ca:a3:
                    25:aa:57:f1:08:b7:84:58:fb:e5:22:52:f6:02:af:
                    10:0c:82:b8:dd:cc:29:c7:ca:5a:f6:8f:31:b5:b5:
                    e0:19:e7:16:57:17:ff:63:c8:f2:bb:85:ff:04:97:
                    ff:d2:75:6f:83:58:fc:e7:c5:9f:c9:94:94:cb:ac:
                    81:ea:7a:0e:13:59:ab:d3:81:23:1d:72:06:f6:a1:
                    2c:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:65:BF:1A:49:A1:2F:85:96:4C:EC:27:B6:01:40:A5:02:96:46:56
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/63DC4E26EE5511EC8AC1570CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.189.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:f0:4a:87:2b:9f:db:db:a4:2e:51:b6:30:2e:07:17:96:cf:
         95:ef:d2:1a:12:48:5f:48:4f:34:3a:24:52:f1:d3:eb:5c:bd:
         13:8d:2b:93:42:14:a5:63:97:97:a3:2b:d0:0f:49:0a:b8:30:
         4f:8f:9a:d2:dc:89:06:dd:8c:84:39:73:1b:79:6a:91:77:61:
         d5:e9:cb:e2:fe:3e:18:6d:be:64:c2:4a:0d:ed:a9:46:3a:c6:
         21:7c:17:70:14:70:a8:26:53:ee:f4:a8:67:b5:9f:49:4d:a5:
         bd:02:90:03:51:5e:d3:50:8d:46:4d:ab:87:8e:78:b9:8f:9b:
         c5:1a:8a:8a:d5:da:10:91:55:bd:50:14:4e:1b:9b:1c:e0:87:
         91:44:0d:32:ab:99:8d:15:64:87:44:66:75:19:80:aa:05:13:
         ff:07:79:cf:4d:98:67:17:88:8b:1e:b3:fd:b1:29:0d:bd:ac:
         bf:21:f3:ee:39:e3:bf:9f:0a:3e:aa:df:8c:05:d4:36:5d:da:
         b0:ea:cc:8a:89:82:fe:85:95:16:d1:fc:70:2b:15:6b:62:bf:
         ea:9b:f8:7b:90:f6:f1:bf:82:d0:38:6d:7f:80:c4:2a:7e:c1:
         57:b3:a2:b4:86:00:01:bc:b9:a9:5d:6f:b0:a0:2c:ac:0d:89:
         d0:f8:5f:5b
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICcKYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz
RTNBQkM4MjMwHhcNMjMwNTEwMTY0NDM0WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NDViYzlmMS04OGIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyMwZkI2aErfOuuNjFEVh8jSvRpzFvxwhCZ8LzhjY2a2y3uRYrARqKIqKsc7w
F3tjbehVaU1Wi7Z7lvIRQX1TVzC7QcVbC79kOKYfSH8bCLrmEZUA1EoiLAWQe6cT
VCc+PeL1OJGOB59/d/xNVzN9/kl0klxTbm6EHu8hgUlunh0dMOVJYtezMIzV0VbQ
RYqoskrA9hTVWfcLJjROQ5iqziZvm7EccjbQ+EUpm46uqB9lyqMlqlfxCLeEWPvl
IlL2Aq8QDIK43cwpx8pa9o8xtbXgGecWVxf/Y8jyu4X/BJf/0nVvg1j858WfyZSU
y6yB6noOE1mr04EjHXIG9qEsUwIDAQABo4IClTCCApEwHQYDVR0OBBYEFLplvxpJ
oS+FlkzsJ7YBQKUClkZWMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5
Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNjNEQzRFMjZF
RTU1MTFFQzhBQzE1NzBDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnvdMwDQYJKoZIhvcNAQELBQADggEBAF3wSocrn9vbpC5R
tjAuBxeWz5Xv0hoSSF9ITzQ6JFLx0+tcvRONK5NCFKVjl5ejK9APSQq4ME+PmtLc
iQbdjIQ5cxt5apF3YdXpy+L+PhhtvmTCSg3tqUY6xiF8F3AUcKgmU+70qGe1n0lN
pb0CkANRXtNQjUZNq4eOeLmPm8UaiorV2hCRVb1QFE4bmxzgh5FEDTKrmY0VZIdE
ZnUZgKoFE/8Hec9NmGcXiIses/2xKQ29rL8h8+4547+fCj6q34wF1DZd2rDqzIqJ
gv6FlRbR/HArFWtiv+qb+HuQ9vG/gtA4bX+AxCp+wVezorSGAAG8ualdb7CgLKwN
idD4X1s=
-----END CERTIFICATE-----
Generated at Sat Apr 27 10:19:35 2024 by rpki-client on console-ams.rpki-client.org