Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BD014932FFE211EBB4FA4965C4F9AE02.roa
File:                     BD014932FFE211EBB4FA4965C4F9AE02.roa (raw, json)
Hash identifier:          0ReQXeUf1Zrdba/JIGg+zg6amFezgrOTNOlZbQ3tGW0=
Subject key identifier:   F1:00:DF:E7:4D:1F:E5:AA:24:73:E7:9A:3E:6B:52:DE:2A:66:17:34
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       6F8B
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BD014932FFE211EBB4FA4965C4F9AE02.roa
Signing time:             Wed 10 May 2023 16:39:18 +0000
ROA not before:           Wed 10 May 2023 16:39:18 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     142531
IP address blocks:        103.171.6.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 15:38:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28555 (0x6f8b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 10 16:39:18 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=645bc8b5-cb04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:3c:c3:41:75:78:a7:b1:eb:b2:b4:48:b9:e0:
                    fa:2b:f8:8b:3d:e1:d9:e0:64:30:a5:3b:9b:67:c0:
                    6f:91:96:dc:4b:28:9a:ff:53:4a:25:fa:81:ec:a5:
                    49:25:5f:26:ad:23:26:38:16:1f:ad:73:cb:55:d3:
                    61:18:c7:75:97:b0:25:b7:49:db:d3:1c:05:52:1e:
                    83:dd:00:0e:f9:00:cd:c4:a3:e7:48:3f:f6:64:32:
                    76:b4:07:1e:45:4a:fe:76:fe:cf:59:95:c9:5a:c3:
                    b1:af:1c:d7:76:e2:8d:b0:fc:0e:0b:44:d5:35:58:
                    ad:e3:2a:80:9c:30:e6:ce:6b:57:9f:ca:fe:66:6d:
                    78:f6:63:c4:7a:35:c0:59:04:b1:9f:04:79:e0:90:
                    05:cb:32:9f:85:53:55:73:71:9d:55:db:2e:54:f8:
                    df:fe:e1:fd:cb:fa:08:fc:91:4a:78:c5:47:89:c0:
                    c3:24:0e:1e:d8:65:b7:5c:5a:a4:38:c6:2d:50:89:
                    3c:85:56:79:9c:61:19:1c:51:e6:80:d2:56:e9:b7:
                    e7:88:6b:24:75:6d:c6:9e:74:35:ce:d1:da:38:b7:
                    f9:ea:8f:ab:f8:aa:5f:97:80:2d:a0:d3:7d:51:83:
                    22:25:2e:5f:2e:a8:20:1e:ca:c3:86:52:42:4e:f1:
                    30:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:00:DF:E7:4D:1F:E5:AA:24:73:E7:9A:3E:6B:52:DE:2A:66:17:34
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BD014932FFE211EBB4FA4965C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.171.6.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9e:41:f4:68:20:1b:38:7d:7d:84:bf:19:3d:df:a5:92:00:0f:
         ad:73:09:a6:96:66:af:fe:b7:ce:2d:0f:15:69:d2:75:40:eb:
         ad:78:f9:2c:04:ef:f6:91:8e:30:41:38:f4:6a:80:20:39:71:
         25:90:63:09:cf:42:77:c2:8a:53:5d:2e:9a:b0:0e:41:20:2d:
         19:9a:90:82:7a:0c:53:7a:dd:79:03:94:c1:06:ec:6b:6c:32:
         f4:a6:6b:c0:13:e4:6c:ac:8d:51:85:83:8b:d3:d4:f6:1a:d6:
         82:f9:49:79:8a:e6:d7:de:df:94:e8:ae:d6:37:79:97:b1:0e:
         ee:4b:4a:f1:e3:ed:da:92:f3:4d:96:aa:1a:cc:57:17:c6:bb:
         65:6c:d5:b4:d8:ce:8c:12:af:04:ed:8f:73:53:8d:e3:df:71:
         d3:f4:d1:af:d1:9a:de:7a:2d:f9:29:ae:6c:a8:1d:3e:68:76:
         91:2c:2e:24:7c:31:30:57:f0:d3:aa:f5:49:d7:fe:27:8c:37:
         75:df:06:13:cf:06:a7:5d:89:9b:bb:77:22:8c:20:ca:10:ea:
         8a:c3:76:e6:cf:65:15:52:60:5c:9b:05:02:97:66:a7:b3:49:
         bb:d5:78:db:96:f7:b9:de:cf:b6:14:a4:5f:61:64:89:5d:e6:
         cb:b0:92:7d
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICb4swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz
RTNBQkM4MjMwHhcNMjMwNTEwMTYzOTE4WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NDViYzhiNS1jYjA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxzzDQXV4p7HrsrRIueD6K/iLPeHZ4GQwpTubZ8BvkZbcSyia/1NKJfqB7KVJ
JV8mrSMmOBYfrXPLVdNhGMd1l7Alt0nb0xwFUh6D3QAO+QDNxKPnSD/2ZDJ2tAce
RUr+dv7PWZXJWsOxrxzXduKNsPwOC0TVNVit4yqAnDDmzmtXn8r+Zm149mPEejXA
WQSxnwR54JAFyzKfhVNVc3GdVdsuVPjf/uH9y/oI/JFKeMVHicDDJA4e2GW3XFqk
OMYtUIk8hVZ5nGEZHFHmgNJW6bfniGskdW3GnnQ1ztHaOLf56o+r+Kpfl4AtoNN9
UYMiJS5fLqggHsrDhlJCTvEwVwIDAQABo4IClTCCApEwHQYDVR0OBBYEFPEA3+dN
H+WqJHPnmj5rUt4qZhc0MB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5
Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvQkQwMTQ5MzJG
RkUyMTFFQkI0RkE0OTY1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnqwYwDQYJKoZIhvcNAQELBQADggEBAJ5B9GggGzh9fYS/
GT3fpZIAD61zCaaWZq/+t84tDxVp0nVA6614+SwE7/aRjjBBOPRqgCA5cSWQYwnP
QnfCilNdLpqwDkEgLRmakIJ6DFN63XkDlMEG7GtsMvSma8AT5GysjVGFg4vT1PYa
1oL5SXmK5tfe35TortY3eZexDu5LSvHj7dqS802WqhrMVxfGu2Vs1bTYzowSrwTt
j3NTjePfcdP00a/Rmt56LfkprmyoHT5odpEsLiR8MTBX8NOq9UnX/ieMN3XfBhPP
BqddiZu7dyKMIMoQ6orDdubPZRVSYFybBQKXZqezSbvVeNuW97nez7YUpF9hZIld
5suwkn0=
-----END CERTIFICATE-----
Generated at Sat Apr 27 10:19:45 2024 by rpki-client on console-ams.rpki-client.org